Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e322e302f32332d3233203d3e20323632363432.roa
File:                     3137372e38372e322e302f32332d3233203d3e20323632363432.roa (raw, json)
Hash identifier:          9VDh31DrB3dh8Fb6cAcsZpwslKGQPswx9NxsYA4WGPE=
Subject key identifier:   C7:0E:FF:6F:AD:DD:2C:75:71:49:53:0C:C8:59:E1:62:00:BB:3A:BC
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       5A824D7D652F56A800A61380A0E3D008CCBBFA51
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e322e302f32332d3233203d3e20323632363432.roa
Signing time:             Thu 04 Apr 2024 03:24:10 +0000
ROA not before:           Thu 04 Apr 2024 03:19:10 +0000
ROA not after:            Thu 03 Apr 2025 03:24:10 +0000
asID:                     262642
IP address blocks:        177.87.2.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:82:4d:7d:65:2f:56:a8:00:a6:13:80:a0:e3:d0:08:cc:bb:fa:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Apr  4 03:19:10 2024 GMT
            Not After : Apr  3 03:24:10 2025 GMT
        Subject: CN=C70EFF6FADDD2C757149530CC859E16200BB3ABC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9f:49:c0:b4:9c:18:de:aa:46:06:a6:bb:92:
                    6b:fb:a6:c4:3f:0f:62:54:9d:f5:be:0f:20:1e:62:
                    de:f8:71:2e:7b:f8:fd:08:ae:30:6e:d3:20:68:10:
                    b1:49:c5:c5:e0:07:e6:18:80:7a:b9:d4:55:17:66:
                    f4:e3:e5:32:f2:b9:5c:d3:43:84:bd:a6:27:0c:53:
                    f0:9c:58:c9:83:65:09:c8:2a:7f:2f:71:74:e9:d6:
                    ff:2e:9b:25:cd:8b:85:80:78:61:77:3e:67:0e:67:
                    fb:1b:76:84:57:f4:ae:2e:38:ef:ab:53:40:a5:27:
                    9b:af:fa:7a:89:97:e7:79:89:4e:17:66:41:f9:ad:
                    c6:3a:33:0a:a1:69:e6:7c:b5:40:c2:62:60:b2:72:
                    ed:58:77:91:f7:f5:16:5f:ba:78:6f:48:e1:f0:d1:
                    82:01:76:9c:f6:c4:e1:ae:c2:de:2c:b3:5d:9b:3b:
                    41:2a:b7:44:eb:97:29:68:39:1d:f6:83:98:f2:96:
                    56:dd:e4:bd:4c:ea:98:55:69:30:7d:5e:2a:a2:0c:
                    a6:cc:89:a4:47:43:f9:6b:b0:ce:88:2a:1b:46:eb:
                    2d:c0:d8:cb:e2:af:b8:0b:8a:6a:56:fd:94:1c:3f:
                    a9:b3:f9:9d:db:c9:05:ee:ea:85:d7:ba:50:3c:1e:
                    b3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:0E:FF:6F:AD:DD:2C:75:71:49:53:0C:C8:59:E1:62:00:BB:3A:BC
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e322e302f32332d3233203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:c4:92:08:25:0d:e9:40:2a:bd:c1:d8:9f:ab:e7:a0:6b:26:
         95:81:6e:0c:cf:5b:57:78:a5:68:9f:ab:24:88:bb:a9:c7:13:
         b8:f8:be:0f:29:39:bd:fe:cd:e3:80:36:05:7a:50:1d:dc:a4:
         cc:7a:49:2e:34:3f:53:7e:25:98:70:1d:73:e0:6f:60:53:e0:
         a4:bb:c9:dd:61:a1:31:2c:d0:e8:20:19:af:31:f6:ac:fe:48:
         be:47:da:f2:2b:d4:f0:af:4f:3d:72:75:1f:dc:60:c5:a0:0b:
         8e:d9:64:36:61:a4:9e:1e:78:af:2c:b0:a8:00:93:b1:0a:d9:
         53:d4:f3:66:87:15:56:17:f9:72:c8:78:7a:a8:c8:78:9b:3e:
         6e:ab:11:80:d5:08:a9:e4:ed:07:65:7a:a6:5e:d0:06:db:80:
         14:b2:8f:78:f5:4e:24:38:47:c5:b0:ac:96:2a:6a:1b:bd:e1:
         9c:04:0c:a4:18:68:5e:f2:0b:75:ad:9a:c8:f9:b5:27:42:c7:
         16:bb:8d:d5:34:1f:40:79:42:5f:fd:6f:68:92:c4:33:e7:8b:
         eb:fd:99:a5:ca:19:b4:91:73:c9:41:a9:ae:da:46:40:3b:3e:
         12:be:81:cb:f4:14:c9:50:d4:48:0d:94:0e:df:d3:a3:b5:d2:
         da:6b:8d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:22 2024 by rpki-client on console-fra.rpki-client.org