Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/3137372e3132342e3132342e302f32322d3234203d3e203532363034.roa
File:                     3137372e3132342e3132342e302f32322d3234203d3e203532363034.roa (raw, json)
Hash identifier:          4BdnHnXMLF76xxN2YibASYDjij0iS2cE3EthidVQhT4=
Subject key identifier:   F6:DD:DA:1A:A1:0D:8B:3B:C9:14:25:98:08:FF:30:3B:95:20:D4:07
Certificate issuer:       /CN=7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5
Certificate serial:       6EC1F9C5D9E1EAE38259BFDDAD2CB9CFED840D03
Authority key identifier: 7C:81:B1:F6:0B:10:4D:DE:21:C5:3A:DB:4E:ED:B1:CF:37:D9:E3:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/3137372e3132342e3132342e302f32322d3234203d3e203532363034.roa
Signing time:             Wed 03 Apr 2024 18:30:43 +0000
ROA not before:           Wed 03 Apr 2024 18:25:43 +0000
ROA not after:            Wed 02 Apr 2025 18:30:43 +0000
asID:                     52604
IP address blocks:        177.124.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.crl
                          rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:c1:f9:c5:d9:e1:ea:e3:82:59:bf:dd:ad:2c:b9:cf:ed:84:0d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5
        Validity
            Not Before: Apr  3 18:25:43 2024 GMT
            Not After : Apr  2 18:30:43 2025 GMT
        Subject: CN=F6DDDA1AA10D8B3BC914259808FF303B9520D407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d0:4e:21:a6:82:af:be:3d:54:6b:62:46:e4:
                    6d:97:f9:cb:7a:ff:1c:8e:90:4f:88:29:8b:ee:77:
                    dc:57:f0:ec:e3:e5:74:f7:b4:15:cc:a4:ef:be:5f:
                    40:fc:2f:f6:c5:a4:34:82:aa:5e:a0:24:2f:81:cd:
                    02:e4:9a:93:1c:8d:84:8f:29:ed:d8:e9:6f:9d:b5:
                    f7:84:81:0c:6f:8a:05:ce:66:e0:ba:f7:4e:1e:7f:
                    7b:65:91:40:52:06:86:43:8c:b5:6e:86:ad:90:d4:
                    01:12:8f:e3:1f:c7:b4:a8:b5:c4:fd:f2:2c:08:a8:
                    65:4e:48:30:ca:5f:ee:9b:d2:90:a3:5d:0a:d3:87:
                    f2:f4:71:34:1d:a4:92:02:a5:ce:ef:d6:b4:6a:3e:
                    57:48:86:27:b9:c5:10:96:1f:b8:97:8b:07:d3:4e:
                    0a:fc:f4:16:69:b6:b0:7e:40:2f:a9:5d:ee:ab:f8:
                    32:81:c0:e4:3a:74:9d:82:19:94:aa:a7:d8:2a:07:
                    95:ba:78:93:e0:cc:23:0c:b6:d1:7a:a0:38:75:93:
                    bf:10:e4:fd:dc:e7:78:4c:74:d6:26:01:0b:2d:62:
                    b3:10:91:72:da:c8:3c:f9:74:56:79:64:da:ea:58:
                    7f:a7:f1:ea:ad:2d:88:da:66:b2:43:68:3a:74:b8:
                    a8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DD:DA:1A:A1:0D:8B:3B:C9:14:25:98:08:FF:30:3B:95:20:D4:07
            X509v3 Authority Key Identifier:
                keyid:7C:81:B1:F6:0B:10:4D:DE:21:C5:3A:DB:4E:ED:B1:CF:37:D9:E3:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C81B1F60B104DDE21C53ADB4EEDB1CF37D9E3E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/1/3137372e3132342e3132342e302f32322d3234203d3e203532363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:73:72:b2:ae:e2:55:8f:07:97:99:19:fe:80:cc:b9:e3:f3:
         f4:d3:c9:14:7b:cb:af:d5:37:02:bf:bb:4a:e2:55:92:44:2f:
         07:02:66:4a:80:5b:cc:44:80:41:2d:8d:88:28:55:28:04:88:
         31:f7:fc:cf:01:69:3b:93:6a:08:1b:d1:95:6a:af:b4:4d:63:
         5a:1f:ac:e8:91:7d:65:a2:ad:f8:7a:6b:d1:be:8c:ca:9b:45:
         eb:fa:d7:c8:cc:25:22:11:4f:40:df:db:8b:4d:96:87:a9:e6:
         4b:5f:ad:71:79:4e:1a:57:84:1f:9b:57:77:fb:01:a9:ec:09:
         ce:22:e6:23:ee:bf:c3:10:a6:01:f0:f2:d8:70:d0:86:7b:6b:
         72:d8:e6:a1:c4:89:47:53:a2:45:44:eb:24:55:7b:42:6e:ef:
         12:97:8a:df:25:97:79:19:13:a5:de:1a:97:ce:55:64:17:f3:
         42:f9:b1:fd:e6:bd:3f:2f:2f:32:54:87:9a:2d:61:aa:46:a6:
         3b:1f:11:ae:22:3e:1b:bf:f0:45:d0:84:0f:dc:1f:7b:ca:47:
         4b:80:05:9b:f1:f1:40:9d:35:e9:14:05:03:4e:61:48:c8:5b:
         eb:01:87:5e:9e:42:c1:a8:20:c5:c5:09:02:e0:e7:70:73:c5:
         01:77:66:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:24 2024 by rpki-client on console-ams.rpki-client.org