Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e342e302f32322d3232203d3e20323632363432.roa
File:                     3137372e38372e342e302f32322d3232203d3e20323632363432.roa (raw, json)
Hash identifier:          s4aleG91ewDB9KfB7xfSzTlApDVdI/RgTqqZOXM317o=
Subject key identifier:   BE:76:2F:55:98:39:40:23:4E:E0:D7:E4:E7:1B:8F:2A:7A:64:19:B8
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       34B4E8E1F1CBCB4225C46BCCCBC289787FA2A3AA
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e342e302f32322d3232203d3e20323632363432.roa
Signing time:             Thu 04 Apr 2024 03:24:09 +0000
ROA not before:           Thu 04 Apr 2024 03:19:09 +0000
ROA not after:            Thu 03 Apr 2025 03:24:09 +0000
asID:                     262642
IP address blocks:        177.87.4.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b4:e8:e1:f1:cb:cb:42:25:c4:6b:cc:cb:c2:89:78:7f:a2:a3:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Apr  4 03:19:09 2024 GMT
            Not After : Apr  3 03:24:09 2025 GMT
        Subject: CN=BE762F55983940234EE0D7E4E71B8F2A7A6419B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:40:f6:9f:5f:66:e8:01:70:01:b3:95:97:c1:
                    75:c5:d6:e9:09:f0:4f:6d:08:d3:b4:07:21:f1:40:
                    26:fd:f7:6a:74:43:05:31:22:8f:ec:97:6e:bd:54:
                    03:b1:a6:30:8e:db:b6:06:90:7f:5f:6b:5c:54:51:
                    c0:fd:cc:6c:b7:f9:f6:89:41:38:7b:62:29:85:e2:
                    47:c1:91:cb:f2:b5:d1:38:eb:d4:24:10:9b:64:72:
                    d5:1d:e6:69:46:27:31:5a:d9:10:9e:82:59:e2:06:
                    09:d0:45:51:37:47:6b:30:98:23:4f:de:b9:83:0b:
                    6d:8b:df:03:54:a9:b7:43:85:66:e8:8e:d7:ba:ad:
                    f9:0f:37:fe:9f:d6:73:30:fe:ec:ff:49:40:1d:d6:
                    8d:79:53:75:5b:f1:46:b6:92:47:37:11:94:d9:25:
                    2b:5b:eb:ef:f5:b0:6e:44:b3:c0:5c:97:e9:c2:6f:
                    ed:10:1c:45:41:c9:24:53:27:fe:fc:fe:bc:c5:bc:
                    89:fa:e7:dd:1c:d8:e6:35:a5:04:0a:ae:96:a9:03:
                    bf:58:7e:f2:ad:cf:e1:88:3a:60:be:d2:b3:6a:23:
                    7b:f7:91:97:0b:bd:72:a1:c8:e9:9b:a3:08:a2:4c:
                    6c:28:c3:d5:08:fa:78:98:af:85:18:e2:dd:5d:6e:
                    d6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:76:2F:55:98:39:40:23:4E:E0:D7:E4:E7:1B:8F:2A:7A:64:19:B8
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e342e302f32322d3232203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:cd:20:6e:da:e4:cb:7c:bb:c5:f3:14:91:db:ab:3b:4d:2d:
         c5:e7:1f:6a:ed:d9:b8:56:e8:98:e5:7d:e8:09:41:9e:15:29:
         ea:c9:ec:49:ef:ab:0b:ff:68:4f:33:98:d7:71:21:96:76:b3:
         b6:6f:9b:45:b1:70:7c:39:34:cc:73:d1:09:0e:3a:a1:30:d1:
         f2:78:c3:c5:b6:c3:53:72:42:5c:49:60:53:d9:ff:f0:09:0b:
         d5:b8:1e:87:80:fe:24:2a:3e:f6:9d:73:8d:2d:c2:2b:08:02:
         f2:34:d1:16:9a:93:55:7c:a0:df:33:6d:e2:bc:9b:26:95:b4:
         4a:7e:4a:24:2e:3f:a6:d9:bb:40:01:24:af:4e:e2:98:bc:b6:
         a5:b3:c0:af:bb:91:67:72:e2:0e:56:43:9b:17:b3:e7:53:75:
         73:69:ef:e7:f0:06:b1:8a:26:a0:d2:1d:c7:f1:63:1c:38:43:
         2c:41:80:9e:7d:88:02:72:86:6f:c0:11:77:9b:c3:e2:f5:7a:
         b2:22:74:87:f2:34:78:46:9b:49:16:b6:a7:c7:45:45:29:5d:
         ac:bb:08:5e:09:c3:da:5f:84:4f:30:89:e0:88:f1:54:f5:b1:
         46:f2:f0:b4:b0:f5:93:78:47:81:00:5a:da:e5:6a:62:62:34:
         69:fc:df:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 09:16:30 2024 by rpki-client on console-fra.rpki-client.org