Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/3137372e37332e38302e302f32322d3332203d3e203533303239.roa
File:                     3137372e37332e38302e302f32322d3332203d3e203533303239.roa (raw, json)
Hash identifier:          kDpy9F+bl8RptmWe1Sxf2ogeIe40Mvv8DXEWZVosMzQ=
Subject key identifier:   41:76:D5:0C:27:44:7D:52:54:5A:5F:0B:84:24:6A:EB:6A:23:D9:7D
Certificate issuer:       /CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
Certificate serial:       024E446F33D9AA5BBACF1686522C6E3C1BD436A5
Authority key identifier: CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/3137372e37332e38302e302f32322d3332203d3e203533303239.roa
Signing time:             Thu 04 Apr 2024 14:10:18 +0000
ROA not before:           Thu 04 Apr 2024 14:05:18 +0000
ROA not after:            Thu 03 Apr 2025 14:10:18 +0000
asID:                     53029
IP address blocks:        177.73.80.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl
                          rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:26:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:4e:44:6f:33:d9:aa:5b:ba:cf:16:86:52:2c:6e:3c:1b:d4:36:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
        Validity
            Not Before: Apr  4 14:05:18 2024 GMT
            Not After : Apr  3 14:10:18 2025 GMT
        Subject: CN=4176D50C27447D52545A5F0B84246AEB6A23D97D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:79:1e:e9:b3:b5:81:81:10:79:45:f1:12:58:
                    30:04:9f:39:b9:dd:42:9e:03:30:96:5c:a7:e6:c4:
                    e5:0c:7b:ef:07:42:b3:dc:0b:20:22:25:10:1b:43:
                    83:c9:81:ea:50:14:17:d7:72:68:39:e9:e0:a0:be:
                    64:39:a2:31:48:de:2f:0c:21:57:84:e6:c1:86:4d:
                    b5:fa:67:05:ef:0e:19:91:d2:08:73:78:7a:30:65:
                    b6:81:bc:c1:3d:e6:e5:7a:76:24:27:fb:43:32:2e:
                    7a:c5:28:85:af:6e:db:b8:ff:c5:0d:50:86:75:e3:
                    28:3e:d4:a2:b0:aa:72:33:5a:6f:81:3b:fd:7e:d6:
                    d2:50:40:90:5e:93:fc:72:92:c6:89:cf:c0:63:dd:
                    0a:42:48:c6:1c:99:24:48:ac:7b:d3:15:8e:4f:7b:
                    de:0d:e4:18:fa:59:3e:45:b8:d0:9d:82:7c:59:54:
                    57:9f:08:fe:43:f6:3b:b4:98:94:11:91:f5:75:61:
                    39:6d:f9:9d:15:a5:04:09:c4:13:53:fb:60:a1:30:
                    46:aa:f6:27:e9:2a:8f:0d:21:bd:81:bc:ab:9f:c4:
                    84:8e:5d:87:18:3f:25:ff:d5:d0:ae:16:54:a7:0d:
                    44:79:70:03:56:90:a9:46:b8:bc:6d:8e:da:00:41:
                    6f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:76:D5:0C:27:44:7D:52:54:5A:5F:0B:84:24:6A:EB:6A:23:D9:7D
            X509v3 Authority Key Identifier:
                keyid:CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/3137372e37332e38302e302f32322d3332203d3e203533303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:28:ba:24:e8:02:d9:fd:04:7e:a7:5c:85:e4:e3:5c:66:aa:
         15:83:75:a0:96:7e:90:4d:f3:32:e1:dd:49:3a:e3:bd:b3:74:
         a6:84:f8:2f:0f:44:91:d2:eb:82:53:01:61:7c:57:7f:f7:12:
         0d:c2:60:4c:17:11:09:4e:76:10:55:10:ca:eb:ee:41:af:9d:
         60:4f:01:5d:fb:1a:64:0b:0b:90:4c:85:d9:60:76:3f:a0:47:
         69:9d:9b:91:00:77:18:59:3a:6d:d6:c4:a5:f1:53:6c:a6:3b:
         57:f3:2b:50:c2:04:82:ea:9a:d6:21:95:d4:bd:23:a6:63:92:
         d7:28:84:63:2f:67:ba:a1:08:14:18:3f:e0:56:9d:04:b1:e3:
         6e:dc:b4:43:a3:4c:25:c4:b9:ed:84:a5:2f:a7:a8:2b:c3:3b:
         88:59:3f:22:1f:3e:1e:9b:6f:88:8a:0e:39:76:d9:f8:26:b2:
         bf:80:81:e7:d6:03:1d:0b:5e:dc:38:11:a3:be:18:89:e2:5c:
         17:4d:12:10:38:c3:e7:df:81:90:08:7c:f9:cd:6e:63:c5:12:
         11:40:d1:eb:03:d1:b6:c6:d0:20:c9:93:04:86:00:61:6e:05:
         6f:0f:3b:9e:05:25:8a:62:c2:5a:73:77:28:93:cc:ea:06:79:
         da:e3:de:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:15 2024 by rpki-client on console-ams.rpki-client.org