Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/5/3137372e35332e3134382e302f32322d3234203d3e203533313037.roa
File:                     3137372e35332e3134382e302f32322d3234203d3e203533313037.roa (raw, json)
Hash identifier:          hMaKJb/gluc+6oZ/CjM1iw0h8bLDAWlqSFUzLX6YEzc=
Subject key identifier:   36:80:A9:09:3E:69:EC:71:41:77:02:76:A3:23:22:FD:ED:83:FA:23
Certificate issuer:       /CN=817F49231FF07F454E790AAA133485546F995822
Certificate serial:       0D95461CEECBA4AB04C510429D2D0B0189A05A91
Authority key identifier: 81:7F:49:23:1F:F0:7F:45:4E:79:0A:AA:13:34:85:54:6F:99:58:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F49231FF07F454E790AAA133485546F995822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/5/3137372e35332e3134382e302f32322d3234203d3e203533313037.roa
Signing time:             Thu 04 Apr 2024 10:14:03 +0000
ROA not before:           Thu 04 Apr 2024 10:09:03 +0000
ROA not after:            Thu 03 Apr 2025 10:14:03 +0000
asID:                     53107
IP address blocks:        177.53.148.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/5/817F49231FF07F454E790AAA133485546F995822.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/5/817F49231FF07F454E790AAA133485546F995822.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F49231FF07F454E790AAA133485546F995822.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 15:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:95:46:1c:ee:cb:a4:ab:04:c5:10:42:9d:2d:0b:01:89:a0:5a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=817F49231FF07F454E790AAA133485546F995822
        Validity
            Not Before: Apr  4 10:09:03 2024 GMT
            Not After : Apr  3 10:14:03 2025 GMT
        Subject: CN=3680A9093E69EC7141770276A32322FDED83FA23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:77:40:b8:0c:38:ad:df:18:52:38:65:eb:3a:
                    23:ef:e4:97:16:be:ad:f8:73:8c:64:9b:b5:8f:9b:
                    ca:57:c7:62:74:9e:e2:c0:4a:60:98:46:09:15:ee:
                    a9:94:71:ef:55:3b:b6:a7:b4:ca:6a:2d:6c:16:dd:
                    b3:9d:de:0a:63:3e:e5:75:0a:78:e7:bf:7b:93:c1:
                    7a:ec:0a:d9:3c:5d:6b:cc:41:4a:90:37:43:bf:15:
                    6c:52:84:c0:63:85:de:7d:1f:cf:05:72:d5:ae:09:
                    78:52:8f:e2:5e:ce:4a:4b:83:fb:4f:14:2d:c2:f5:
                    d4:49:fa:b3:49:45:f0:d5:29:a6:bb:eb:0b:28:9d:
                    89:41:5b:cb:3c:f2:6d:31:7f:e9:23:63:67:fe:b7:
                    f7:d8:54:f8:96:b3:53:21:82:ec:0d:de:b0:4e:0d:
                    f9:ae:5a:fb:fa:c1:93:df:8d:68:54:28:4d:57:ed:
                    68:1f:44:50:e3:0f:a6:0c:52:68:3e:69:10:f5:16:
                    6b:db:8e:0e:06:6c:b1:98:19:64:24:3f:f5:e4:29:
                    30:cb:b2:04:cf:68:88:68:79:55:f0:fe:86:1b:ff:
                    bf:3f:60:21:fc:91:53:41:4e:37:fb:6a:c0:9f:dc:
                    22:2f:4f:8d:7e:2b:9c:8c:c1:03:87:b6:0a:7b:48:
                    1b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:80:A9:09:3E:69:EC:71:41:77:02:76:A3:23:22:FD:ED:83:FA:23
            X509v3 Authority Key Identifier:
                keyid:81:7F:49:23:1F:F0:7F:45:4E:79:0A:AA:13:34:85:54:6F:99:58:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/5/817F49231FF07F454E790AAA133485546F995822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F49231FF07F454E790AAA133485546F995822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/5/3137372e35332e3134382e302f32322d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:02:dc:6a:b0:3d:fa:5c:54:d8:14:8f:e9:b8:71:c4:e0:1a:
         6c:a1:d7:ee:66:b6:0f:40:a2:ee:e7:a5:8d:84:c0:a4:df:58:
         bc:73:32:15:3c:75:82:41:60:e0:10:37:bc:af:0e:0a:d9:8c:
         c4:3b:f8:17:b0:67:c3:81:d9:c6:91:4a:bf:50:31:28:52:65:
         de:5a:a3:53:6f:56:d8:02:0f:ab:46:e4:e3:8e:68:8c:93:0a:
         a2:3d:be:3b:b5:c6:8f:57:e9:13:b5:21:23:60:49:fc:42:e4:
         34:8e:b2:c6:97:08:62:19:26:7d:38:92:15:60:3b:93:e9:e1:
         c4:e7:cb:b5:ce:2a:d3:d9:7c:d3:db:e5:21:c5:f3:60:22:c0:
         94:7c:f0:30:d0:8e:2d:4c:0b:6d:b9:5b:49:4b:03:3f:10:e6:
         00:b5:4e:95:45:93:dd:83:4f:5f:02:9f:c5:52:09:1a:11:93:
         f7:b2:30:e9:f6:bb:81:c5:30:00:17:eb:75:27:ed:3b:b8:2a:
         20:54:4c:eb:f6:ba:d0:d9:f4:2c:7f:0d:87:6b:a5:25:22:a6:
         ca:54:97:d0:7b:d9:99:ac:ec:0c:2f:f6:f2:1d:50:fd:f5:1d:
         f9:46:23:be:b1:a6:47:2b:2e:ed:de:6a:63:41:a3:46:76:bd:
         be:ae:d5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 18:08:43 2024 by rpki-client on console-fra.rpki-client.org