Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/3137372e37352e3136302e302f32302d3234203d3e203533303632.roa
File:                     3137372e37352e3136302e302f32302d3234203d3e203533303632.roa (raw, json)
Hash identifier:          MbelsFKM9w4Ki2n2tIY8hUElijBq5gpWDpk6QRetj9g=
Subject key identifier:   62:83:E9:B7:DA:D7:16:F7:00:9F:57:71:71:2F:01:08:3F:A6:68:C5
Certificate issuer:       /CN=FF8022FCD112C507FDC1D72A4931605EF74BC817
Certificate serial:       2900672083FDA12D103BB01B49BF4DF6C4C66B68
Authority key identifier: FF:80:22:FC:D1:12:C5:07:FD:C1:D7:2A:49:31:60:5E:F7:4B:C8:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF8022FCD112C507FDC1D72A4931605EF74BC817.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/3137372e37352e3136302e302f32302d3234203d3e203533303632.roa
Signing time:             Thu 04 Apr 2024 11:47:44 +0000
ROA not before:           Thu 04 Apr 2024 11:42:44 +0000
ROA not after:            Thu 03 Apr 2025 11:47:44 +0000
asID:                     53062
IP address blocks:        177.75.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/FF8022FCD112C507FDC1D72A4931605EF74BC817.crl
                          rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/FF8022FCD112C507FDC1D72A4931605EF74BC817.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF8022FCD112C507FDC1D72A4931605EF74BC817.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:53:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:00:67:20:83:fd:a1:2d:10:3b:b0:1b:49:bf:4d:f6:c4:c6:6b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF8022FCD112C507FDC1D72A4931605EF74BC817
        Validity
            Not Before: Apr  4 11:42:44 2024 GMT
            Not After : Apr  3 11:47:44 2025 GMT
        Subject: CN=6283E9B7DAD716F7009F5771712F01083FA668C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:58:d7:7c:fe:6f:bf:15:87:39:6b:b9:60:d7:
                    9b:0b:77:74:c7:82:bb:ab:53:cd:dc:e4:f4:83:07:
                    c6:d2:56:bd:6a:29:0d:09:85:83:ec:7d:66:f4:39:
                    f4:9b:00:dd:08:7c:3a:a0:ff:82:ba:16:79:37:94:
                    e0:be:c4:59:51:2f:40:8e:23:c7:1e:a5:db:c2:8c:
                    2c:7d:c3:7f:5d:15:00:c2:1f:7e:d0:6e:5d:55:34:
                    ea:fb:87:d2:74:26:a0:5f:79:da:08:c2:7b:75:e6:
                    e7:a6:1b:1d:dc:85:19:30:c0:0f:66:5e:eb:53:cc:
                    ab:38:15:66:68:d9:17:50:ad:af:4f:74:40:47:96:
                    74:5f:e0:78:bb:be:4a:d6:8e:f6:bd:fe:95:10:eb:
                    20:64:c5:ae:59:eb:d5:c9:ad:e4:03:47:c0:dd:82:
                    0d:5b:74:28:4e:8c:04:d4:da:5e:e4:b1:d4:88:d5:
                    0c:73:f4:37:38:78:a6:57:72:2a:ae:77:8b:bb:26:
                    8e:92:ac:05:59:4e:fe:03:c6:db:77:e1:e3:1a:b3:
                    83:cc:45:64:48:ca:b9:49:4e:ca:fe:80:20:25:85:
                    b0:2a:32:21:4b:c2:ef:5e:2b:3d:e8:3b:76:3e:29:
                    49:23:5e:c0:4e:4d:e8:8e:45:f7:47:e5:58:1a:46:
                    11:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:83:E9:B7:DA:D7:16:F7:00:9F:57:71:71:2F:01:08:3F:A6:68:C5
            X509v3 Authority Key Identifier:
                keyid:FF:80:22:FC:D1:12:C5:07:FD:C1:D7:2A:49:31:60:5E:F7:4B:C8:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/FF8022FCD112C507FDC1D72A4931605EF74BC817.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF8022FCD112C507FDC1D72A4931605EF74BC817.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/4/3137372e37352e3136302e302f32302d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a5:7e:a1:25:80:36:5e:e3:58:a4:da:ee:87:ed:85:e4:14:3c:
         63:5b:59:b0:b7:9c:61:45:40:58:71:86:98:d9:51:d2:45:8c:
         a0:3a:e6:ed:23:8b:46:c0:87:f8:01:db:3f:8f:51:83:7c:10:
         be:5b:a2:f6:ce:7d:34:14:0e:c3:4e:ba:65:6c:6e:6e:eb:3f:
         1f:16:8e:71:8e:49:26:d9:40:57:d1:2b:22:55:c3:3b:59:a7:
         fc:4f:07:47:4e:c5:10:b9:01:34:e0:b8:59:8e:a1:64:6f:75:
         23:b7:74:36:0c:81:12:49:d2:8b:11:9c:93:24:aa:1e:d7:13:
         1e:8e:60:69:1e:19:1c:e1:03:09:22:1e:15:66:bd:6c:f9:0f:
         58:f3:f2:e3:fd:33:1f:48:8b:3d:35:3d:4b:9c:2f:7c:ca:1e:
         ae:84:7e:63:f1:c2:40:bc:ae:f3:cb:f4:c1:2e:5f:0a:88:42:
         35:80:e5:d2:e9:76:8a:a2:ed:7a:05:eb:de:3c:d4:13:e1:08:
         ba:62:0b:c4:a7:d1:e3:c2:00:ec:18:8d:ca:0e:25:22:eb:e8:
         fd:29:65:25:f2:26:1d:7e:dc:ed:f0:29:ba:87:d0:94:1c:18:
         7d:de:80:1b:16:ab:e9:9e:7a:a3:3c:14:f3:6e:9a:46:7f:1e:
         ed:e3:0c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:10 2024 by rpki-client on console-fra.rpki-client.org