Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137372e36362e302e302f32332d3233203d3e20323632343835.roa
File:                     3137372e36362e302e302f32332d3233203d3e20323632343835.roa (raw, json)
Hash identifier:          GgvvV4qkGkv3bw2FTcJTSo3uAhdPOrJ9VSMb528muzE=
Subject key identifier:   79:A8:FC:DE:D9:78:35:F3:81:CA:39:04:E5:F8:F2:E9:4C:75:9A:40
Certificate issuer:       /CN=4774D086E10F29F42B699F993DE4061E0FDF8862
Certificate serial:       67D80C8BFE0F2C82A96F376B8DFBD8BD34EF82C6
Authority key identifier: 47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137372e36362e302e302f32332d3233203d3e20323632343835.roa
Signing time:             Sat 27 Jul 2024 21:13:20 +0000
ROA not before:           Sat 27 Jul 2024 21:08:20 +0000
ROA not after:            Sat 26 Jul 2025 21:13:20 +0000
asID:                     262485
IP address blocks:        177.66.0.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl
                          rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 21:03:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:d8:0c:8b:fe:0f:2c:82:a9:6f:37:6b:8d:fb:d8:bd:34:ef:82:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4774D086E10F29F42B699F993DE4061E0FDF8862
        Validity
            Not Before: Jul 27 21:08:20 2024 GMT
            Not After : Jul 26 21:13:20 2025 GMT
        Subject: CN=79A8FCDED97835F381CA3904E5F8F2E94C759A40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:58:c2:b5:2f:27:06:31:46:9b:b7:83:03:30:
                    b9:5e:ba:ac:77:f9:b0:03:c7:d9:d1:3c:60:1b:b9:
                    b4:2f:07:03:b5:b9:7e:f7:11:15:09:c2:25:f6:d2:
                    38:c7:b8:07:68:7e:78:c7:50:23:54:18:57:5e:a1:
                    af:ff:67:47:79:36:3c:2c:62:c0:73:e1:67:9a:db:
                    8e:0c:b5:f3:2e:c1:20:ca:7d:6f:83:81:0b:59:9e:
                    cc:7c:2c:c9:43:be:4c:43:07:83:ab:7b:a0:e8:e3:
                    62:48:9c:f2:ec:ff:7e:7b:f0:e9:17:fc:71:59:e3:
                    a7:de:f4:b0:12:c3:3c:d0:d9:06:e3:d3:2e:82:be:
                    63:e8:2b:c6:9f:e7:c6:b5:20:ea:71:d5:96:e1:88:
                    30:6e:df:91:96:9d:23:34:70:53:6d:97:9d:40:77:
                    b1:42:83:29:1e:f7:86:3c:19:02:bb:8b:90:5f:53:
                    de:56:9e:88:5d:2c:8c:57:b8:3b:59:ef:9e:a2:88:
                    3c:f3:e2:2d:79:87:13:90:74:15:dc:5c:f6:b7:7b:
                    25:04:4f:31:27:7a:17:3a:da:ae:f0:c2:f4:c1:9e:
                    a3:3e:50:d0:23:61:3a:4f:82:ed:a3:f9:24:9d:9a:
                    eb:f0:f7:c2:54:e6:64:0b:1c:58:35:55:92:2e:bb:
                    1a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A8:FC:DE:D9:78:35:F3:81:CA:39:04:E5:F8:F2:E9:4C:75:9A:40
            X509v3 Authority Key Identifier:
                keyid:47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137372e36362e302e302f32332d3233203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:e2:bf:8f:8e:c2:52:fc:cf:30:55:0c:fc:d6:45:48:0f:7a:
         ca:4c:b4:5d:5b:dc:4a:bc:27:b2:3a:82:4e:23:6e:9f:0a:69:
         08:1f:2d:fd:65:85:41:c5:6d:e7:57:d8:15:35:ec:c7:13:66:
         d0:5f:f6:0b:19:b9:df:5b:13:d3:b5:7a:c5:35:29:ec:2b:4c:
         00:3e:e2:22:5d:d7:76:44:02:2d:18:9e:3b:f6:e1:e6:e6:fa:
         d9:ee:a0:bc:38:af:6a:d7:8c:21:35:30:94:0f:86:d5:90:c6:
         c7:3f:ce:df:ec:a5:82:42:1c:8b:2c:1c:da:91:f4:e7:e3:d9:
         05:d5:5a:69:41:89:04:41:fe:81:4d:87:f4:3b:29:52:67:2c:
         58:c7:c3:64:2e:44:a7:09:13:41:43:f7:15:62:6a:a4:51:61:
         23:bd:2d:29:07:1f:53:72:6c:5a:f0:f6:73:66:26:a0:27:73:
         e3:60:a9:a1:1f:34:84:c1:3a:16:7b:7f:cd:43:97:6a:3a:c3:
         c2:14:b3:97:ce:8c:ce:b8:2b:31:bd:98:5d:29:64:95:d8:52:
         b7:83:43:44:3c:0f:01:8c:f9:55:bb:6a:a6:88:6b:bc:8a:f6:
         9d:90:9f:2f:11:eb:0d:d1:04:6c:2e:25:a0:24:ba:b4:8b:fb:
         4e:dc:a6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:12 2024 by rpki-client on console-ams.rpki-client.org