Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3137372e36372e3134382e302f32322d3332203d3e203533323233.roa
File:                     3137372e36372e3134382e302f32322d3332203d3e203533323233.roa (raw, json)
Hash identifier:          opBiZMtfOeghjoYhF88oemIIItH9XmF6j/KHZYPR9tE=
Subject key identifier:   53:BD:AB:E6:E6:97:FE:9C:32:C5:2B:84:0C:22:E1:FF:A4:FA:8E:CB
Certificate issuer:       /CN=3332A8C3B68FE79476953E58B1857203FA676F0F
Certificate serial:       7DEFE3CFF079410C970C423E72CEB17887A8B766
Authority key identifier: 33:32:A8:C3:B6:8F:E7:94:76:95:3E:58:B1:85:72:03:FA:67:6F:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3332A8C3B68FE79476953E58B1857203FA676F0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3137372e36372e3134382e302f32322d3332203d3e203533323233.roa
Signing time:             Mon 15 Jul 2024 17:48:04 +0000
ROA not before:           Mon 15 Jul 2024 17:43:04 +0000
ROA not after:            Mon 14 Jul 2025 17:48:04 +0000
asID:                     53223
IP address blocks:        177.67.148.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.crl
                          rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3332A8C3B68FE79476953E58B1857203FA676F0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 11:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ef:e3:cf:f0:79:41:0c:97:0c:42:3e:72:ce:b1:78:87:a8:b7:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3332A8C3B68FE79476953E58B1857203FA676F0F
        Validity
            Not Before: Jul 15 17:43:04 2024 GMT
            Not After : Jul 14 17:48:04 2025 GMT
        Subject: CN=53BDABE6E697FE9C32C52B840C22E1FFA4FA8ECB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ec:52:bd:d8:1e:e5:96:29:53:1d:33:ca:b3:
                    6b:fe:b4:e1:70:b9:54:60:6b:4e:2c:b9:c9:49:ba:
                    89:40:4f:5f:21:26:08:94:47:5a:be:94:06:01:3c:
                    db:e6:69:76:52:82:c1:94:40:0e:55:18:d5:52:17:
                    36:04:57:bc:2a:da:51:7f:57:eb:d8:e9:33:2b:f5:
                    c0:28:68:a3:0a:d2:54:ba:c8:9d:b3:b0:29:95:07:
                    09:b3:a0:c2:7d:9c:8f:2e:8f:29:5d:04:fa:59:bf:
                    8c:dc:b7:33:63:f7:6b:87:5b:b2:72:60:7f:df:44:
                    2e:e5:7e:37:79:7e:0e:f3:81:a4:9c:fe:15:d3:fa:
                    bf:87:4a:60:3b:85:d9:e5:b5:5f:9d:2a:82:e1:73:
                    98:e1:b3:2c:f3:67:f3:c6:09:d0:58:96:47:4b:6c:
                    a7:2c:ee:9e:3f:b1:98:71:27:c6:55:0e:97:2c:4c:
                    ca:ed:33:5b:6a:05:f5:15:e0:14:e4:96:68:87:15:
                    78:b6:69:f3:6a:43:1d:a5:bd:bf:0e:3f:9a:a3:f1:
                    c4:fc:d1:ca:76:62:c6:b0:68:e4:4c:a4:cd:bb:42:
                    68:f3:40:f5:ed:4e:a3:27:8f:af:0f:10:f0:65:e2:
                    25:4b:f1:bc:08:03:fa:25:06:1a:ad:b5:df:22:19:
                    0e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BD:AB:E6:E6:97:FE:9C:32:C5:2B:84:0C:22:E1:FF:A4:FA:8E:CB
            X509v3 Authority Key Identifier:
                keyid:33:32:A8:C3:B6:8F:E7:94:76:95:3E:58:B1:85:72:03:FA:67:6F:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3332A8C3B68FE79476953E58B1857203FA676F0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3137372e36372e3134382e302f32322d3332203d3e203533323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e3:12:cf:01:e9:16:d0:b9:43:65:74:08:86:7e:6c:d4:b5:b8:
         1c:84:bd:80:9a:2a:27:13:ce:c1:2e:2c:67:9e:e6:1d:41:4c:
         54:c0:69:a6:04:c7:04:28:bd:da:54:33:bf:fb:57:4f:d5:d9:
         25:d0:0d:f4:1f:8f:62:01:05:28:87:5b:b9:42:03:fa:d3:0e:
         d2:b7:7e:2a:72:da:62:36:7c:8e:27:3a:50:fb:2f:d8:21:42:
         63:d4:eb:9b:95:0a:d7:a7:a3:45:a5:07:6f:3c:85:2d:0d:ab:
         68:43:81:20:be:8b:8a:1a:bc:e0:b6:90:d1:e4:a0:27:45:8b:
         2b:c6:1e:3d:b2:6a:15:a5:9f:38:f9:29:80:35:ea:ce:76:3b:
         73:7b:84:89:db:44:a9:a4:71:e0:0d:83:3c:f6:93:a2:b4:7d:
         a5:c1:fb:cc:76:40:2b:14:76:11:ae:fa:cb:e9:d5:b7:37:81:
         2e:83:3a:9b:7d:75:c5:44:77:c1:00:5c:3d:6f:6b:30:d2:a1:
         87:2e:49:86:94:b4:b3:b1:6b:05:1f:ec:1c:aa:fe:dc:5c:02:
         67:35:34:de:59:23:88:74:75:4c:1d:65:db:6c:03:50:ab:96:
         6c:d4:77:87:8e:68:9f:ba:80:f5:40:a2:b4:04:f0:8e:c8:24:
         21:5b:b8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:47 2024 by rpki-client on console-ams.rpki-client.org