Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3137372e37332e3131332e302f32342d3234203d3e20323632353639.roa
File:                     3137372e37332e3131332e302f32342d3234203d3e20323632353639.roa (raw, json)
Hash identifier:          qVafFtsdd9We7dnGH9PYQoyxsVNnHxLyiEcOxD2l59M=
Subject key identifier:   E3:C0:E4:12:C9:27:0D:68:07:C1:28:82:1E:B4:D0:8F:1B:79:70:E2
Certificate issuer:       /CN=22191C91C699626F1DF3C3B76D44F235C4976110
Certificate serial:       5464DA1C118755D052E27DC31BEBA960982FAEB8
Authority key identifier: 22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3137372e37332e3131332e302f32342d3234203d3e20323632353639.roa
Signing time:             Thu 04 Apr 2024 07:20:43 +0000
ROA not before:           Thu 04 Apr 2024 07:15:43 +0000
ROA not after:            Thu 03 Apr 2025 07:20:43 +0000
asID:                     262569
IP address blocks:        177.73.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.crl
                          rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:64:da:1c:11:87:55:d0:52:e2:7d:c3:1b:eb:a9:60:98:2f:ae:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22191C91C699626F1DF3C3B76D44F235C4976110
        Validity
            Not Before: Apr  4 07:15:43 2024 GMT
            Not After : Apr  3 07:20:43 2025 GMT
        Subject: CN=E3C0E412C9270D6807C128821EB4D08F1B7970E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:27:9a:3f:83:ca:2f:30:39:2d:47:c9:5b:32:
                    b5:4e:03:24:d4:21:3c:3f:bd:da:37:6b:42:61:e8:
                    3b:f5:e4:6e:be:95:06:0f:d4:d3:eb:7f:b5:fc:29:
                    22:af:4d:f6:84:68:20:75:9a:4a:9e:29:b8:df:8b:
                    ba:98:4c:ca:44:b0:01:72:f8:36:20:78:10:4f:c1:
                    e0:f0:bf:25:ee:24:95:b5:10:d3:3d:ae:dd:4c:11:
                    e1:63:2c:7a:7d:22:74:67:e8:f8:f6:5f:ff:ec:ad:
                    13:74:1d:67:37:83:c4:e7:9c:86:89:8a:06:63:12:
                    a0:62:4c:73:84:e9:46:9a:b4:88:65:5a:75:76:ee:
                    bd:36:a9:13:dd:da:fd:35:27:c4:14:fd:07:42:3f:
                    27:1c:71:44:77:ce:d2:98:ab:0d:0d:87:84:56:b5:
                    6e:a5:63:3b:e3:6e:0f:e2:ac:ad:c1:44:c0:1c:6f:
                    ab:96:2a:fa:ac:c3:2b:60:c0:94:c2:5f:70:57:6b:
                    c7:95:b9:bd:9d:59:32:8e:ad:fb:00:51:59:47:ab:
                    2d:e7:2c:63:1b:ab:b3:42:bc:ee:72:93:c7:44:69:
                    59:8d:40:62:e2:1d:75:d6:89:e6:c3:5f:b8:0b:ae:
                    bd:75:93:d1:b4:d7:95:f6:47:31:55:d1:d5:57:1b:
                    01:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C0:E4:12:C9:27:0D:68:07:C1:28:82:1E:B4:D0:8F:1B:79:70:E2
            X509v3 Authority Key Identifier:
                keyid:22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3137372e37332e3131332e302f32342d3234203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:12:ba:f3:b6:83:d1:6c:c9:b1:87:92:6f:9f:69:14:4e:26:
         e1:f0:7c:8b:4e:d2:a5:fa:52:40:70:6a:4a:32:9d:4e:2f:d5:
         b6:bf:28:2a:00:dc:5f:b5:2c:68:e6:b0:f0:15:28:f1:6f:97:
         b1:0f:65:46:0d:72:8b:33:9f:35:c8:15:50:c1:53:68:da:af:
         8f:2e:17:68:21:1c:e5:92:3b:74:00:d3:02:f8:b9:2d:38:d8:
         b3:8c:2b:f5:54:98:e7:3e:d0:8d:cb:73:2a:e7:33:8f:47:b2:
         79:55:2e:f8:5e:76:8f:4a:98:03:0d:bf:5d:a0:ac:4c:dc:a6:
         9d:a6:5e:4c:2a:e9:49:61:5a:92:c8:a8:8b:a2:aa:f6:58:eb:
         4b:fc:f1:cd:bd:c0:34:46:48:c5:38:7b:33:2b:be:25:e6:92:
         8e:8b:63:5a:43:aa:8a:a9:5c:db:28:eb:cb:39:62:91:f0:3b:
         fc:7b:f2:23:0f:59:fd:da:e1:41:c3:d8:a0:29:c7:49:5b:37:
         94:ae:33:4a:18:84:a5:6d:48:1d:7a:c4:21:3b:54:0c:d9:53:
         ea:1f:3e:6a:a9:8d:96:92:8b:9b:9d:e6:e7:68:92:21:bf:89:
         49:4e:ff:64:32:6b:08:fa:df:eb:45:d4:ff:60:ce:0b:d5:e3:
         89:0b:90:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 13:25:24 2024 by rpki-client on console-ams.rpki-client.org