Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137372e36362e312e302f32342d3234203d3e20323632343835.roa
File:                     3137372e36362e312e302f32342d3234203d3e20323632343835.roa (raw, json)
Hash identifier:          cnSH7EuoS1IxvMBqkLTxvsHOgw29WbvXrGZJJWDZSGo=
Subject key identifier:   86:1B:E3:70:D2:96:5A:A9:53:9E:28:5E:E7:25:06:C1:BB:D6:C1:CA
Certificate issuer:       /CN=4774D086E10F29F42B699F993DE4061E0FDF8862
Certificate serial:       11D6558A5371E2070A055AFCF68E1FBE2D76FE19
Authority key identifier: 47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137372e36362e312e302f32342d3234203d3e20323632343835.roa
Signing time:             Sat 27 Jul 2024 21:13:25 +0000
ROA not before:           Sat 27 Jul 2024 21:08:25 +0000
ROA not after:            Sat 26 Jul 2025 21:13:25 +0000
asID:                     262485
IP address blocks:        177.66.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl
                          rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Nov 2024 01:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:d6:55:8a:53:71:e2:07:0a:05:5a:fc:f6:8e:1f:be:2d:76:fe:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4774D086E10F29F42B699F993DE4061E0FDF8862
        Validity
            Not Before: Jul 27 21:08:25 2024 GMT
            Not After : Jul 26 21:13:25 2025 GMT
        Subject: CN=861BE370D2965AA9539E285EE72506C1BBD6C1CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2d:1d:44:7e:2c:59:66:3d:e9:db:8a:ca:0e:
                    96:9a:7b:af:3c:31:d3:52:02:fd:44:c9:10:05:97:
                    a7:6a:9d:f9:60:e1:45:18:4a:1b:e4:fb:c5:e5:81:
                    63:17:0e:49:a5:ea:11:32:c7:b3:78:36:bb:3e:5b:
                    c3:dc:0c:86:a2:69:3e:03:31:56:5b:9b:98:bb:16:
                    1c:50:e0:5e:c9:12:8e:09:8a:e7:d9:e7:ca:38:e3:
                    43:91:f9:45:7d:60:6a:c4:83:e2:b7:5f:62:b3:5a:
                    23:8b:a4:7f:42:a9:5e:87:88:4b:dc:1d:0a:de:85:
                    d0:54:13:70:d8:66:7f:ed:87:b8:d7:f9:3e:58:46:
                    c2:9b:13:65:06:54:aa:64:b4:ec:9c:5b:27:30:bd:
                    3d:ff:42:0f:af:58:f6:6c:f2:34:d5:62:2d:b3:51:
                    b3:61:bc:22:85:45:38:d5:00:b5:d1:4a:b2:0b:79:
                    eb:93:eb:c9:53:0b:d6:09:73:27:68:2a:0b:16:74:
                    b8:51:74:65:ec:80:71:27:18:43:21:65:41:22:bf:
                    59:f0:ad:11:7c:90:9e:d9:ec:f6:7d:83:4d:43:db:
                    1f:90:79:3a:d3:5f:38:92:f4:29:c7:70:65:57:92:
                    44:74:de:85:f6:c5:c2:2c:d1:89:fa:c4:b1:57:cf:
                    c7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:1B:E3:70:D2:96:5A:A9:53:9E:28:5E:E7:25:06:C1:BB:D6:C1:CA
            X509v3 Authority Key Identifier:
                keyid:47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137372e36362e312e302f32342d3234203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:35:2c:75:c7:52:32:f2:61:54:6d:33:c7:9c:e6:36:2a:fa:
         f4:6c:f0:85:18:ab:40:8c:4f:78:32:a7:cc:0d:57:87:0c:40:
         0c:04:8b:21:91:99:db:68:48:44:e9:a6:9a:08:23:95:89:b5:
         9d:0f:19:c5:52:e0:ea:54:80:6f:84:c3:89:0e:bb:1a:f7:c2:
         6d:d0:e8:81:22:9a:ed:e4:11:95:2f:40:bc:0e:1a:35:63:f8:
         16:2b:63:6e:ef:f8:b5:a1:63:94:bb:36:43:19:ab:78:7e:25:
         90:63:84:2a:89:e3:f7:d8:45:d7:5f:fc:34:e4:a0:71:52:64:
         55:63:e6:b3:8b:39:70:59:26:48:50:9b:fa:e5:cd:bd:00:e4:
         16:f1:6c:e2:59:19:25:82:89:72:ce:bc:01:17:ca:0c:62:45:
         c2:bf:f3:ea:8a:01:9c:07:06:88:0e:a1:a0:7d:46:59:70:02:
         aa:32:7f:7f:cd:d9:b2:13:f6:f7:36:fe:83:24:6e:fb:4b:77:
         f6:b5:07:6d:59:d0:c7:55:46:4f:29:83:83:5a:aa:5c:c4:2b:
         76:8b:bd:5f:22:69:6a:5e:b9:d4:ea:49:35:fa:e6:2f:33:bb:
         25:84:0b:04:ae:fb:7e:b0:5c:37:84:7f:27:f0:f7:2e:7b:25:
         43:1d:c9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 03:39:06 2024 by rpki-client on console-fra.rpki-client.org