Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/3137372e3135342e32342e302f32322d3232203d3e20323632393435.roa
File:                     3137372e3135342e32342e302f32322d3232203d3e20323632393435.roa (raw, json)
Hash identifier:          Kj+4+IDveAmirK92nfwMvWob3S49YfE6ulWdSm+PORM=
Subject key identifier:   91:A7:5B:AA:4E:FB:91:10:D7:0B:94:7E:CC:8E:AD:CD:41:CE:39:A2
Certificate issuer:       /CN=F5053681E4FFFE993EC674A211C8BBC7FB338987
Certificate serial:       1A428103073AD216AF951969644A3035CF205FC9
Authority key identifier: F5:05:36:81:E4:FF:FE:99:3E:C6:74:A2:11:C8:BB:C7:FB:33:89:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/3137372e3135342e32342e302f32322d3232203d3e20323632393435.roa
Signing time:             Wed 03 Apr 2024 18:33:04 +0000
ROA not before:           Wed 03 Apr 2024 18:28:04 +0000
ROA not after:            Wed 02 Apr 2025 18:33:04 +0000
asID:                     262945
IP address blocks:        177.154.24.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.crl
                          rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:42:81:03:07:3a:d2:16:af:95:19:69:64:4a:30:35:cf:20:5f:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5053681E4FFFE993EC674A211C8BBC7FB338987
        Validity
            Not Before: Apr  3 18:28:04 2024 GMT
            Not After : Apr  2 18:33:04 2025 GMT
        Subject: CN=91A75BAA4EFB9110D70B947ECC8EADCD41CE39A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:54:a6:32:33:ce:4a:df:c2:51:61:a5:d2:84:
                    50:40:ef:14:19:05:9a:ac:bf:18:f9:c8:ab:78:51:
                    c7:ec:12:60:98:0d:c2:ad:68:58:48:5b:cc:af:ec:
                    07:b2:07:3a:10:d8:96:94:10:12:d7:9b:17:e4:1b:
                    c0:f5:0c:06:10:24:52:3b:69:dc:f0:b5:32:c9:33:
                    41:c2:54:09:f3:dd:ce:40:55:cf:22:0a:1e:c8:bc:
                    10:e6:70:b9:90:05:e1:e5:44:50:67:1b:8a:7f:b5:
                    a5:0c:0d:0e:35:62:11:6f:c0:48:87:1a:3d:6f:25:
                    dc:2a:c0:cb:f4:55:94:6d:9d:b3:eb:77:51:07:ac:
                    25:89:e5:ff:7e:73:02:bb:1d:c5:cf:fd:ce:26:5d:
                    54:ad:0a:ac:e3:88:e5:1b:91:cc:15:f5:d1:bc:b5:
                    58:84:01:34:4b:0d:c1:99:fa:15:e2:be:58:ef:e9:
                    2c:21:74:2e:c8:1d:03:32:14:fb:14:35:be:d6:b5:
                    a1:43:5d:40:0a:c2:b7:80:77:20:1a:a3:1f:6e:16:
                    b4:47:4b:9f:58:61:b8:8d:5d:e5:62:64:3a:5b:26:
                    7b:5b:14:74:37:81:ac:81:b4:d9:a9:59:94:87:67:
                    a1:5f:66:0e:47:ac:ab:0b:8f:4c:2e:11:9b:e2:e1:
                    d5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A7:5B:AA:4E:FB:91:10:D7:0B:94:7E:CC:8E:AD:CD:41:CE:39:A2
            X509v3 Authority Key Identifier:
                keyid:F5:05:36:81:E4:FF:FE:99:3E:C6:74:A2:11:C8:BB:C7:FB:33:89:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/3137372e3135342e32342e302f32322d3232203d3e20323632393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:02:9e:ca:bf:7a:d8:12:73:59:5e:36:6c:2b:ce:3d:98:35:
         1f:47:eb:1a:96:fd:73:af:66:95:78:cf:91:c3:94:b8:b2:f3:
         6f:7d:59:c8:0f:45:ad:bf:74:c3:c0:5f:56:74:2d:56:26:0f:
         6e:08:f9:b8:fa:f0:e3:d5:79:58:17:8a:72:14:0c:b2:29:43:
         bc:fb:eb:0e:98:cb:af:b7:62:a6:13:ac:e3:b0:ed:59:b9:54:
         21:ef:fa:5e:45:ca:0e:dc:37:9e:32:af:dd:70:6a:64:a7:fd:
         5c:8f:91:37:8c:44:f8:6f:46:6b:05:7c:1a:12:41:b4:7d:83:
         31:41:e5:d2:8a:74:41:fa:1a:8d:bf:51:d0:54:0a:94:50:9d:
         af:b5:49:0b:c6:f0:1b:bd:8b:b4:06:c3:5a:9a:c3:6e:46:9f:
         23:f0:9f:31:a5:06:74:20:92:0b:77:55:19:21:a5:08:88:c5:
         bf:19:0e:26:cb:4b:8b:b6:9c:d6:5b:cd:b8:c7:f9:5c:62:21:
         1c:7f:c3:1b:af:84:fd:cc:94:ff:60:fc:ab:31:5d:25:86:be:
         9d:84:58:7a:03:be:6e:cf:87:c8:ed:75:42:17:07:f0:73:c5:
         97:d3:d0:47:4f:45:5c:cd:10:4f:d2:e5:2e:42:44:0b:75:5b:
         d8:62:fc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:46 2024 by rpki-client on console-fra.rpki-client.org