Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/1/3137392e36332e302e302f32322d3234203d3e20323731363337.roa
File:                     3137392e36332e302e302f32322d3234203d3e20323731363337.roa (raw, json)
Hash identifier:          Sl8O4JdwPyT8hbTikOW3boFVjs3Eq3v2D7z64S5UutE=
Subject key identifier:   4E:4C:3C:7B:B8:C9:C0:4B:86:0F:9D:6A:D0:04:49:95:B4:5E:EF:C4
Certificate issuer:       /CN=777AF1144189B88FDF022922157DD65E18F5A179
Certificate serial:       2228BB57D2EACCEFC83A3C8E368118653CB49EF0
Authority key identifier: 77:7A:F1:14:41:89:B8:8F:DF:02:29:22:15:7D:D6:5E:18:F5:A1:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777AF1144189B88FDF022922157DD65E18F5A179.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/1/3137392e36332e302e302f32322d3234203d3e20323731363337.roa
Signing time:             Thu 04 Apr 2024 11:00:18 +0000
ROA not before:           Thu 04 Apr 2024 10:55:18 +0000
ROA not after:            Thu 03 Apr 2025 11:00:18 +0000
asID:                     271637
IP address blocks:        179.63.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/1/777AF1144189B88FDF022922157DD65E18F5A179.crl
                          rsync://rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/1/777AF1144189B88FDF022922157DD65E18F5A179.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777AF1144189B88FDF022922157DD65E18F5A179.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:26:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:28:bb:57:d2:ea:cc:ef:c8:3a:3c:8e:36:81:18:65:3c:b4:9e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=777AF1144189B88FDF022922157DD65E18F5A179
        Validity
            Not Before: Apr  4 10:55:18 2024 GMT
            Not After : Apr  3 11:00:18 2025 GMT
        Subject: CN=4E4C3C7BB8C9C04B860F9D6AD0044995B45EEFC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4a:0a:0f:2e:66:ee:c2:93:05:da:ae:b4:14:
                    de:d7:5c:0b:26:b6:25:a3:9e:c8:69:8b:e2:bf:f0:
                    5c:3a:28:c5:68:0c:f7:3c:d8:3b:84:0b:71:28:04:
                    27:5f:3c:b3:6f:ff:7f:af:36:f6:b5:10:d0:67:be:
                    21:28:d9:c5:16:20:57:fc:cd:09:1f:a0:70:14:c8:
                    76:3a:3e:cf:c1:27:43:0e:1c:0d:96:c4:0b:ae:22:
                    b4:8a:3c:fa:83:21:16:13:30:0b:33:50:26:e2:20:
                    47:2a:a5:91:af:1d:06:73:10:45:3a:0a:91:fb:35:
                    9f:f0:4f:dc:5d:c3:c9:37:72:9e:85:65:e4:fd:70:
                    15:e0:ba:d4:73:a3:07:9c:39:82:02:e3:e7:8f:9b:
                    a4:5f:1f:6a:8b:8f:b1:19:bc:b9:21:45:01:2d:36:
                    ad:40:d6:9d:5b:2c:32:61:d6:e0:5e:15:21:ec:57:
                    55:68:1d:dc:3c:05:e1:d9:0e:a5:6a:fb:ec:48:7d:
                    b3:44:62:2f:53:1e:5e:fc:2d:3e:06:fb:fc:15:3b:
                    f6:77:33:40:e4:59:f1:48:3d:e3:81:d9:04:00:7e:
                    f2:18:78:bb:45:06:64:bd:44:19:84:f2:cb:34:ec:
                    8e:8b:1e:a8:db:ea:22:ab:72:c6:68:56:b5:16:e8:
                    2a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:4C:3C:7B:B8:C9:C0:4B:86:0F:9D:6A:D0:04:49:95:B4:5E:EF:C4
            X509v3 Authority Key Identifier:
                keyid:77:7A:F1:14:41:89:B8:8F:DF:02:29:22:15:7D:D6:5E:18:F5:A1:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/1/777AF1144189B88FDF022922157DD65E18F5A179.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777AF1144189B88FDF022922157DD65E18F5A179.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ghtt3HRrzVyZaYxmybGqwyfYxgzWo1YmpkvGDXCmVfL4/1/3137392e36332e302e302f32322d3234203d3e20323731363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         db:ef:2f:3d:68:11:b8:3f:43:f5:90:a3:ee:2a:c1:b2:f6:28:
         c7:2d:22:22:23:d4:7b:60:f3:35:74:ef:99:6d:0a:9a:5f:40:
         5c:a0:2f:db:7f:f7:f2:d8:6a:4d:16:bd:ad:a9:2c:c7:32:cd:
         6b:07:8c:6a:4e:33:56:da:bd:db:65:c7:4b:c6:7d:db:86:9f:
         10:99:93:40:2b:3d:27:f3:cd:03:ab:6e:80:1b:1f:3f:16:c3:
         73:ba:95:86:b3:9b:1e:2c:52:04:a4:dd:97:e2:05:c2:b2:88:
         4c:f5:82:7f:4b:ff:7b:62:21:f3:e9:c8:0d:68:e7:c6:d3:18:
         a2:e5:0f:04:6c:eb:9d:fd:2b:25:43:f4:a0:16:e2:2c:9b:16:
         28:0b:fa:06:20:01:be:af:9a:14:7c:ca:e5:f2:f5:a2:df:d4:
         ce:1a:d4:61:84:d7:61:ba:02:e9:2b:25:5d:8b:79:b0:0b:91:
         cd:25:5b:dd:b1:6e:7e:c8:b3:d5:42:fc:46:4b:25:81:06:29:
         06:aa:ce:13:fc:41:f0:fc:02:c4:86:8c:52:c9:d5:80:d1:50:
         a9:06:c5:c6:1f:8d:52:43:1d:85:d5:3c:41:e9:44:29:97:5b:
         83:40:b2:d5:21:94:32:56:14:24:46:75:b8:55:bb:8f:a3:97:
         5a:61:d2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:15 2024 by rpki-client on console-ams.rpki-client.org