Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/3137372e35322e3134352e302f32342d3234203d3e20323633363536.roa
File:                     3137372e35322e3134352e302f32342d3234203d3e20323633363536.roa (raw, json)
Hash identifier:          BlCDZRg/ORCEpqAJDDiussBx8pEGBmnJ29ae/fgWNhw=
Subject key identifier:   69:11:D3:7D:EA:78:BF:6F:92:DB:9C:76:EE:4C:6F:4E:15:0D:5F:B7
Certificate issuer:       /CN=652C747C27E6032DB35E33D140A8860A69786CD4
Certificate serial:       61F9FAA4E9DFE77286F6253DFA35BF76001486DB
Authority key identifier: 65:2C:74:7C:27:E6:03:2D:B3:5E:33:D1:40:A8:86:0A:69:78:6C:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652C747C27E6032DB35E33D140A8860A69786CD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/3137372e35322e3134352e302f32342d3234203d3e20323633363536.roa
Signing time:             Fri 26 Jul 2024 19:16:30 +0000
ROA not before:           Fri 26 Jul 2024 19:11:30 +0000
ROA not after:            Fri 25 Jul 2025 19:16:30 +0000
asID:                     263656
IP address blocks:        177.52.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/652C747C27E6032DB35E33D140A8860A69786CD4.crl
                          rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/652C747C27E6032DB35E33D140A8860A69786CD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652C747C27E6032DB35E33D140A8860A69786CD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:f9:fa:a4:e9:df:e7:72:86:f6:25:3d:fa:35:bf:76:00:14:86:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652C747C27E6032DB35E33D140A8860A69786CD4
        Validity
            Not Before: Jul 26 19:11:30 2024 GMT
            Not After : Jul 25 19:16:30 2025 GMT
        Subject: CN=3082010A0282010100AFA5FDEE0D3F5CF2778154F7C8BC6591CDDB49A682BA149C1337B49B71CD2F1D527D2549595BC1FE66FE88223FC4DBC038B3538370E75E1EA8005873AE699FAC4D15FA443AFACB0D70F6CF176E5018ECF3421C85938A176279BAD6CFF0EC30EE7C37008B1F2D6C95C249085090EC474A21211285459DC0AF5B41799F87A142DFDA8C5D0788B18BF0FADE44A08159524BC888EDE57BBEEFC34DD26BD2CAC43DE49920E687113091EACED5F47D24CA134D4C8433A8E88CB152528E1F3975B267F0B0A9F68B4B13DF771BDD3BEFA3F15D7A508C6D7770CEFFDA239E2B3D22B2E31A21B52C296137E9F0502BC9BDD742352AC47A665AF9BA1D8BA281D265E1E6C6C50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a5:fd:ee:0d:3f:5c:f2:77:81:54:f7:c8:bc:
                    65:91:cd:db:49:a6:82:ba:14:9c:13:37:b4:9b:71:
                    cd:2f:1d:52:7d:25:49:59:5b:c1:fe:66:fe:88:22:
                    3f:c4:db:c0:38:b3:53:83:70:e7:5e:1e:a8:00:58:
                    73:ae:69:9f:ac:4d:15:fa:44:3a:fa:cb:0d:70:f6:
                    cf:17:6e:50:18:ec:f3:42:1c:85:93:8a:17:62:79:
                    ba:d6:cf:f0:ec:30:ee:7c:37:00:8b:1f:2d:6c:95:
                    c2:49:08:50:90:ec:47:4a:21:21:12:85:45:9d:c0:
                    af:5b:41:79:9f:87:a1:42:df:da:8c:5d:07:88:b1:
                    8b:f0:fa:de:44:a0:81:59:52:4b:c8:88:ed:e5:7b:
                    be:ef:c3:4d:d2:6b:d2:ca:c4:3d:e4:99:20:e6:87:
                    11:30:91:ea:ce:d5:f4:7d:24:ca:13:4d:4c:84:33:
                    a8:e8:8c:b1:52:52:8e:1f:39:75:b2:67:f0:b0:a9:
                    f6:8b:4b:13:df:77:1b:dd:3b:ef:a3:f1:5d:7a:50:
                    8c:6d:77:70:ce:ff:da:23:9e:2b:3d:22:b2:e3:1a:
                    21:b5:2c:29:61:37:e9:f0:50:2b:c9:bd:d7:42:35:
                    2a:c4:7a:66:5a:f9:ba:1d:8b:a2:81:d2:65:e1:e6:
                    c6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:11:D3:7D:EA:78:BF:6F:92:DB:9C:76:EE:4C:6F:4E:15:0D:5F:B7
            X509v3 Authority Key Identifier:
                keyid:65:2C:74:7C:27:E6:03:2D:B3:5E:33:D1:40:A8:86:0A:69:78:6C:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/652C747C27E6032DB35E33D140A8860A69786CD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652C747C27E6032DB35E33D140A8860A69786CD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/3137372e35322e3134352e302f32342d3234203d3e20323633363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:4c:21:55:0a:a8:68:f6:06:3e:b3:0c:21:18:a3:30:e2:49:
         ed:2c:16:f8:15:f9:75:f3:23:1a:0b:23:50:36:8e:21:1d:d1:
         28:56:4a:4f:15:e3:f6:47:51:d2:cd:03:71:01:80:47:79:19:
         52:ad:a2:71:90:69:8f:48:09:12:ef:f9:b1:f5:a1:9c:65:35:
         1c:0b:b3:4e:ec:97:e9:76:59:40:56:35:6a:8f:fc:f8:cc:64:
         fe:08:08:13:12:68:71:cf:3b:fb:51:c1:2a:bf:a7:75:9b:6f:
         f4:3a:7d:a0:a3:b4:c1:96:b2:42:b4:e3:4c:3e:e4:fa:54:39:
         41:44:99:4c:29:04:9e:57:15:b3:51:9e:69:1c:a3:ef:e9:c3:
         eb:b7:77:34:94:b3:b9:4a:11:4b:4e:cc:ee:f1:f5:16:05:b5:
         74:5c:fc:5c:96:31:6d:f7:04:8d:11:72:a6:c9:63:be:58:20:
         f5:05:64:d9:80:3d:c9:27:89:22:26:52:86:4b:c8:17:0f:37:
         a9:f8:17:4b:1d:a0:fe:d0:65:3b:22:3e:95:15:e3:f1:26:5e:
         a7:ae:ff:dc:6c:f1:45:9b:c0:13:0b:01:ba:f9:f9:b9:22:13:
         9e:94:5c:d3:4c:97:93:39:39:4b:a4:41:0b:74:fe:f9:4f:c7:
         fa:fe:f8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:20 2024 by rpki-client on console-ams.rpki-client.org