Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3137372e35332e3134382e302f32322d3234203d3e203533313037.roa
File:                     3137372e35332e3134382e302f32322d3234203d3e203533313037.roa (raw, json)
Hash identifier:          8nfz0C6/9T8uWkwWIX3Mg3PvPkQSnKWUG7fiy1uUpLQ=
Subject key identifier:   FF:37:EA:30:F4:AF:C3:35:8E:9A:36:58:79:5A:7C:DA:F8:64:11:B2
Certificate issuer:       /CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
Certificate serial:       377291E6293C1B79E3DA8DC4469E112B38894FF0
Authority key identifier: 1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3137372e35332e3134382e302f32322d3234203d3e203533313037.roa
Signing time:             Tue 06 Aug 2024 00:20:10 +0000
ROA not before:           Tue 06 Aug 2024 00:15:10 +0000
ROA not after:            Tue 05 Aug 2025 00:20:10 +0000
asID:                     53107
IP address blocks:        177.53.148.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 15:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:72:91:e6:29:3c:1b:79:e3:da:8d:c4:46:9e:11:2b:38:89:4f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
        Validity
            Not Before: Aug  6 00:15:10 2024 GMT
            Not After : Aug  5 00:20:10 2025 GMT
        Subject: CN=FF37EA30F4AFC3358E9A3658795A7CDAF86411B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:72:15:84:74:36:21:fd:23:dd:e0:37:7b:12:
                    c9:52:52:9b:09:9a:3c:2f:56:ae:70:46:b1:65:5b:
                    c1:ea:24:8b:5d:a4:27:52:de:f5:19:07:d4:59:08:
                    fd:e2:06:65:7f:c8:53:3b:fc:9d:74:4b:79:ae:90:
                    a2:e2:65:73:a8:67:77:dc:cd:bb:05:96:91:32:f6:
                    f1:b0:d3:32:74:49:0b:7c:82:9b:69:1f:ff:01:8e:
                    60:9a:63:67:68:6b:37:99:ac:e2:fb:cf:8a:30:1e:
                    60:37:0b:02:b1:1a:b4:68:f3:2b:e3:91:82:24:7a:
                    13:0c:54:8b:57:13:54:e6:1c:ed:85:37:32:83:3a:
                    77:0f:87:8b:c5:87:d6:be:32:79:c0:1c:ae:f5:02:
                    d0:ff:60:7f:eb:ab:58:0b:d7:28:2d:c6:01:c0:a7:
                    84:e1:b2:74:64:b5:e6:4c:51:5b:09:42:a4:ec:8c:
                    f1:12:98:4e:5d:7a:ea:26:e2:7b:f6:1f:f6:b3:32:
                    0a:61:0e:f1:5b:f5:57:f5:71:df:38:f2:88:de:68:
                    be:0b:50:56:0c:19:2e:4a:ad:e1:8f:7e:fe:9e:58:
                    ea:c6:5c:92:a4:00:8e:b0:ca:8e:87:9e:7f:26:89:
                    d2:cb:95:07:fd:19:67:e7:b7:de:25:65:59:80:8b:
                    c0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:37:EA:30:F4:AF:C3:35:8E:9A:36:58:79:5A:7C:DA:F8:64:11:B2
            X509v3 Authority Key Identifier:
                keyid:1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3137372e35332e3134382e302f32322d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:be:5b:76:21:e9:97:68:b3:c3:5a:0f:8a:c7:5c:93:ac:30:
         a4:40:79:90:a9:b4:53:ec:16:c2:09:03:fb:f8:31:de:19:48:
         e2:3c:8d:cc:9e:19:24:50:24:b6:12:49:c7:fb:af:62:a1:06:
         0e:8f:fe:f1:e6:94:54:36:ea:0a:17:d1:ab:5c:45:61:46:b6:
         ca:b6:5e:07:e7:0d:3c:fe:c3:26:12:9e:84:18:5a:05:e2:8d:
         d6:2c:7c:b5:e8:eb:49:0e:d2:65:b5:f8:c3:0d:7a:fc:11:12:
         e4:a3:33:87:e0:98:f7:3a:d1:b0:04:a7:4e:4f:a8:10:0d:a7:
         a4:84:70:95:be:4a:f5:55:9d:30:4e:b4:0d:79:34:37:22:69:
         ce:e0:be:3b:e9:25:1c:28:ec:08:74:a4:65:bc:40:9f:c4:33:
         17:04:04:d8:a8:7d:2a:0f:42:f6:c9:69:54:f2:cc:7e:0b:66:
         a9:16:c3:8c:f5:8e:4f:c6:e5:64:78:0e:e1:84:c9:38:ae:35:
         5d:cf:bf:55:2e:0b:ea:27:dc:e8:b8:aa:a8:5a:d5:7d:0c:ef:
         ca:95:7e:38:77:51:74:84:7c:01:9c:59:43:50:30:08:2a:6e:
         73:40:ab:4d:ee:b0:e0:db:35:a4:bb:16:b9:b0:aa:d5:50:9f:
         08:96:d2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:27:14 2024 by rpki-client on console-fra.rpki-client.org