Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/3137372e382e37312e302f32342d3234203d3e20323733363633.roa
File:                     3137372e382e37312e302f32342d3234203d3e20323733363633.roa (raw, json)
Hash identifier:          FH+mJPMjkGQRfKjlYxJlPGhmpf4zTUjKPJoepdYnSoA=
Subject key identifier:   72:AA:E7:DE:08:1B:18:B3:B9:3D:51:D3:3E:23:39:93:B0:2F:01:33
Certificate issuer:       /CN=85A7E0A72BD08974369104FECCC3D14C543F54FC
Certificate serial:       1BC37CD902F843F81A3D4245957A5F001927773F
Authority key identifier: 85:A7:E0:A7:2B:D0:89:74:36:91:04:FE:CC:C3:D1:4C:54:3F:54:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85A7E0A72BD08974369104FECCC3D14C543F54FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/3137372e382e37312e302f32342d3234203d3e20323733363633.roa
Signing time:             Sat 31 Aug 2024 14:16:18 +0000
ROA not before:           Sat 31 Aug 2024 14:11:18 +0000
ROA not after:            Sat 30 Aug 2025 14:16:18 +0000
asID:                     273663
IP address blocks:        177.8.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/85A7E0A72BD08974369104FECCC3D14C543F54FC.crl
                          rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/85A7E0A72BD08974369104FECCC3D14C543F54FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85A7E0A72BD08974369104FECCC3D14C543F54FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c3:7c:d9:02:f8:43:f8:1a:3d:42:45:95:7a:5f:00:19:27:77:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85A7E0A72BD08974369104FECCC3D14C543F54FC
        Validity
            Not Before: Aug 31 14:11:18 2024 GMT
            Not After : Aug 30 14:16:18 2025 GMT
        Subject: CN=72AAE7DE081B18B3B93D51D33E233993B02F0133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0f:08:f6:e9:c2:fe:45:bf:b9:ff:42:41:e5:
                    6a:fb:72:76:32:f5:63:6b:b5:11:43:36:dc:52:d7:
                    25:a5:f2:a9:df:d3:ae:22:69:96:73:2a:13:b8:96:
                    01:ba:43:44:8d:1f:27:f6:44:87:85:8a:09:9c:81:
                    63:f6:67:8d:08:60:74:86:11:e6:5f:ca:d5:88:d9:
                    2a:42:cd:17:ae:47:7f:0e:60:41:85:a7:c3:46:f3:
                    b9:90:68:82:d4:66:9c:7f:f0:c7:c1:82:2f:a8:71:
                    17:42:9b:1a:b6:29:bc:15:99:07:3f:dc:c0:83:12:
                    6e:e9:ea:62:29:d8:8d:70:dc:7e:be:5c:1c:40:f5:
                    39:c6:9e:6e:06:81:1d:7b:d9:61:fb:be:3f:7d:bd:
                    ed:96:c4:7f:f4:ad:f1:83:0a:25:50:6a:fc:d5:31:
                    7e:4e:44:1b:cf:8c:ed:ee:ef:13:62:fc:30:c8:74:
                    ef:93:cf:b4:8d:a4:5f:45:93:48:68:48:2a:e7:65:
                    cf:0e:9c:3a:93:79:27:15:8d:92:a5:63:4e:a1:d0:
                    1c:bb:e5:e2:21:07:98:29:f8:1a:c6:48:0f:1c:0d:
                    07:e1:d1:af:93:61:1a:79:fd:85:03:80:6c:2e:9e:
                    f0:3a:62:2b:e3:c6:a6:d7:dd:24:e1:23:f2:c7:dd:
                    37:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:AA:E7:DE:08:1B:18:B3:B9:3D:51:D3:3E:23:39:93:B0:2F:01:33
            X509v3 Authority Key Identifier:
                keyid:85:A7:E0:A7:2B:D0:89:74:36:91:04:FE:CC:C3:D1:4C:54:3F:54:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/85A7E0A72BD08974369104FECCC3D14C543F54FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85A7E0A72BD08974369104FECCC3D14C543F54FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/3137372e382e37312e302f32342d3234203d3e20323733363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:23:6f:cb:4e:4a:4a:0b:b8:01:ee:77:01:69:6a:b5:9f:bf:
         b6:a1:e4:78:43:78:1e:9b:bc:14:90:79:b6:3e:1d:1d:6a:62:
         0e:55:e1:fb:b9:15:d4:a2:62:0e:cf:99:9b:86:07:de:fc:8d:
         9e:4f:19:cd:3d:91:4b:8a:c9:0f:f6:79:76:89:e6:6e:01:1f:
         5f:71:f0:49:d7:9e:6e:5b:32:27:01:8c:57:dc:d3:a6:d2:6b:
         3b:48:58:af:82:d0:f7:dd:36:ab:e3:7f:d8:8b:9d:dd:9b:18:
         69:39:6b:95:d1:2d:66:67:89:11:62:b5:a5:c0:51:9d:67:05:
         59:51:98:c6:14:3c:e7:c0:3c:71:d7:7a:6e:92:3f:69:55:c0:
         57:1f:e9:6e:84:69:67:c6:f3:a1:28:67:81:0e:2a:d8:b5:eb:
         9c:1a:d6:61:03:17:6a:aa:f6:bd:0c:9d:d4:10:b8:d3:4c:8e:
         ac:6a:40:36:11:5e:af:66:d7:73:9b:fc:07:53:c5:90:05:e6:
         02:b8:1c:b2:4c:12:cd:8c:8b:8e:aa:c1:d0:43:02:25:4a:f8:
         27:eb:d5:85:a5:16:da:e3:c4:fb:d4:3b:95:4d:30:02:18:dc:
         1a:96:e6:09:50:c3:28:c3:14:11:f5:cd:d3:e4:e3:2b:b0:97:
         60:e4:28:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:45 2024 by rpki-client on console-ams.rpki-client.org