Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/1/3137372e3132342e3135322e302f32322d3332203d3e20323730353431.roa
File:                     3137372e3132342e3135322e302f32322d3332203d3e20323730353431.roa (raw, json)
Hash identifier:          NbTfn9LdAkEspVud67W23Zptlfa9/dUTAK5yFJlfliI=
Subject key identifier:   9B:37:66:5F:EB:E9:15:FD:8B:06:BB:95:DC:C9:E4:76:82:8C:E9:9A
Certificate issuer:       /CN=6C8321784393DAD7FEDAEA5642D0A1168F801373
Certificate serial:       753EE3757DEE51D2B0172598D85ED49B28440B79
Authority key identifier: 6C:83:21:78:43:93:DA:D7:FE:DA:EA:56:42:D0:A1:16:8F:80:13:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C8321784393DAD7FEDAEA5642D0A1168F801373.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/1/3137372e3132342e3135322e302f32322d3332203d3e20323730353431.roa
Signing time:             Wed 03 Apr 2024 23:01:13 +0000
ROA not before:           Wed 03 Apr 2024 22:56:13 +0000
ROA not after:            Wed 02 Apr 2025 23:01:13 +0000
asID:                     270541
IP address blocks:        177.124.152.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/1/6C8321784393DAD7FEDAEA5642D0A1168F801373.crl
                          rsync://rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/1/6C8321784393DAD7FEDAEA5642D0A1168F801373.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C8321784393DAD7FEDAEA5642D0A1168F801373.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:3e:e3:75:7d:ee:51:d2:b0:17:25:98:d8:5e:d4:9b:28:44:0b:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C8321784393DAD7FEDAEA5642D0A1168F801373
        Validity
            Not Before: Apr  3 22:56:13 2024 GMT
            Not After : Apr  2 23:01:13 2025 GMT
        Subject: CN=9B37665FEBE915FD8B06BB95DCC9E476828CE99A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b1:5e:7e:62:bc:3c:30:43:29:93:87:54:3d:
                    b8:69:05:75:78:f1:81:6d:17:b3:6d:72:f5:3e:12:
                    5b:93:a2:1e:ec:07:84:07:2a:21:6b:d8:dc:29:8d:
                    0f:51:69:67:da:af:52:0e:7b:1c:d4:24:c6:93:a4:
                    54:06:6d:37:5e:eb:f0:eb:34:18:2e:07:00:8c:fa:
                    ce:f8:83:52:60:79:11:fc:ad:0c:a3:66:65:ec:54:
                    35:3d:2f:29:7e:c7:22:0d:4b:7d:d4:4e:e4:d6:03:
                    0f:a1:ed:cc:76:ef:f0:61:8b:64:62:4c:0f:a6:ca:
                    7c:6e:b0:02:00:90:0d:ef:b0:60:c9:56:6c:74:78:
                    a2:b8:f2:8a:e8:c1:3e:a2:70:c4:e2:a6:a4:22:34:
                    ce:05:07:88:90:d5:89:45:44:bf:0c:95:ae:61:9c:
                    72:84:96:e9:cf:7d:ad:4e:8e:cc:5a:28:dd:3a:81:
                    2b:94:d7:c3:29:71:01:16:8d:fd:c0:51:3c:d9:85:
                    17:75:33:25:e7:bc:d6:07:ba:56:70:56:a2:19:3f:
                    09:ba:d4:38:ed:25:fc:48:bc:11:62:a4:9b:dc:0a:
                    f7:9b:7b:c6:09:65:5b:2b:bc:dd:e2:9a:f0:98:6e:
                    22:00:b0:e5:d2:69:7e:56:fc:74:fc:2b:76:56:6d:
                    32:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:37:66:5F:EB:E9:15:FD:8B:06:BB:95:DC:C9:E4:76:82:8C:E9:9A
            X509v3 Authority Key Identifier:
                keyid:6C:83:21:78:43:93:DA:D7:FE:DA:EA:56:42:D0:A1:16:8F:80:13:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/1/6C8321784393DAD7FEDAEA5642D0A1168F801373.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C8321784393DAD7FEDAEA5642D0A1168F801373.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/1/3137372e3132342e3135322e302f32322d3332203d3e20323730353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:ad:ce:85:bf:89:a1:68:d1:75:04:46:54:d9:38:cb:ff:dc:
         ce:84:da:d7:9d:7c:48:51:c5:fd:a4:0f:f4:d8:a5:f5:82:d1:
         84:d4:8f:0c:75:60:78:4e:41:4d:de:52:a8:e4:57:ec:a2:ff:
         4e:d6:c6:4e:35:ff:05:2e:49:8b:97:35:7d:4f:99:60:e7:d5:
         a8:15:7e:1f:2c:68:da:9d:87:ef:75:dc:54:8b:55:25:92:fd:
         f8:bb:c9:87:b7:2e:58:b6:19:e8:18:f8:4c:0e:f5:41:73:e1:
         d0:23:27:fa:42:8a:5b:fc:95:70:69:42:8e:d0:7c:c2:a9:a2:
         69:7a:47:00:58:f5:90:6d:f5:f7:51:f9:1e:05:2a:d3:1c:e7:
         cb:dd:6b:29:e5:7a:9a:4b:5f:ea:93:c1:18:fc:81:c7:5f:bd:
         5c:62:00:da:96:35:cf:e8:16:02:40:5f:c3:31:0a:39:24:a4:
         e0:77:17:b0:14:ce:19:62:c0:2d:0a:e5:8e:7b:13:d6:2b:13:
         10:85:e0:0d:72:8e:78:aa:d5:b9:05:06:c1:86:77:1a:90:0c:
         9b:ae:bb:70:70:33:fe:3a:74:81:9b:6b:5b:2e:91:96:5e:37:
         19:1a:73:3e:8a:25:f7:84:6a:b2:e6:8d:16:72:a1:3f:ff:7e:
         20:73:8d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 09:16:39 2024 by rpki-client on console-fra.rpki-client.org