Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3132392e302f32342d3234203d3e20323731363234.roa
File:                     3137372e37332e3132392e302f32342d3234203d3e20323731363234.roa (raw, json)
Hash identifier:          vlKhRevDm31DR2DndLnIeznYlndXJCkMhfCxkU9+ftY=
Subject key identifier:   E8:B6:DB:2D:AD:A8:27:4E:A7:EE:EE:87:ED:40:F1:0F:02:FA:5A:A4
Certificate issuer:       /CN=03DAA9B8CC938CFD95AF78AA1CBAA05B5B1AB6B0
Certificate serial:       38F837F8D59E63AD48D6C32D456BA1D865FED14E
Authority key identifier: 03:DA:A9:B8:CC:93:8C:FD:95:AF:78:AA:1C:BA:A0:5B:5B:1A:B6:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03DAA9B8CC938CFD95AF78AA1CBAA05B5B1AB6B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3132392e302f32342d3234203d3e20323731363234.roa
Signing time:             Tue 30 Apr 2024 17:51:24 +0000
ROA not before:           Tue 30 Apr 2024 17:46:24 +0000
ROA not after:            Tue 29 Apr 2025 17:51:24 +0000
asID:                     271624
IP address blocks:        177.73.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/03DAA9B8CC938CFD95AF78AA1CBAA05B5B1AB6B0.crl
                          rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/03DAA9B8CC938CFD95AF78AA1CBAA05B5B1AB6B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03DAA9B8CC938CFD95AF78AA1CBAA05B5B1AB6B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f8:37:f8:d5:9e:63:ad:48:d6:c3:2d:45:6b:a1:d8:65:fe:d1:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03DAA9B8CC938CFD95AF78AA1CBAA05B5B1AB6B0
        Validity
            Not Before: Apr 30 17:46:24 2024 GMT
            Not After : Apr 29 17:51:24 2025 GMT
        Subject: CN=E8B6DB2DADA8274EA7EEEE87ED40F10F02FA5AA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ca:8d:eb:76:84:b9:d3:26:1f:7a:7b:00:16:
                    d0:e8:e2:57:78:61:e6:cb:12:4b:3d:73:6f:6b:49:
                    62:c5:3a:67:52:7f:36:1d:73:4c:13:9e:13:d5:3f:
                    8b:be:0f:7b:68:86:cd:f7:5e:e3:a8:01:53:c3:0b:
                    0a:42:e5:ef:f3:6f:cb:21:ec:e3:56:97:26:a6:92:
                    17:39:bf:ba:56:98:80:32:b5:c1:57:79:d9:59:69:
                    fc:df:42:1f:e3:d6:8c:ed:6b:6b:99:e5:02:bd:18:
                    a4:5c:f8:89:a2:0a:eb:a3:86:fa:ec:25:c7:8a:c8:
                    c7:13:39:f9:08:2d:a0:4a:70:0c:f3:20:2c:fb:bf:
                    a0:81:fa:73:6f:3a:29:2f:34:33:8d:8c:96:9c:8a:
                    a8:ab:25:72:5d:85:38:37:a0:ca:79:36:cc:11:d8:
                    c3:1a:f7:56:1b:94:77:e6:77:aa:97:c7:3a:8b:2e:
                    cb:cc:50:12:39:78:9b:1d:96:c8:0a:e8:68:7b:60:
                    ae:ab:65:5c:3e:0f:37:76:08:52:fd:99:01:4c:c8:
                    46:73:da:a9:d4:73:57:ad:40:81:58:0b:bc:f2:2a:
                    9d:7e:0e:84:18:60:57:42:ca:23:63:60:d4:f2:70:
                    65:95:f6:55:32:ae:f0:6b:6c:29:11:2e:2e:ed:2d:
                    5e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B6:DB:2D:AD:A8:27:4E:A7:EE:EE:87:ED:40:F1:0F:02:FA:5A:A4
            X509v3 Authority Key Identifier:
                keyid:03:DA:A9:B8:CC:93:8C:FD:95:AF:78:AA:1C:BA:A0:5B:5B:1A:B6:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/03DAA9B8CC938CFD95AF78AA1CBAA05B5B1AB6B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03DAA9B8CC938CFD95AF78AA1CBAA05B5B1AB6B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3132392e302f32342d3234203d3e20323731363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:14:25:d7:6d:de:15:b6:71:07:b7:ab:86:8c:c0:d9:99:d5:
         a8:96:c2:0f:74:d3:21:47:8d:f4:4f:d0:ae:b3:c0:b2:f5:82:
         6d:3d:3f:8f:55:6c:1f:da:a8:bc:2b:af:10:4c:5f:58:b9:c9:
         42:be:cc:9c:48:ac:8a:7a:cd:a6:8f:8a:4c:dd:40:e6:51:e7:
         4c:82:5f:e8:57:7a:c5:43:c8:f1:55:f8:b6:6d:f3:dd:22:45:
         8f:4f:b5:23:d9:66:84:37:3e:ef:c7:d6:dc:85:a8:ec:ef:c9:
         6b:16:d1:54:33:30:dd:ac:d9:f6:ee:af:1d:6c:e6:fa:59:68:
         b7:e3:39:e7:ec:93:56:ed:1b:95:9d:69:e8:0e:6c:c5:a4:bc:
         99:6b:9a:f4:23:70:2f:5e:84:8c:60:88:52:b4:5f:b2:3c:d2:
         e6:0f:14:8d:28:4c:16:7d:10:fa:79:52:14:93:ed:17:f6:6b:
         f2:93:20:0f:21:7a:72:80:6c:fd:5c:c5:8f:61:bc:8d:4a:da:
         8e:bb:2b:d8:f3:45:64:d1:54:4c:d5:03:41:28:a8:29:5e:34:
         0f:94:70:02:88:dd:23:29:49:d2:86:95:d5:35:2a:76:ed:b6:
         8e:c5:de:3b:a9:91:b9:d5:ab:c3:fc:e0:44:8b:4e:e1:da:6d:
         02:91:2f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:20 2024 by rpki-client on console-ams.rpki-client.org