Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e302e302f32332d3233203d3e20323632363432.roa
File:                     3137372e38372e302e302f32332d3233203d3e20323632363432.roa (raw, json)
Hash identifier:          9RNyPYQNRaaH3W6sHKFOqribFZpCCF43wyslch62fPU=
Subject key identifier:   05:E2:35:0B:81:C2:D4:0E:A8:EB:70:CA:76:E8:34:03:7D:B1:9E:F8
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       B48B29691EB7066B3D705C4EA010FF834931C3
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e302e302f32332d3233203d3e20323632363432.roa
Signing time:             Thu 04 Apr 2024 03:24:14 +0000
ROA not before:           Thu 04 Apr 2024 03:19:14 +0000
ROA not after:            Thu 03 Apr 2025 03:24:14 +0000
asID:                     262642
IP address blocks:        177.87.0.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b4:8b:29:69:1e:b7:06:6b:3d:70:5c:4e:a0:10:ff:83:49:31:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Apr  4 03:19:14 2024 GMT
            Not After : Apr  3 03:24:14 2025 GMT
        Subject: CN=05E2350B81C2D40EA8EB70CA76E834037DB19EF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a9:b9:f1:62:d5:d1:80:57:87:8f:65:9e:0b:
                    a4:ce:76:0d:2e:af:bf:34:bc:a6:5f:46:cf:90:b1:
                    de:05:12:a4:59:57:44:a1:f4:de:88:e5:4c:93:74:
                    33:74:29:59:a0:c8:22:08:17:3f:44:2a:14:20:6e:
                    64:6d:fc:3f:44:0e:76:4a:00:f3:e1:b5:57:8a:ed:
                    bf:e9:7f:01:9c:ef:15:2d:cb:42:91:c2:19:cb:bb:
                    2d:54:44:55:1a:ab:80:f8:07:2e:68:a4:8d:ed:f2:
                    7a:5c:12:4f:1c:29:77:07:dd:28:62:ac:1d:c3:da:
                    c0:b0:07:c4:77:29:3e:f0:96:31:25:94:e5:3f:bf:
                    f9:77:42:20:af:f4:c2:cc:4d:c1:a8:52:71:06:cf:
                    47:8f:22:fd:d8:bd:c4:5e:cb:44:8d:50:27:5c:f9:
                    8c:7f:d7:ad:4f:dd:9c:35:f6:ce:7e:61:94:42:22:
                    99:a9:84:d9:3b:a1:0f:89:22:5b:c5:da:3b:8b:76:
                    6b:b7:6c:03:5a:c6:86:36:fc:75:b3:f2:43:2b:16:
                    fb:7e:5b:fd:d8:15:6c:56:62:7b:78:1c:62:41:81:
                    33:2f:c7:6f:3a:a1:d4:a5:d5:c4:75:22:ac:10:70:
                    7a:b0:a2:f7:c9:ad:0e:b2:7e:e5:f7:53:d3:58:29:
                    e2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E2:35:0B:81:C2:D4:0E:A8:EB:70:CA:76:E8:34:03:7D:B1:9E:F8
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e302e302f32332d3233203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:bb:79:f9:8e:f0:0d:74:48:35:e0:92:ff:17:dc:b1:21:ea:
         ae:ea:e4:2c:b2:b9:2b:60:4a:98:2f:eb:da:b1:57:29:3e:6d:
         83:5d:59:69:22:a2:54:dc:bb:0a:50:aa:ab:94:61:5a:aa:91:
         b1:36:6a:a3:02:67:73:e8:1a:a9:cd:6f:9a:04:61:17:f2:37:
         0f:cd:f5:f1:42:da:47:a8:c6:62:ef:6b:86:d0:e7:bc:a8:ee:
         5e:f4:18:e0:fd:d3:cc:84:e2:23:8b:39:6b:38:6d:21:d2:29:
         38:09:31:9c:64:12:1c:f9:98:78:70:7f:73:a7:9f:9f:72:d2:
         d8:da:02:93:0f:aa:6e:e4:3f:c5:e8:d8:ff:55:84:f1:f7:ce:
         d5:2d:54:30:b2:5d:77:bf:82:01:a2:db:35:f0:bc:98:6e:d0:
         9e:81:b0:c1:92:5b:34:5d:44:64:65:90:57:3a:88:cc:72:83:
         ce:30:14:d3:d6:cb:18:4b:c9:27:3e:fd:de:4e:4a:71:45:8c:
         ba:e8:84:a9:94:0c:00:70:76:e7:4e:7b:d3:eb:e8:35:32:ce:
         83:c2:c8:d0:4a:94:d9:a6:2b:4e:ac:e9:f4:15:0f:d0:c0:22:
         96:0d:b9:99:5e:a1:fc:fa:31:0b:a5:9c:fd:14:13:98:9e:b0:
         4b:72:6f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:22 2024 by rpki-client on console-fra.rpki-client.org