Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/0/3137372e3135352e3132382e302f32302d3234203d3e203533303632.roa
File:                     3137372e3135352e3132382e302f32302d3234203d3e203533303632.roa (raw, json)
Hash identifier:          Ve3nuTbPIJgvLIUer+Aiui3PCt/Uh8xV/34Svu9NB1M=
Subject key identifier:   C8:9C:5C:72:83:CE:D4:CA:DB:F8:86:44:6B:9C:03:93:99:CD:E5:27
Certificate issuer:       /CN=66ACB5D5C8CD99E00F2480BAB1FC6F95F62059D9
Certificate serial:       528D963202323AAD5045D7EAE63BFA6D2B9DC0FF
Authority key identifier: 66:AC:B5:D5:C8:CD:99:E0:0F:24:80:BA:B1:FC:6F:95:F6:20:59:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66ACB5D5C8CD99E00F2480BAB1FC6F95F62059D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/0/3137372e3135352e3132382e302f32302d3234203d3e203533303632.roa
Signing time:             Wed 14 Aug 2024 00:36:37 +0000
ROA not before:           Wed 14 Aug 2024 00:31:37 +0000
ROA not after:            Wed 13 Aug 2025 00:36:37 +0000
asID:                     53062
IP address blocks:        177.155.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/0/66ACB5D5C8CD99E00F2480BAB1FC6F95F62059D9.crl
                          rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/0/66ACB5D5C8CD99E00F2480BAB1FC6F95F62059D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66ACB5D5C8CD99E00F2480BAB1FC6F95F62059D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:8d:96:32:02:32:3a:ad:50:45:d7:ea:e6:3b:fa:6d:2b:9d:c0:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ACB5D5C8CD99E00F2480BAB1FC6F95F62059D9
        Validity
            Not Before: Aug 14 00:31:37 2024 GMT
            Not After : Aug 13 00:36:37 2025 GMT
        Subject: CN=C89C5C7283CED4CADBF886446B9C039399CDE527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:71:c7:8c:84:90:99:dd:7f:d0:f6:ba:f1:71:
                    74:a4:8f:25:a8:b2:b6:24:e8:58:13:31:91:7d:50:
                    32:fe:6f:80:24:b5:21:c6:d2:05:8d:2b:61:8e:97:
                    76:bb:0f:44:12:37:f7:b1:bd:60:76:0c:0d:e0:9f:
                    62:2a:4d:de:e6:74:4a:2b:8a:8d:18:87:58:f4:01:
                    ab:19:3b:c1:87:3b:b2:11:bb:aa:1f:8c:3c:3c:7e:
                    26:f1:9d:73:b4:ac:14:07:d6:07:db:73:6b:4a:9d:
                    36:7f:14:d9:c5:46:c7:34:cb:12:fb:93:a2:5f:8a:
                    9f:ca:c7:88:49:f9:3a:10:a5:fa:c2:ef:57:35:ba:
                    21:9c:e9:4b:4c:c6:38:98:53:67:b4:52:cf:e2:c2:
                    a5:5b:85:e8:21:c7:49:51:c9:a8:76:7b:b2:c5:02:
                    5f:ba:aa:53:55:f7:7b:e1:4c:3f:59:95:03:6b:d0:
                    35:08:0f:33:3d:1b:ea:6b:e9:b1:4b:c0:0d:76:c4:
                    9a:64:aa:c0:86:c4:df:91:37:5f:cd:d5:6c:74:a0:
                    86:c8:73:40:85:75:10:a7:23:e5:ba:e7:79:8b:a5:
                    64:8f:b3:04:8e:49:53:6f:62:59:69:d1:03:f3:1a:
                    3f:10:17:fd:32:55:98:29:27:fc:fc:55:5d:d8:85:
                    35:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:9C:5C:72:83:CE:D4:CA:DB:F8:86:44:6B:9C:03:93:99:CD:E5:27
            X509v3 Authority Key Identifier:
                keyid:66:AC:B5:D5:C8:CD:99:E0:0F:24:80:BA:B1:FC:6F:95:F6:20:59:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/0/66ACB5D5C8CD99E00F2480BAB1FC6F95F62059D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66ACB5D5C8CD99E00F2480BAB1FC6F95F62059D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/0/3137372e3135352e3132382e302f32302d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         04:33:1d:d1:08:8f:0e:49:83:0c:ff:d7:36:c7:17:9c:ae:7c:
         9d:ef:b2:73:ae:fd:b2:8f:ac:d7:fe:f1:f8:69:c1:56:f8:b9:
         88:9d:34:99:cb:87:6f:30:0a:70:2e:1d:b5:7b:b8:c0:08:b5:
         8f:8d:48:d5:f2:ee:cc:c1:d3:4e:5d:c9:72:67:42:2d:9b:bc:
         28:fe:53:d1:df:6f:7b:bf:bc:42:2b:46:43:f6:9b:3e:b9:14:
         66:e2:a2:10:90:e2:ed:89:f3:63:58:33:2e:14:00:8b:a2:d9:
         8b:6b:e4:b7:b9:25:b7:c1:0a:70:c2:3a:79:aa:5b:f3:39:1e:
         be:41:c4:87:14:e2:4d:b4:9e:ad:e6:92:c1:85:ef:31:27:0b:
         0c:ae:7d:a6:bc:1a:47:cb:99:e6:29:d8:c4:20:59:3a:83:9e:
         a4:7f:6c:b3:c8:cb:76:11:7e:36:61:b8:6b:1c:37:75:8d:94:
         c8:3c:72:e0:52:28:49:74:3b:e2:41:09:59:3e:e4:35:bb:70:
         2e:95:66:39:77:23:77:e0:61:a7:dd:26:81:87:50:e7:e2:b6:
         18:82:42:ce:6a:e3:93:6a:44:42:c5:3b:91:66:43:c9:b4:14:
         f0:c2:bb:e3:f4:56:4e:17:42:0c:3c:29:32:e2:7b:51:62:82:
         ce:7a:0b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:19 2024 by rpki-client on console-fra.rpki-client.org