Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/3137372e3132352e3134342e302f32312d3234203d3e203533313332.roa
File:                     3137372e3132352e3134342e302f32312d3234203d3e203533313332.roa (raw, json)
Hash identifier:          p4FUO8/zjhqWrlupcvXqHXNjxf+MCmJYTorvWj01LEY=
Subject key identifier:   F9:5A:2E:36:78:70:9A:B3:BD:0B:A1:3B:DD:09:FB:79:70:36:54:C5
Certificate issuer:       /CN=B53A77B5E460044CB626F7588E1A91702B1AE08E
Certificate serial:       1C86C5675635AF3E1D969A215FD3BF472EBBEE47
Authority key identifier: B5:3A:77:B5:E4:60:04:4C:B6:26:F7:58:8E:1A:91:70:2B:1A:E0:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/3137372e3132352e3134342e302f32312d3234203d3e203533313332.roa
Signing time:             Thu 04 Apr 2024 03:33:10 +0000
ROA not before:           Thu 04 Apr 2024 03:28:10 +0000
ROA not after:            Thu 03 Apr 2025 03:33:10 +0000
asID:                     53132
IP address blocks:        177.125.144.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.crl
                          rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:86:c5:67:56:35:af:3e:1d:96:9a:21:5f:d3:bf:47:2e:bb:ee:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B53A77B5E460044CB626F7588E1A91702B1AE08E
        Validity
            Not Before: Apr  4 03:28:10 2024 GMT
            Not After : Apr  3 03:33:10 2025 GMT
        Subject: CN=F95A2E3678709AB3BD0BA13BDD09FB79703654C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:dd:1f:b7:47:51:de:60:f9:c7:bb:03:9e:1e:
                    29:33:91:35:b2:e7:9f:3c:aa:a5:e9:a7:27:35:fb:
                    f5:f5:94:21:7f:57:17:32:48:d0:37:ad:92:34:4e:
                    50:f0:60:a0:24:b9:d9:cc:76:84:fb:ce:a4:3d:58:
                    f3:60:a3:30:11:3f:69:27:08:5d:ef:b7:c7:45:5c:
                    51:1c:03:10:2e:0f:c6:8b:79:2a:f5:9c:69:15:5d:
                    ec:6a:ce:38:90:71:30:a4:c1:9f:63:08:a5:34:4c:
                    f4:58:55:3d:a6:54:ff:08:10:22:ff:67:be:79:87:
                    73:7e:38:7e:c1:23:4b:79:16:46:03:ef:bc:4f:c1:
                    5f:2c:50:97:92:4b:8f:02:ab:b6:3d:39:fa:19:cd:
                    49:ba:29:db:8e:82:36:48:e8:43:52:4a:18:a1:ce:
                    6a:93:a1:96:24:e1:5d:15:3a:1e:69:e9:c2:31:ec:
                    14:74:c9:68:32:c5:ec:8a:ef:ca:21:ae:f1:b5:21:
                    48:8c:76:b1:87:10:f1:73:58:5b:52:eb:19:e2:9a:
                    95:c2:40:77:3c:97:81:a4:bc:b4:40:1b:68:29:f7:
                    a1:67:ae:c8:3c:fd:fc:5c:56:5f:b4:62:f6:97:c7:
                    31:f6:8e:5c:1a:63:cd:a4:89:b4:8e:21:57:18:e5:
                    75:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:5A:2E:36:78:70:9A:B3:BD:0B:A1:3B:DD:09:FB:79:70:36:54:C5
            X509v3 Authority Key Identifier:
                keyid:B5:3A:77:B5:E4:60:04:4C:B6:26:F7:58:8E:1A:91:70:2B:1A:E0:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B53A77B5E460044CB626F7588E1A91702B1AE08E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvJQM5qVSgiRgBsMuTziBzU6Zud8nxcvCsjxyHrNe6eF/1/3137372e3132352e3134342e302f32312d3234203d3e203533313332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9b:c4:d4:ec:4e:f8:ab:ad:2c:17:2e:cd:47:55:f6:ba:97:89:
         7d:95:0a:67:fc:76:3d:6f:53:82:19:a9:df:96:6f:84:bc:56:
         e5:3d:72:19:c2:f9:4c:a4:8f:c0:88:06:8d:0d:df:37:7c:30:
         17:c9:79:37:1a:8d:f0:e2:da:af:3f:ec:c8:8d:78:b5:5d:7e:
         4a:26:38:be:e4:cb:97:bf:94:ae:2c:ed:2f:c3:9c:5a:b5:bb:
         64:6a:45:bb:20:84:48:1a:55:4d:ab:7f:22:fa:d7:cd:18:da:
         fe:c4:af:6a:48:0f:f9:3e:85:98:57:6e:7b:ce:01:8c:ea:32:
         6d:90:e1:bb:92:3e:a2:fa:45:d6:8a:81:58:b9:a5:37:06:c7:
         db:1f:d8:2c:26:7a:fb:88:5b:d7:dd:87:6e:4e:40:2f:32:3b:
         fb:ab:22:5b:e5:39:66:ae:4c:d4:84:fc:a1:b6:c0:94:fa:71:
         d4:cf:a6:66:97:d3:a5:a3:39:ea:c7:97:45:06:9e:54:96:bc:
         92:b2:3d:fa:c1:f4:af:17:ff:3e:44:ce:d3:0b:7c:6b:17:4e:
         79:30:a5:c6:81:86:78:7e:89:e9:d7:0b:8e:5b:c3:fb:4a:ef:
         b4:aa:c8:95:9b:a1:a0:cb:a0:83:7b:d4:85:6f:4f:a1:c3:6e:
         4d:2e:65:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:57 2024 by rpki-client on console-fra.rpki-client.org