Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e3135322e36352e302f32342d3234203d3e20323632373733.roa
File:                     3137372e3135322e36352e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          u8H8iZAfd0nFIGJYo3Aez4Kn7ccWxJsKzmqhsV+WGBc=
Subject key identifier:   D9:CB:7C:42:A4:7B:81:A6:57:E9:E4:66:1E:AA:E0:74:5C:06:0C:0D
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       5FDBEF694B4D31098D3007D5DA7EDBCD9FAEDC28
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e3135322e36352e302f32342d3234203d3e20323632373733.roa
Signing time:             Thu 04 Apr 2024 06:12:48 +0000
ROA not before:           Thu 04 Apr 2024 06:07:48 +0000
ROA not after:            Thu 03 Apr 2025 06:12:48 +0000
asID:                     262773
IP address blocks:        177.152.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 17:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:db:ef:69:4b:4d:31:09:8d:30:07:d5:da:7e:db:cd:9f:ae:dc:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Apr  4 06:07:48 2024 GMT
            Not After : Apr  3 06:12:48 2025 GMT
        Subject: CN=D9CB7C42A47B81A657E9E4661EAAE0745C060C0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1d:ea:e6:3e:12:d9:0a:8d:75:50:b7:af:4c:
                    ff:08:ba:7d:ed:11:97:7f:7f:aa:01:88:34:82:c5:
                    19:57:02:3d:1b:d9:44:8c:1f:19:33:84:c6:92:36:
                    86:ff:dc:c3:94:14:66:1b:08:e5:c4:cd:62:dd:0a:
                    d5:85:ae:35:e8:35:7a:85:17:5d:57:ff:16:4e:d6:
                    3f:71:12:81:5b:32:c5:56:25:c5:61:cf:16:3a:1e:
                    92:2a:73:81:93:ec:f5:0e:c6:e8:21:3f:8d:f9:23:
                    e5:55:ee:a3:86:64:a5:64:77:bc:8c:7f:8a:62:d1:
                    7b:d0:6f:84:1f:28:92:a5:09:f1:26:fa:bc:56:56:
                    78:a3:62:f9:33:52:c4:b6:b2:58:70:e9:69:f4:ec:
                    2f:99:7b:63:e0:30:28:9a:2e:93:2b:05:16:39:0d:
                    97:67:2d:ff:27:15:e5:e5:06:a2:91:da:e9:80:f6:
                    db:11:20:e7:8b:8c:be:69:62:7f:36:67:72:0e:b0:
                    0a:be:cb:16:ec:6b:65:42:98:a6:ff:0b:e1:a2:0c:
                    44:aa:2e:9e:3c:b9:0b:00:e0:8e:64:0f:6a:cd:c7:
                    e5:c1:1a:91:a1:b0:86:6b:ea:02:49:15:6b:ae:16:
                    d0:56:d6:26:25:18:a8:4d:a7:ca:78:53:e3:cf:c4:
                    74:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:CB:7C:42:A4:7B:81:A6:57:E9:E4:66:1E:AA:E0:74:5C:06:0C:0D
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e3135322e36352e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:da:b1:f9:9b:8d:d8:68:78:69:ae:58:14:b3:08:58:81:d0:
         58:97:3c:39:1b:9e:9c:a5:68:a2:15:77:ee:11:5f:9e:1a:5f:
         9c:00:a9:7b:35:4f:ba:9b:2d:f5:a1:a1:f1:b4:12:0b:89:4d:
         c4:0a:61:23:72:bd:f4:08:33:b9:36:8c:2b:05:ce:31:21:3e:
         fd:ef:7e:5b:22:b9:6d:1d:ab:46:4a:eb:07:5c:11:aa:3f:5f:
         2b:65:75:92:52:d8:97:09:f5:66:55:77:76:e9:f7:46:d5:6f:
         19:19:1d:40:ea:7b:f5:d4:e1:bf:c7:0c:1e:a6:da:6e:47:71:
         d7:57:0f:8f:00:75:81:c4:57:9f:67:31:18:73:3a:72:8d:eb:
         97:8f:56:c2:a9:94:be:c0:34:64:58:8c:4e:ae:69:09:d6:04:
         2d:c5:e5:87:12:d6:79:e6:5b:18:6c:69:b3:c5:f2:41:d4:59:
         c0:fa:66:bd:50:ad:25:a1:df:2d:c2:5b:02:52:44:36:db:4a:
         cb:f7:80:ea:16:15:16:32:f7:f9:dd:7a:92:92:3a:9c:a9:36:
         98:35:81:fb:7d:0f:1f:f3:1e:a7:d9:9f:bc:a5:83:55:64:b0:
         b9:e0:21:e3:cf:20:64:89:37:73:81:29:c4:d1:77:79:c0:0e:
         38:7a:b5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:12 2024 by rpki-client on console-fra.rpki-client.org