Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FhaukURqdx1a7pMk7fBqDXVJC72PRLrnGHyGSbaM68g3/0/3137372e37332e3234302e302f32312d3332203d3e20323632353537.roa
File:                     3137372e37332e3234302e302f32312d3332203d3e20323632353537.roa (raw, json)
Hash identifier:          Eij8s5XnK8b35iRyxAaVP+UskkHPZDeIXSdHs2R9264=
Subject key identifier:   A8:29:6A:88:0B:79:DD:77:E3:E0:40:EA:36:97:E8:C8:85:8D:9D:42
Certificate issuer:       /CN=EAC3E8567DB2ABB37844299A31DDE6917346C1BE
Certificate serial:       53C02389A4CD4D56D6B8E54B596C321F0BE0DDB4
Authority key identifier: EA:C3:E8:56:7D:B2:AB:B3:78:44:29:9A:31:DD:E6:91:73:46:C1:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC3E8567DB2ABB37844299A31DDE6917346C1BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FhaukURqdx1a7pMk7fBqDXVJC72PRLrnGHyGSbaM68g3/0/3137372e37332e3234302e302f32312d3332203d3e20323632353537.roa
Signing time:             Tue 24 Sep 2024 12:33:45 +0000
ROA not before:           Tue 24 Sep 2024 12:28:45 +0000
ROA not after:            Tue 23 Sep 2025 12:33:45 +0000
asID:                     262557
IP address blocks:        177.73.240.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FhaukURqdx1a7pMk7fBqDXVJC72PRLrnGHyGSbaM68g3/0/EAC3E8567DB2ABB37844299A31DDE6917346C1BE.crl
                          rsync://rpki-repo.registro.br/repo/FhaukURqdx1a7pMk7fBqDXVJC72PRLrnGHyGSbaM68g3/0/EAC3E8567DB2ABB37844299A31DDE6917346C1BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC3E8567DB2ABB37844299A31DDE6917346C1BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 12:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c0:23:89:a4:cd:4d:56:d6:b8:e5:4b:59:6c:32:1f:0b:e0:dd:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC3E8567DB2ABB37844299A31DDE6917346C1BE
        Validity
            Not Before: Sep 24 12:28:45 2024 GMT
            Not After : Sep 23 12:33:45 2025 GMT
        Subject: CN=A8296A880B79DD77E3E040EA3697E8C8858D9D42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:da:84:6a:50:08:3f:1e:d6:ad:46:c5:e3:d6:
                    10:ae:c2:4c:52:c0:80:f9:fa:24:69:17:68:b6:55:
                    14:55:ef:c2:ec:6c:3c:30:b0:6f:27:30:44:0d:32:
                    a7:53:5c:4e:ff:66:b2:05:46:7c:d3:89:be:fd:fd:
                    b2:70:eb:1f:d8:e4:47:c6:ee:d1:d8:42:1f:0d:a0:
                    70:ac:ea:68:68:a5:ef:5c:98:c8:aa:e1:97:92:79:
                    8e:05:15:5e:5c:a8:4e:f2:d4:b0:a0:4f:b4:00:52:
                    48:b8:a4:e9:9a:37:a7:5b:0e:ad:1f:ed:d1:67:f7:
                    08:00:56:8c:5a:66:5c:9f:43:00:81:b5:96:9b:58:
                    7e:76:19:de:2e:ff:d6:c3:0e:5b:5e:cc:82:69:00:
                    4f:ff:c6:a0:7f:7b:44:c0:68:7d:25:3e:31:82:fb:
                    78:ea:71:cd:66:36:7c:23:e4:9d:9c:e3:f9:13:11:
                    ef:be:97:e6:a2:c9:24:37:64:06:5d:0d:2d:e5:4b:
                    59:80:6a:52:94:7b:63:1a:bd:82:f1:9b:c3:37:c3:
                    76:af:86:62:94:87:21:0f:25:6e:4a:1e:0b:3d:1e:
                    20:de:8b:a0:24:f6:28:de:31:61:a9:1b:88:3e:ef:
                    99:20:b4:e3:d7:a9:d1:c9:e3:2f:ac:4f:0b:83:d4:
                    c1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:29:6A:88:0B:79:DD:77:E3:E0:40:EA:36:97:E8:C8:85:8D:9D:42
            X509v3 Authority Key Identifier:
                keyid:EA:C3:E8:56:7D:B2:AB:B3:78:44:29:9A:31:DD:E6:91:73:46:C1:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FhaukURqdx1a7pMk7fBqDXVJC72PRLrnGHyGSbaM68g3/0/EAC3E8567DB2ABB37844299A31DDE6917346C1BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC3E8567DB2ABB37844299A31DDE6917346C1BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhaukURqdx1a7pMk7fBqDXVJC72PRLrnGHyGSbaM68g3/0/3137372e37332e3234302e302f32312d3332203d3e20323632353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7d:c5:e1:20:ef:76:61:97:d9:a8:e2:64:a9:de:76:07:4f:7c:
         7b:3e:07:70:eb:25:b6:3d:73:7c:47:e6:8c:b2:22:fb:ad:06:
         59:25:36:d0:57:3c:b7:8a:4e:b4:d8:8e:b9:23:cc:20:5c:c5:
         8e:4a:85:e7:d0:2f:33:18:74:6d:5a:c4:bd:ab:88:72:f7:88:
         3f:2a:f3:59:c5:b7:a2:a3:bf:7a:d3:e8:e4:93:32:bf:ea:bf:
         37:c5:4c:12:3b:3c:f3:09:bb:06:bf:e5:49:f8:f5:5f:1d:84:
         44:3a:75:62:93:9e:12:4a:75:c6:d5:2b:3d:04:3f:4b:aa:3c:
         85:13:5b:3f:52:ca:7b:c1:4b:e5:45:cb:8c:7f:d0:4b:7e:f2:
         e7:c5:54:a2:ef:ea:df:5e:72:dc:bd:68:83:f3:cc:e9:5b:fd:
         04:ab:b6:1d:ef:15:1e:56:a7:d4:77:6b:4d:b0:2b:4c:2f:9d:
         4b:62:4f:5c:cb:f7:17:bd:0f:65:72:61:66:13:9c:5f:9d:0a:
         de:cb:a4:32:d4:62:fb:b1:e0:46:23:a7:77:08:51:8a:bd:87:
         91:2e:e7:0a:d1:d7:6b:0f:a7:a3:0b:13:52:46:79:e0:cc:55:
         2d:9d:f2:50:86:bb:99:65:a1:39:a3:c7:ad:56:0c:60:6f:92:
         dc:47:59:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 12:57:37 2024 by rpki-client on console-fra.rpki-client.org