Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/3137372e38352e31302e302f32342d3234203d3e20323731323633.roa
File:                     3137372e38352e31302e302f32342d3234203d3e20323731323633.roa (raw, json)
Hash identifier:          ygY1gKiTofXzpBeCR8QYE4qFzPnbXRNqCJ7ee63SjFc=
Subject key identifier:   EA:33:33:2E:10:0F:E5:BF:E7:48:C1:05:30:6E:71:59:D1:F7:DD:EE
Certificate issuer:       /CN=6A3922C63D251D52E98CA62A1651A24AE3DC8026
Certificate serial:       53B749F60B3CA1FB07593E86D4EA92DB36BA5A03
Authority key identifier: 6A:39:22:C6:3D:25:1D:52:E9:8C:A6:2A:16:51:A2:4A:E3:DC:80:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A3922C63D251D52E98CA62A1651A24AE3DC8026.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/3137372e38352e31302e302f32342d3234203d3e20323731323633.roa
Signing time:             Mon 13 May 2024 20:03:24 +0000
ROA not before:           Mon 13 May 2024 19:58:24 +0000
ROA not after:            Mon 12 May 2025 20:03:24 +0000
asID:                     271263
IP address blocks:        177.85.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/6A3922C63D251D52E98CA62A1651A24AE3DC8026.crl
                          rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/6A3922C63D251D52E98CA62A1651A24AE3DC8026.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A3922C63D251D52E98CA62A1651A24AE3DC8026.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:b7:49:f6:0b:3c:a1:fb:07:59:3e:86:d4:ea:92:db:36:ba:5a:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A3922C63D251D52E98CA62A1651A24AE3DC8026
        Validity
            Not Before: May 13 19:58:24 2024 GMT
            Not After : May 12 20:03:24 2025 GMT
        Subject: CN=EA33332E100FE5BFE748C105306E7159D1F7DDEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d1:60:ed:1b:ee:ca:da:48:d3:a5:9c:b8:4d:
                    54:53:6c:6b:29:1a:f4:52:fe:ef:31:7e:04:98:c5:
                    5d:bd:e9:c2:05:c8:d8:8d:b7:7b:39:28:8d:35:15:
                    3d:23:a8:83:3c:85:c9:3d:49:2c:27:d4:25:b3:7a:
                    6a:79:f6:ab:3f:53:a5:c7:40:91:ae:01:cd:96:bc:
                    53:e0:87:d4:2a:9d:c9:3f:6c:5b:f6:38:33:72:5e:
                    23:79:59:89:f1:73:3b:62:e4:fa:e4:aa:0e:60:79:
                    b4:e5:8e:3a:b6:f6:8b:03:7b:e5:fa:13:c8:1e:af:
                    30:31:bf:b5:f6:d7:22:9f:49:d1:1e:46:e3:92:5d:
                    df:52:7e:3c:9d:91:c6:67:f6:50:f2:cd:15:24:d4:
                    ce:e8:a3:b1:21:ef:65:a8:02:42:0b:ed:c0:13:53:
                    a0:32:b2:68:8e:66:ac:2e:7e:bf:ec:bd:e6:84:fb:
                    5f:d2:38:27:f3:63:c9:af:2b:5e:61:99:b7:62:30:
                    ff:82:0a:17:0a:6b:fc:33:0a:e2:ad:17:5a:d8:09:
                    0f:77:d3:9e:12:0f:08:3c:89:02:3c:2d:ff:b8:34:
                    7a:75:bd:c6:74:c1:a0:4a:9c:87:a9:ad:ca:e4:76:
                    e1:25:c6:37:11:71:11:eb:7e:50:dc:2a:38:ac:14:
                    00:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:33:33:2E:10:0F:E5:BF:E7:48:C1:05:30:6E:71:59:D1:F7:DD:EE
            X509v3 Authority Key Identifier:
                keyid:6A:39:22:C6:3D:25:1D:52:E9:8C:A6:2A:16:51:A2:4A:E3:DC:80:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/6A3922C63D251D52E98CA62A1651A24AE3DC8026.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A3922C63D251D52E98CA62A1651A24AE3DC8026.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/3137372e38352e31302e302f32342d3234203d3e20323731323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:94:2a:8d:54:28:a3:e9:c2:d8:7c:41:fb:ff:e9:f5:f7:fc:
         41:d2:c3:a8:12:ad:bf:fa:3e:b6:8c:d0:cd:12:1a:51:75:bb:
         49:32:df:db:a3:42:64:28:94:2b:d1:aa:d0:2f:bc:79:88:ce:
         37:b1:c9:7a:19:42:bb:4b:13:df:6b:2d:76:f2:25:9c:bd:05:
         13:fa:39:c6:5a:6d:fa:57:98:5c:c6:20:f1:63:fd:72:ed:6c:
         18:90:e7:ae:a1:e0:25:9d:fc:69:07:3a:a5:9d:76:a0:2e:f7:
         3a:c0:f1:94:aa:04:f7:73:40:52:ae:0c:e5:8d:3e:1e:98:50:
         ce:68:87:16:68:7c:e8:af:2c:5b:05:b7:dc:0e:d2:ba:3e:c2:
         ad:d9:54:96:fd:68:8b:1c:83:be:cc:60:b4:9c:66:41:75:9c:
         b0:9f:a2:b1:de:a6:7d:39:ec:ce:17:14:a7:3d:a2:c5:e7:af:
         85:1f:3a:63:3e:b7:d1:c6:9d:b3:c4:51:23:b3:54:75:c6:c4:
         79:9f:42:70:2f:fd:c4:42:30:56:44:8f:52:77:e6:47:36:d1:
         d4:b9:56:5e:26:e0:a6:6d:9f:1a:22:17:d7:2f:f6:d4:3c:41:
         8e:58:63:74:77:2f:72:76:31:a9:a4:e6:0b:62:18:39:95:00:
         d3:eb:8b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 12:21:47 2024 by rpki-client on console-fra.rpki-client.org