Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/0/3137372e33362e3137362e302f32302d3234203d3e203533303632.roa
File:                     3137372e33362e3137362e302f32302d3234203d3e203533303632.roa (raw, json)
Hash identifier:          d/UkpIiJ2d+CPgcLRoHf0x6SnjBmYqwW01cz9ePMgfE=
Subject key identifier:   6C:5A:15:03:33:B0:D3:A8:6B:62:F7:A4:76:CE:02:A6:6B:34:71:C7
Certificate issuer:       /CN=66ACB5D5C8CD99E00F2480BAB1FC6F95F62059D9
Certificate serial:       2F4D209747534AC1F30EE860BD8096078021FDF5
Authority key identifier: 66:AC:B5:D5:C8:CD:99:E0:0F:24:80:BA:B1:FC:6F:95:F6:20:59:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66ACB5D5C8CD99E00F2480BAB1FC6F95F62059D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/0/3137372e33362e3137362e302f32302d3234203d3e203533303632.roa
Signing time:             Wed 14 Aug 2024 00:36:36 +0000
ROA not before:           Wed 14 Aug 2024 00:31:36 +0000
ROA not after:            Wed 13 Aug 2025 00:36:36 +0000
asID:                     53062
IP address blocks:        177.36.176.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/0/66ACB5D5C8CD99E00F2480BAB1FC6F95F62059D9.crl
                          rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/0/66ACB5D5C8CD99E00F2480BAB1FC6F95F62059D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66ACB5D5C8CD99E00F2480BAB1FC6F95F62059D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:4d:20:97:47:53:4a:c1:f3:0e:e8:60:bd:80:96:07:80:21:fd:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ACB5D5C8CD99E00F2480BAB1FC6F95F62059D9
        Validity
            Not Before: Aug 14 00:31:36 2024 GMT
            Not After : Aug 13 00:36:36 2025 GMT
        Subject: CN=6C5A150333B0D3A86B62F7A476CE02A66B3471C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:35:a8:83:d8:ae:45:4d:4c:1d:52:72:ba:53:
                    c3:1c:84:04:d5:89:97:5d:74:b3:e7:e4:3e:82:5c:
                    5b:5f:d1:7c:a1:71:71:95:15:93:cb:bd:a3:46:0d:
                    26:34:43:c0:1c:8d:83:28:e0:60:7b:8e:f0:a9:04:
                    9b:b3:5d:36:c0:7b:70:dc:54:ad:b0:63:0a:01:7a:
                    a5:5e:24:fe:76:9a:14:32:24:69:be:4c:09:7b:44:
                    19:cc:73:27:76:e7:81:40:2a:21:dd:ae:1e:c9:4b:
                    63:18:f1:54:f1:50:98:8a:fe:c4:c8:6a:4f:90:51:
                    2f:47:57:c0:86:20:d5:e3:a2:fe:6c:7d:bf:74:ae:
                    4e:e2:6e:9b:90:79:84:b3:c3:ce:74:c3:a4:5d:76:
                    ab:40:c1:e7:d6:8f:8f:0a:ee:74:2f:1e:67:39:8a:
                    e2:e4:c3:aa:c6:b5:9d:23:bb:2c:46:04:c6:3a:aa:
                    da:09:ec:11:ec:59:38:95:b9:4c:1d:50:f6:3a:ea:
                    7b:25:23:0c:2d:66:fb:b0:ae:ce:af:73:84:66:c8:
                    a0:5a:3d:7e:da:09:6b:29:67:f8:89:1e:03:43:26:
                    71:e0:aa:0e:21:63:2e:b6:71:8b:7f:b9:fc:73:76:
                    ff:1f:16:cc:10:c3:29:40:cf:0d:06:85:d5:ae:57:
                    bd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:5A:15:03:33:B0:D3:A8:6B:62:F7:A4:76:CE:02:A6:6B:34:71:C7
            X509v3 Authority Key Identifier:
                keyid:66:AC:B5:D5:C8:CD:99:E0:0F:24:80:BA:B1:FC:6F:95:F6:20:59:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/0/66ACB5D5C8CD99E00F2480BAB1FC6F95F62059D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66ACB5D5C8CD99E00F2480BAB1FC6F95F62059D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/0/3137372e33362e3137362e302f32302d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8c:74:06:91:12:e2:be:9f:11:b0:4a:52:81:34:c0:d2:1e:49:
         7f:eb:a9:82:41:0a:4c:53:87:4c:86:ec:bc:0c:a3:78:cf:08:
         5b:9d:9f:0a:92:ce:35:62:0e:e1:4f:e4:b5:ae:6d:4b:64:a4:
         c0:ab:ce:c1:e4:4d:39:3c:a1:ba:7d:e5:8d:39:27:a6:db:38:
         c1:96:35:6e:63:37:ae:aa:6b:1e:f6:35:67:9c:d9:9e:8d:59:
         ff:1c:d9:30:6a:32:8d:46:3a:9d:0d:ba:5a:36:b5:1b:c4:a2:
         da:d0:48:3c:87:b6:9a:f3:83:97:c7:ed:13:45:bf:c7:17:f9:
         03:16:5a:40:e8:fa:45:0d:b8:57:97:4c:db:56:1b:3d:02:8c:
         84:ab:c5:bb:65:44:f9:c6:e1:99:42:07:a6:7a:42:ce:e7:bc:
         f8:a7:d2:ee:97:94:5f:ce:cd:f1:36:74:bd:50:d2:78:a1:86:
         e6:78:a9:93:49:7a:bd:e0:fd:0a:eb:a9:b0:ee:1c:f5:d2:16:
         03:e3:3e:52:bf:04:10:f8:43:04:db:6e:26:81:9f:a1:46:ed:
         34:e4:85:fc:e9:21:ac:b6:5b:e3:33:72:49:54:de:bc:24:8e:
         5a:bc:eb:f1:e6:04:12:58:b4:ed:94:03:b8:44:54:c5:21:0b:
         7b:00:29:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:19 2024 by rpki-client on console-fra.rpki-client.org