Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3137372e39332e3130342e302f32312d3234203d3e203533313037.roa
File:                     3137372e39332e3130342e302f32312d3234203d3e203533313037.roa (raw, json)
Hash identifier:          JB8hVk3Gp4vY+hSJKu9Fp1XYQO+cLkJSdvk6dsC6bS4=
Subject key identifier:   8D:49:E0:6D:26:75:51:C3:15:92:05:B8:C1:74:92:BB:11:32:04:B0
Certificate issuer:       /CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
Certificate serial:       4E40DC475670517EF94AEB7CC4EFC9BFB746DE27
Authority key identifier: 1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3137372e39332e3130342e302f32312d3234203d3e203533313037.roa
Signing time:             Tue 06 Aug 2024 00:18:04 +0000
ROA not before:           Tue 06 Aug 2024 00:13:04 +0000
ROA not after:            Tue 05 Aug 2025 00:18:04 +0000
asID:                     53107
IP address blocks:        177.93.104.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:18:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:40:dc:47:56:70:51:7e:f9:4a:eb:7c:c4:ef:c9:bf:b7:46:de:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
        Validity
            Not Before: Aug  6 00:13:04 2024 GMT
            Not After : Aug  5 00:18:04 2025 GMT
        Subject: CN=8D49E06D267551C3159205B8C17492BB113204B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:26:8c:da:9b:51:53:4d:b0:23:3a:59:1e:07:
                    68:45:98:57:3a:f7:46:0a:39:26:fb:f1:32:94:61:
                    a5:07:b7:77:af:0b:db:50:fe:12:60:e2:00:56:18:
                    c3:8a:d8:11:7e:8f:f0:37:d4:19:11:8f:6a:28:d1:
                    f0:c9:89:01:fb:60:28:a4:af:f9:1a:54:b2:89:dc:
                    49:85:80:7f:7e:31:d1:7a:24:54:a0:b1:13:33:43:
                    5e:f3:22:03:89:1e:19:2d:a7:10:a8:ff:46:81:a1:
                    f2:f4:98:11:64:23:87:92:4b:a5:02:44:92:a3:9d:
                    56:94:42:71:ee:d3:7f:c5:45:f7:2a:fa:f8:c1:cb:
                    8f:70:db:c6:86:7b:14:ec:2c:2b:88:10:03:1e:60:
                    df:67:bd:e5:fe:4a:36:0c:05:bc:3a:d5:ae:82:2c:
                    65:b9:2c:a6:10:13:65:dd:d2:f7:5c:5c:4f:76:0f:
                    0a:9f:f8:b8:1e:26:5a:9f:4f:9f:c5:28:74:9b:99:
                    15:2d:22:27:ff:07:40:c8:53:a0:94:7c:f3:03:3e:
                    95:e9:86:49:33:e2:b8:31:33:7e:5b:84:9e:9d:9b:
                    27:a7:f7:b1:8c:fd:1e:82:79:61:38:b2:d4:13:1c:
                    24:bb:c5:4e:d3:82:b1:7e:96:77:a8:60:a7:4b:bf:
                    e2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:49:E0:6D:26:75:51:C3:15:92:05:B8:C1:74:92:BB:11:32:04:B0
            X509v3 Authority Key Identifier:
                keyid:1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3137372e39332e3130342e302f32312d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8d:35:26:ea:fd:f9:ff:a7:04:14:b7:b7:50:f5:d9:03:06:da:
         28:dd:2e:57:0b:29:6e:3d:fb:34:a6:cc:38:a6:49:02:82:5b:
         92:c9:65:49:dc:42:ee:51:e9:f8:28:23:e7:ca:c2:c3:49:88:
         15:b8:6d:a8:6d:5b:3d:0d:44:5a:c9:b1:31:d2:89:e1:f6:ef:
         7a:d2:31:49:5d:c6:58:1e:a9:c0:b5:7d:37:c7:5a:58:5c:1e:
         9e:cd:4f:70:2b:fd:1b:98:80:a4:b8:e8:76:08:cb:15:b2:67:
         e3:82:85:67:52:25:b8:ce:49:74:e1:23:f0:27:9a:e8:a0:0b:
         52:6f:34:d6:a1:89:22:d7:78:65:0d:13:b3:6b:a5:e4:fa:49:
         9c:53:c7:93:35:79:a8:ff:40:db:c6:ca:a8:a8:aa:96:c9:7f:
         53:83:61:d8:8d:7e:b1:75:b2:6f:06:e6:4a:f7:8b:11:10:72:
         91:7a:97:a5:74:dd:b9:5f:a1:7e:b3:cf:45:22:d3:95:6a:4d:
         c6:06:e4:5a:0e:ad:a2:a0:44:a4:ea:ce:cc:de:9d:f6:3f:f8:
         13:37:bc:42:66:9c:ed:f4:49:af:7b:1b:76:3e:a4:53:7c:6a:
         92:d6:87:de:3a:ca:a7:0c:0c:42:f0:32:10:79:8f:2f:48:ea:
         c3:e7:23:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:46 2024 by rpki-client on console-fra.rpki-client.org