Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/1/3137372e33372e34382e302f32302d3234203d3e203532383933.roa
File:                     3137372e33372e34382e302f32302d3234203d3e203532383933.roa (raw, json)
Hash identifier:          IEJtIgUrJD9mRyUbQhMm5eZOJdaj2RHUle+4y92aE7I=
Subject key identifier:   14:D1:45:9A:4C:20:D9:6C:30:5F:DA:4E:96:48:09:82:F8:E1:59:CA
Certificate issuer:       /CN=EB8194E305061AD55048DBA774FC26D3BF2E65E3
Certificate serial:       651EB55B7512F1D360C5F793357E70B747AAC8E4
Authority key identifier: EB:81:94:E3:05:06:1A:D5:50:48:DB:A7:74:FC:26:D3:BF:2E:65:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB8194E305061AD55048DBA774FC26D3BF2E65E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/1/3137372e33372e34382e302f32302d3234203d3e203532383933.roa
Signing time:             Wed 03 Apr 2024 18:31:23 +0000
ROA not before:           Wed 03 Apr 2024 18:26:23 +0000
ROA not after:            Wed 02 Apr 2025 18:31:23 +0000
asID:                     52893
IP address blocks:        177.37.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/1/EB8194E305061AD55048DBA774FC26D3BF2E65E3.crl
                          rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/1/EB8194E305061AD55048DBA774FC26D3BF2E65E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB8194E305061AD55048DBA774FC26D3BF2E65E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:1e:b5:5b:75:12:f1:d3:60:c5:f7:93:35:7e:70:b7:47:aa:c8:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB8194E305061AD55048DBA774FC26D3BF2E65E3
        Validity
            Not Before: Apr  3 18:26:23 2024 GMT
            Not After : Apr  2 18:31:23 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d6:0c:99:3c:4d:99:56:68:d7:86:85:81:12:
                    2d:0b:f3:f6:7b:98:65:62:30:2f:6c:8c:7a:86:aa:
                    95:5d:28:e5:5c:35:40:fe:70:51:09:a8:28:15:7f:
                    cb:83:61:52:c1:b0:1e:79:ca:12:3b:a3:7b:61:6c:
                    83:4a:f9:c6:ba:2a:bf:1e:bd:d9:6d:c3:1a:e5:9d:
                    ad:0d:16:a8:90:c8:8a:7d:ba:6a:f6:92:48:69:ff:
                    85:0c:12:ab:8e:e8:6d:20:69:fa:9f:71:82:22:fa:
                    09:dc:a3:65:8f:39:a9:4b:3f:cc:50:b5:74:5c:15:
                    1d:d7:47:3b:07:85:8d:94:af:4a:2c:ba:ac:4d:1f:
                    5e:00:fc:05:c2:d4:50:fd:b4:e7:06:69:bb:1f:53:
                    18:cc:14:70:f4:ae:26:33:d3:96:ac:5c:30:48:21:
                    d2:aa:ee:22:72:c4:fb:f4:ae:e5:c4:6f:a5:0e:1d:
                    ca:34:79:e3:39:03:6b:ee:82:88:42:1b:93:02:52:
                    fe:6a:bc:f6:67:23:e6:09:4f:b7:63:34:f3:0a:04:
                    68:58:2f:5a:b6:48:aa:2c:05:a7:fb:cc:cb:69:54:
                    fb:48:c4:17:54:1a:16:e5:ac:c8:a7:22:df:22:09:
                    d2:07:94:40:0c:69:86:9f:26:b0:75:11:a6:54:48:
                    c5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D1:45:9A:4C:20:D9:6C:30:5F:DA:4E:96:48:09:82:F8:E1:59:CA
            X509v3 Authority Key Identifier:
                keyid:EB:81:94:E3:05:06:1A:D5:50:48:DB:A7:74:FC:26:D3:BF:2E:65:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/1/EB8194E305061AD55048DBA774FC26D3BF2E65E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB8194E305061AD55048DBA774FC26D3BF2E65E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/1/3137372e33372e34382e302f32302d3234203d3e203532383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         82:e3:20:73:ea:eb:28:15:8c:a4:b7:5c:c2:f1:08:38:59:96:
         44:7d:a3:96:1d:5c:06:d7:2a:ba:21:b1:2d:60:b0:06:c7:bb:
         33:52:99:ac:a0:93:56:1e:c6:05:01:b3:b4:62:15:27:b2:ee:
         76:72:8a:37:54:ca:ee:fb:f3:6c:b7:9f:7b:5f:24:04:80:41:
         50:4d:7d:1d:24:6a:e0:24:f5:0c:a6:2e:90:ac:38:f7:fb:7e:
         b1:1a:76:f1:3e:3a:17:1b:1d:3a:40:f3:8a:65:ba:2c:d9:b1:
         8e:f2:39:c1:38:4f:9c:f9:ac:e9:98:ab:b7:92:4b:43:58:6c:
         82:11:ba:4e:bf:f0:9b:7f:5d:02:b9:07:7b:7e:ac:df:1d:d1:
         4f:1b:bf:b4:96:28:3c:95:4f:c0:2e:67:89:00:80:42:f4:02:
         45:e6:43:17:d3:78:d0:35:72:17:d0:a4:51:3e:e9:aa:1d:03:
         60:54:90:6d:c8:ea:fe:9d:33:d9:ba:13:f0:6e:f5:8d:49:c4:
         9a:6b:78:c4:9e:1b:fd:9e:7b:8f:6c:b0:c7:0a:c6:0d:6b:0e:
         18:a3:c8:48:23:10:2a:f3:4e:b2:f2:23:09:ac:0d:87:13:27:
         3f:a2:64:39:f9:cc:1e:81:0d:4f:90:57:3a:cf:b7:38:78:1f:
         56:f2:9a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:56 2024 by rpki-client on console-ams.rpki-client.org