Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e312e302f32342d3234203d3e20323632363432.roa
File:                     3137372e38372e312e302f32342d3234203d3e20323632363432.roa (raw, json)
Hash identifier:          uHidnh5CRZAKX03j+acyfdsnlzaGJ77p6WOnw421VGY=
Subject key identifier:   99:5A:79:3D:27:AC:2E:86:23:5D:E4:7C:86:35:3C:C8:89:B0:BC:8B
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       6B1E69FC0C1B5D938A40CB05AF7EBB5731F45954
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e312e302f32342d3234203d3e20323632363432.roa
Signing time:             Thu 04 Apr 2024 03:24:12 +0000
ROA not before:           Thu 04 Apr 2024 03:19:12 +0000
ROA not after:            Thu 03 Apr 2025 03:24:12 +0000
asID:                     262642
IP address blocks:        177.87.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:1e:69:fc:0c:1b:5d:93:8a:40:cb:05:af:7e:bb:57:31:f4:59:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Apr  4 03:19:12 2024 GMT
            Not After : Apr  3 03:24:12 2025 GMT
        Subject: CN=995A793D27AC2E86235DE47C86353CC889B0BC8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5e:a8:75:f5:c6:51:df:81:98:61:26:18:de:
                    b7:39:3c:66:d5:85:d7:34:d4:ab:64:f9:67:f2:08:
                    7d:09:45:3f:65:42:a6:19:13:6a:b9:c4:84:f6:0b:
                    63:b5:a6:fc:bb:66:ad:50:bf:59:1b:7f:01:46:8f:
                    eb:08:d2:82:e3:54:a6:83:11:6f:61:3c:52:d5:d1:
                    e3:a2:78:59:58:3f:8d:6c:70:64:a2:13:72:fd:87:
                    6f:61:28:82:57:7e:2a:bd:60:5c:7a:82:52:8b:c8:
                    f4:f4:20:d3:92:70:6b:64:29:8b:9f:d1:d8:27:c2:
                    81:57:37:6f:8c:eb:12:5d:7a:95:66:99:c2:aa:6f:
                    36:cf:96:85:b4:51:5f:cd:dd:98:36:fb:d4:b6:7f:
                    a4:46:de:28:b0:97:17:7f:ce:ff:7f:00:09:83:6c:
                    a1:54:03:f3:af:53:cf:48:56:e6:b5:98:8f:c8:5e:
                    d4:3c:50:6b:92:cf:74:c9:48:a9:a6:78:16:5e:c2:
                    60:2c:bb:12:ca:d0:75:db:e8:42:9c:60:57:86:f3:
                    61:8f:f0:08:b2:9d:aa:d3:34:53:6b:bd:63:aa:e3:
                    e0:33:45:e5:de:81:13:d7:a9:5f:ec:55:fd:e2:b4:
                    20:fa:5b:13:68:49:31:18:34:5a:dd:5d:2e:4b:b1:
                    bf:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:5A:79:3D:27:AC:2E:86:23:5D:E4:7C:86:35:3C:C8:89:B0:BC:8B
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e312e302f32342d3234203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:41:97:15:fb:b1:42:b4:1e:dd:98:49:68:a0:dc:3f:e4:cb:
         9b:98:69:c2:6e:cb:36:ba:5f:3a:b5:b0:fb:b3:38:dd:4b:04:
         56:93:ff:1c:78:89:0d:81:22:3e:0b:5a:ba:25:f6:f2:4c:8c:
         1f:2d:c9:4f:c4:69:90:35:4b:8e:5e:d6:f6:b0:c7:34:f6:a7:
         eb:00:65:b8:f2:09:e7:42:be:67:3a:79:16:fe:84:f5:fa:b5:
         7b:41:6b:3d:bd:79:22:83:a3:3c:08:18:e8:bd:d1:aa:f5:a8:
         4c:49:a0:10:94:e4:c6:ab:a7:25:8e:7c:dc:fb:74:0a:ca:75:
         76:a6:de:dd:b2:77:41:43:11:45:2a:3d:28:be:88:68:f8:42:
         c4:c5:ad:e2:c3:4e:9d:f8:80:73:c9:01:5d:3d:7a:d7:c1:36:
         c8:a4:46:2b:ed:f2:82:b9:0c:6a:24:9d:ec:0f:28:d3:1c:83:
         a0:2f:62:fb:08:94:85:07:52:34:d4:31:d2:7b:97:2c:cc:00:
         a3:26:69:bc:8c:d1:46:49:06:db:bd:4a:a2:71:33:f5:6d:1e:
         91:77:0d:f1:66:94:64:ad:de:ac:b4:a5:5d:f0:4e:3e:6f:fa:
         56:e0:8c:cf:e7:12:12:9a:01:16:76:88:83:ad:f7:04:ec:af:
         f6:42:f0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:22 2024 by rpki-client on console-fra.rpki-client.org