Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3137372e33392e3230352e302f32342d3234203d3e203532373830.roa
File:                     3137372e33392e3230352e302f32342d3234203d3e203532373830.roa (raw, json)
Hash identifier:          mgy1+rORbaysBwsrI8lJh1elE+h6DLzVxISlqJXtZSw=
Subject key identifier:   A6:2D:14:48:E9:DB:34:03:41:C3:CA:14:AD:E7:D8:D5:35:3A:56:06
Certificate issuer:       /CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
Certificate serial:       60C91F1066D1079ACF99BEF3AF329481D6F81201
Authority key identifier: 75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3137372e33392e3230352e302f32342d3234203d3e203532373830.roa
Signing time:             Thu 04 Apr 2024 14:56:22 +0000
ROA not before:           Thu 04 Apr 2024 14:51:22 +0000
ROA not after:            Thu 03 Apr 2025 14:56:22 +0000
asID:                     52780
IP address blocks:        177.39.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl
                          rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c9:1f:10:66:d1:07:9a:cf:99:be:f3:af:32:94:81:d6:f8:12:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
        Validity
            Not Before: Apr  4 14:51:22 2024 GMT
            Not After : Apr  3 14:56:22 2025 GMT
        Subject: CN=A62D1448E9DB340341C3CA14ADE7D8D5353A5606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e2:d5:c8:b5:16:13:4d:9d:13:a5:a8:59:24:
                    0a:c3:1f:4a:e3:52:07:aa:c3:a1:5d:31:c4:e9:df:
                    8e:8f:b2:7c:24:5e:89:14:06:08:86:34:fc:0e:d4:
                    71:88:36:ee:42:b4:de:74:0c:c2:bd:c6:1c:89:f8:
                    6a:9d:f2:44:83:40:ce:c1:6d:4c:d6:58:a4:ca:bc:
                    93:0b:db:31:ba:d2:27:ad:c4:7d:ba:0d:80:03:a4:
                    cb:81:f7:31:3c:1b:e9:1d:09:76:69:69:68:4c:2b:
                    1b:30:f7:ab:55:da:5b:b2:22:89:5e:b6:d0:1a:30:
                    7e:0c:a0:ff:d5:9f:e2:79:72:cc:5b:5f:97:79:26:
                    79:9d:5a:32:22:da:ca:56:f4:d5:1c:12:03:6b:a1:
                    f3:f4:db:6a:58:1e:35:c7:b7:3f:63:92:20:96:e4:
                    76:0f:d7:a5:2e:ce:66:9c:77:79:04:c8:4d:bd:04:
                    5c:4f:61:e6:47:03:01:e1:76:c8:ac:a2:ee:e4:e0:
                    20:3d:a0:39:a5:7e:be:d5:7c:93:95:dc:4e:b1:92:
                    1e:18:b5:bc:90:96:86:c3:73:47:0f:fc:00:37:04:
                    bb:8a:51:41:ee:89:5a:d3:06:27:d7:bb:08:19:dd:
                    b6:04:5b:6f:92:5b:72:41:c9:64:a9:df:45:1e:bd:
                    1a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2D:14:48:E9:DB:34:03:41:C3:CA:14:AD:E7:D8:D5:35:3A:56:06
            X509v3 Authority Key Identifier:
                keyid:75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3137372e33392e3230352e302f32342d3234203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:45:4f:82:0f:24:c9:65:54:4f:83:b3:fe:d7:16:b6:a6:ac:
         88:9b:6b:93:9a:54:ff:08:9a:ed:6a:5d:d4:37:48:e2:2f:95:
         2f:3a:9f:1c:33:74:89:dc:03:85:82:fc:05:2c:2e:b7:df:05:
         1a:a8:b3:2a:21:b2:85:6e:f7:56:4d:dc:a3:cd:a9:9a:3f:00:
         99:06:50:ae:9e:fd:19:bd:7f:aa:06:68:f9:f6:34:64:c6:d0:
         e2:30:70:c8:80:0d:d7:27:d6:b2:68:dd:40:5a:9d:23:ea:93:
         a7:bf:a9:1a:33:0b:aa:f7:01:45:85:f8:73:df:a1:94:aa:50:
         6b:78:d7:da:23:5f:63:96:59:f8:2e:4d:eb:0f:05:23:68:ad:
         ec:8c:11:6a:04:a1:ee:f2:05:ff:9e:d1:f5:03:a0:96:df:06:
         e5:6f:cd:d6:47:ec:87:8b:6c:ac:9f:b3:66:92:d0:2f:fb:48:
         e3:56:05:b3:bb:14:80:d1:22:da:49:ed:8e:c2:d8:a4:43:a1:
         b9:28:9e:7a:97:24:71:a9:96:ec:05:40:50:35:85:25:85:2a:
         d1:d3:36:5f:70:99:ae:f0:bc:6e:25:c6:d5:83:bb:74:e6:74:
         74:22:24:a2:96:2c:45:80:23:06:07:06:70:37:b4:51:46:9f:
         cd:87:98:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:48:06 2024 by rpki-client on console-ams.rpki-client.org