Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/3137372e33372e32382e302f32342d3234203d3e20323730353934.roa
File:                     3137372e33372e32382e302f32342d3234203d3e20323730353934.roa (raw, json)
Hash identifier:          M9/v73mCVe55di6eFfN0A8Iv7AqaF7acUI5PE8UEWdA=
Subject key identifier:   64:29:6D:80:BF:78:BF:99:F9:7D:1D:02:98:9C:AB:01:8B:4B:17:DB
Certificate issuer:       /CN=10BF39CEE477C23BE60BA999BA7B70171BFB2C10
Certificate serial:       2FD90B85F8EFC00919DE2D217BDC92087E8203D4
Authority key identifier: 10:BF:39:CE:E4:77:C2:3B:E6:0B:A9:99:BA:7B:70:17:1B:FB:2C:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/3137372e33372e32382e302f32342d3234203d3e20323730353934.roa
Signing time:             Wed 03 Apr 2024 20:55:32 +0000
ROA not before:           Wed 03 Apr 2024 20:50:32 +0000
ROA not after:            Wed 02 Apr 2025 20:55:32 +0000
asID:                     270594
IP address blocks:        177.37.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.crl
                          rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:11:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d9:0b:85:f8:ef:c0:09:19:de:2d:21:7b:dc:92:08:7e:82:03:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BF39CEE477C23BE60BA999BA7B70171BFB2C10
        Validity
            Not Before: Apr  3 20:50:32 2024 GMT
            Not After : Apr  2 20:55:32 2025 GMT
        Subject: CN=64296D80BF78BF99F97D1D02989CAB018B4B17DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6f:af:96:12:c6:eb:77:f2:f1:5d:58:be:93:
                    3c:e1:03:48:fb:2f:31:4e:e1:62:2a:43:b5:29:38:
                    01:34:1d:58:1d:c0:7a:21:1c:38:82:ba:2f:16:ab:
                    3a:7d:9e:5d:05:a3:04:96:ed:7f:64:c4:dc:70:c9:
                    ca:3c:dc:2f:cb:9d:f1:49:cc:3d:ac:e4:97:fb:05:
                    b6:04:16:e7:c9:38:ed:9f:36:14:e5:9f:62:ae:fb:
                    59:d7:45:27:af:6d:70:d6:1c:b9:8c:9f:b3:64:46:
                    6f:11:47:82:23:c4:95:9a:44:7c:4e:0e:dc:61:7a:
                    25:25:1f:c8:5a:77:2f:b6:98:0b:8e:7c:32:d9:dc:
                    cb:ab:b6:9f:0e:99:ff:85:f1:72:8b:c0:51:64:bb:
                    a2:4f:6c:51:5c:1e:e2:c6:37:1a:6b:b0:25:51:43:
                    05:16:44:22:14:55:ed:a3:10:c5:ed:4b:8d:eb:80:
                    cc:7a:dd:38:28:6f:33:8c:75:6e:7d:f2:17:91:76:
                    74:ad:f9:00:73:a9:62:b1:d4:d5:87:48:6c:24:5c:
                    15:fb:27:f5:1a:b9:3b:86:ac:e3:c5:31:33:3f:2a:
                    1d:68:a2:bd:81:34:1c:ae:03:72:cc:d8:1c:59:3f:
                    1e:55:c7:d3:7a:dd:7e:c4:52:72:57:7c:00:f6:f0:
                    6c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:29:6D:80:BF:78:BF:99:F9:7D:1D:02:98:9C:AB:01:8B:4B:17:DB
            X509v3 Authority Key Identifier:
                keyid:10:BF:39:CE:E4:77:C2:3B:E6:0B:A9:99:BA:7B:70:17:1B:FB:2C:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10BF39CEE477C23BE60BA999BA7B70171BFB2C10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH3vBgCUk5pDYzYXxbu4oqR7MPSX2VPW3eiVX4F7y6zo/1/3137372e33372e32382e302f32342d3234203d3e20323730353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:60:8e:ff:da:ad:4a:7a:8f:98:98:51:16:2a:58:32:42:78:
         f5:e6:2e:e3:81:05:4e:c1:de:df:27:35:86:07:cf:20:32:c0:
         53:4d:c8:02:2c:d4:da:1a:70:4b:1f:7a:5c:55:5a:a0:2f:c5:
         24:8b:97:d1:c0:ea:7f:1c:67:0d:99:54:5c:ed:d4:98:6f:d8:
         23:48:8d:9b:50:0a:f3:83:fc:8a:cb:64:0a:a6:a3:5d:71:b8:
         7d:21:85:96:8c:e5:5a:26:e0:31:1c:d6:72:3b:f3:0a:4c:7b:
         32:08:03:e7:1c:61:89:68:7c:3d:f7:60:8f:32:0f:83:a6:3a:
         a5:66:ef:bd:ba:54:57:cf:90:b1:8c:60:d0:a6:32:2e:26:41:
         2f:57:7f:8d:52:c5:ec:e7:03:72:68:f7:79:78:50:5e:49:6c:
         d9:a1:14:2e:99:4e:55:98:67:bc:26:60:bc:c2:15:ec:41:de:
         97:74:c8:c5:71:34:e1:a0:db:57:79:b8:f7:81:cf:80:f1:7b:
         9c:fc:46:2a:d0:85:87:79:04:40:d8:03:52:c0:d5:89:54:50:
         0c:f6:70:d7:7d:58:ff:ef:8f:ed:b5:56:06:6c:ff:45:fb:61:
         f0:bb:ab:6b:b2:bf:78:5c:5e:42:55:48:85:33:cf:de:3c:a4:
         0f:b6:38:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:47 2024 by rpki-client on console-ams.rpki-client.org