Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/1/3137372e3230302e3133382e302f32332d3233203d3e20323730393137.roa
File:                     3137372e3230302e3133382e302f32332d3233203d3e20323730393137.roa (raw, json)
Hash identifier:          Gbe48BS0JQZKlnsxRjJsAVp2UJwVMsd7vDbCAOq/Ou8=
Subject key identifier:   8A:6F:BB:45:D0:00:57:F3:86:A4:15:63:C5:F0:38:CD:EF:01:3E:C6
Certificate issuer:       /CN=655CC039C16DFEB4822C7990104A86C7C7064890
Certificate serial:       75A7E8A0170D77DD71E52775C3A3A17698F776BB
Authority key identifier: 65:5C:C0:39:C1:6D:FE:B4:82:2C:79:90:10:4A:86:C7:C7:06:48:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/655CC039C16DFEB4822C7990104A86C7C7064890.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/1/3137372e3230302e3133382e302f32332d3233203d3e20323730393137.roa
Signing time:             Fri 05 Apr 2024 00:21:58 +0000
ROA not before:           Fri 05 Apr 2024 00:16:58 +0000
ROA not after:            Fri 04 Apr 2025 00:21:58 +0000
asID:                     270917
IP address blocks:        177.200.138.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/1/655CC039C16DFEB4822C7990104A86C7C7064890.crl
                          rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/1/655CC039C16DFEB4822C7990104A86C7C7064890.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/655CC039C16DFEB4822C7990104A86C7C7064890.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a7:e8:a0:17:0d:77:dd:71:e5:27:75:c3:a3:a1:76:98:f7:76:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=655CC039C16DFEB4822C7990104A86C7C7064890
        Validity
            Not Before: Apr  5 00:16:58 2024 GMT
            Not After : Apr  4 00:21:58 2025 GMT
        Subject: CN=8A6FBB45D00057F386A41563C5F038CDEF013EC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:48:66:c3:f4:ee:1e:7d:db:1c:bd:d5:29:20:
                    06:be:8d:b1:f0:b8:82:39:29:75:92:f5:4b:13:62:
                    bf:17:12:ab:b6:1c:16:5f:79:ee:ec:27:bb:28:f8:
                    4b:b9:38:61:7c:40:97:1e:79:46:62:27:55:49:c5:
                    6e:1b:78:8e:ae:8b:eb:9d:f2:c6:65:e4:d0:f0:e6:
                    30:e0:20:ca:30:6a:79:6f:79:46:f6:96:7c:ce:8e:
                    09:1b:66:35:05:38:a4:98:34:d2:32:34:12:1e:5d:
                    21:10:93:0c:8b:02:8b:e4:6f:8d:3e:f5:ce:2c:49:
                    96:f2:0d:be:ed:67:7d:10:5e:f7:99:46:9b:9a:48:
                    54:ee:03:f1:19:a4:b7:a1:79:b9:fc:5c:f4:bc:eb:
                    7a:06:c0:a5:b7:e1:39:8b:1f:12:08:71:4a:ee:58:
                    93:80:06:c8:96:68:7c:17:6b:35:76:85:f7:3f:f8:
                    8e:2f:f8:a4:61:d5:3e:68:8d:d6:83:58:71:02:b6:
                    c4:a2:c3:04:0e:8f:11:25:72:e2:07:58:0f:dc:52:
                    85:03:90:06:ad:7d:b3:1e:72:a4:68:14:de:ec:b0:
                    52:bf:ad:03:1a:6d:7b:18:9c:bd:18:fc:88:71:76:
                    03:8d:65:d5:7d:23:0b:81:09:ca:77:8e:97:c4:a1:
                    72:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6F:BB:45:D0:00:57:F3:86:A4:15:63:C5:F0:38:CD:EF:01:3E:C6
            X509v3 Authority Key Identifier:
                keyid:65:5C:C0:39:C1:6D:FE:B4:82:2C:79:90:10:4A:86:C7:C7:06:48:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/1/655CC039C16DFEB4822C7990104A86C7C7064890.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/655CC039C16DFEB4822C7990104A86C7C7064890.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/1/3137372e3230302e3133382e302f32332d3233203d3e20323730393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d0:3a:60:db:01:f4:d6:1b:9d:2b:59:70:ab:82:22:0b:c8:64:
         3b:8f:0a:8d:24:55:2b:b1:68:a1:8b:e8:10:ae:31:49:56:5f:
         d1:4e:cf:4a:e1:2d:0c:9c:f5:75:ea:db:97:ce:10:68:d1:e2:
         12:3b:71:38:99:e2:b1:fa:36:44:c7:d4:80:40:92:6f:c8:c1:
         71:25:b4:f9:b3:3c:1a:17:27:15:02:12:f3:27:38:3f:1e:d6:
         b7:50:a4:2f:63:e5:e9:3b:29:af:84:9a:cb:16:4e:fb:ee:22:
         b4:4e:1c:83:6d:01:db:ee:0d:71:67:61:ed:f6:8a:c2:c3:f5:
         dd:68:db:45:df:17:b1:a5:26:ba:f2:41:55:e1:cd:ab:9e:7a:
         07:b6:b0:49:39:98:8e:ce:98:dd:bb:53:ce:6f:fe:1c:33:db:
         20:14:d2:e1:77:15:b7:81:c6:ff:e2:21:da:5c:cb:c5:32:ac:
         b1:e7:c9:58:f3:8f:6d:9c:25:db:24:c1:f1:43:c4:12:1a:cf:
         73:9a:8e:a2:9f:bc:d4:20:cb:eb:fe:13:ac:4a:08:83:d4:34:
         a2:92:5c:ac:f5:3a:5d:47:93:76:09:18:56:be:3a:f3:4e:15:
         92:50:ba:84:ac:07:f7:79:b3:2d:4f:4b:0d:89:5b:a5:9a:73:
         d0:19:7d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:15:03 2024 by rpki-client on console-fra.rpki-client.org