Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/3137372e37342e3136342e302f32322d3234203d3e20323731303533.roa
File:                     3137372e37342e3136342e302f32322d3234203d3e20323731303533.roa (raw, json)
Hash identifier:          1ew1bHxThQo4THso1qqJCsLamw7MZPbnuhFWOIDRY9s=
Subject key identifier:   B0:6B:14:A1:98:56:C5:88:F0:83:E4:26:25:65:BD:8D:4A:4C:83:F3
Certificate issuer:       /CN=1CFA53FD7928C175C7432E73DD1472955E5A35FD
Certificate serial:       42AC6AEC7581DF7F93058472C5FE7DFA5B124715
Authority key identifier: 1C:FA:53:FD:79:28:C1:75:C7:43:2E:73:DD:14:72:95:5E:5A:35:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CFA53FD7928C175C7432E73DD1472955E5A35FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/3137372e37342e3136342e302f32322d3234203d3e20323731303533.roa
Signing time:             Tue 03 Sep 2024 20:00:57 +0000
ROA not before:           Tue 03 Sep 2024 19:55:57 +0000
ROA not after:            Tue 02 Sep 2025 20:00:57 +0000
asID:                     271053
IP address blocks:        177.74.164.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.crl
                          rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CFA53FD7928C175C7432E73DD1472955E5A35FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ac:6a:ec:75:81:df:7f:93:05:84:72:c5:fe:7d:fa:5b:12:47:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CFA53FD7928C175C7432E73DD1472955E5A35FD
        Validity
            Not Before: Sep  3 19:55:57 2024 GMT
            Not After : Sep  2 20:00:57 2025 GMT
        Subject: CN=B06B14A19856C588F083E4262565BD8D4A4C83F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:23:f5:22:38:9c:a6:aa:fa:cc:f0:34:84:88:
                    75:98:01:f8:dc:b3:7c:0a:71:c7:e7:30:17:55:8e:
                    5e:b9:12:df:7d:a2:89:47:41:ad:4b:43:1b:3b:63:
                    69:a2:91:f7:b5:6b:79:ec:9e:12:a7:38:ba:74:20:
                    b9:ac:c1:8b:73:2c:24:a1:3a:73:a1:a3:8b:73:0f:
                    a6:73:63:74:6c:d6:f3:ea:87:05:32:d7:b8:a0:6c:
                    f1:74:d0:e1:88:69:8d:bd:ce:b6:97:25:aa:03:e2:
                    1c:02:1a:e8:a2:e2:f4:e2:1a:cf:e7:05:0f:05:15:
                    08:f4:d2:26:57:52:27:ab:94:5b:d9:db:ea:f2:a9:
                    74:03:d0:51:10:7a:77:c9:76:5b:b7:7a:60:b8:61:
                    c2:09:8e:a5:f9:61:c1:e5:a9:52:aa:67:ed:b3:d4:
                    12:2d:04:31:b4:f2:93:7f:ac:7a:02:da:4f:18:ef:
                    be:18:de:ee:2f:02:0a:96:cd:86:b1:7b:f1:ee:37:
                    ca:31:00:93:33:76:65:55:5c:9e:fe:9b:7f:93:a4:
                    1c:b4:8d:c0:74:2f:66:8e:73:b8:7a:2a:be:39:cd:
                    a0:de:44:de:9e:66:af:65:d4:e1:4b:8d:09:70:c3:
                    60:a3:61:80:a5:d3:8b:55:23:96:94:bc:1f:29:4c:
                    9c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:6B:14:A1:98:56:C5:88:F0:83:E4:26:25:65:BD:8D:4A:4C:83:F3
            X509v3 Authority Key Identifier:
                keyid:1C:FA:53:FD:79:28:C1:75:C7:43:2E:73:DD:14:72:95:5E:5A:35:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/1CFA53FD7928C175C7432E73DD1472955E5A35FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CFA53FD7928C175C7432E73DD1472955E5A35FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhgSjKzTPP3zymzYjDg74Att3k1S6iMJbknsdwCNp1mQ/0/3137372e37342e3136342e302f32322d3234203d3e20323731303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:f9:0b:c6:97:0e:13:e6:9a:d5:6f:42:ae:da:bd:4b:ae:2a:
         eb:ef:b0:37:c1:ca:8c:db:12:3a:7e:7a:58:da:81:e1:ff:50:
         61:fd:a5:c7:a5:8b:19:73:6c:cc:a1:df:c0:d7:c2:db:67:65:
         64:38:d4:fc:fb:99:7a:46:d0:56:07:26:a4:6e:92:82:2b:b3:
         db:dd:41:73:66:d6:f1:14:3d:ad:d3:69:b9:bb:33:78:07:ce:
         16:e5:e4:d4:50:14:fc:1e:00:f6:23:94:d4:67:18:31:91:5d:
         b2:4f:89:a5:7d:d8:e5:77:0e:d1:ae:e2:b8:b9:be:81:07:39:
         4a:d2:0c:fd:a2:1d:23:0c:be:56:46:4e:6e:74:ca:27:81:c0:
         e8:1a:c9:db:d2:ae:36:ce:d6:ac:86:96:88:70:7c:cd:88:92:
         29:7b:45:42:a8:d9:0d:de:61:b1:dc:b9:8b:ec:85:eb:84:2b:
         58:9a:f2:af:47:c5:20:82:d3:2d:fb:2a:26:5d:eb:7f:5d:8e:
         f6:50:d9:f1:97:df:9e:cb:b1:3b:26:9e:99:7d:92:20:56:22:
         fd:f2:e0:36:c2:01:4e:b4:f6:5f:4c:5c:db:da:86:11:ca:48:
         e8:0a:0f:33:46:f7:46:fb:46:fa:28:93:db:50:63:7a:c4:a9:
         da:e6:69:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:58 2024 by rpki-client on console-fra.rpki-client.org