Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/3137372e38352e382e302f32332d3233203d3e20323731323633.roa
File:                     3137372e38352e382e302f32332d3233203d3e20323731323633.roa (raw, json)
Hash identifier:          9G3jhLyXsaQP7iVAIdhMKZx1CFOTwfxPhdfWvXLuVB0=
Subject key identifier:   1E:6C:CA:B2:C2:45:8D:3F:CD:D2:26:45:C8:92:24:AC:63:FD:15:4C
Certificate issuer:       /CN=6A3922C63D251D52E98CA62A1651A24AE3DC8026
Certificate serial:       58DD883E6573E2D6396C21A35FA7620611C7B659
Authority key identifier: 6A:39:22:C6:3D:25:1D:52:E9:8C:A6:2A:16:51:A2:4A:E3:DC:80:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A3922C63D251D52E98CA62A1651A24AE3DC8026.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/3137372e38352e382e302f32332d3233203d3e20323731323633.roa
Signing time:             Mon 13 May 2024 20:04:09 +0000
ROA not before:           Mon 13 May 2024 19:59:09 +0000
ROA not after:            Mon 12 May 2025 20:04:09 +0000
asID:                     271263
IP address blocks:        177.85.8.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/6A3922C63D251D52E98CA62A1651A24AE3DC8026.crl
                          rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/6A3922C63D251D52E98CA62A1651A24AE3DC8026.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A3922C63D251D52E98CA62A1651A24AE3DC8026.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:dd:88:3e:65:73:e2:d6:39:6c:21:a3:5f:a7:62:06:11:c7:b6:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A3922C63D251D52E98CA62A1651A24AE3DC8026
        Validity
            Not Before: May 13 19:59:09 2024 GMT
            Not After : May 12 20:04:09 2025 GMT
        Subject: CN=1E6CCAB2C2458D3FCDD22645C89224AC63FD154C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:75:ab:03:16:a3:53:a5:9e:7b:01:eb:40:c7:
                    e4:01:11:4a:a6:f3:7c:f1:35:91:aa:1d:e5:f1:49:
                    e7:73:89:fc:60:e2:ca:05:04:b6:b4:3e:c9:43:90:
                    22:a3:d3:42:7f:9f:6b:5b:6d:96:f0:98:7c:c1:2c:
                    1d:4e:f3:08:b3:5d:d9:46:81:06:c1:9d:f0:07:61:
                    27:32:5e:8a:af:cd:5c:72:12:2b:13:ad:9e:a1:49:
                    3e:bd:50:18:7b:67:04:cf:ad:b2:0e:9b:e9:df:b4:
                    68:36:7e:38:bd:8a:ce:3b:cc:a5:5b:88:b0:1c:1a:
                    ef:66:52:7e:67:d0:2c:3b:3b:ee:97:ec:21:45:c0:
                    71:6f:f8:e1:eb:8a:c1:16:e2:5f:71:b3:fc:04:0f:
                    d7:66:20:00:2f:6f:77:8e:90:75:5e:99:99:b5:e7:
                    69:b9:be:57:07:58:ab:30:93:ad:37:c3:83:bf:7c:
                    c9:69:06:d8:c4:06:08:aa:79:58:98:c1:78:18:45:
                    cf:b0:70:bc:cd:b2:5b:77:00:5f:3f:7b:51:83:f7:
                    32:fc:35:f0:f7:51:12:87:15:a7:06:a9:36:9e:69:
                    8e:b6:3d:b7:b3:d2:e5:8b:5b:a0:79:0b:3a:00:a7:
                    15:f5:4b:01:ee:c5:73:fb:dd:66:9f:79:5d:3c:19:
                    66:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6C:CA:B2:C2:45:8D:3F:CD:D2:26:45:C8:92:24:AC:63:FD:15:4C
            X509v3 Authority Key Identifier:
                keyid:6A:39:22:C6:3D:25:1D:52:E9:8C:A6:2A:16:51:A2:4A:E3:DC:80:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/6A3922C63D251D52E98CA62A1651A24AE3DC8026.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A3922C63D251D52E98CA62A1651A24AE3DC8026.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/3137372e38352e382e302f32332d3233203d3e20323731323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:f5:11:b4:10:8e:1b:8a:d0:cc:aa:89:9f:8e:48:ef:3b:b7:
         ab:ef:18:97:55:9b:42:d7:78:e0:f9:69:fd:5b:38:7f:6c:25:
         85:4e:92:12:bb:63:87:3f:65:e0:6a:05:b7:9b:7e:19:b6:46:
         3d:d0:fe:f2:53:fc:ee:24:4f:aa:a4:3f:47:cc:f4:67:95:38:
         df:82:81:7a:04:e9:7a:9b:e5:ec:a7:d5:0b:4b:b0:23:95:b7:
         85:b5:48:89:46:e4:18:0b:ba:de:f3:37:25:fc:be:bf:46:e2:
         4a:d7:8f:2a:91:92:b7:53:aa:8e:29:28:3a:61:ad:e2:fe:0c:
         b6:02:21:40:79:eb:34:56:22:14:8b:e8:0a:6f:95:e4:b6:2e:
         02:95:65:f5:23:de:cb:a4:e2:36:47:bb:43:96:85:65:4a:f9:
         87:da:0c:5f:b4:32:e0:bb:47:6b:c7:71:fd:de:3a:0d:f2:ae:
         9d:85:fc:85:95:75:f3:9a:57:8c:34:be:65:f5:ed:cd:08:e7:
         51:a3:4e:da:69:5d:63:c1:79:d8:aa:f9:9e:80:0f:17:cd:63:
         e1:fc:f8:e5:48:5d:36:43:ed:6a:14:99:e5:95:18:76:b7:7e:
         9c:f3:92:db:d0:c2:53:73:b2:43:d3:56:b7:a8:e6:35:3e:62:
         ad:4d:ea:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 13:25:07 2024 by rpki-client on console-ams.rpki-client.org