Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/3137372e34362e33332e302f32342d3234203d3e203238313335.roa
File:                     3137372e34362e33332e302f32342d3234203d3e203238313335.roa (raw, json)
Hash identifier:          YDRpFs3X+HJ9fkOLV5djyVE02SehX5isIL62cP4Ruzg=
Subject key identifier:   F7:D8:7E:09:CC:3F:A4:18:7C:17:25:2E:78:1D:D5:5F:C0:8D:0A:C3
Certificate issuer:       /CN=CD6B92DF78E70B390376FC99E832428600EEDFB7
Certificate serial:       5FEB23E45F9505C73A81242D8661984759146BAD
Authority key identifier: CD:6B:92:DF:78:E7:0B:39:03:76:FC:99:E8:32:42:86:00:EE:DF:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/3137372e34362e33332e302f32342d3234203d3e203238313335.roa
Signing time:             Tue 23 Jul 2024 12:56:47 +0000
ROA not before:           Tue 23 Jul 2024 12:51:47 +0000
ROA not after:            Tue 22 Jul 2025 12:56:47 +0000
asID:                     28135
IP address blocks:        177.46.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.crl
                          rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:50:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:eb:23:e4:5f:95:05:c7:3a:81:24:2d:86:61:98:47:59:14:6b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6B92DF78E70B390376FC99E832428600EEDFB7
        Validity
            Not Before: Jul 23 12:51:47 2024 GMT
            Not After : Jul 22 12:56:47 2025 GMT
        Subject: CN=F7D87E09CC3FA4187C17252E781DD55FC08D0AC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8a:15:79:6e:4f:73:85:f0:8d:be:37:17:56:
                    38:f2:c7:36:ac:9c:76:66:bf:48:89:d4:a5:ee:8d:
                    2e:66:ed:f6:15:b6:6a:b8:ee:01:c4:33:62:69:24:
                    db:28:22:6e:d1:51:30:93:4d:9a:88:5a:5a:97:dc:
                    40:a1:c2:90:cf:a6:df:ee:38:79:51:7c:30:a1:f3:
                    e4:a3:ec:f6:d6:70:ca:df:42:ca:cc:2d:87:3a:e0:
                    99:5b:53:a7:be:43:87:24:f7:ac:dc:a9:12:76:51:
                    b5:a1:54:54:67:17:b5:af:dd:6d:46:b9:fc:53:2b:
                    99:97:53:e1:9a:b6:8a:ef:f1:10:41:80:45:d0:0c:
                    ef:9f:b2:da:e2:c6:72:01:7a:23:4f:16:c6:a9:f4:
                    06:37:d9:a1:2d:5a:70:c1:c0:cf:80:05:3e:24:27:
                    35:b3:7c:ab:07:98:24:7c:de:c7:7b:c5:7f:53:6a:
                    e2:86:40:1e:a3:ed:11:9e:36:3e:18:57:15:d0:73:
                    32:87:ce:24:e1:01:7d:02:b2:68:ea:e1:ad:fc:88:
                    d0:b4:0d:f2:03:dd:d7:ee:84:ce:7a:fe:ff:92:04:
                    72:5d:50:8f:fa:5e:be:37:74:5f:70:75:56:65:82:
                    25:cf:11:27:be:01:5e:67:1c:2c:00:d4:52:b6:3a:
                    3f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D8:7E:09:CC:3F:A4:18:7C:17:25:2E:78:1D:D5:5F:C0:8D:0A:C3
            X509v3 Authority Key Identifier:
                keyid:CD:6B:92:DF:78:E7:0B:39:03:76:FC:99:E8:32:42:86:00:EE:DF:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6B92DF78E70B390376FC99E832428600EEDFB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXniMnv8y9EmJCjx2uu9BWC91L6TdynFHG8UgNZow7aZ/1/3137372e34362e33332e302f32342d3234203d3e203238313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.46.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:d5:5c:83:86:fc:d0:21:9c:07:a3:b7:59:d4:03:de:8f:49:
         41:b6:c6:92:6a:03:cf:d2:3b:bd:7b:f5:c5:86:93:32:fd:33:
         2d:5a:8b:80:c3:b0:e8:2d:b0:6b:a7:a6:d0:26:79:f3:e9:db:
         ab:cb:85:be:97:36:18:f4:eb:be:2a:ad:67:54:17:b7:fb:74:
         d5:ca:a3:70:dd:f3:25:f2:6f:e0:73:ea:eb:dd:35:f8:49:bc:
         00:00:56:63:83:34:4f:e7:fa:6f:d3:10:ca:23:fc:7f:84:89:
         37:cc:19:a4:80:dc:90:39:4b:88:b4:fc:26:a8:dc:ce:42:b5:
         95:92:2c:d0:26:e4:79:68:40:bd:6b:a2:c7:07:46:85:9f:f0:
         c0:07:2a:53:c1:46:c7:1a:09:65:3b:1f:03:3f:0d:a1:fc:88:
         d4:79:16:08:6e:6c:ef:07:d4:04:77:5c:10:2a:14:12:2c:2b:
         d6:62:db:5b:2e:42:03:e9:bf:9e:a2:61:25:ab:ce:26:fb:6e:
         9f:a1:d3:eb:7b:ec:fc:ef:fe:79:cb:23:6e:52:29:f1:ac:af:
         c7:93:95:80:e5:8f:0a:06:4e:9f:fa:67:16:66:c2:31:53:a6:
         3f:c9:cd:4f:0e:2f:9d:cb:0e:a5:cd:31:df:f4:db:13:98:13:
         61:2b:f6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:53:01 2024 by rpki-client on console-ams.rpki-client.org