Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e31382e302f32342d3234203d3e203533323235.roa
File:                     3137372e3133372e31382e302f32342d3234203d3e203533323235.roa (raw, json)
Hash identifier:          77jAYta0oze4KGy0l1HLmb/a2RunAW2brJrZjNb+H18=
Subject key identifier:   42:5A:FA:09:D4:6E:8D:60:09:15:74:CB:85:05:0E:A6:6A:31:CC:57
Certificate issuer:       /CN=56F1FE06E3B662E9E113C02AE10D3EA04A72F7B9
Certificate serial:       0C5C9C404DE2B6240565914D0FD7F3CFEFE976BF
Authority key identifier: 56:F1:FE:06:E3:B6:62:E9:E1:13:C0:2A:E1:0D:3E:A0:4A:72:F7:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56F1FE06E3B662E9E113C02AE10D3EA04A72F7B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e31382e302f32342d3234203d3e203533323235.roa
Signing time:             Thu 19 Oct 2023 19:12:42 +0000
ROA not before:           Thu 19 Oct 2023 19:07:42 +0000
ROA not after:            Thu 17 Oct 2024 19:12:42 +0000
asID:                     53225
IP address blocks:        177.137.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/56F1FE06E3B662E9E113C02AE10D3EA04A72F7B9.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/56F1FE06E3B662E9E113C02AE10D3EA04A72F7B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56F1FE06E3B662E9E113C02AE10D3EA04A72F7B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 09 Jan 2024 23:20:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:5c:9c:40:4d:e2:b6:24:05:65:91:4d:0f:d7:f3:cf:ef:e9:76:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56F1FE06E3B662E9E113C02AE10D3EA04A72F7B9
        Validity
            Not Before: Oct 19 19:07:42 2023 GMT
            Not After : Oct 17 19:12:42 2024 GMT
        Subject: CN=425AFA09D46E8D60091574CB85050EA66A31CC57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:3d:58:3b:e1:2b:fb:1c:a9:41:66:24:de:72:
                    14:b9:fa:80:05:38:f7:27:2e:9e:1f:a4:72:bd:f8:
                    0d:c7:f5:1c:7d:47:d8:db:22:5e:0d:dd:7f:ef:60:
                    2b:8a:4e:67:d9:e4:cf:4d:e8:95:42:b4:1b:cb:d7:
                    91:8f:d2:43:28:2a:1d:33:c5:ee:13:a9:45:de:7e:
                    e1:11:cb:4b:61:c6:7c:04:ce:63:a5:98:e9:51:c2:
                    5b:c7:62:2d:17:83:5f:38:fb:d7:82:fe:89:66:6d:
                    f5:09:97:27:5d:7d:e2:8f:e9:14:f2:33:31:1b:60:
                    80:b1:72:fb:75:fb:f9:a7:7e:62:0b:80:94:ee:a4:
                    5c:c0:0e:1d:7f:f8:34:20:1e:70:86:d1:90:bc:c2:
                    0a:90:d4:29:f6:1a:57:b9:d0:38:fe:51:d3:6c:a9:
                    b2:40:70:e0:6c:6d:15:76:07:5e:f2:62:7a:50:a1:
                    5f:81:56:c2:7e:ad:d0:95:5d:4a:91:42:61:0e:8a:
                    d1:2e:db:2e:f5:19:4c:01:73:44:f7:ca:5f:aa:41:
                    4c:42:03:e6:71:28:89:6a:41:73:41:7e:5c:d3:b3:
                    11:50:2f:2a:fb:37:ca:5d:06:06:a1:7c:6e:4e:78:
                    9b:b8:9b:1b:da:25:9d:31:f7:e2:00:6b:7a:2b:70:
                    27:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:5A:FA:09:D4:6E:8D:60:09:15:74:CB:85:05:0E:A6:6A:31:CC:57
            X509v3 Authority Key Identifier:
                keyid:56:F1:FE:06:E3:B6:62:E9:E1:13:C0:2A:E1:0D:3E:A0:4A:72:F7:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/56F1FE06E3B662E9E113C02AE10D3EA04A72F7B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56F1FE06E3B662E9E113C02AE10D3EA04A72F7B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e31382e302f32342d3234203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:36:d8:9b:e8:ba:67:0a:c8:35:bc:d9:b8:29:5b:98:32:b2:
         27:5e:1d:88:13:38:4b:6e:13:4f:8c:94:40:aa:5d:e7:73:b0:
         83:2f:f1:19:58:8d:d9:f2:d3:d4:24:35:6e:3a:a7:56:ca:fc:
         af:a8:39:43:02:b8:c4:15:31:78:73:30:14:4e:c9:f6:bf:d8:
         09:ea:54:f9:41:e7:a8:7a:b5:93:6d:17:0e:f9:f2:6c:db:7e:
         c6:14:48:39:f4:b3:74:d3:e6:8d:8b:54:d3:5a:f2:58:9a:c9:
         66:37:0b:28:ba:ae:f0:dd:6a:55:7d:de:32:f0:db:af:1d:74:
         e8:08:e8:f1:70:0c:90:9e:af:ab:cd:4a:da:6e:94:8f:35:b4:
         9c:4e:db:32:1d:6c:eb:a6:0c:95:9a:8d:7e:52:31:d1:4c:b2:
         36:01:ea:5f:48:2d:3c:4e:d3:6d:d2:f8:59:9f:15:6b:f6:0b:
         3b:a8:9a:fc:49:41:74:92:64:bd:00:02:9f:9f:89:62:52:36:
         ab:0a:e1:f0:2f:5d:4e:03:8f:9e:41:07:c5:92:d9:5a:4f:a0:
         e0:01:6f:20:3e:79:9c:fc:d5:ec:2d:96:04:ae:e0:17:6d:72:
         76:d3:e9:9e:62:79:fb:4b:ae:78:4f:1c:ed:26:e8:dd:4e:b4:
         56:ed:03:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 8 22:53:26 2024 by rpki-client on console.sobornost.net