Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/3137372e35322e3134392e302f32342d3234203d3e20323633363536.roa
File:                     3137372e35322e3134392e302f32342d3234203d3e20323633363536.roa (raw, json)
Hash identifier:          cv9NH6pIcCXyRlAS1OF/vTXDGq9iAtPDCC/nAA2t7IY=
Subject key identifier:   1B:31:57:3A:2C:34:3B:83:87:DE:39:3D:A8:F4:80:AE:31:31:C9:B0
Certificate issuer:       /CN=652C747C27E6032DB35E33D140A8860A69786CD4
Certificate serial:       32448702EE260A5385E433080D6E163B866A7E19
Authority key identifier: 65:2C:74:7C:27:E6:03:2D:B3:5E:33:D1:40:A8:86:0A:69:78:6C:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652C747C27E6032DB35E33D140A8860A69786CD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/3137372e35322e3134392e302f32342d3234203d3e20323633363536.roa
Signing time:             Fri 26 Jul 2024 19:16:29 +0000
ROA not before:           Fri 26 Jul 2024 19:11:29 +0000
ROA not after:            Fri 25 Jul 2025 19:16:29 +0000
asID:                     263656
IP address blocks:        177.52.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/652C747C27E6032DB35E33D140A8860A69786CD4.crl
                          rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/652C747C27E6032DB35E33D140A8860A69786CD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652C747C27E6032DB35E33D140A8860A69786CD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:44:87:02:ee:26:0a:53:85:e4:33:08:0d:6e:16:3b:86:6a:7e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652C747C27E6032DB35E33D140A8860A69786CD4
        Validity
            Not Before: Jul 26 19:11:29 2024 GMT
            Not After : Jul 25 19:16:29 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7b:32:d6:99:e3:ae:e2:66:f9:41:e6:2d:37:
                    07:f6:d2:89:06:67:d5:1d:8c:4f:37:25:d5:42:fe:
                    c5:fa:a7:ed:f2:78:5f:17:aa:58:db:bf:13:fd:6d:
                    b6:8e:55:39:1d:93:5d:e7:20:0b:b9:68:34:44:21:
                    3d:9b:99:26:d3:c1:81:21:d5:69:0f:6c:ab:40:ed:
                    22:1e:cf:ef:9b:ec:f8:38:3c:de:93:f5:49:57:67:
                    c3:72:d6:44:1d:00:84:ad:73:ee:58:dd:0f:ce:6a:
                    5d:f8:a5:a0:d5:0d:9e:74:31:79:42:7c:79:da:83:
                    fb:82:e8:bc:5f:9c:47:7d:f0:3c:c3:75:74:d3:49:
                    b5:5d:5d:93:82:18:54:8f:cb:a0:ce:f3:62:2d:22:
                    41:6d:25:30:77:db:53:17:c7:0e:d9:f5:37:42:dd:
                    cb:8f:5f:dd:f4:a5:e2:da:cf:8f:14:b5:a6:4c:32:
                    9c:53:de:76:b5:83:0a:5f:69:91:37:cc:70:56:0e:
                    70:24:d8:63:8c:2f:ca:41:c4:3e:be:93:7e:80:84:
                    b4:da:d8:10:5a:26:47:21:0d:6b:86:58:27:3a:93:
                    aa:b3:43:6c:95:61:e6:e1:20:4c:6f:91:0d:6a:af:
                    03:de:e7:1f:ea:88:97:cf:4e:be:28:85:0f:06:9e:
                    43:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:31:57:3A:2C:34:3B:83:87:DE:39:3D:A8:F4:80:AE:31:31:C9:B0
            X509v3 Authority Key Identifier:
                keyid:65:2C:74:7C:27:E6:03:2D:B3:5E:33:D1:40:A8:86:0A:69:78:6C:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/652C747C27E6032DB35E33D140A8860A69786CD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652C747C27E6032DB35E33D140A8860A69786CD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/3137372e35322e3134392e302f32342d3234203d3e20323633363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:b1:f7:35:a4:e1:e4:ed:07:ad:77:47:e9:44:be:0a:8c:59:
         c3:c4:25:f4:56:98:ae:6e:03:2f:35:fc:27:49:7f:77:c9:76:
         17:03:52:ec:50:b3:85:cd:2c:47:46:0f:3c:c3:24:32:31:6b:
         60:f9:33:2a:ea:3d:3a:85:ae:1d:4e:4d:14:9d:8a:fc:8b:5e:
         8e:58:d6:e1:21:71:b9:5b:9c:30:0b:c4:20:a6:12:94:75:35:
         89:47:17:a1:11:92:c3:e2:97:ad:60:de:ac:fb:e5:55:2b:20:
         28:10:6d:22:8e:d5:5c:99:b0:e3:3f:a8:bd:3d:39:82:98:c6:
         29:a2:b9:4e:ca:2b:1c:ca:a3:dd:cb:27:09:a2:2f:47:53:77:
         3a:37:5d:0e:a5:08:20:8a:83:26:bd:15:bf:c8:b1:29:24:bd:
         c9:83:ef:29:f8:df:46:50:8d:aa:57:4d:43:70:67:42:70:42:
         fa:6d:65:30:d3:de:ba:ca:fd:a0:6f:5b:42:94:02:ca:91:be:
         cf:d9:4a:ec:17:0d:6b:57:48:5f:a9:da:b7:32:8e:b2:35:60:
         44:4b:91:18:98:d6:94:a8:31:c2:d1:bc:cc:cf:6e:26:41:cd:
         3c:a2:c7:76:85:5c:59:97:0a:fd:5e:a4:20:eb:a1:72:84:32:
         a8:3a:ea:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:11 2024 by rpki-client on console-ams.rpki-client.org