Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/3137372e3139302e3135362e302f32332d3233203d3e20323633343537.roa
File:                     3137372e3139302e3135362e302f32332d3233203d3e20323633343537.roa (raw, json)
Hash identifier:          hMLYuOhjVtYOPzHimWv3VgMkAt0KTc5I+k9KfKrJpJY=
Subject key identifier:   35:92:36:4D:D5:D2:A9:B8:1F:D8:F1:88:BE:19:3E:E7:61:D3:1E:D9
Certificate issuer:       /CN=D9B8C8035F469EEFCD42A52D48966057264B95C4
Certificate serial:       2AD0DF2C2E46BBCD28AFDBE6A58B3638123DEA41
Authority key identifier: D9:B8:C8:03:5F:46:9E:EF:CD:42:A5:2D:48:96:60:57:26:4B:95:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/3137372e3139302e3135362e302f32332d3233203d3e20323633343537.roa
Signing time:             Thu 04 Apr 2024 07:47:22 +0000
ROA not before:           Thu 04 Apr 2024 07:42:22 +0000
ROA not after:            Thu 03 Apr 2025 07:47:22 +0000
asID:                     263457
IP address blocks:        177.190.156.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.crl
                          rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:34:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d0:df:2c:2e:46:bb:cd:28:af:db:e6:a5:8b:36:38:12:3d:ea:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9B8C8035F469EEFCD42A52D48966057264B95C4
        Validity
            Not Before: Apr  4 07:42:22 2024 GMT
            Not After : Apr  3 07:47:22 2025 GMT
        Subject: CN=3592364DD5D2A9B81FD8F188BE193EE761D31ED9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ab:87:7f:bd:07:46:2b:71:29:30:d3:b7:5a:
                    dc:80:3f:e2:f2:63:d7:dd:0e:36:50:51:c4:b7:10:
                    f0:d9:12:62:71:90:77:f6:dc:8f:53:a5:7a:81:8e:
                    b1:34:1e:81:c3:22:a5:ec:ba:1c:6b:64:c7:83:ab:
                    ff:56:a5:92:f2:92:1b:ae:af:97:c6:e1:30:22:f9:
                    2a:e2:87:07:35:45:16:78:fe:4e:5a:35:a6:c6:0a:
                    d6:9e:6f:bc:44:31:03:da:41:5e:d9:ef:61:7a:b0:
                    83:9f:c9:e3:32:33:00:30:41:44:ec:65:d7:b7:41:
                    b7:81:b7:ea:55:69:fb:d6:48:ae:48:a3:f7:64:65:
                    32:c3:12:31:1c:69:74:3c:b8:9c:61:6d:56:8e:a4:
                    03:4c:15:6f:9a:e0:39:83:dc:d9:4f:27:04:a2:57:
                    b5:a3:38:e3:4c:8c:2a:40:f1:de:13:5f:0e:80:35:
                    82:70:f1:94:ae:ab:f2:17:9e:49:15:47:47:3b:28:
                    84:db:8d:8d:de:0d:e2:38:17:d8:70:29:15:2c:15:
                    c9:14:e2:6c:f9:f3:03:47:36:e9:92:60:4c:1f:16:
                    9e:31:00:70:3a:06:54:20:de:59:94:5e:af:53:85:
                    18:df:e7:00:d3:3a:3c:ab:31:29:10:fb:99:2a:3c:
                    e1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:92:36:4D:D5:D2:A9:B8:1F:D8:F1:88:BE:19:3E:E7:61:D3:1E:D9
            X509v3 Authority Key Identifier:
                keyid:D9:B8:C8:03:5F:46:9E:EF:CD:42:A5:2D:48:96:60:57:26:4B:95:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/3137372e3139302e3135362e302f32332d3233203d3e20323633343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:ad:08:80:68:8a:60:5f:8e:70:7d:52:fe:44:d4:26:11:b3:
         51:60:1c:11:dc:e2:6e:32:4f:80:9d:a2:5e:f0:d3:48:59:3e:
         d5:53:07:a7:a1:8b:55:e0:79:10:b6:1c:4b:95:7b:72:0c:ad:
         cb:f2:f8:a1:e5:a8:e4:4c:14:15:3e:d6:af:8a:4e:67:f8:db:
         88:58:7f:e4:ad:5d:a9:c0:19:71:34:9f:33:cd:77:aa:a0:fe:
         28:da:0c:f6:63:75:9e:e6:8a:70:60:cd:f5:17:f1:42:40:67:
         dd:f6:c4:ba:af:af:ad:56:31:de:0a:b7:97:94:0c:ec:f6:bf:
         e5:58:82:5d:7a:9d:82:6b:d6:e5:93:91:0b:0b:95:70:74:05:
         79:69:6e:7c:5b:03:30:97:63:ca:e3:cf:e8:ba:1f:6a:b9:64:
         a0:cc:d5:39:31:a5:9b:78:d1:f2:82:ef:4f:11:bf:d7:8d:f3:
         8e:b4:aa:44:b3:85:8e:0d:e8:1b:92:e6:d6:5b:7f:3a:60:24:
         7f:84:aa:2b:25:87:dd:05:6c:31:b9:2c:8c:9c:55:85:3e:f1:
         1e:1c:5f:f9:0b:0b:05:2c:f3:2f:af:f0:90:72:8f:e7:de:29:
         e3:98:a7:3c:44:02:48:77:fc:22:4d:f7:98:49:14:fb:ec:c9:
         1b:0f:12:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:36 2024 by rpki-client on console-fra.rpki-client.org