Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/3137372e35322e3135312e302f32342d3234203d3e20323633363536.roa
File:                     3137372e35322e3135312e302f32342d3234203d3e20323633363536.roa (raw, json)
Hash identifier:          maliK5Y+z5/BDsSnBBcICYw4qFKL0TjEUVq89el5Zqs=
Subject key identifier:   B3:61:D7:73:73:6F:7B:24:37:5D:EE:83:51:29:D9:C2:88:E1:39:14
Certificate issuer:       /CN=652C747C27E6032DB35E33D140A8860A69786CD4
Certificate serial:       6D22D62414B71B3CF5E2890A4BED3FEE90DA11F1
Authority key identifier: 65:2C:74:7C:27:E6:03:2D:B3:5E:33:D1:40:A8:86:0A:69:78:6C:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652C747C27E6032DB35E33D140A8860A69786CD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/3137372e35322e3135312e302f32342d3234203d3e20323633363536.roa
Signing time:             Fri 26 Jul 2024 19:16:29 +0000
ROA not before:           Fri 26 Jul 2024 19:11:29 +0000
ROA not after:            Fri 25 Jul 2025 19:16:29 +0000
asID:                     263656
IP address blocks:        177.52.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/652C747C27E6032DB35E33D140A8860A69786CD4.crl
                          rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/652C747C27E6032DB35E33D140A8860A69786CD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652C747C27E6032DB35E33D140A8860A69786CD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:22:d6:24:14:b7:1b:3c:f5:e2:89:0a:4b:ed:3f:ee:90:da:11:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652C747C27E6032DB35E33D140A8860A69786CD4
        Validity
            Not Before: Jul 26 19:11:29 2024 GMT
            Not After : Jul 25 19:16:29 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:aa:fc:ce:47:20:49:fd:a4:02:7e:60:57:1a:
                    f4:73:09:63:cd:0d:d0:06:51:fc:83:3c:7e:3f:e7:
                    8e:d8:42:78:d6:ac:e7:11:96:f9:4b:01:83:be:0e:
                    e4:e9:d2:57:32:c6:ed:2a:d7:90:45:96:d3:78:0a:
                    da:06:80:51:2f:36:76:dd:54:93:58:5f:30:1c:94:
                    e3:db:59:17:a1:c6:cb:28:eb:45:79:ff:45:72:c8:
                    62:5c:c9:c4:15:71:d8:2d:55:4f:37:e2:de:03:26:
                    35:80:20:2b:bb:f6:e9:d7:70:bd:cc:bb:c1:ea:82:
                    02:3e:b7:26:8d:84:31:39:97:08:83:97:e0:c7:29:
                    d9:55:87:6b:69:f6:ac:f1:dc:2d:95:d9:26:aa:76:
                    4d:39:cc:57:71:7e:9d:4c:ef:da:8b:4a:97:d4:44:
                    a4:7e:9f:d4:bc:7c:cd:8c:3e:36:20:89:1a:de:a1:
                    a6:a0:f1:6e:6e:65:43:e4:fa:00:ff:39:49:26:90:
                    e8:47:16:40:85:f5:37:0d:f9:12:6c:2a:74:4c:ba:
                    fe:64:7a:a2:5e:07:51:cb:c5:c9:92:98:e1:46:b9:
                    5b:46:1f:9b:90:ac:53:06:c5:85:7d:b7:f3:fa:f0:
                    c9:cb:7c:52:e8:21:55:10:e3:8c:bc:82:aa:e1:e3:
                    bd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:61:D7:73:73:6F:7B:24:37:5D:EE:83:51:29:D9:C2:88:E1:39:14
            X509v3 Authority Key Identifier:
                keyid:65:2C:74:7C:27:E6:03:2D:B3:5E:33:D1:40:A8:86:0A:69:78:6C:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/652C747C27E6032DB35E33D140A8860A69786CD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652C747C27E6032DB35E33D140A8860A69786CD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/1/3137372e35322e3135312e302f32342d3234203d3e20323633363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:f5:35:75:9b:3c:7c:39:3b:25:33:ac:f3:2b:cf:4b:16:86:
         3f:9a:23:05:5c:33:80:96:61:ff:25:bb:ab:bd:b2:72:c9:a3:
         78:3e:e0:e0:03:aa:bc:51:39:fe:70:74:f1:6d:22:a6:e6:66:
         d4:8e:2a:d5:84:45:12:95:d8:6a:92:5b:19:70:ee:48:ba:12:
         73:6c:1b:bc:57:c3:33:40:e8:d1:a7:92:b7:70:45:3c:bb:3e:
         06:88:32:76:d8:f5:11:4b:1d:d7:80:78:1f:8c:0d:15:42:06:
         03:68:e2:8c:02:ff:bb:d5:c7:ae:18:a3:39:fa:e0:e6:fa:90:
         7c:f1:aa:bc:a2:03:af:d7:35:f2:b1:6e:f9:6a:dd:12:d5:4e:
         17:24:2b:5c:4a:f5:2f:12:39:14:45:ab:cc:d0:2e:c1:1e:f3:
         4f:34:9c:e6:3f:38:89:ce:59:01:3f:c2:5c:66:56:7d:21:71:
         13:fb:93:28:00:74:cb:d1:36:b5:9c:c9:d4:87:4e:75:39:38:
         80:a1:bb:de:c0:43:53:bc:7c:4f:e0:6d:8b:a6:76:57:6e:09:
         91:a4:9e:74:4d:ba:46:bc:41:1c:c7:c6:20:cc:ff:b8:67:1c:
         f2:8c:0a:90:a8:11:4a:1d:c6:2d:96:66:88:49:70:51:8d:af:
         65:f9:40:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:11 2024 by rpki-client on console-ams.rpki-client.org