Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/2/3137372e3132382e3234382e302f32312d3332203d3e20323632373737.roa
File:                     3137372e3132382e3234382e302f32312d3332203d3e20323632373737.roa (raw, json)
Hash identifier:          7tIKotCVvq6LMvIVj9BFUyQaUBpP+7i8HIvUCr4hysU=
Subject key identifier:   80:5E:C1:10:7C:89:FE:93:46:99:E1:2E:73:1A:B9:D4:53:42:35:C4
Certificate issuer:       /CN=477BF0AEE1A67BF59A68F51694AB425F0C3B7E48
Certificate serial:       15EC7EACB1B9E007390B5BCC48CFD1CBE8D50C24
Authority key identifier: 47:7B:F0:AE:E1:A6:7B:F5:9A:68:F5:16:94:AB:42:5F:0C:3B:7E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/477BF0AEE1A67BF59A68F51694AB425F0C3B7E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/2/3137372e3132382e3234382e302f32312d3332203d3e20323632373737.roa
Signing time:             Thu 04 Apr 2024 05:45:36 +0000
ROA not before:           Thu 04 Apr 2024 05:40:36 +0000
ROA not after:            Thu 03 Apr 2025 05:45:36 +0000
asID:                     262777
IP address blocks:        177.128.248.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/2/477BF0AEE1A67BF59A68F51694AB425F0C3B7E48.crl
                          rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/2/477BF0AEE1A67BF59A68F51694AB425F0C3B7E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/477BF0AEE1A67BF59A68F51694AB425F0C3B7E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:51:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ec:7e:ac:b1:b9:e0:07:39:0b:5b:cc:48:cf:d1:cb:e8:d5:0c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=477BF0AEE1A67BF59A68F51694AB425F0C3B7E48
        Validity
            Not Before: Apr  4 05:40:36 2024 GMT
            Not After : Apr  3 05:45:36 2025 GMT
        Subject: CN=805EC1107C89FE934699E12E731AB9D4534235C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7f:21:e3:04:a3:39:eb:47:68:90:a7:48:e7:
                    b8:e4:f3:2b:4a:fe:80:b8:6d:3d:77:fe:9c:f4:f1:
                    c6:0f:e0:f4:75:de:45:68:47:34:d0:13:fc:97:74:
                    8e:71:d6:13:25:dd:f5:db:f8:cb:45:b5:7a:69:13:
                    27:79:0e:ce:c6:e3:24:f6:7c:86:77:6a:3b:e8:68:
                    b2:03:a2:ff:3e:95:3b:1c:96:73:18:ff:b7:52:9c:
                    a3:4a:57:29:76:ae:4c:32:b4:ac:97:f0:fd:6d:11:
                    1f:c4:b9:63:11:67:a4:99:74:6e:4b:0b:0c:6d:78:
                    0e:6b:2a:99:82:41:96:59:d2:00:f4:2d:d5:18:fb:
                    bf:18:90:28:34:52:52:7d:74:ee:eb:03:e5:20:d1:
                    b2:b0:d2:53:39:53:ae:89:00:1c:de:ae:d9:3e:24:
                    ca:da:c3:e1:71:00:52:a4:17:8f:fe:21:9f:db:39:
                    40:36:07:02:75:4d:65:fc:d3:84:d2:2f:bc:55:07:
                    30:c8:b8:7e:d7:91:81:fd:fe:c8:f5:cb:1e:0e:71:
                    fa:6d:0c:32:23:22:d4:14:0f:29:32:b9:c7:8f:35:
                    59:15:4a:e1:e5:50:9f:b3:95:bf:7d:4e:b8:3c:3a:
                    c0:df:13:50:12:4e:ea:72:58:7e:ff:90:90:69:bd:
                    a7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5E:C1:10:7C:89:FE:93:46:99:E1:2E:73:1A:B9:D4:53:42:35:C4
            X509v3 Authority Key Identifier:
                keyid:47:7B:F0:AE:E1:A6:7B:F5:9A:68:F5:16:94:AB:42:5F:0C:3B:7E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/2/477BF0AEE1A67BF59A68F51694AB425F0C3B7E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/477BF0AEE1A67BF59A68F51694AB425F0C3B7E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/2/3137372e3132382e3234382e302f32312d3332203d3e20323632373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9b:c7:8f:cf:4a:19:62:5a:70:02:51:d3:24:26:70:e8:6c:7b:
         23:ce:28:6a:0e:71:19:bd:1f:75:50:da:53:19:0b:4b:bb:95:
         0c:bf:05:1a:80:53:f5:82:6d:c8:31:91:07:b4:a4:0a:f9:2f:
         05:68:9e:72:bf:fa:c5:ed:b5:82:db:63:9a:fa:f7:c6:90:7b:
         bf:eb:48:0a:b9:fc:f3:17:f1:3c:0a:1b:d5:a6:95:ff:e6:be:
         58:fb:f1:b5:2e:61:e5:d1:d9:13:eb:9f:02:6c:90:a8:46:c4:
         97:c8:79:cf:1e:40:f9:7b:ad:b2:8a:88:1c:3c:50:75:7b:3c:
         73:b6:79:59:99:65:27:68:f0:65:95:17:0d:db:b0:1d:5b:af:
         6e:8e:f5:87:00:80:d2:c4:a7:3f:07:e1:bc:4c:1a:4c:35:08:
         6f:ce:46:b0:b6:ce:ea:3e:d9:56:f6:55:ed:cf:d9:7f:4e:d6:
         42:7a:de:8a:cd:19:d1:e7:00:84:7d:f1:07:b7:9f:62:76:85:
         d4:66:b7:af:08:1a:91:1a:1a:c2:ec:c3:38:1f:26:56:fb:42:
         00:fb:7e:fd:83:5a:cf:87:b3:c8:55:d7:9f:59:8d:3b:63:3b:
         dc:a6:5a:43:a2:08:0a:f6:d5:ee:a0:09:10:13:9c:f6:d8:fc:
         0f:3b:27:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:15 2024 by rpki-client on console-fra.rpki-client.org