Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/3137372e3139302e3135332e302f32342d3234203d3e20323633343537.roa
File:                     3137372e3139302e3135332e302f32342d3234203d3e20323633343537.roa (raw, json)
Hash identifier:          3/Jru5zTqO3PHw12hcwRnd8ELdHXwc2IK1a+uK2q9jw=
Subject key identifier:   48:69:C7:9A:43:65:13:B3:97:C3:FA:DC:90:03:73:28:62:7C:66:6E
Certificate issuer:       /CN=D9B8C8035F469EEFCD42A52D48966057264B95C4
Certificate serial:       380759F7CDC5BC3ADAB09CDD6BDC7C6AEE9D4A0F
Authority key identifier: D9:B8:C8:03:5F:46:9E:EF:CD:42:A5:2D:48:96:60:57:26:4B:95:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/3137372e3139302e3135332e302f32342d3234203d3e20323633343537.roa
Signing time:             Thu 04 Apr 2024 07:47:21 +0000
ROA not before:           Thu 04 Apr 2024 07:42:21 +0000
ROA not after:            Thu 03 Apr 2025 07:47:21 +0000
asID:                     263457
IP address blocks:        177.190.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.crl
                          rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:34:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:07:59:f7:cd:c5:bc:3a:da:b0:9c:dd:6b:dc:7c:6a:ee:9d:4a:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9B8C8035F469EEFCD42A52D48966057264B95C4
        Validity
            Not Before: Apr  4 07:42:21 2024 GMT
            Not After : Apr  3 07:47:21 2025 GMT
        Subject: CN=4869C79A436513B397C3FADC90037328627C666E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1e:bb:e4:49:79:cc:c1:8e:59:12:6f:a0:b7:
                    4a:20:38:2d:f3:8c:7e:8d:8d:3e:92:ce:b6:c0:8c:
                    3c:7d:f2:da:a5:f4:33:c6:1a:54:ed:a1:98:1f:25:
                    cd:9f:af:e9:22:4c:c9:be:ca:0d:d3:25:62:dd:f5:
                    6f:a2:44:8a:85:44:3d:21:e8:7c:17:34:cb:fc:ce:
                    71:37:4f:5a:f3:8d:21:20:5f:61:c5:23:7e:ce:59:
                    50:17:50:64:c4:37:8e:7e:d9:c3:99:82:88:58:78:
                    62:4a:9a:f9:ab:52:e7:ab:d8:c9:96:84:26:ae:e1:
                    4a:9e:63:52:7e:f1:3c:7f:44:fd:67:19:d3:fd:aa:
                    1c:54:60:6c:14:d6:26:77:9c:af:ba:e1:48:82:80:
                    cf:b5:2e:f5:0f:c9:6b:25:2e:45:38:64:c2:26:13:
                    ee:a9:c0:57:61:a7:b9:24:9d:8b:b4:96:a6:cc:08:
                    40:d5:38:ae:22:1b:8f:83:81:5f:f3:5e:df:2b:a9:
                    d2:d2:77:4e:0b:c3:a9:33:6f:a1:06:ce:ad:fe:a3:
                    34:26:14:13:34:4a:17:1f:37:52:81:64:a9:b9:15:
                    61:ea:54:48:42:bc:ec:8d:18:fd:51:cb:bc:06:56:
                    07:a4:c1:48:51:fe:00:3d:60:3d:ad:d7:14:44:d4:
                    31:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:69:C7:9A:43:65:13:B3:97:C3:FA:DC:90:03:73:28:62:7C:66:6E
            X509v3 Authority Key Identifier:
                keyid:D9:B8:C8:03:5F:46:9E:EF:CD:42:A5:2D:48:96:60:57:26:4B:95:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/3137372e3139302e3135332e302f32342d3234203d3e20323633343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:9d:3f:5e:d1:12:68:58:12:c7:97:ad:9d:6d:61:30:3e:b1:
         d6:f2:84:9d:55:6f:2f:df:70:fe:01:5b:f9:18:40:d4:21:f3:
         eb:07:ab:54:cf:f5:f8:0e:3d:4a:36:6f:b8:0f:04:8f:cd:19:
         34:a5:80:22:bb:af:36:7d:86:01:c1:1b:85:ba:c2:e4:44:be:
         d9:19:cc:c2:2f:a7:04:6d:3e:4f:a5:30:b8:25:ae:c2:9d:b7:
         e5:9d:26:b8:4b:9b:b7:bb:b3:23:26:21:9b:cb:f5:a5:80:35:
         79:33:f1:58:70:e9:8b:60:ac:b9:89:8c:c0:fc:06:66:ed:66:
         59:c3:1f:fe:8b:c8:52:88:f4:dc:87:9b:a3:d5:09:45:ec:f5:
         e7:5d:de:49:98:ba:a4:c8:f5:13:70:6c:26:48:3c:7f:72:3c:
         9f:68:78:a2:eb:c9:15:55:b4:48:c5:6b:8c:a2:e8:c8:6d:16:
         c4:20:05:83:5b:8f:12:83:39:00:8d:96:f0:64:3d:74:ff:3b:
         cc:82:ef:e6:67:3a:3e:6c:bb:a6:d7:97:e5:73:af:2f:6f:fc:
         90:11:a7:e2:7f:7b:31:c2:d1:e1:dc:40:47:b3:98:ad:dd:fe:
         ed:81:7b:72:33:7d:d4:ce:28:51:fa:ce:8d:44:a3:25:9c:8b:
         51:fe:d4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:43 2024 by rpki-client on console-ams.rpki-client.org