Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3137372e33392e3230372e302f32342d3234203d3e203532373830.roa
File:                     3137372e33392e3230372e302f32342d3234203d3e203532373830.roa (raw, json)
Hash identifier:          KrHuqr6AHt3co514pxO1g89rjwAGIpgKoi28zF4J8dc=
Subject key identifier:   E7:F1:D5:63:C4:BC:7A:4F:8F:09:75:D0:76:B1:C7:F4:FD:04:35:0B
Certificate issuer:       /CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
Certificate serial:       3811E95A75869E5D3203860654DF5F906BD090DC
Authority key identifier: 75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3137372e33392e3230372e302f32342d3234203d3e203532373830.roa
Signing time:             Thu 04 Apr 2024 14:56:22 +0000
ROA not before:           Thu 04 Apr 2024 14:51:22 +0000
ROA not after:            Thu 03 Apr 2025 14:56:22 +0000
asID:                     52780
IP address blocks:        177.39.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl
                          rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:11:e9:5a:75:86:9e:5d:32:03:86:06:54:df:5f:90:6b:d0:90:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75CE80B0487A970663EA1E04C2CDBEFF72B104EA
        Validity
            Not Before: Apr  4 14:51:22 2024 GMT
            Not After : Apr  3 14:56:22 2025 GMT
        Subject: CN=E7F1D563C4BC7A4F8F0975D076B1C7F4FD04350B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:af:64:d2:51:7c:b5:ff:06:04:f8:9f:b9:8e:
                    d0:b3:42:5b:d4:9f:cf:c4:f4:2d:30:11:5a:df:db:
                    d1:d0:6e:6c:b5:df:80:40:d9:0a:f5:fd:47:46:c1:
                    b1:d8:11:84:d1:d1:34:97:62:77:0c:8b:56:45:42:
                    53:7c:6c:94:84:b5:e6:67:83:1c:e0:d4:e4:20:95:
                    01:2d:75:a4:87:d9:6e:70:e0:02:44:ff:81:f8:43:
                    b6:1d:3e:22:e1:7f:98:35:bd:5f:d9:a0:b1:e3:83:
                    b6:7c:11:44:01:20:9d:c6:b2:2a:c7:86:b0:e1:cc:
                    66:f0:a5:fd:59:73:e9:05:24:ab:ad:d2:9f:a3:60:
                    28:83:30:ca:19:ea:33:b9:b6:ee:df:82:2e:0c:e5:
                    a5:7e:78:de:fa:76:1e:77:85:3b:1e:ac:8e:4c:28:
                    ac:27:8e:fc:24:ac:c1:bd:ab:c4:55:62:29:d3:23:
                    af:c9:ec:12:57:b8:b1:65:23:e1:6e:21:11:ba:e3:
                    16:99:8b:9e:c4:13:3a:97:3c:bc:b7:a2:ec:24:f0:
                    47:5c:f5:a3:6c:20:50:dc:4e:29:0a:7d:24:03:1a:
                    8d:77:71:5d:1f:87:b3:bd:02:ef:f2:dc:11:e3:2b:
                    b5:ef:4b:73:db:7e:d9:f6:c8:c0:e6:8c:8e:6f:e2:
                    83:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F1:D5:63:C4:BC:7A:4F:8F:09:75:D0:76:B1:C7:F4:FD:04:35:0B
            X509v3 Authority Key Identifier:
                keyid:75:CE:80:B0:48:7A:97:06:63:EA:1E:04:C2:CD:BE:FF:72:B1:04:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75CE80B0487A970663EA1E04C2CDBEFF72B104EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/1/3137372e33392e3230372e302f32342d3234203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:b8:f5:a0:c3:3f:2b:e5:b7:16:cc:31:6b:be:bb:a8:0a:87:
         d4:60:72:ee:49:0c:f4:20:90:d6:11:b7:46:8f:75:2f:98:c3:
         67:bf:82:06:5b:ec:54:11:43:40:e9:74:bd:c3:f6:cb:27:28:
         e4:1d:19:81:2d:7f:3d:08:d0:b5:05:64:01:bb:0d:71:bd:59:
         d1:b8:88:f8:8f:ad:30:dd:7c:ba:33:7a:84:87:fe:51:55:33:
         b7:4e:75:4e:81:a0:a4:f6:0a:3d:9a:cf:ad:13:94:a3:7e:61:
         65:00:2a:2d:6e:71:0f:42:27:25:f2:1d:01:4f:9c:a5:81:a8:
         47:7b:b8:59:17:bf:7a:e5:0e:91:ee:60:f5:13:3a:83:7c:54:
         43:b2:fd:95:8e:e1:f4:21:42:d2:65:3b:a5:a7:5a:2d:17:a2:
         4b:f1:e9:44:8c:58:6e:e9:fd:7f:f5:97:16:b6:14:34:ed:dd:
         b5:42:96:7b:47:ab:86:f8:d3:f1:fc:1a:e2:86:a7:b5:f6:74:
         d3:d7:31:e1:51:d3:03:02:54:0d:e0:1e:5b:15:e1:02:e2:cf:
         04:a2:9b:c6:07:ff:33:ec:6c:b3:4c:db:da:95:19:a6:38:13:
         a7:74:29:d5:fe:0c:63:c1:47:fe:77:b4:30:ed:c6:f1:c7:2e:
         84:63:fb:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:51 2024 by rpki-client on console-ams.rpki-client.org