Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/3137372e3135322e3130392e302f32342d3234203d3e20323730353935.roa
File:                     3137372e3135322e3130392e302f32342d3234203d3e20323730353935.roa (raw, json)
Hash identifier:          gM2mycpFegWVccScJDUN3Ah3Utp42nV1LlQHPr1ZyVI=
Subject key identifier:   F2:62:7A:68:10:8D:BB:19:D0:4F:5E:84:DA:1C:73:B9:C1:FF:B5:1E
Certificate issuer:       /CN=416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A
Certificate serial:       D161B9DE1E6FEA03093D51E976E8FBBFEB204E
Authority key identifier: 41:6A:B0:E5:05:A9:B0:27:9E:F3:7F:FA:78:6A:4B:BD:F8:BB:FD:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/3137372e3135322e3130392e302f32342d3234203d3e20323730353935.roa
Signing time:             Fri 16 Aug 2024 13:19:51 +0000
ROA not before:           Fri 16 Aug 2024 13:14:51 +0000
ROA not after:            Fri 15 Aug 2025 13:19:51 +0000
asID:                     270595
IP address blocks:        177.152.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.crl
                          rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:57:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d1:61:b9:de:1e:6f:ea:03:09:3d:51:e9:76:e8:fb:bf:eb:20:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A
        Validity
            Not Before: Aug 16 13:14:51 2024 GMT
            Not After : Aug 15 13:19:51 2025 GMT
        Subject: CN=F2627A68108DBB19D04F5E84DA1C73B9C1FFB51E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2a:20:8f:89:14:70:f2:d9:85:b4:d6:f3:75:
                    ab:2e:12:39:d9:a0:db:55:2a:d3:cd:fb:13:38:eb:
                    81:59:9e:37:7b:2b:08:41:58:19:77:b1:10:46:13:
                    af:1b:4b:85:55:ef:c8:d8:54:ce:39:0f:12:38:38:
                    99:62:29:a0:1c:bf:0d:37:e5:53:cb:fe:f0:0a:15:
                    a2:4a:f6:b6:f1:5a:c9:70:f6:2d:e3:35:b1:cd:4a:
                    fb:84:a3:d0:3e:85:c1:03:77:8b:46:73:b9:d6:0c:
                    95:98:20:ed:ef:78:53:3d:db:07:8f:45:44:21:46:
                    a8:ec:40:ab:b6:66:09:db:5c:1e:72:bf:9d:a2:99:
                    ed:9c:b0:07:17:06:94:62:cb:b4:47:92:1c:e1:e6:
                    3f:74:a0:b3:11:bc:b6:ef:29:22:99:86:c4:69:62:
                    9c:f4:f0:5d:f7:bd:b0:46:c8:69:57:9d:8b:86:4f:
                    e0:8f:23:5b:29:1d:e8:17:29:6d:09:1c:ea:d0:4e:
                    85:17:2f:a5:c4:8c:5c:2e:3e:d4:a6:24:29:16:79:
                    37:3b:b7:b6:2c:92:ad:b0:50:17:f2:00:96:e8:8b:
                    15:53:be:3b:c6:01:26:fc:22:34:fd:bf:b4:f2:15:
                    93:26:eb:33:f7:05:a1:10:23:1f:0d:00:62:f3:6e:
                    76:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:62:7A:68:10:8D:BB:19:D0:4F:5E:84:DA:1C:73:B9:C1:FF:B5:1E
            X509v3 Authority Key Identifier:
                keyid:41:6A:B0:E5:05:A9:B0:27:9E:F3:7F:FA:78:6A:4B:BD:F8:BB:FD:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416AB0E505A9B0279EF37FFA786A4BBDF8BBFD4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/0/3137372e3135322e3130392e302f32342d3234203d3e20323730353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:d6:47:22:ab:11:4b:8f:1b:17:fb:3f:5b:76:4b:9b:d6:f3:
         89:97:1f:f8:23:31:36:d6:8a:ed:29:7a:f5:4b:6b:7b:88:0e:
         fb:66:68:99:55:30:3b:ff:00:94:29:fb:44:28:1a:00:7e:56:
         96:1c:8d:af:47:0f:de:6e:35:7f:d6:06:a2:2a:cc:94:dc:fd:
         40:8d:6d:8a:92:54:e6:b1:26:fc:85:c6:62:49:df:27:ea:34:
         30:43:51:68:fa:7b:98:fb:da:2c:1a:e6:72:a3:d1:86:1c:80:
         ac:f6:22:31:ea:c0:e8:45:da:e3:ae:e0:c1:1c:d1:b1:fa:77:
         7e:8a:cf:4f:55:aa:4c:8e:77:0f:5e:5a:70:04:19:e3:00:5b:
         91:70:92:11:b1:38:41:d1:67:7d:fe:66:b8:0e:5b:80:54:a4:
         1e:c9:22:0f:18:b2:4d:81:e0:21:99:51:32:d1:48:17:6d:6c:
         39:28:40:dc:56:af:f6:75:19:77:49:92:7d:df:06:2c:01:8b:
         98:11:cc:0e:97:37:52:a2:99:a9:36:70:1e:0e:46:e9:23:44:
         80:62:c6:eb:70:82:fc:6d:3d:01:60:cf:6f:f2:f8:b7:ed:7e:
         48:0c:12:2e:30:42:d8:15:d9:d7:ff:c9:0d:6a:b2:21:fb:1c:
         3a:46:6d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:48 2024 by rpki-client on console-ams.rpki-client.org