Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/1/3137372e37332e34382e302f32312d3234203d3e20323632353635.roa
File:                     3137372e37332e34382e302f32312d3234203d3e20323632353635.roa (raw, json)
Hash identifier:          0R7C5yIx08MMopOoALsZZYv3bllgfaA7OMQWve8oPoA=
Subject key identifier:   46:0B:16:3F:17:01:FC:EA:2D:1A:58:B2:A1:53:73:C9:AF:55:F2:8F
Certificate issuer:       /CN=88E26E0285FA89F0727C6A0265CEE4C1D33E3B08
Certificate serial:       0DF04F14C15DDDC7DD69025156A5A6576624A5D1
Authority key identifier: 88:E2:6E:02:85:FA:89:F0:72:7C:6A:02:65:CE:E4:C1:D3:3E:3B:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88E26E0285FA89F0727C6A0265CEE4C1D33E3B08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/1/3137372e37332e34382e302f32312d3234203d3e20323632353635.roa
Signing time:             Wed 03 Apr 2024 22:50:24 +0000
ROA not before:           Wed 03 Apr 2024 22:45:24 +0000
ROA not after:            Wed 02 Apr 2025 22:50:24 +0000
asID:                     262565
IP address blocks:        177.73.48.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/1/88E26E0285FA89F0727C6A0265CEE4C1D33E3B08.crl
                          rsync://rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/1/88E26E0285FA89F0727C6A0265CEE4C1D33E3B08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88E26E0285FA89F0727C6A0265CEE4C1D33E3B08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:15:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f0:4f:14:c1:5d:dd:c7:dd:69:02:51:56:a5:a6:57:66:24:a5:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88E26E0285FA89F0727C6A0265CEE4C1D33E3B08
        Validity
            Not Before: Apr  3 22:45:24 2024 GMT
            Not After : Apr  2 22:50:24 2025 GMT
        Subject: CN=460B163F1701FCEA2D1A58B2A15373C9AF55F28F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8c:1b:91:47:d5:73:1f:02:84:4c:b2:a6:e0:
                    18:11:38:89:32:87:03:e7:02:6a:82:71:4b:39:02:
                    5b:23:07:be:cc:76:2a:9b:b1:33:b7:60:e0:54:45:
                    58:f2:ab:37:9d:96:76:bd:64:71:c7:15:7f:6b:99:
                    bd:3f:48:11:74:9f:fb:f4:6e:2a:da:20:a2:4f:36:
                    4a:8d:ec:22:96:31:57:a1:49:39:22:16:74:a9:47:
                    5d:d9:25:ee:79:93:2a:d0:0d:03:15:7d:00:46:89:
                    0c:4f:06:9b:85:1f:28:3f:e0:d5:4e:25:98:8c:a0:
                    e2:2f:44:e7:2a:a1:a8:51:53:e9:65:e5:37:b7:01:
                    0d:9d:4a:a3:35:c3:73:0c:9b:e6:5a:a1:b7:f4:85:
                    05:01:97:5b:e0:28:a7:a4:6e:c9:78:e3:1f:9e:89:
                    37:de:bf:23:59:62:e6:57:25:18:a8:2d:f2:8c:7e:
                    33:81:26:44:59:2b:53:bb:78:3c:b2:21:47:86:c0:
                    97:2a:60:c1:84:e8:6b:81:ff:44:55:b5:14:25:7f:
                    a8:b5:bd:96:5d:33:02:95:05:4e:be:7d:d0:a4:09:
                    11:3c:06:10:2b:fc:d8:44:48:22:b1:63:c4:c9:db:
                    e6:8d:c1:7f:52:80:12:c2:8d:48:c0:c3:fe:e8:7a:
                    e8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:0B:16:3F:17:01:FC:EA:2D:1A:58:B2:A1:53:73:C9:AF:55:F2:8F
            X509v3 Authority Key Identifier:
                keyid:88:E2:6E:02:85:FA:89:F0:72:7C:6A:02:65:CE:E4:C1:D3:3E:3B:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/1/88E26E0285FA89F0727C6A0265CEE4C1D33E3B08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88E26E0285FA89F0727C6A0265CEE4C1D33E3B08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/1/3137372e37332e34382e302f32312d3234203d3e20323632353635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         54:8e:76:dd:a8:04:9b:75:10:52:5d:e8:49:9b:c9:40:cf:bf:
         ef:3f:e6:7a:94:1c:2a:57:94:0c:64:ca:23:22:44:01:ec:2e:
         26:ca:92:93:af:87:43:40:46:d0:a8:90:1a:b2:ad:ca:48:5f:
         b7:84:6f:72:cf:c9:e3:b4:5a:63:ac:69:c0:d9:ba:61:0e:b0:
         ae:91:7e:cb:85:58:0b:01:2b:48:47:e5:4c:26:96:3f:40:89:
         f1:c6:71:82:da:df:7b:1d:c2:93:a5:2b:43:80:25:15:fa:31:
         82:18:49:56:87:00:bc:0f:e7:13:f2:6f:5b:50:d6:8f:54:c5:
         84:ae:5f:09:21:b6:df:82:97:c2:10:e0:af:1f:f4:ef:08:a5:
         3e:5b:e5:53:91:e4:7b:51:e1:20:3b:4e:89:76:25:17:9e:9f:
         55:81:76:c6:dc:69:1c:0a:2c:76:ff:a2:36:eb:2c:29:e3:c6:
         0f:e9:8a:71:90:ff:6b:f5:46:fd:17:f1:30:63:cf:f0:12:c9:
         b6:21:36:d8:ad:42:72:b1:c4:c0:61:12:e8:08:a0:6f:5c:79:
         f6:ba:19:5b:01:c0:0b:4a:0a:32:c5:21:41:fa:a4:ae:46:82:
         61:d2:ef:41:c1:e5:97:d9:3c:ef:9f:a7:31:a6:76:fc:cf:d7:
         c5:71:90:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:38 2024 by rpki-client on console-ams.rpki-client.org