Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AZw9gFBAj76afWDcGPH9ZugTGhjmUQFBSDwuxAT3YHeG/1/3137372e38352e3233362e302f32332d3233203d3e20323632353135.roa
File:                     3137372e38352e3233362e302f32332d3233203d3e20323632353135.roa (raw, json)
Hash identifier:          qEPGtpgp7yI/LWsjtyXkwjYs3rt1+j/jKwQlteu09jk=
Subject key identifier:   08:A9:A1:B2:5F:5E:A6:6E:C5:AD:AE:59:E5:B1:13:D6:03:D1:F2:40
Certificate issuer:       /CN=68B9790441FD4B92BE8D96B4A62D4C11518459FB
Certificate serial:       531E51666AA7B4E4F5E6305C33565CD3412CCD0F
Authority key identifier: 68:B9:79:04:41:FD:4B:92:BE:8D:96:B4:A6:2D:4C:11:51:84:59:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68B9790441FD4B92BE8D96B4A62D4C11518459FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZw9gFBAj76afWDcGPH9ZugTGhjmUQFBSDwuxAT3YHeG/1/3137372e38352e3233362e302f32332d3233203d3e20323632353135.roa
Signing time:             Thu 04 Apr 2024 11:19:57 +0000
ROA not before:           Thu 04 Apr 2024 11:14:57 +0000
ROA not after:            Thu 03 Apr 2025 11:19:57 +0000
asID:                     262515
IP address blocks:        177.85.236.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AZw9gFBAj76afWDcGPH9ZugTGhjmUQFBSDwuxAT3YHeG/1/68B9790441FD4B92BE8D96B4A62D4C11518459FB.crl
                          rsync://rpki-repo.registro.br/repo/AZw9gFBAj76afWDcGPH9ZugTGhjmUQFBSDwuxAT3YHeG/1/68B9790441FD4B92BE8D96B4A62D4C11518459FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68B9790441FD4B92BE8D96B4A62D4C11518459FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 13:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:1e:51:66:6a:a7:b4:e4:f5:e6:30:5c:33:56:5c:d3:41:2c:cd:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68B9790441FD4B92BE8D96B4A62D4C11518459FB
        Validity
            Not Before: Apr  4 11:14:57 2024 GMT
            Not After : Apr  3 11:19:57 2025 GMT
        Subject: CN=08A9A1B25F5EA66EC5ADAE59E5B113D603D1F240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:90:a7:f6:05:e1:5e:72:4f:4f:37:af:7b:a8:
                    57:e4:04:ab:81:4b:eb:83:e0:81:4f:f5:82:e0:f1:
                    78:b3:17:fd:c5:83:ab:c5:d7:51:31:06:ce:2b:17:
                    33:6c:ef:a5:0a:ec:eb:07:a6:40:5a:60:11:b5:95:
                    c6:d3:f3:8c:bc:68:d0:54:8b:e4:c8:d5:ad:7c:e4:
                    ec:30:8a:5d:22:7b:ed:c9:0f:34:f4:60:d2:2a:7b:
                    55:2d:38:4a:e2:02:77:b7:c2:b7:ae:47:1d:b4:ee:
                    41:9e:17:7d:1b:73:81:d7:09:7e:26:5b:1c:a4:32:
                    e3:05:da:02:c0:1c:8e:29:07:50:b2:b2:56:d5:03:
                    a7:aa:b1:9c:88:ed:94:93:c8:18:14:29:8f:c3:c5:
                    5d:db:d7:b5:1f:df:76:7e:a9:23:43:0b:01:b5:78:
                    bf:01:e9:76:1c:cb:35:25:95:61:75:7e:14:99:22:
                    93:7d:d9:3d:9a:c1:a3:42:9e:55:c9:d5:29:62:25:
                    b3:55:7b:69:9e:6e:f8:c5:c6:d0:6f:75:05:28:66:
                    46:2f:54:e3:97:c0:2e:20:c7:ef:2e:e7:4d:de:f1:
                    bc:dd:f4:c8:3f:50:c2:cc:68:51:2f:68:01:1b:6c:
                    37:34:70:94:69:3d:77:a8:71:be:24:fc:1f:c6:46:
                    71:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A9:A1:B2:5F:5E:A6:6E:C5:AD:AE:59:E5:B1:13:D6:03:D1:F2:40
            X509v3 Authority Key Identifier:
                keyid:68:B9:79:04:41:FD:4B:92:BE:8D:96:B4:A6:2D:4C:11:51:84:59:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZw9gFBAj76afWDcGPH9ZugTGhjmUQFBSDwuxAT3YHeG/1/68B9790441FD4B92BE8D96B4A62D4C11518459FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68B9790441FD4B92BE8D96B4A62D4C11518459FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZw9gFBAj76afWDcGPH9ZugTGhjmUQFBSDwuxAT3YHeG/1/3137372e38352e3233362e302f32332d3233203d3e20323632353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:3b:77:51:c2:05:95:fc:dd:15:37:82:27:e3:0b:f5:ed:c7:
         79:31:4e:78:38:b8:69:a1:fd:60:df:b1:f2:e7:e1:07:9f:36:
         d6:bb:5c:7f:0e:38:1f:7b:4f:fa:59:0d:b8:bf:89:5c:00:d6:
         94:84:78:6e:7d:08:af:8d:d7:bc:dc:c1:5b:aa:3c:d9:ce:24:
         fd:4e:08:9f:ed:69:a0:f6:51:4e:ba:ef:78:c6:a9:01:ee:e3:
         d4:01:80:a8:99:b5:ae:df:ab:0e:0d:90:74:a6:c8:9b:98:5f:
         b1:d1:29:8f:7e:b1:9e:e7:fa:0c:f4:52:e6:67:a9:66:14:c0:
         95:f1:d8:c1:d5:79:09:a3:2e:61:48:94:f3:4c:16:01:7a:10:
         e3:7d:3b:8f:52:9d:2b:25:25:e0:86:a9:7a:1f:59:bc:f8:f7:
         20:26:dc:1a:8a:22:59:db:e7:d5:b6:33:82:f5:d8:d0:a3:17:
         49:2e:19:3f:60:8b:d1:e3:e0:9c:8f:47:79:29:4b:41:f5:29:
         51:3e:7e:42:f9:78:5a:f2:74:55:27:50:2f:09:8c:b5:02:f9:
         49:74:75:ab:bb:be:e0:36:68:a1:92:3a:1c:2e:66:3b:6c:4c:
         67:43:74:14:99:20:71:28:b5:19:58:ab:51:27:da:bb:54:99:
         47:46:fa:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 12:53:00 2024 by rpki-client on console-ams.rpki-client.org