Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3137372e38372e32372e302f32342d3234203d3e203532343638.roa
File:                     3137372e38372e32372e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          /xBX7/KcL5PrCrmGgS+293Tn901dxrvw3uiRr2oRTm4=
Subject key identifier:   D8:44:80:E0:65:07:C7:BD:17:91:68:90:F7:96:FD:2B:D9:65:E8:84
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       636F8A835E917CECE2F9F03364BE3CA7FB9463E6
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3137372e38372e32372e302f32342d3234203d3e203532343638.roa
Signing time:             Wed 29 May 2024 18:17:14 +0000
ROA not before:           Wed 29 May 2024 18:12:14 +0000
ROA not after:            Wed 28 May 2025 18:17:14 +0000
asID:                     52468
IP address blocks:        177.87.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 19:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:6f:8a:83:5e:91:7c:ec:e2:f9:f0:33:64:be:3c:a7:fb:94:63:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: May 29 18:12:14 2024 GMT
            Not After : May 28 18:17:14 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:51:e4:a7:94:31:92:bd:a8:2c:29:bf:49:fd:
                    49:55:e9:4f:8c:76:20:41:40:ed:7f:78:30:20:1f:
                    df:db:f2:24:96:7d:a7:bd:44:6e:56:db:c7:9e:e4:
                    44:65:fb:5a:d2:9b:d3:d4:83:44:2e:f2:a6:16:eb:
                    50:17:f6:6f:ec:b4:c4:0c:ad:c9:18:e1:a3:55:6e:
                    a0:52:81:cb:65:4c:c5:ad:8f:8c:df:e3:6b:75:ac:
                    87:ee:7a:84:e0:26:c2:bf:57:22:b2:20:57:1d:27:
                    73:40:a7:b1:60:91:e7:06:43:61:33:38:6d:3c:b2:
                    b5:e8:70:04:21:f7:a3:48:45:bc:cc:5a:c7:9f:a6:
                    d5:cb:1a:c9:e7:94:18:a5:1f:d1:a8:2c:88:5b:a3:
                    9f:9f:31:ad:14:75:ae:81:50:2c:f1:a2:18:5a:a4:
                    e1:b0:35:34:95:fe:e4:94:f5:fd:43:b7:57:e1:d5:
                    86:c1:9f:92:2e:29:04:47:80:1a:55:b0:b2:ad:ca:
                    94:c1:f7:71:e0:b8:43:6e:de:ea:d5:bf:0a:85:7a:
                    e3:f1:6b:b7:93:99:da:53:50:19:de:86:1d:11:43:
                    3d:ff:b3:14:9e:38:fb:1b:b5:bc:7c:69:79:9e:c3:
                    09:75:23:b7:26:eb:90:5c:cc:7d:31:d5:56:69:9c:
                    e2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:44:80:E0:65:07:C7:BD:17:91:68:90:F7:96:FD:2B:D9:65:E8:84
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3137372e38372e32372e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:bf:f9:be:c0:99:c3:c2:10:22:fc:88:c3:6f:a6:5f:81:72:
         74:14:1f:2d:ec:64:02:d0:8d:ca:b9:81:08:a2:2f:25:e9:8e:
         1f:9c:21:7d:60:7b:6b:04:b6:62:89:78:e6:cf:6c:35:5d:ed:
         c9:27:1c:67:ac:df:fa:cb:bd:89:bc:99:26:97:5f:ba:0b:0b:
         3f:a1:c1:8d:db:54:26:98:9a:ae:dc:1f:2c:26:29:63:ed:17:
         25:c2:f6:ae:10:38:b4:4e:7c:00:f8:14:a7:9b:3f:c8:69:81:
         2b:09:82:90:60:b1:85:00:4c:05:30:1a:0d:2a:7a:cd:c8:e1:
         7f:a9:36:12:73:ad:1f:bf:cd:0a:c6:58:73:3a:ba:79:f5:f0:
         46:89:5c:ed:a6:52:75:86:32:02:f6:8c:cb:c1:a2:e6:bc:28:
         ff:ff:f7:9b:28:00:d1:8b:52:14:ea:6e:4b:09:c0:cc:10:b2:
         1d:f7:b9:69:04:f7:fd:0f:ff:10:dd:1b:7a:9b:30:72:3d:ce:
         9b:b0:c5:9e:24:c3:ef:f2:99:eb:9f:ce:01:a8:fe:b1:ca:ab:
         e2:84:41:6b:36:ba:2d:09:6e:94:17:7c:04:35:24:82:1f:ef:
         64:79:b3:c8:79:e1:1e:51:75:a6:28:4c:5a:a8:66:dd:44:a9:
         a0:3c:21:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:45 2024 by rpki-client on console-fra.rpki-client.org