Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/1/3137372e3133372e3137362e302f32302d3234203d3e203533313633.roa
File:                     3137372e3133372e3137362e302f32302d3234203d3e203533313633.roa (raw, json)
Hash identifier:          XspAbgh/BUHyWtgzsAsbxpmS6PnzWTNHBFRvBjFIIgw=
Subject key identifier:   0E:2D:56:96:31:8B:B7:D9:02:1F:D9:42:06:39:BD:3A:5A:39:43:56
Certificate issuer:       /CN=B0B1DB989286ABAE004F75D11270419342F1D01A
Certificate serial:       6DD11CD4DBFD1F87814BDFA63FB447554EA5718F
Authority key identifier: B0:B1:DB:98:92:86:AB:AE:00:4F:75:D1:12:70:41:93:42:F1:D0:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B1DB989286ABAE004F75D11270419342F1D01A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/1/3137372e3133372e3137362e302f32302d3234203d3e203533313633.roa
Signing time:             Fri 05 Apr 2024 03:26:07 +0000
ROA not before:           Fri 05 Apr 2024 03:21:07 +0000
ROA not after:            Fri 04 Apr 2025 03:26:07 +0000
asID:                     53163
IP address blocks:        177.137.176.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/1/B0B1DB989286ABAE004F75D11270419342F1D01A.crl
                          rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/1/B0B1DB989286ABAE004F75D11270419342F1D01A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B1DB989286ABAE004F75D11270419342F1D01A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 15:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:d1:1c:d4:db:fd:1f:87:81:4b:df:a6:3f:b4:47:55:4e:a5:71:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0B1DB989286ABAE004F75D11270419342F1D01A
        Validity
            Not Before: Apr  5 03:21:07 2024 GMT
            Not After : Apr  4 03:26:07 2025 GMT
        Subject: CN=0E2D5696318BB7D9021FD9420639BD3A5A394356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:42:56:77:e3:45:d5:cf:bb:b2:e8:c7:2c:7c:
                    86:0a:e6:2a:b6:94:bf:c0:90:62:24:4f:6a:6f:fb:
                    ba:29:d7:4c:f9:ce:c4:79:33:30:9b:e4:5b:df:c1:
                    55:6d:02:1c:c6:e0:62:bc:f1:c4:4e:84:00:e0:71:
                    a8:be:73:51:1c:13:e5:fb:92:5f:28:27:08:78:6c:
                    d2:61:a3:24:58:f7:ad:61:4c:71:58:8d:83:93:8f:
                    da:01:40:31:55:a8:be:56:fe:5b:64:b4:31:45:94:
                    4c:f0:03:34:68:bb:03:a6:1c:ca:2a:97:16:3d:fe:
                    56:d9:e1:a3:7a:48:91:f5:64:be:0e:22:4a:98:24:
                    b5:12:2b:ca:ba:13:89:de:45:77:44:55:01:c9:f7:
                    1f:bc:db:69:f8:ce:de:1f:3d:72:14:6d:ee:d9:55:
                    1d:0a:79:4e:0f:7a:15:9d:67:56:e8:81:62:11:41:
                    10:71:0c:b0:dd:66:07:a1:d9:0f:78:6c:90:96:b5:
                    3d:43:96:7c:fb:db:81:44:58:b7:41:e8:95:57:50:
                    ba:5f:1c:a8:0c:a7:5f:08:89:3f:14:54:08:03:1b:
                    6f:3f:d5:1f:34:ca:4c:de:62:4f:99:27:65:49:fd:
                    d9:6e:fc:a5:4d:f0:9d:18:bb:07:9e:60:0e:40:57:
                    98:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:2D:56:96:31:8B:B7:D9:02:1F:D9:42:06:39:BD:3A:5A:39:43:56
            X509v3 Authority Key Identifier:
                keyid:B0:B1:DB:98:92:86:AB:AE:00:4F:75:D1:12:70:41:93:42:F1:D0:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/1/B0B1DB989286ABAE004F75D11270419342F1D01A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0B1DB989286ABAE004F75D11270419342F1D01A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fp6TmRBpWomiaLpVfwe9MP21GxpXBisJMDw5dVZYE5it/1/3137372e3133372e3137362e302f32302d3234203d3e203533313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6e:ca:54:6c:fe:c5:5b:23:05:66:8c:e3:dc:83:91:93:45:ba:
         71:c9:bd:1a:68:12:73:0b:ad:33:70:5c:34:49:5b:31:8b:ee:
         3b:bc:84:cd:44:6d:f8:56:09:7e:ab:4a:b6:69:3e:ac:c5:09:
         f9:1a:ba:c1:26:3f:15:2d:bd:a3:fb:e8:7e:ad:42:b3:e2:33:
         b2:67:0a:02:ac:5c:ea:96:e1:cb:e4:48:61:ea:6f:7a:a0:2c:
         26:9b:e8:46:c5:d7:ee:8d:4a:c3:da:30:b9:5f:f6:b0:b6:0e:
         bb:5e:61:9f:de:0f:5f:98:ec:af:33:b4:1d:6d:ca:82:b1:11:
         93:3e:02:5a:c4:31:1f:9c:33:c1:81:f5:81:85:62:eb:d1:29:
         8a:68:df:74:80:a7:56:eb:d8:a4:81:c8:cc:d0:bf:49:94:42:
         fa:9a:7c:fd:37:b2:e7:e4:1c:29:f1:47:a8:32:b3:89:13:fd:
         df:ea:c0:b4:c7:3a:e6:45:d2:58:e5:21:69:c9:62:f2:10:66:
         bc:f1:7c:1a:a2:11:87:39:52:06:88:fb:0a:1e:11:d4:02:6b:
         e9:97:ca:ab:20:e0:97:38:2b:a3:ef:91:85:88:21:92:2d:df:
         58:0a:92:6d:14:33:d5:ab:16:85:22:67:70:ca:c0:7a:02:4a:
         c2:b3:3e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:29 2024 by rpki-client on console-ams.rpki-client.org