Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/3137372e38352e31312e302f32342d3234203d3e20323731313633.roa
File:                     3137372e38352e31312e302f32342d3234203d3e20323731313633.roa (raw, json)
Hash identifier:          Q/jq58r4lfAVjyyO46FVCm0iIsN5lkNL/RaThiTupc8=
Subject key identifier:   7B:E3:7B:31:52:6E:66:DD:E7:C5:B4:C8:FD:40:67:02:22:80:C0:DB
Certificate issuer:       /CN=6A3922C63D251D52E98CA62A1651A24AE3DC8026
Certificate serial:       6168101243B3A35A575CEF0014591DD705F68F77
Authority key identifier: 6A:39:22:C6:3D:25:1D:52:E9:8C:A6:2A:16:51:A2:4A:E3:DC:80:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A3922C63D251D52E98CA62A1651A24AE3DC8026.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/3137372e38352e31312e302f32342d3234203d3e20323731313633.roa
Signing time:             Mon 13 May 2024 20:03:45 +0000
ROA not before:           Mon 13 May 2024 19:58:45 +0000
ROA not after:            Mon 12 May 2025 20:03:45 +0000
asID:                     271163
IP address blocks:        177.85.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/6A3922C63D251D52E98CA62A1651A24AE3DC8026.crl
                          rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/6A3922C63D251D52E98CA62A1651A24AE3DC8026.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A3922C63D251D52E98CA62A1651A24AE3DC8026.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:68:10:12:43:b3:a3:5a:57:5c:ef:00:14:59:1d:d7:05:f6:8f:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A3922C63D251D52E98CA62A1651A24AE3DC8026
        Validity
            Not Before: May 13 19:58:45 2024 GMT
            Not After : May 12 20:03:45 2025 GMT
        Subject: CN=7BE37B31526E66DDE7C5B4C8FD4067022280C0DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7b:f7:bd:f5:7a:b2:2b:32:56:21:95:b8:39:
                    25:4b:27:0d:c8:d6:f7:e9:e5:54:ff:e0:c2:1c:5f:
                    19:3f:d6:cd:74:13:67:36:46:21:29:a3:37:0f:65:
                    a0:cb:29:d4:75:50:59:cb:78:11:87:6c:09:51:87:
                    72:06:c1:bf:04:3d:f9:63:ed:ad:5f:5d:d4:8a:aa:
                    2f:32:3f:6e:58:bc:db:f8:85:61:b9:9d:2b:69:63:
                    18:c2:c5:bc:7b:56:5f:cc:98:79:40:d3:3d:ae:65:
                    1c:8b:a0:67:42:55:10:74:b1:53:4f:d4:f2:b0:00:
                    de:6c:50:0f:3f:6d:93:04:f9:4a:ac:4c:5c:52:da:
                    4e:b8:9c:22:52:e7:10:f3:2f:29:35:6d:c3:80:70:
                    57:68:a6:a4:8b:76:c3:02:f8:c5:57:a0:68:d3:7a:
                    e4:4b:0f:87:e6:08:9d:19:68:35:5a:c4:7d:ee:ef:
                    d4:74:3a:2d:eb:f8:1d:48:c3:e4:bb:0e:5f:d3:f8:
                    a8:aa:71:73:64:7b:e4:a1:f2:b6:e3:6a:e4:13:46:
                    a1:e1:59:40:80:1e:b4:87:db:53:a5:e6:40:0a:45:
                    8a:3c:ca:78:1f:45:ac:d8:01:3c:fc:48:c7:f0:7b:
                    19:f4:a6:d8:d7:9e:b7:96:12:06:59:a7:3e:91:56:
                    91:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E3:7B:31:52:6E:66:DD:E7:C5:B4:C8:FD:40:67:02:22:80:C0:DB
            X509v3 Authority Key Identifier:
                keyid:6A:39:22:C6:3D:25:1D:52:E9:8C:A6:2A:16:51:A2:4A:E3:DC:80:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/6A3922C63D251D52E98CA62A1651A24AE3DC8026.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A3922C63D251D52E98CA62A1651A24AE3DC8026.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/3137372e38352e31312e302f32342d3234203d3e20323731313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:49:09:b4:2c:62:d0:28:e1:04:de:b8:ab:93:b1:c8:ee:e4:
         4f:d3:60:74:d0:a8:cf:da:0f:86:ba:3e:0f:80:4d:68:f4:15:
         c9:67:a9:5d:16:3e:5a:be:36:f6:74:83:26:5f:02:b6:bb:60:
         b9:1d:08:9b:f3:28:2c:c5:f9:c3:2f:97:1d:8c:3e:0b:ee:1d:
         0d:6b:3b:13:31:49:36:5b:a1:75:79:98:7c:29:79:9d:97:9e:
         89:00:4f:d7:c7:d2:ad:31:ad:dc:3f:e7:53:6d:47:a8:f2:b0:
         1e:ec:89:e9:fe:d5:d2:00:85:a6:f5:19:8c:a3:78:b2:6a:46:
         2a:60:4b:6f:93:2d:8c:e8:d1:60:6e:5e:f8:c1:82:f2:e1:7f:
         e4:9f:2c:6b:98:81:91:05:ee:b5:95:97:e3:ab:5e:09:c0:1f:
         df:96:90:c9:af:c3:09:ab:12:6a:67:ed:48:b5:49:06:a6:f5:
         86:3b:59:74:2a:04:e9:51:a1:54:86:92:6e:6c:bd:cf:62:fc:
         1f:01:70:5b:5c:b1:eb:71:4c:ae:d2:96:2b:43:51:d1:18:d3:
         c1:3b:e8:87:95:d8:aa:73:b6:7d:91:93:0d:e9:8f:86:16:84:
         9c:25:0b:dc:7d:1a:eb:1d:42:e5:19:db:db:5f:1f:e2:cc:ea:
         ea:82:26:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 13:25:07 2024 by rpki-client on console-ams.rpki-client.org