Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3137372e35322e3132382e302f32322d3332203d3e20323632343436.roa
File:                     3137372e35322e3132382e302f32322d3332203d3e20323632343436.roa (raw, json)
Hash identifier:          SSZ8SDvl8T+xC5PHCQrNhOvK1yIqLyl7uUeKykBmUQI=
Subject key identifier:   91:C2:3B:4A:5E:EB:EC:08:0B:9E:2B:5E:A1:E5:E8:29:2E:D0:84:64
Certificate issuer:       /CN=F5A757E49A3EE62BEE5F32163DBC154299BDFBA6
Certificate serial:       4CB364F8984F13B19118B122B26376CDDB547DAA
Authority key identifier: F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3137372e35322e3132382e302f32322d3332203d3e20323632343436.roa
Signing time:             Thu 08 Aug 2024 19:05:47 +0000
ROA not before:           Thu 08 Aug 2024 19:00:47 +0000
ROA not after:            Thu 07 Aug 2025 19:05:47 +0000
asID:                     262446
IP address blocks:        177.52.128.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.crl
                          rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 17:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b3:64:f8:98:4f:13:b1:91:18:b1:22:b2:63:76:cd:db:54:7d:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A757E49A3EE62BEE5F32163DBC154299BDFBA6
        Validity
            Not Before: Aug  8 19:00:47 2024 GMT
            Not After : Aug  7 19:05:47 2025 GMT
        Subject: CN=91C23B4A5EEBEC080B9E2B5EA1E5E8292ED08464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:64:8b:3c:66:1c:e7:85:2c:3c:62:96:d9:fb:
                    94:7a:04:18:ed:94:14:91:8d:1e:92:1f:c9:a0:21:
                    80:a6:90:b8:98:0b:a9:3c:55:80:62:33:a9:ea:82:
                    a7:34:96:cd:ad:eb:8e:f2:34:7c:1c:ba:7e:6a:50:
                    5c:16:62:74:b9:a1:99:70:30:de:96:bc:e1:a8:10:
                    4f:fa:3a:57:b3:a0:79:d4:a4:91:1e:c4:2a:95:ec:
                    99:87:d3:74:b7:b0:ba:75:d5:d5:8b:d8:15:ba:87:
                    09:b0:4a:8d:32:57:4a:27:51:ce:c5:8c:16:36:aa:
                    bc:aa:4d:1a:c1:07:b3:68:ea:5e:ef:32:86:92:d1:
                    96:e7:3a:fb:b8:6e:ac:3b:00:37:a2:b2:a4:0e:56:
                    aa:65:5c:ae:75:ab:25:b3:ce:63:39:0f:fe:4a:90:
                    d9:47:53:c8:09:16:bd:ec:8c:b7:41:d7:93:1d:8f:
                    10:95:5a:37:4b:1e:ef:8c:52:ad:51:6a:2a:e2:19:
                    52:d8:7a:86:59:17:e2:7e:39:4f:b6:14:b7:a9:15:
                    9b:4b:1e:74:f0:09:42:62:8c:fc:92:a8:d9:7c:02:
                    76:d8:f6:09:c8:e8:0f:6a:93:3a:00:03:7d:0e:96:
                    1a:e6:92:13:1b:79:f5:87:67:6b:29:56:dd:8f:48:
                    34:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C2:3B:4A:5E:EB:EC:08:0B:9E:2B:5E:A1:E5:E8:29:2E:D0:84:64
            X509v3 Authority Key Identifier:
                keyid:F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/3137372e35322e3132382e302f32322d3332203d3e20323632343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:12:b9:4d:59:7f:a5:26:dc:70:4e:70:a2:f3:a2:13:1f:d4:
         87:10:3d:91:05:53:47:32:80:40:de:d0:2c:c7:d5:a4:30:cd:
         24:f3:03:f3:1d:dd:8f:15:37:da:1e:9a:f3:ca:45:3e:8c:c1:
         80:88:e5:dd:6a:32:db:de:9e:e3:59:75:57:82:c8:fb:3b:bd:
         8e:1b:d7:75:1b:30:af:1f:60:09:ce:cb:d2:d7:0b:d1:0c:04:
         70:2a:53:6b:12:f2:d9:d8:83:8a:ef:ce:f1:71:66:40:e2:6c:
         57:8b:1e:6c:fd:70:72:59:0d:e5:57:39:5f:9d:1a:6c:be:7d:
         2f:dc:b5:d8:f7:d0:91:2a:a5:c8:d9:55:73:f5:09:1c:8b:b4:
         60:73:5a:6f:7c:df:5e:b5:78:db:28:c6:4b:d5:0c:34:36:68:
         c9:c3:97:a7:16:b9:c4:00:03:36:8a:7a:c3:4e:b4:e9:80:be:
         68:2c:0b:da:11:83:4e:6d:41:21:0c:2b:43:cc:e7:85:f3:4b:
         26:dc:24:5c:af:de:ac:dd:74:2c:d1:de:84:99:b5:11:b4:14:
         c0:bf:7c:83:97:4f:8e:b5:d4:c2:0a:48:8b:66:4c:e2:8e:9d:
         41:8f:78:b7:6f:16:73:9c:8f:03:ea:99:30:47:b7:06:eb:01:
         33:82:9f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 20:57:01 2024 by rpki-client on console-ams.rpki-client.org