Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/3137372e3139302e3136382e302f32342d3234203d3e20323633343539.roa
File:                     3137372e3139302e3136382e302f32342d3234203d3e20323633343539.roa (raw, json)
Hash identifier:          rpKAbHgFa+SpokEy5qAhcsFFp+SQptQlY3pRIpykjvU=
Subject key identifier:   F3:50:D0:0E:1A:48:EB:C8:01:3E:24:09:B5:8B:42:7D:61:2C:5E:AF
Certificate issuer:       /CN=1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E
Certificate serial:       5EC87788B0D45017A3648E79011B7CEAE379060A
Authority key identifier: 1F:0D:02:1C:F2:5E:5F:3E:38:DA:B4:5D:EE:DD:26:D6:61:CF:E7:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/3137372e3139302e3136382e302f32342d3234203d3e20323633343539.roa
Signing time:             Fri 06 Sep 2024 12:52:48 +0000
ROA not before:           Fri 06 Sep 2024 12:47:48 +0000
ROA not after:            Fri 05 Sep 2025 12:52:48 +0000
asID:                     263459
IP address blocks:        177.190.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E.crl
                          rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:21:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:c8:77:88:b0:d4:50:17:a3:64:8e:79:01:1b:7c:ea:e3:79:06:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E
        Validity
            Not Before: Sep  6 12:47:48 2024 GMT
            Not After : Sep  5 12:52:48 2025 GMT
        Subject: CN=F350D00E1A48EBC8013E2409B58B427D612C5EAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bd:81:66:9c:c4:46:d1:e4:74:55:b8:ca:04:
                    30:62:3c:e8:7c:29:01:34:08:8f:33:ad:2c:41:6f:
                    40:96:e7:c7:9d:46:86:69:38:b3:20:7b:52:fb:d8:
                    ce:46:34:bb:70:49:89:08:9d:c1:26:5c:2c:d2:0d:
                    5b:83:9b:e8:db:3c:8e:ac:b9:44:b4:07:c2:2c:15:
                    a7:02:9b:53:22:57:c1:71:9d:03:3c:f2:6d:62:83:
                    c1:d1:e8:52:db:5a:55:54:c7:bc:bd:e7:aa:96:dd:
                    03:53:2f:46:1b:f0:ef:e8:f1:86:9f:6a:c7:6b:46:
                    6b:94:7a:ac:f3:18:fe:25:23:29:03:a3:80:91:d3:
                    f6:63:ed:b9:1e:e4:49:64:d1:b1:35:1c:a3:7a:40:
                    51:f1:9c:54:68:34:26:62:5d:21:71:e7:fc:0f:9f:
                    e8:a5:31:38:29:5e:bb:44:28:09:03:50:81:35:55:
                    6b:a8:2f:95:57:a9:01:d2:d2:01:1d:88:67:5c:eb:
                    ca:f1:ff:90:b7:de:56:0a:ce:86:21:cc:a6:6f:15:
                    99:7a:e5:a9:ed:70:5f:d4:68:c2:84:69:06:7c:25:
                    77:5f:5f:60:4f:cf:b9:42:b1:70:c6:f4:fe:7b:e0:
                    c8:0f:8e:45:5f:0f:83:4b:55:c5:38:35:15:3b:fd:
                    0c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:50:D0:0E:1A:48:EB:C8:01:3E:24:09:B5:8B:42:7D:61:2C:5E:AF
            X509v3 Authority Key Identifier:
                keyid:1F:0D:02:1C:F2:5E:5F:3E:38:DA:B4:5D:EE:DD:26:D6:61:CF:E7:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/3137372e3139302e3136382e302f32342d3234203d3e20323633343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:25:36:94:0c:7b:06:4b:c5:71:40:51:36:bb:5b:cb:c6:6c:
         dd:d7:9c:db:f9:2e:d3:ab:d6:f1:ee:36:eb:62:11:9e:bf:99:
         d4:0a:c9:cb:4d:22:48:65:cd:b2:42:0c:4d:63:3d:82:1b:00:
         24:69:6b:d0:0d:7d:74:2e:4a:95:fb:a7:86:f6:02:a4:ab:63:
         02:b8:5c:c8:3e:15:72:0c:12:ee:8d:5b:49:1f:19:b1:62:e5:
         e2:02:d3:58:cd:ad:c9:37:eb:11:93:7b:68:69:02:7f:a9:52:
         c1:f6:80:a6:e3:9a:63:2c:26:d7:6f:fb:b8:84:88:16:5a:8e:
         b5:1b:15:9f:fe:84:4b:9d:d6:bf:e8:81:75:f5:7a:42:64:d6:
         fd:43:87:3e:ab:54:3b:96:29:4a:e2:d6:af:99:42:b3:4d:d7:
         5d:d0:aa:0a:74:37:7b:f7:d6:b9:9c:4b:81:73:c1:b0:f1:2a:
         ef:97:8f:7b:ee:1d:cb:f2:d1:fb:7f:8e:51:f3:30:b3:22:3a:
         ef:c6:47:48:38:a6:35:61:f4:74:a8:86:d0:6f:7a:74:83:f7:
         8c:a4:bb:cd:6e:ba:a6:87:bd:d0:0c:f6:e7:ba:98:a4:5d:a6:
         ac:b7:77:a8:45:7c:06:86:bd:87:61:fa:b5:46:23:80:59:bf:
         2b:1a:82:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:43 2024 by rpki-client on console-fra.rpki-client.org