Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e38362e3233322e302f32322d3232203d3e20323632343434.roa
File:                     3137372e38362e3233322e302f32322d3232203d3e20323632343434.roa (raw, json)
Hash identifier:          X75IQU/gEXR3g3kbltquqF2KACv2qU+WVPOmTptaH6g=
Subject key identifier:   A9:4F:E1:65:F6:E5:DD:DF:A6:D4:F5:50:69:0E:A2:96:57:1C:D1:1A
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       787F4212FED47315B77EA61B41C5CBA2F9F3B241
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e38362e3233322e302f32322d3232203d3e20323632343434.roa
Signing time:             Wed 07 Aug 2024 13:14:35 +0000
ROA not before:           Wed 07 Aug 2024 13:09:35 +0000
ROA not after:            Wed 06 Aug 2025 13:14:35 +0000
asID:                     262444
IP address blocks:        177.86.232.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:34:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:7f:42:12:fe:d4:73:15:b7:7e:a6:1b:41:c5:cb:a2:f9:f3:b2:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Aug  7 13:09:35 2024 GMT
            Not After : Aug  6 13:14:35 2025 GMT
        Subject: CN=A94FE165F6E5DDDFA6D4F550690EA296571CD11A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8e:28:17:cc:4a:36:24:c2:dc:5b:96:1c:45:
                    6a:9b:23:de:b1:48:e1:12:fc:f9:0a:1a:16:3a:f6:
                    a1:8c:b0:26:ba:96:ec:88:14:0d:96:26:60:a0:cf:
                    12:04:3f:79:a6:17:0f:73:72:34:6a:02:f4:9a:bc:
                    26:27:a0:8c:d4:08:75:6b:0f:18:66:bf:0b:52:90:
                    ba:4f:7a:71:aa:8f:df:61:6a:2e:55:15:e6:7d:0d:
                    ce:49:9d:24:5d:b1:e0:5e:3f:0e:00:07:20:1c:f9:
                    e7:34:9b:57:cd:81:c1:1d:11:91:9c:31:18:a7:a7:
                    9a:82:c0:4f:21:1b:e5:96:a3:7b:63:e4:26:9a:23:
                    47:7e:8f:51:7a:ca:69:5f:2c:74:4a:12:6d:b0:57:
                    58:b3:48:71:a5:4f:ad:77:f0:08:34:ba:5c:5e:21:
                    5b:37:b9:4c:95:8c:93:ca:79:0e:dd:96:6f:d4:db:
                    30:82:2f:46:30:7b:3e:39:0d:fd:07:19:23:11:43:
                    f1:88:14:1d:03:00:48:c7:e0:67:50:70:c0:e1:fd:
                    55:ff:ac:3f:33:fc:52:c3:e1:fd:ae:63:77:8b:5d:
                    d2:f7:f5:7c:62:26:b0:28:b1:60:bc:58:5f:b4:b1:
                    6b:ca:86:b6:67:79:f7:f2:a2:f1:14:49:48:74:ef:
                    f6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:4F:E1:65:F6:E5:DD:DF:A6:D4:F5:50:69:0E:A2:96:57:1C:D1:1A
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e38362e3233322e302f32322d3232203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c7:6a:9b:93:cb:0e:be:20:76:79:05:80:f1:e6:d9:46:95:fa:
         ff:17:18:be:22:ea:6e:35:9e:4c:48:aa:d6:92:fa:53:60:35:
         fb:fa:08:48:3e:07:c0:19:8a:b5:ee:44:04:80:64:f8:c2:29:
         90:fa:2b:53:83:ba:37:ed:bf:ba:9d:0a:cd:fa:b8:5f:13:8d:
         f1:d8:79:b6:9f:ee:53:ff:79:9b:b7:11:56:3e:cb:54:a3:ed:
         9b:01:b1:a6:c8:47:18:02:f5:db:74:63:06:4f:21:8c:86:c3:
         56:ea:a6:e5:7a:e5:54:ff:ce:57:1a:48:db:7b:ab:21:65:67:
         da:c2:51:d2:34:54:b2:bc:5c:71:53:6d:97:28:f2:eb:19:12:
         54:49:8c:05:54:15:70:34:fc:b8:fb:62:07:dc:b2:0b:47:b5:
         a1:d6:f6:07:eb:e6:8d:27:09:f0:62:52:f2:7b:4a:24:36:c9:
         72:d0:ad:ed:68:e4:fa:41:1a:80:63:c1:32:0a:c2:aa:5b:97:
         e3:15:84:34:75:aa:6e:9c:2e:3f:0d:ef:5a:53:7d:73:0a:06:
         8c:f8:cc:fb:18:14:16:4a:da:6a:0b:5f:9c:98:d1:3d:42:09:
         82:0a:1f:a8:d3:6d:a6:be:c1:ce:5f:c9:8d:8b:a3:b1:76:ae:
         14:19:e3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:06 2024 by rpki-client on console-ams.rpki-client.org