Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/3137372e3132392e3232342e302f32322d3234203d3e20323633303439.roa
File:                     3137372e3132392e3232342e302f32322d3234203d3e20323633303439.roa (raw, json)
Hash identifier:          y02zarNMlk8axYZC4wDbUwR+pO8qO/KWLAYCVizCF7Q=
Subject key identifier:   A7:E0:00:A4:99:0D:44:B0:5A:8A:C2:A6:72:A9:7B:8E:6B:52:BB:75
Certificate issuer:       /CN=51352D74D3778F2422CE0E96FC53071E18935405
Certificate serial:       0BD88C0B7335E476DB208CCCA48866847411AE9A
Authority key identifier: 51:35:2D:74:D3:77:8F:24:22:CE:0E:96:FC:53:07:1E:18:93:54:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51352D74D3778F2422CE0E96FC53071E18935405.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/3137372e3132392e3232342e302f32322d3234203d3e20323633303439.roa
Signing time:             Thu 04 Apr 2024 04:30:32 +0000
ROA not before:           Thu 04 Apr 2024 04:25:32 +0000
ROA not after:            Thu 03 Apr 2025 04:30:32 +0000
asID:                     263049
IP address blocks:        177.129.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/51352D74D3778F2422CE0E96FC53071E18935405.crl
                          rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/51352D74D3778F2422CE0E96FC53071E18935405.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51352D74D3778F2422CE0E96FC53071E18935405.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:d8:8c:0b:73:35:e4:76:db:20:8c:cc:a4:88:66:84:74:11:ae:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51352D74D3778F2422CE0E96FC53071E18935405
        Validity
            Not Before: Apr  4 04:25:32 2024 GMT
            Not After : Apr  3 04:30:32 2025 GMT
        Subject: CN=A7E000A4990D44B05A8AC2A672A97B8E6B52BB75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:80:cc:ae:06:e0:e9:81:78:3e:82:43:77:e0:
                    6d:dc:a5:5d:e0:8f:a0:2b:c9:b4:75:b8:fe:36:2b:
                    a4:07:f9:c8:09:9a:0e:01:1e:f2:9c:b5:2e:a0:fc:
                    a2:d9:5c:10:19:5f:81:81:ac:cb:2a:9e:6f:32:e9:
                    8b:14:6d:86:bc:25:01:f8:14:2f:c5:9a:cd:3d:6d:
                    86:ec:70:e8:21:9a:1a:47:26:72:bd:fb:1a:9e:d6:
                    e3:9e:75:5a:46:ad:35:73:dc:5e:d2:f3:6e:6c:03:
                    b6:63:71:75:3c:c0:de:71:87:26:1b:bd:b7:fb:00:
                    82:dc:d8:1d:c5:22:a1:3d:a6:91:c6:d9:9d:42:75:
                    4f:1f:84:ca:b5:c3:d3:91:8e:3f:6f:43:7d:43:66:
                    29:2b:93:9d:47:4a:75:5a:7c:56:09:a0:e1:ed:00:
                    2f:e7:45:66:6a:bc:ae:a5:76:e4:5e:61:d8:cf:d2:
                    e2:30:b1:87:63:18:ac:0f:b4:07:fe:be:bf:c4:cd:
                    22:77:2e:90:0a:3c:5d:5d:c9:79:4c:ce:ed:0f:e8:
                    f2:28:a5:9e:b2:d9:13:f1:83:1f:58:cf:d3:b5:3e:
                    cd:68:1f:a1:8a:e0:63:01:cf:76:fa:36:af:ff:92:
                    78:a2:58:0a:64:7a:62:4c:f8:cb:2a:1e:7f:ce:28:
                    14:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E0:00:A4:99:0D:44:B0:5A:8A:C2:A6:72:A9:7B:8E:6B:52:BB:75
            X509v3 Authority Key Identifier:
                keyid:51:35:2D:74:D3:77:8F:24:22:CE:0E:96:FC:53:07:1E:18:93:54:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/51352D74D3778F2422CE0E96FC53071E18935405.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51352D74D3778F2422CE0E96FC53071E18935405.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/3137372e3132392e3232342e302f32322d3234203d3e20323633303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:2d:e5:97:82:f6:04:4c:3d:d4:57:37:9b:90:08:ec:f2:82:
         6a:05:2e:7c:d6:63:96:a7:32:95:89:40:bc:13:79:37:c3:ad:
         24:45:07:21:c9:1f:80:d6:32:54:56:b5:e8:c0:6a:ba:a6:ed:
         9a:53:f7:6b:9d:7e:ac:52:b3:2d:3a:b9:e5:4d:7f:f6:13:47:
         64:05:d8:c2:8d:e8:ac:98:c6:25:1c:58:87:50:63:0a:31:c8:
         56:80:6a:68:82:ee:fc:11:20:41:16:db:be:47:ee:22:ec:88:
         8c:4b:d7:ef:d3:a8:6f:53:60:14:cf:db:70:66:54:32:32:e2:
         3d:90:38:d6:1e:00:83:8e:9b:71:d3:b6:3b:6a:a0:5a:a2:c4:
         33:2f:d6:86:dd:fa:9e:95:38:2a:11:eb:47:9b:36:68:42:52:
         a8:1d:cc:f5:ff:f5:72:a4:61:56:14:c1:4e:dd:2c:e6:b5:fa:
         d9:64:b0:a8:0c:a9:be:7e:05:aa:2a:05:46:f1:f1:16:04:d3:
         36:d0:89:6d:24:57:fc:33:b2:34:1c:31:d5:bb:86:ec:53:c7:
         5b:d4:4f:98:40:89:b9:69:1e:85:75:7b:c8:ca:cb:f9:4c:fa:
         01:26:c6:e1:a6:f9:fb:c7:38:ec:e5:f1:1f:c3:78:7e:6a:0c:
         df:52:56:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:56 2024 by rpki-client on console-ams.rpki-client.org