Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3137372e38342e3135362e302f32322d3234203d3e20323633353531.roa
File:                     3137372e38342e3135362e302f32322d3234203d3e20323633353531.roa (raw, json)
Hash identifier:          NQPdiM/4G5y9+UOzZObZ27pujOAYyPkdAoJUgOPx1EQ=
Subject key identifier:   17:12:6B:50:1D:7D:7B:6C:54:F7:49:E5:9F:20:25:F0:06:64:15:2A
Certificate issuer:       /CN=3D10000E40C545C40D0B40A419954E6B6B94E80F
Certificate serial:       4FBD1852B4A2BEA1EA57F7A9FB160A98A874F767
Authority key identifier: 3D:10:00:0E:40:C5:45:C4:0D:0B:40:A4:19:95:4E:6B:6B:94:E8:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D10000E40C545C40D0B40A419954E6B6B94E80F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3137372e38342e3135362e302f32322d3234203d3e20323633353531.roa
Signing time:             Mon 06 May 2024 20:04:18 +0000
ROA not before:           Mon 06 May 2024 19:59:18 +0000
ROA not after:            Mon 05 May 2025 20:04:18 +0000
asID:                     263551
IP address blocks:        177.84.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3D10000E40C545C40D0B40A419954E6B6B94E80F.crl
                          rsync://rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3D10000E40C545C40D0B40A419954E6B6B94E80F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D10000E40C545C40D0B40A419954E6B6B94E80F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:bd:18:52:b4:a2:be:a1:ea:57:f7:a9:fb:16:0a:98:a8:74:f7:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D10000E40C545C40D0B40A419954E6B6B94E80F
        Validity
            Not Before: May  6 19:59:18 2024 GMT
            Not After : May  5 20:04:18 2025 GMT
        Subject: CN=17126B501D7D7B6C54F749E59F2025F00664152A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f1:ab:83:ee:ab:6e:e4:61:08:0b:bf:54:ab:
                    a6:2d:9b:50:27:3b:dc:2c:a6:70:2a:e0:cb:b4:47:
                    50:c5:32:31:49:18:8d:42:3f:1f:95:83:68:dd:64:
                    b7:60:46:3d:60:45:5f:7e:63:65:06:1d:7a:2a:42:
                    1c:1d:43:be:12:83:66:c5:42:4c:3c:35:55:d2:63:
                    83:a6:e9:39:71:28:81:64:87:28:c5:88:5a:4d:3c:
                    16:17:95:f7:ea:c6:14:91:56:fa:a0:fb:c2:72:a0:
                    66:ac:01:7c:13:59:2c:26:76:f2:11:89:f7:55:27:
                    e7:0d:c3:5e:55:fb:48:d2:60:2b:fa:7b:f2:91:7d:
                    a7:1d:55:ae:84:82:b7:37:aa:19:a7:8a:b8:23:d4:
                    94:c6:e9:c1:04:83:13:82:56:0f:85:8f:9f:13:a8:
                    48:7f:45:4e:ec:76:d4:9f:3e:86:62:dc:1c:34:dd:
                    29:b3:14:a4:a9:56:c5:0c:a0:a4:5e:b6:88:a9:ad:
                    e4:1d:ac:70:e2:a6:37:9f:97:a4:32:e0:20:0b:c1:
                    46:da:78:47:4a:f4:72:c8:1c:f2:6e:4a:f5:fb:5d:
                    e7:ae:a6:1b:35:00:91:b4:2d:f7:d1:38:cb:74:57:
                    56:42:c2:5c:7d:37:81:5d:a2:23:a6:57:36:e7:64:
                    2d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:12:6B:50:1D:7D:7B:6C:54:F7:49:E5:9F:20:25:F0:06:64:15:2A
            X509v3 Authority Key Identifier:
                keyid:3D:10:00:0E:40:C5:45:C4:0D:0B:40:A4:19:95:4E:6B:6B:94:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3D10000E40C545C40D0B40A419954E6B6B94E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D10000E40C545C40D0B40A419954E6B6B94E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hc1eB89n1mbuovZrz7FpfZsW6qzAEJc4LsLRDzpznGEg/0/3137372e38342e3135362e302f32322d3234203d3e20323633353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:2d:65:d2:12:49:87:b0:bf:29:60:e0:f2:a1:48:0d:8c:46:
         2f:43:f5:dc:8f:73:78:af:a7:4f:9e:43:42:c2:0d:42:62:e1:
         70:ae:af:37:95:70:75:ee:f9:38:69:9d:63:eb:91:d5:e8:80:
         4f:83:03:17:43:e3:5e:da:cd:df:71:4b:4f:da:1a:ba:8e:65:
         c5:93:7d:1d:8b:9d:d9:38:5e:19:d6:f0:2a:e2:8d:bb:e8:57:
         3e:14:fb:be:21:a1:ee:f6:b8:73:76:89:3b:a9:95:7a:59:72:
         ff:6b:96:c1:66:3b:51:aa:3a:53:76:9c:6a:79:ab:9f:f9:d9:
         7f:e1:a8:97:f8:25:2a:cc:df:0f:4b:6b:27:5b:d6:28:c7:6b:
         fb:d9:d1:d1:bd:d3:53:0b:73:e8:0a:0b:e0:34:54:f3:5b:2b:
         07:ac:17:1e:b6:f5:ac:1d:a5:1d:23:95:70:aa:dd:5a:c7:fa:
         f4:e2:20:a7:aa:3a:b4:ae:b8:1b:07:47:0c:6a:09:ee:23:fb:
         1b:98:9a:60:62:b4:d4:81:0e:64:17:d1:02:2d:35:b7:70:87:
         8a:c8:a7:83:ca:4f:49:fd:51:c3:5e:38:aa:74:a8:15:f0:e6:
         20:5d:dd:9e:98:e5:72:cd:2d:94:ac:91:08:9b:e1:4f:f2:ac:
         d7:fd:17:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 08:30:22 2024 by rpki-client on console-ams.rpki-client.org