Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/3137372e38352e382e302f32322d3232203d3e20323731323633.roa
File:                     3137372e38352e382e302f32322d3232203d3e20323731323633.roa (raw, json)
Hash identifier:          UD4osjkE+MafwEBZCoEFABfKuQuTBWU8nKXWUb8SVPw=
Subject key identifier:   77:59:B1:AB:DA:44:F0:BC:8D:5D:74:93:0A:00:2D:73:A2:21:52:51
Certificate issuer:       /CN=D15FF3E533CB361A60F4C269CA7A0C08AD799132
Certificate serial:       02D1D0BF568451918295A3AC45F72108413DC80B
Authority key identifier: D1:5F:F3:E5:33:CB:36:1A:60:F4:C2:69:CA:7A:0C:08:AD:79:91:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D15FF3E533CB361A60F4C269CA7A0C08AD799132.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/3137372e38352e382e302f32322d3232203d3e20323731323633.roa
Signing time:             Sun 04 Aug 2024 02:03:47 +0000
ROA not before:           Sun 04 Aug 2024 01:58:47 +0000
ROA not after:            Sun 03 Aug 2025 02:03:47 +0000
asID:                     271263
IP address blocks:        177.85.8.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/D15FF3E533CB361A60F4C269CA7A0C08AD799132.crl
                          rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/D15FF3E533CB361A60F4C269CA7A0C08AD799132.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D15FF3E533CB361A60F4C269CA7A0C08AD799132.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:d1:d0:bf:56:84:51:91:82:95:a3:ac:45:f7:21:08:41:3d:c8:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D15FF3E533CB361A60F4C269CA7A0C08AD799132
        Validity
            Not Before: Aug  4 01:58:47 2024 GMT
            Not After : Aug  3 02:03:47 2025 GMT
        Subject: CN=7759B1ABDA44F0BC8D5D74930A002D73A2215251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3c:3b:4f:08:69:30:b7:77:97:a7:13:df:28:
                    f1:80:da:aa:0e:77:fc:3e:df:c0:30:50:94:62:aa:
                    01:86:2f:63:74:ae:7f:25:bf:89:03:03:53:97:f7:
                    8f:b5:f4:44:00:20:c0:c9:78:5f:83:e4:57:05:24:
                    c1:b8:81:da:de:0e:99:64:f6:3b:be:ed:46:63:ca:
                    8c:be:07:e6:cc:77:69:47:d8:a8:ea:78:32:a3:f9:
                    5b:08:a0:81:6a:dd:d1:07:36:c2:a9:3e:8d:0b:bc:
                    9f:90:bf:46:86:e3:7c:9b:75:86:a2:2f:ee:b9:65:
                    30:31:f7:66:e7:9d:04:d5:2c:97:5a:97:eb:69:81:
                    d8:50:f4:c5:3d:7f:b6:ee:0c:d5:5e:64:1a:b0:e5:
                    71:4c:d1:23:c4:16:69:54:6f:d3:9b:ce:1e:66:33:
                    5f:29:f4:a1:b4:e8:b3:f9:62:47:b7:dd:40:57:fa:
                    58:7b:90:3b:53:21:79:ef:03:a3:e3:1d:37:a5:8b:
                    0f:83:56:2e:5b:8f:cb:7d:d2:17:66:ca:c8:fd:17:
                    6a:c2:68:de:07:85:c5:4e:0e:ca:02:38:e9:7d:7c:
                    7c:4b:5f:90:ac:9a:24:57:18:0c:2a:12:c6:42:d5:
                    4f:4a:c6:dc:72:62:06:f8:fb:22:61:ae:ba:0c:39:
                    f9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:59:B1:AB:DA:44:F0:BC:8D:5D:74:93:0A:00:2D:73:A2:21:52:51
            X509v3 Authority Key Identifier:
                keyid:D1:5F:F3:E5:33:CB:36:1A:60:F4:C2:69:CA:7A:0C:08:AD:79:91:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/D15FF3E533CB361A60F4C269CA7A0C08AD799132.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D15FF3E533CB361A60F4C269CA7A0C08AD799132.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/3137372e38352e382e302f32322d3232203d3e20323731323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:d1:1f:3d:43:9e:80:08:e3:c4:9c:57:8a:11:33:28:92:77:
         ab:8e:39:3b:10:cd:90:2e:5f:d4:08:62:bf:c9:36:92:4e:e8:
         a2:4a:15:d2:c4:1f:b2:8b:39:d1:b5:99:89:39:37:42:ce:d2:
         ca:8c:21:3c:02:1e:09:38:2d:6d:fd:22:18:a5:f3:45:5f:5e:
         e4:06:96:a3:04:8a:4d:aa:b9:66:8d:c2:dd:66:55:30:1c:d2:
         eb:f5:1d:38:59:be:81:c2:b1:e4:51:86:b4:fe:5a:e5:91:a6:
         72:5f:fb:fb:5c:e5:11:3d:5c:34:21:1a:38:d4:66:d1:86:69:
         3a:af:12:4a:29:7c:be:55:7f:db:f5:d3:64:53:04:2d:8d:ef:
         99:40:04:49:07:6e:9e:f3:63:e8:ac:30:51:20:07:c1:27:b5:
         e3:79:1f:c7:94:dd:7d:03:dc:5f:39:f0:53:de:01:a1:a7:c6:
         de:b9:c4:3e:3a:3a:cb:1d:df:77:13:dc:9d:42:93:0d:2f:79:
         bb:c2:0d:6f:c0:42:e1:b2:b3:2d:2b:5e:68:24:2f:37:e8:f2:
         fd:54:d5:4b:f6:ab:cd:aa:ba:b0:91:11:c2:e8:c8:fb:ba:a2:
         b1:e9:20:c6:69:04:a4:9d:44:79:25:8c:c6:e8:60:47:fa:2f:
         6b:1d:29:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:36 2024 by rpki-client on console-ams.rpki-client.org