Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e362e302f32342d3234203d3e20323632363432.roa
File:                     3137372e38372e362e302f32342d3234203d3e20323632363432.roa (raw, json)
Hash identifier:          ypXj9285k9Z38S8CpoeHM8o3W8P1yolPXW4np/oGAfc=
Subject key identifier:   47:18:DF:47:7B:78:BE:F2:0E:B5:73:A0:B3:78:7F:77:C1:9E:6D:56
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       1F0A5495D6E3CE5E9E5CCAEDD1B9228ACD6A6C58
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e362e302f32342d3234203d3e20323632363432.roa
Signing time:             Thu 04 Apr 2024 03:24:12 +0000
ROA not before:           Thu 04 Apr 2024 03:19:12 +0000
ROA not after:            Thu 03 Apr 2025 03:24:12 +0000
asID:                     262642
IP address blocks:        177.87.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:0a:54:95:d6:e3:ce:5e:9e:5c:ca:ed:d1:b9:22:8a:cd:6a:6c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Apr  4 03:19:12 2024 GMT
            Not After : Apr  3 03:24:12 2025 GMT
        Subject: CN=4718DF477B78BEF20EB573A0B3787F77C19E6D56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4e:bb:39:84:8b:e5:b8:18:25:da:8d:03:16:
                    af:bb:ec:e8:f6:cf:0c:fe:f2:0d:28:bd:3b:8b:43:
                    30:c9:86:ca:58:bf:90:d5:cd:b4:30:ec:97:4b:7c:
                    95:6f:39:a6:69:4b:75:07:db:e9:5e:26:db:89:b1:
                    1e:fa:d8:25:19:be:aa:7c:0f:53:57:da:fb:ba:75:
                    e6:b2:9e:b2:cb:ad:1b:d1:aa:4d:5f:ac:cc:bc:42:
                    e8:49:8d:91:08:b2:08:8d:46:e0:4a:bd:b5:7c:73:
                    49:a1:ce:0a:5f:4d:38:3b:8b:84:03:24:c7:2a:23:
                    73:0f:7e:ef:b6:29:7a:fe:62:c8:4c:6b:ce:21:f1:
                    c3:b5:11:16:d8:82:70:86:95:2f:23:cc:dc:8c:4d:
                    7a:89:5f:29:31:91:b9:0e:4a:59:53:bb:57:73:13:
                    6b:cd:ec:a5:d4:31:d3:93:8a:54:3a:7f:d7:60:1f:
                    0c:1b:0c:3a:cb:63:ce:22:82:90:4b:77:6d:05:61:
                    e8:85:af:49:3c:ec:b6:df:af:15:54:a8:f2:9d:f5:
                    f3:06:34:fd:94:7c:ff:37:b0:e7:d6:82:9c:ce:43:
                    eb:9a:fb:6b:fb:a2:0a:66:01:ac:e4:b6:a0:81:e3:
                    77:4d:88:09:a7:c4:db:f5:c5:fb:4e:66:6f:95:af:
                    44:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:18:DF:47:7B:78:BE:F2:0E:B5:73:A0:B3:78:7F:77:C1:9E:6D:56
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e362e302f32342d3234203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:27:b9:28:f9:0c:9d:71:a1:bb:4e:e6:ed:36:cb:eb:50:fd:
         91:8b:14:b7:6d:10:35:ec:17:a1:f1:e0:9e:83:64:cf:50:5e:
         7e:44:67:ed:38:64:18:3d:68:86:14:e2:0f:7e:03:50:23:f4:
         23:fe:9c:5e:53:d5:1c:a9:27:ce:5d:ab:5b:3f:a1:4d:25:3a:
         72:6d:3d:2a:c7:b8:c7:75:a7:d7:97:9b:3c:c8:fd:ec:5c:33:
         d5:75:90:96:f5:72:41:51:a6:ca:5a:d7:15:57:7a:a1:02:e4:
         07:04:2e:ac:01:ca:26:7c:1a:c6:b8:5f:f9:48:3e:86:d2:c2:
         16:46:d8:81:71:1b:28:a9:40:e4:f8:18:0e:e0:72:a6:a3:cf:
         16:7e:2f:5b:6d:72:d9:e6:6a:61:07:c9:c4:30:a0:2c:42:52:
         60:46:42:ed:ad:ee:da:29:60:91:6d:b1:da:4d:94:98:d0:b6:
         a7:05:e1:a4:95:4e:d1:1a:29:54:11:e2:cf:af:43:ee:cc:89:
         32:26:b0:cf:71:9f:3e:6e:b1:bf:5f:14:ee:fa:79:aa:b5:35:
         04:d8:5c:f0:ce:b8:96:61:30:1c:c5:3b:86:c8:f9:f2:6c:78:
         91:74:55:cf:6b:14:57:15:fe:7e:a8:04:f8:b8:e2:89:81:16:
         c2:43:28:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:18 2024 by rpki-client on console-ams.rpki-client.org