Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/3137372e3132392e3138342e302f32312d3231203d3e20323632353636.roa
File:                     3137372e3132392e3138342e302f32312d3231203d3e20323632353636.roa (raw, json)
Hash identifier:          T1euRLBJ3QFdftKsSS6f4B3vYy2bEn5ZR0eiT0kNFkw=
Subject key identifier:   78:40:F5:FC:A2:8A:B0:0B:92:F0:80:4A:20:85:DF:3C:C4:9B:2E:38
Certificate issuer:       /CN=C8232E7ADA2149C400868144F5DA83930BC26309
Certificate serial:       24A62F9A6DD1F8492C91DA1836F9B0F22916E9E2
Authority key identifier: C8:23:2E:7A:DA:21:49:C4:00:86:81:44:F5:DA:83:93:0B:C2:63:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/3137372e3132392e3138342e302f32312d3231203d3e20323632353636.roa
Signing time:             Thu 25 Apr 2024 17:30:33 +0000
ROA not before:           Thu 25 Apr 2024 17:25:33 +0000
ROA not after:            Thu 24 Apr 2025 17:30:33 +0000
asID:                     262566
IP address blocks:        177.129.184.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.crl
                          rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 05:56:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:a6:2f:9a:6d:d1:f8:49:2c:91:da:18:36:f9:b0:f2:29:16:e9:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8232E7ADA2149C400868144F5DA83930BC26309
        Validity
            Not Before: Apr 25 17:25:33 2024 GMT
            Not After : Apr 24 17:30:33 2025 GMT
        Subject: CN=7840F5FCA28AB00B92F0804A2085DF3CC49B2E38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:46:46:ce:bc:32:d6:bc:e9:a5:ef:d9:62:b8:
                    5d:c8:65:b4:d7:1f:7b:9f:ef:64:41:23:84:d2:85:
                    e0:89:6a:5f:81:5e:fd:0f:11:36:4e:60:7f:e9:af:
                    24:54:2b:58:ad:74:1d:41:29:ca:31:84:1c:71:52:
                    62:bc:81:a2:c7:52:a4:af:5a:e7:20:b3:68:75:ba:
                    fd:88:54:0a:de:d4:e5:e6:9b:80:19:48:70:e2:9b:
                    ff:8c:58:17:8c:35:f7:f1:3c:21:da:d7:96:7c:0a:
                    e8:d9:d0:05:bc:10:44:66:0f:3c:f8:5a:97:8a:77:
                    aa:93:b9:69:99:42:96:5f:d7:6c:7a:72:32:0c:e5:
                    24:16:fb:ea:74:05:d5:2a:26:95:56:ac:ba:40:ae:
                    7b:58:0f:d7:b7:a7:5d:e6:21:f9:59:e8:13:b2:c1:
                    25:17:f3:07:bf:c4:30:a6:3d:de:c3:de:7b:ed:71:
                    de:2f:ca:e1:70:f8:8e:71:12:a4:05:f3:f6:60:90:
                    c2:3e:eb:0f:e0:4e:da:c9:32:a7:c2:35:2a:9e:fe:
                    a3:3b:bd:d6:e7:4a:20:6b:8c:6a:1e:36:4c:17:9b:
                    4b:cf:22:36:38:5e:f0:0a:24:ff:e3:e2:28:24:56:
                    59:32:17:61:e5:2d:11:47:a7:45:a8:f8:60:44:b6:
                    d0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:40:F5:FC:A2:8A:B0:0B:92:F0:80:4A:20:85:DF:3C:C4:9B:2E:38
            X509v3 Authority Key Identifier:
                keyid:C8:23:2E:7A:DA:21:49:C4:00:86:81:44:F5:DA:83:93:0B:C2:63:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/3137372e3132392e3138342e302f32312d3231203d3e20323632353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5d:92:30:4f:cf:e1:ab:d4:89:83:c6:70:d8:39:5c:85:ca:99:
         1b:2e:5e:86:1c:db:1a:6c:da:17:17:07:c7:b9:60:fd:43:20:
         1b:37:76:a0:10:3a:a3:83:05:73:c4:92:d5:ff:39:39:9a:da:
         9a:3d:83:8a:2f:c4:e3:c7:61:33:a5:30:ad:90:fb:dd:e1:2b:
         0a:51:90:3f:6b:8f:c8:59:b7:dd:b4:86:00:27:9d:87:37:c3:
         e0:7c:ab:7c:6f:83:8f:75:1e:a4:0c:de:89:ae:5d:2a:86:89:
         c0:a5:4e:d4:91:a1:73:f2:a3:6f:2f:76:9a:18:96:88:35:40:
         ab:ce:86:19:15:16:8a:0c:11:c0:23:63:fd:06:10:58:24:07:
         6f:5d:ee:c9:95:e0:fc:09:d6:ee:63:76:5b:58:81:60:d5:44:
         73:a3:c7:cb:b6:fe:16:32:a2:ea:e3:88:c4:af:1d:a2:a4:4e:
         86:b5:19:66:20:90:b0:a2:c9:37:c1:3e:55:8b:00:f1:8c:bc:
         7a:47:4d:6d:37:04:4b:cb:4e:c3:5f:0f:74:1e:bc:d9:99:dd:
         50:b5:78:cd:52:c2:cc:34:a5:a4:46:a3:d0:70:e2:2f:62:43:
         43:46:dd:6b:78:be:49:ba:19:08:55:ed:c3:4d:6a:d5:8b:35:
         f0:28:a3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:09 2024 by rpki-client on console-fra.rpki-client.org