Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/37322e34342e31382e302f32342d3234203d3e20323636313635.roa
File:                     37322e34342e31382e302f32342d3234203d3e20323636313635.roa (raw, json)
Hash identifier:          CFvDtwGuXX3TwTG6SCRYexm8vl9RnRp0+xos/ftWyfk=
Subject key identifier:   77:B1:43:D1:5B:AA:62:26:7C:69:4E:C1:0D:3F:35:93:89:0A:C1:55
Certificate issuer:       /CN=103266039FE0E42654222D6D1D326D5613C32C2E
Certificate serial:       3C925D774C24BB072953DE35A0811B9AC77ACED9
Authority key identifier: 10:32:66:03:9F:E0:E4:26:54:22:2D:6D:1D:32:6D:56:13:C3:2C:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103266039FE0E42654222D6D1D326D5613C32C2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/37322e34342e31382e302f32342d3234203d3e20323636313635.roa
Signing time:             Wed 31 Jul 2024 02:02:48 +0000
ROA not before:           Wed 31 Jul 2024 01:57:48 +0000
ROA not after:            Wed 30 Jul 2025 02:02:48 +0000
asID:                     266165
IP address blocks:        72.44.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/103266039FE0E42654222D6D1D326D5613C32C2E.crl
                          rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/103266039FE0E42654222D6D1D326D5613C32C2E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103266039FE0E42654222D6D1D326D5613C32C2E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:92:5d:77:4c:24:bb:07:29:53:de:35:a0:81:1b:9a:c7:7a:ce:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103266039FE0E42654222D6D1D326D5613C32C2E
        Validity
            Not Before: Jul 31 01:57:48 2024 GMT
            Not After : Jul 30 02:02:48 2025 GMT
        Subject: CN=77B143D15BAA62267C694EC10D3F3593890AC155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3d:ba:11:35:be:74:1f:c9:62:58:8c:a3:66:
                    f8:b3:1b:33:41:b6:8d:a2:e1:c0:0e:8a:f2:16:7a:
                    0d:23:8e:e9:46:bd:d2:4b:9f:1f:5e:93:0e:20:8e:
                    e2:2e:81:60:01:1e:91:ea:3d:d1:0b:6a:90:e0:13:
                    93:29:14:fe:f3:c1:a7:48:a5:a8:42:c3:f8:89:67:
                    45:7c:64:51:d7:9f:e2:41:bf:ef:88:0e:55:6c:12:
                    cb:a0:92:08:ca:0e:8a:8a:76:ef:df:30:e3:78:50:
                    80:7d:d6:49:06:fd:78:7b:68:f1:90:36:43:f1:06:
                    0a:33:a5:23:7a:5f:d1:33:cb:af:81:c7:6a:e9:64:
                    7e:04:86:f6:91:a7:d8:dd:3a:d4:20:ea:40:21:72:
                    db:65:d9:9d:88:1c:45:be:15:33:96:3e:5a:1e:21:
                    45:f6:5c:ab:45:c1:4d:76:5b:3d:c6:d5:c0:f1:61:
                    7a:9f:17:2c:fd:9e:24:f1:02:e4:5b:9f:ca:f6:31:
                    71:21:dd:e3:91:68:e4:bb:b7:26:28:50:95:4b:a4:
                    bd:60:0b:fb:3c:92:b6:5e:8f:56:bc:99:6b:b3:e8:
                    17:0d:15:89:f9:f5:f2:58:c0:c3:64:e2:df:87:c8:
                    20:1d:0d:11:7e:a6:ae:d5:f9:67:38:0d:7d:ad:1b:
                    3e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B1:43:D1:5B:AA:62:26:7C:69:4E:C1:0D:3F:35:93:89:0A:C1:55
            X509v3 Authority Key Identifier:
                keyid:10:32:66:03:9F:E0:E4:26:54:22:2D:6D:1D:32:6D:56:13:C3:2C:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/103266039FE0E42654222D6D1D326D5613C32C2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103266039FE0E42654222D6D1D326D5613C32C2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/37322e34342e31382e302f32342d3234203d3e20323636313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.44.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:01:70:9c:58:b3:2a:26:42:8b:15:3d:31:28:40:08:46:1d:
         5d:2b:54:f9:45:1b:e2:6a:30:d0:04:35:9d:cd:8b:8e:58:c2:
         63:9f:14:a7:e0:d2:a2:cb:c7:26:0f:1b:b4:d2:08:6a:e9:28:
         a9:01:11:9e:50:ea:54:1d:bb:97:70:7a:b1:b2:91:5e:46:31:
         f0:34:28:a5:cc:78:13:6c:59:a4:22:fb:c7:a8:bd:e3:a4:31:
         b6:45:0b:6b:18:61:5e:03:af:f4:f0:36:67:77:08:31:20:a1:
         53:3a:f0:2b:ff:9d:21:4c:91:0d:28:e5:09:5b:7a:d3:f8:e8:
         fe:4c:96:5d:81:81:3f:82:44:2e:1a:27:91:f5:9b:34:4b:18:
         4d:17:76:e4:62:72:11:d2:ca:eb:fb:b0:10:a9:b5:9b:08:5d:
         3f:20:08:7b:88:88:85:d9:df:88:cf:2e:73:ac:15:10:e0:29:
         d3:56:7d:86:8f:aa:43:fe:04:f3:5b:95:f1:64:06:ea:2f:38:
         88:d7:75:4a:2c:c1:58:15:67:2a:92:64:55:cb:e5:d1:ba:f8:
         28:4f:f0:2c:2a:25:32:61:b4:1c:d8:1a:74:88:89:60:bb:50:
         90:ff:90:58:68:e4:ca:57:15:e1:d6:a2:1c:c5:f0:ef:0f:1c:
         45:0f:c4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:41 2024 by rpki-client on console-fra.rpki-client.org