Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3133312e302f32342d3234203d3e20323731363234.roa
File:                     3137372e37332e3133312e302f32342d3234203d3e20323731363234.roa (raw, json)
Hash identifier:          pIqs8H3NKbE/WX/D1CH7+r8RsUZo9DcDLDwt/oMnmio=
Subject key identifier:   5D:0F:DF:D7:37:FC:14:0D:1F:80:94:2A:82:6E:DE:96:84:7C:30:0B
Certificate issuer:       /CN=03DAA9B8CC938CFD95AF78AA1CBAA05B5B1AB6B0
Certificate serial:       0147393C94087009426C81389B97202016DCD3F5
Authority key identifier: 03:DA:A9:B8:CC:93:8C:FD:95:AF:78:AA:1C:BA:A0:5B:5B:1A:B6:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03DAA9B8CC938CFD95AF78AA1CBAA05B5B1AB6B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3133312e302f32342d3234203d3e20323731363234.roa
Signing time:             Tue 30 Apr 2024 17:51:33 +0000
ROA not before:           Tue 30 Apr 2024 17:46:33 +0000
ROA not after:            Tue 29 Apr 2025 17:51:33 +0000
asID:                     271624
IP address blocks:        177.73.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/03DAA9B8CC938CFD95AF78AA1CBAA05B5B1AB6B0.crl
                          rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/03DAA9B8CC938CFD95AF78AA1CBAA05B5B1AB6B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03DAA9B8CC938CFD95AF78AA1CBAA05B5B1AB6B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:47:39:3c:94:08:70:09:42:6c:81:38:9b:97:20:20:16:dc:d3:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03DAA9B8CC938CFD95AF78AA1CBAA05B5B1AB6B0
        Validity
            Not Before: Apr 30 17:46:33 2024 GMT
            Not After : Apr 29 17:51:33 2025 GMT
        Subject: CN=5D0FDFD737FC140D1F80942A826EDE96847C300B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8a:99:77:01:cb:fa:ad:8e:ba:11:17:3e:e3:
                    80:58:5e:3c:1f:67:5b:b5:45:c1:6d:18:bf:6c:f8:
                    fa:81:ca:22:b3:27:ae:f1:ed:a2:73:a2:08:a8:4d:
                    f9:a7:9d:27:46:c3:0f:71:de:53:0a:aa:d1:88:2a:
                    ca:12:04:94:67:fa:7d:33:f2:96:e0:ed:67:5c:d4:
                    5a:b1:5f:06:23:63:17:8f:9b:ba:32:8b:87:4d:31:
                    4a:ed:48:a7:b5:4d:73:e0:4f:e9:40:83:5c:e6:1f:
                    93:53:da:11:c8:c2:8a:a3:26:5c:b3:44:6d:5a:ab:
                    92:37:11:4c:af:5f:60:d2:34:cc:c3:87:34:c8:88:
                    c0:6c:cc:25:35:60:9d:a5:95:5d:92:ec:a9:2b:80:
                    07:dc:99:6e:3f:72:8c:47:85:a1:11:b3:f7:9f:c2:
                    16:75:da:43:1a:cf:c3:41:09:f2:5a:0b:34:b7:94:
                    18:3b:2a:f5:ff:96:9b:94:dc:77:d0:ff:95:2c:29:
                    2e:88:96:95:c1:7c:ca:4c:0c:0e:08:2d:5a:03:5d:
                    f6:6c:3c:b3:7b:d5:8b:fd:37:bd:02:08:52:59:d9:
                    86:0d:59:a2:e7:a7:7a:89:c6:4a:18:78:6a:87:90:
                    0e:b0:4b:88:da:82:a5:a0:e3:e7:31:6d:03:dd:96:
                    83:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:0F:DF:D7:37:FC:14:0D:1F:80:94:2A:82:6E:DE:96:84:7C:30:0B
            X509v3 Authority Key Identifier:
                keyid:03:DA:A9:B8:CC:93:8C:FD:95:AF:78:AA:1C:BA:A0:5B:5B:1A:B6:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/03DAA9B8CC938CFD95AF78AA1CBAA05B5B1AB6B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03DAA9B8CC938CFD95AF78AA1CBAA05B5B1AB6B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3133312e302f32342d3234203d3e20323731363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:5b:33:82:05:d7:ba:cc:28:de:73:66:53:21:db:e9:23:f7:
         6b:b5:e2:24:d3:3d:bc:94:5e:26:12:a5:28:b6:8a:a2:9f:b5:
         da:89:52:d7:eb:30:ee:d8:2a:07:89:bf:15:c9:07:90:5b:a2:
         7d:7e:fc:a4:db:81:eb:ce:1c:89:ae:f6:0f:66:6f:80:9d:00:
         89:30:fc:2f:83:1e:b5:28:bb:aa:de:58:5f:17:73:b0:96:d1:
         fa:7f:34:3f:21:0e:8d:7f:b5:07:77:93:a2:10:97:2d:2b:f0:
         aa:71:c0:70:62:19:61:68:02:34:5f:58:19:41:c8:f3:c5:32:
         2d:76:f0:e0:64:0e:cc:66:20:09:e3:33:76:9f:08:b4:30:ee:
         b3:73:d3:e4:d4:8b:77:5d:72:9f:42:9e:1b:ab:45:9e:5f:c7:
         26:60:19:a5:6f:dc:5b:b4:83:20:a8:86:f0:fc:be:ce:92:96:
         e4:6f:b3:dc:02:fb:90:80:b7:95:62:d3:f1:84:78:75:1a:c0:
         2e:20:b7:46:16:c3:98:05:bd:73:ac:c1:4b:7c:d3:99:cb:48:
         d5:91:a8:d0:3d:f8:c7:b1:15:cc:ef:29:35:59:dc:49:e8:d1:
         b9:e4:0e:6c:81:c9:3c:82:ad:77:26:72:3c:8e:2b:21:0d:a7:
         20:f2:aa:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:11 2024 by rpki-client on console-fra.rpki-client.org