Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/3137372e3139302e3135372e302f32342d3234203d3e20323633343537.roa
File:                     3137372e3139302e3135372e302f32342d3234203d3e20323633343537.roa (raw, json)
Hash identifier:          PPME1EyPx2NVUJFKfGAJJePmtwSmvZ6u6siXA8MclkY=
Subject key identifier:   7C:6A:76:0B:B5:9C:17:99:AC:A5:13:81:76:A9:9A:CD:73:09:2B:6E
Certificate issuer:       /CN=D9B8C8035F469EEFCD42A52D48966057264B95C4
Certificate serial:       7AD32E7513B45D4E80BA50F554ED6F56130FE574
Authority key identifier: D9:B8:C8:03:5F:46:9E:EF:CD:42:A5:2D:48:96:60:57:26:4B:95:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/3137372e3139302e3135372e302f32342d3234203d3e20323633343537.roa
Signing time:             Thu 04 Apr 2024 07:47:22 +0000
ROA not before:           Thu 04 Apr 2024 07:42:22 +0000
ROA not after:            Thu 03 Apr 2025 07:47:22 +0000
asID:                     263457
IP address blocks:        177.190.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.crl
                          rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:34:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d3:2e:75:13:b4:5d:4e:80:ba:50:f5:54:ed:6f:56:13:0f:e5:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9B8C8035F469EEFCD42A52D48966057264B95C4
        Validity
            Not Before: Apr  4 07:42:22 2024 GMT
            Not After : Apr  3 07:47:22 2025 GMT
        Subject: CN=7C6A760BB59C1799ACA5138176A99ACD73092B6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:20:ed:24:ff:7d:49:dd:ad:ab:84:2f:b3:8c:
                    da:1d:a2:31:da:23:ea:06:24:6f:96:bd:cd:11:28:
                    69:42:e2:49:93:10:4e:06:a6:8c:c8:e6:36:c0:76:
                    ae:6d:49:7f:ed:a7:06:1d:0e:46:c8:1b:ee:63:fb:
                    a3:5c:69:c9:c3:f5:8b:a7:ec:49:72:f9:2a:99:8f:
                    01:5f:b9:9b:fa:36:8c:30:8e:40:c6:28:e9:9a:d2:
                    16:94:af:66:ec:1c:6a:41:b0:61:0f:aa:a9:c0:60:
                    b1:be:e4:b5:57:ad:9f:cc:43:d1:ea:ee:63:2f:3d:
                    a7:73:9c:b7:c7:21:cd:8b:7e:0a:c7:49:c8:17:db:
                    18:ab:73:d1:ac:8d:39:e1:bd:af:53:fb:94:1a:96:
                    97:2c:e2:61:a9:cf:5d:ad:c3:6b:29:fe:76:b0:77:
                    78:f4:c4:21:8e:42:93:c5:2a:55:f5:48:4a:ff:2c:
                    09:2d:61:41:6a:a7:c0:6c:72:23:bf:ae:43:dd:17:
                    bf:8d:44:47:5a:1a:ba:00:f1:fd:7e:e2:9c:47:ca:
                    7e:0b:a1:c7:41:c7:76:17:20:33:33:29:57:92:08:
                    56:71:9e:ec:38:8c:87:67:00:0f:07:ec:ac:dd:76:
                    9d:d3:04:ef:cb:bc:fe:9a:aa:0f:eb:a3:55:be:86:
                    14:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6A:76:0B:B5:9C:17:99:AC:A5:13:81:76:A9:9A:CD:73:09:2B:6E
            X509v3 Authority Key Identifier:
                keyid:D9:B8:C8:03:5F:46:9E:EF:CD:42:A5:2D:48:96:60:57:26:4B:95:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/3137372e3139302e3135372e302f32342d3234203d3e20323633343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:34:65:16:8f:93:e2:7c:14:90:45:55:2a:27:50:ea:93:9a:
         14:c2:c7:54:11:4d:d2:ad:f6:ef:05:d0:1a:1f:b0:ad:22:c7:
         f4:2d:4c:4f:54:df:ed:2b:16:00:e3:5e:0d:2f:47:26:a2:67:
         f0:a3:6c:78:5f:75:1b:0c:1d:6c:9d:47:40:c0:cb:15:e7:07:
         f7:38:dc:80:c8:10:f5:5a:11:08:7e:36:5e:10:29:de:db:9f:
         a2:bd:f9:6f:fc:a0:fe:05:e1:3a:45:df:b2:b7:fd:01:0f:38:
         12:b8:bc:64:e8:9c:b4:34:ab:28:53:e5:94:22:64:db:42:87:
         a3:7a:55:53:3b:3e:da:76:57:3e:c7:4f:4e:5e:fe:e6:62:58:
         b3:26:34:65:44:41:d5:ad:21:7c:bf:5e:be:b5:01:44:51:cf:
         51:f1:eb:2a:45:14:fe:38:6a:20:e2:44:40:6b:47:4b:04:ca:
         e2:47:b3:e0:10:25:c4:b6:23:e0:b8:96:6c:df:8e:bc:39:dd:
         96:f3:95:1c:c0:d9:86:03:7a:c9:fa:48:b5:5d:c3:da:2a:30:
         da:e6:6d:69:1c:8d:1e:23:63:86:6b:b0:a8:e9:2e:3e:09:ea:
         89:f2:91:f5:ad:0c:7d:53:47:2f:8a:88:12:98:e8:8a:fe:d6:
         bd:8a:ab:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:43 2024 by rpki-client on console-ams.rpki-client.org