Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ho9itMmbVRkdfabDh6QZCH4bemFEXp7EGBQ68Wyunbyc/1/3137372e31302e3137322e302f32322d3234203d3e20323633363031.roa
File:                     3137372e31302e3137322e302f32322d3234203d3e20323633363031.roa (raw, json)
Hash identifier:          6Vvu18TkB2Jh6Gm1h9Lk6oBflkt9AsZef2og5TXq6Ew=
Subject key identifier:   42:56:5E:ED:CC:F0:74:D3:8E:6B:12:C4:95:1E:A7:42:EA:9D:34:69
Certificate issuer:       /CN=8DEACA987A0D22568015F0352EA866AA5BEF9DBD
Certificate serial:       5ACBF15964043D3E99A37680213EBCD96059854E
Authority key identifier: 8D:EA:CA:98:7A:0D:22:56:80:15:F0:35:2E:A8:66:AA:5B:EF:9D:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DEACA987A0D22568015F0352EA866AA5BEF9DBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ho9itMmbVRkdfabDh6QZCH4bemFEXp7EGBQ68Wyunbyc/1/3137372e31302e3137322e302f32322d3234203d3e20323633363031.roa
Signing time:             Thu 04 Apr 2024 16:01:52 +0000
ROA not before:           Thu 04 Apr 2024 15:56:52 +0000
ROA not after:            Thu 03 Apr 2025 16:01:52 +0000
asID:                     263601
IP address blocks:        177.10.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ho9itMmbVRkdfabDh6QZCH4bemFEXp7EGBQ68Wyunbyc/1/8DEACA987A0D22568015F0352EA866AA5BEF9DBD.crl
                          rsync://rpki-repo.registro.br/repo/Ho9itMmbVRkdfabDh6QZCH4bemFEXp7EGBQ68Wyunbyc/1/8DEACA987A0D22568015F0352EA866AA5BEF9DBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DEACA987A0D22568015F0352EA866AA5BEF9DBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:cb:f1:59:64:04:3d:3e:99:a3:76:80:21:3e:bc:d9:60:59:85:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DEACA987A0D22568015F0352EA866AA5BEF9DBD
        Validity
            Not Before: Apr  4 15:56:52 2024 GMT
            Not After : Apr  3 16:01:52 2025 GMT
        Subject: CN=42565EEDCCF074D38E6B12C4951EA742EA9D3469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ca:22:36:3a:45:55:69:eb:24:c2:bb:1e:9c:
                    35:3c:d2:b7:a7:a4:3d:da:76:47:0f:bb:4a:3f:e9:
                    5d:ef:a9:fc:f3:0a:c0:77:c6:36:93:84:89:0d:4a:
                    d4:0a:17:91:ce:5b:d0:1e:d1:71:7d:8d:c7:00:dd:
                    89:c1:97:a3:f9:35:18:93:7e:d1:be:10:09:c3:fe:
                    d7:b9:5e:b6:a5:d2:4e:11:39:47:82:d3:4c:06:b4:
                    fa:fe:74:aa:bf:93:6c:bc:80:01:6e:c9:c8:c4:78:
                    83:77:5b:7b:cd:d0:25:b4:97:c8:8d:24:5e:45:a9:
                    ac:71:0a:fb:af:6d:dc:c2:d7:b3:9b:be:91:65:c9:
                    25:99:9c:fa:0c:c0:c4:11:96:c4:a0:01:87:4f:39:
                    d6:ed:d1:c6:b9:39:03:9f:ec:46:ab:b8:17:79:d8:
                    f5:46:d5:3b:f8:09:79:b3:09:c3:ad:ab:d1:76:ce:
                    ae:ff:db:8b:9c:15:7e:ca:05:47:b9:3c:be:5f:d5:
                    f9:2c:07:85:24:e9:84:dd:61:60:4c:76:36:a9:b7:
                    c7:d7:ca:9d:2d:04:79:9b:4f:b3:7c:81:4a:59:9e:
                    34:a9:4c:66:0b:00:96:97:d2:78:8c:5e:e5:15:ba:
                    82:42:7a:a5:ac:1c:09:4b:8d:ba:36:e4:2d:78:5d:
                    5b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:56:5E:ED:CC:F0:74:D3:8E:6B:12:C4:95:1E:A7:42:EA:9D:34:69
            X509v3 Authority Key Identifier:
                keyid:8D:EA:CA:98:7A:0D:22:56:80:15:F0:35:2E:A8:66:AA:5B:EF:9D:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ho9itMmbVRkdfabDh6QZCH4bemFEXp7EGBQ68Wyunbyc/1/8DEACA987A0D22568015F0352EA866AA5BEF9DBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DEACA987A0D22568015F0352EA866AA5BEF9DBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ho9itMmbVRkdfabDh6QZCH4bemFEXp7EGBQ68Wyunbyc/1/3137372e31302e3137322e302f32322d3234203d3e20323633363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:ca:1b:09:b9:84:c2:20:7e:93:24:d8:59:7b:12:93:e4:50:
         69:1f:5d:0c:d1:af:b2:49:9a:14:d6:53:50:6c:80:a4:4b:2a:
         ee:e7:9d:cc:e1:71:ce:e1:61:f4:ce:1b:09:e7:1a:90:d9:48:
         69:41:18:54:0e:43:86:13:e1:eb:a0:a8:c7:c0:18:e8:83:97:
         68:09:23:d4:b7:81:b1:b5:3d:6f:08:71:8b:97:55:f4:27:30:
         55:7a:54:8a:93:a8:69:e3:63:53:13:7b:f4:b2:c1:2c:d1:fd:
         d6:be:cf:03:e0:65:8c:50:22:96:03:9b:92:e3:e6:e1:5c:35:
         11:da:39:3f:fe:b6:b8:4c:9a:3f:5c:36:77:de:a1:53:3d:29:
         5a:be:68:7b:19:3b:cf:43:e0:d1:14:16:c7:2f:51:52:a6:37:
         89:72:ac:ae:f9:df:88:68:ff:18:1e:1b:51:36:b4:15:fa:ff:
         ec:a7:26:f7:97:e6:f4:3d:42:36:7f:70:70:2a:34:57:f4:78:
         f5:b0:05:5a:68:31:fb:7a:fc:42:5c:18:be:9a:99:96:79:61:
         5e:ea:45:c6:67:6f:42:35:ae:92:14:f1:c0:c9:d8:aa:75:17:
         41:91:cc:32:43:16:a6:7e:1a:11:0d:5d:53:03:c2:78:84:2c:
         ad:e9:b7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:32 2024 by rpki-client on console-ams.rpki-client.org