Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/3137372e36372e3132302e302f32312d3234203d3e20323632353138.roa
File:                     3137372e36372e3132302e302f32312d3234203d3e20323632353138.roa (raw, json)
Hash identifier:          ie4MqRdglfBjITiTts+fhs/7e3A79RGHHrS5H34Ihrg=
Subject key identifier:   E5:8B:9B:64:4E:F5:35:A1:36:67:23:49:A3:C1:DD:14:04:D1:E6:38
Certificate issuer:       /CN=DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36
Certificate serial:       53F9F7F88AB7253A88B2EFA14C4607EB5685C4C5
Authority key identifier: DE:E8:0E:50:E0:3D:F0:1C:15:4B:D2:A4:D1:D2:F3:BD:67:F7:1F:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/3137372e36372e3132302e302f32312d3234203d3e20323632353138.roa
Signing time:             Thu 04 Apr 2024 04:33:14 +0000
ROA not before:           Thu 04 Apr 2024 04:28:14 +0000
ROA not after:            Thu 03 Apr 2025 04:33:14 +0000
asID:                     262518
IP address blocks:        177.67.120.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.crl
                          rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:f9:f7:f8:8a:b7:25:3a:88:b2:ef:a1:4c:46:07:eb:56:85:c4:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36
        Validity
            Not Before: Apr  4 04:28:14 2024 GMT
            Not After : Apr  3 04:33:14 2025 GMT
        Subject: CN=E58B9B644EF535A136672349A3C1DD1404D1E638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5a:3b:84:42:b9:84:5f:62:b7:be:19:4d:0a:
                    af:c5:a4:97:73:c9:d0:76:7d:23:1f:58:28:25:02:
                    36:41:cf:aa:74:91:c6:ce:94:2f:be:ee:52:0a:ba:
                    c7:d0:ce:ae:b5:77:d5:5c:e5:4c:db:c0:5c:e1:84:
                    ce:f1:bc:7d:e5:e5:25:2b:3a:4f:dc:9e:db:ac:02:
                    6a:f7:14:35:01:dc:49:1c:10:9d:50:88:94:c4:d6:
                    56:31:ba:22:8f:3d:83:82:af:3b:ab:3b:dd:f1:ae:
                    6c:de:16:d7:ed:19:84:b6:18:5a:6a:cd:8e:ef:cc:
                    1c:9c:f5:24:8f:50:37:6f:b8:ed:91:14:50:a1:45:
                    9d:4d:73:f6:d3:88:87:aa:eb:39:6a:f0:7a:fa:29:
                    87:8e:17:f8:5a:66:d6:f8:85:2d:bf:a5:06:0f:35:
                    94:96:9d:a5:b4:cf:e6:ba:40:e0:cb:28:3d:c2:94:
                    23:0c:5c:f3:f6:83:c8:6f:bd:4c:e9:45:0d:be:74:
                    b2:9b:7a:95:08:b4:1b:64:90:06:79:e7:f9:64:7b:
                    56:12:99:86:70:f9:ce:22:3e:3f:d2:ec:50:06:7f:
                    b7:c6:17:ce:ac:2e:26:31:92:3e:24:c8:84:12:8a:
                    98:6f:71:6b:8f:75:11:36:de:6d:b7:57:32:88:f4:
                    74:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8B:9B:64:4E:F5:35:A1:36:67:23:49:A3:C1:DD:14:04:D1:E6:38
            X509v3 Authority Key Identifier:
                keyid:DE:E8:0E:50:E0:3D:F0:1C:15:4B:D2:A4:D1:D2:F3:BD:67:F7:1F:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/3137372e36372e3132302e302f32312d3234203d3e20323632353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         83:18:c2:33:74:73:32:17:d6:b6:24:9a:da:9e:3b:64:d5:2e:
         18:08:1a:03:e6:64:36:9b:ea:1c:ed:18:38:9b:57:d5:18:63:
         00:82:8e:ee:86:dc:16:75:1a:35:56:4e:f3:14:62:72:12:3a:
         8d:e7:cd:af:63:2f:e3:a1:72:90:7a:e2:41:52:dd:90:c7:d8:
         8c:6a:6f:4b:62:0c:51:6e:e4:ac:fc:58:9f:8e:cb:2e:ed:d2:
         e1:56:86:d8:df:bd:e6:de:22:7d:02:93:51:b7:0c:00:e2:90:
         1d:9d:57:c1:b6:29:2b:d3:cc:39:1a:4e:b8:89:c3:39:67:72:
         ce:87:b5:45:14:4c:81:c9:cf:fa:70:a5:4b:be:a3:24:66:63:
         2f:be:6b:34:dd:4c:02:b6:39:96:5d:56:7a:48:6c:2f:e9:bb:
         eb:68:13:bb:92:a6:aa:c4:d4:25:7b:70:78:53:74:cc:dc:5c:
         1e:fc:92:30:82:65:40:7c:d1:fa:fc:fc:f0:d8:83:57:05:26:
         2e:bd:78:49:62:b0:9a:f2:80:c2:fd:2e:45:69:39:b1:e4:13:
         74:bb:a3:43:aa:93:d1:cd:c0:f8:1d:de:a0:06:2f:e6:87:73:
         89:4b:97:d8:68:5d:df:cf:a6:bf:30:58:65:e5:85:7c:11:d2:
         ba:cf:f4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:26 2024 by rpki-client on console-ams.rpki-client.org