Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3137372e37332e3131322e302f32332d3233203d3e20323632353639.roa
File:                     3137372e37332e3131322e302f32332d3233203d3e20323632353639.roa (raw, json)
Hash identifier:          W/FKOErnjRagSOftjufislcy3Eo3iap+EyvAhtaGbxM=
Subject key identifier:   3E:F9:2B:45:35:40:22:42:A3:38:E6:EB:12:24:32:8F:13:F4:C3:AC
Certificate issuer:       /CN=22191C91C699626F1DF3C3B76D44F235C4976110
Certificate serial:       23179E4ACE28D7C2CFC14C15123FA0AF453BE161
Authority key identifier: 22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3137372e37332e3131322e302f32332d3233203d3e20323632353639.roa
Signing time:             Thu 04 Apr 2024 07:20:44 +0000
ROA not before:           Thu 04 Apr 2024 07:15:44 +0000
ROA not after:            Thu 03 Apr 2025 07:20:44 +0000
asID:                     262569
IP address blocks:        177.73.112.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.crl
                          rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:17:9e:4a:ce:28:d7:c2:cf:c1:4c:15:12:3f:a0:af:45:3b:e1:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22191C91C699626F1DF3C3B76D44F235C4976110
        Validity
            Not Before: Apr  4 07:15:44 2024 GMT
            Not After : Apr  3 07:20:44 2025 GMT
        Subject: CN=3EF92B4535402242A338E6EB1224328F13F4C3AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a9:cc:c8:0e:b2:c3:2b:f8:6a:32:d6:9b:a0:
                    9f:49:08:11:38:8b:bd:6d:6b:46:ad:e0:f8:0d:f2:
                    6a:25:f9:3f:77:21:ea:53:64:7a:55:e7:ce:27:5c:
                    50:b5:8d:8a:f8:8c:98:47:5f:12:5b:4a:77:ad:25:
                    81:7b:02:d3:a0:d6:b0:19:cd:bf:51:ce:d9:0f:c4:
                    f1:88:93:21:02:eb:a4:5a:03:8c:3a:8e:b1:20:de:
                    ff:f2:d6:d0:7f:b3:6d:b3:d2:d0:35:a7:02:07:9e:
                    e6:2d:fb:8a:01:9f:eb:83:c1:6a:fb:91:c9:2c:90:
                    af:79:7c:f2:b1:f4:bd:d5:6a:fe:5d:79:77:39:ea:
                    64:2a:85:a9:19:f1:d5:18:4c:a3:a1:c1:a6:53:2a:
                    32:0d:c5:f4:eb:e6:97:fa:e6:a3:2e:11:20:a8:e9:
                    e2:e3:72:f5:7c:ba:50:da:fe:53:3e:69:20:4a:ff:
                    b3:78:65:8d:a3:b7:47:91:42:75:72:a7:c6:cd:01:
                    f7:12:cf:b4:40:e2:b2:da:5a:51:6b:6c:92:fc:2a:
                    64:4a:83:c1:1f:4b:e5:7a:eb:be:ec:36:d7:0e:89:
                    5b:21:e2:87:99:10:36:55:a5:3a:e6:20:74:1d:9b:
                    d8:5f:1b:cb:18:1a:7e:67:8c:17:19:fb:ee:c0:f3:
                    6f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F9:2B:45:35:40:22:42:A3:38:E6:EB:12:24:32:8F:13:F4:C3:AC
            X509v3 Authority Key Identifier:
                keyid:22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3137372e37332e3131322e302f32332d3233203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:ea:36:9a:f3:e7:c5:b4:b8:de:40:26:b2:09:a3:c2:49:17:
         1b:9d:6b:7e:43:cc:47:17:49:15:fe:79:1a:ec:25:21:59:b0:
         6d:a6:45:4a:b6:0f:9c:d8:e4:e6:f6:dc:12:5c:f1:2f:e3:80:
         6b:64:cf:95:0e:39:40:89:40:46:41:c3:93:c2:4d:c9:15:f0:
         e3:7c:e8:b1:de:06:05:80:3f:f0:ef:d9:2e:cf:50:3c:d1:5a:
         84:a7:ef:9a:4c:c7:c0:62:22:12:39:ec:21:df:40:39:5e:10:
         b3:87:3b:68:0d:ac:f9:c0:37:c9:1b:cd:13:4e:ae:36:0b:c1:
         ef:d9:0d:fc:b4:35:85:12:47:8e:88:ea:8e:11:fb:b9:f8:5f:
         bd:46:53:b0:da:d6:53:3e:82:95:b1:5e:9b:3a:18:d8:47:a0:
         e1:4b:48:a2:e8:a6:e9:16:c2:c9:d5:3e:fb:c0:2c:43:95:0b:
         d8:30:f8:5a:d5:9e:33:25:e2:ac:82:e6:f0:d1:83:22:49:02:
         32:fc:5e:27:a4:1e:1d:51:2f:c5:5a:ee:69:d4:e3:3e:1d:44:
         bc:5c:8b:79:9f:99:a8:b9:79:f0:a2:09:98:73:bf:c5:99:e5:
         cd:dd:a5:be:1c:eb:32:02:0e:ea:47:74:8e:55:3c:80:e8:97:
         ce:f8:5b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 12:21:59 2024 by rpki-client on console-fra.rpki-client.org