Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/3137372e38372e36342e302f32322d3234203d3e203532383538.roa
File:                     3137372e38372e36342e302f32322d3234203d3e203532383538.roa (raw, json)
Hash identifier:          U5+ALaoW0Xo6KhfqEvt/DJbL2L1qLv5pn4HGTqWLapc=
Subject key identifier:   CD:E6:E3:4C:72:49:B1:C2:3A:02:E3:7D:4C:FE:EF:D7:08:4E:4B:7B
Certificate issuer:       /CN=4765DF83369720EE1AF514C7CA6660A475D18592
Certificate serial:       4F2D78F13467AB0B130A49BD7A803CA2599C3717
Authority key identifier: 47:65:DF:83:36:97:20:EE:1A:F5:14:C7:CA:66:60:A4:75:D1:85:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/3137372e38372e36342e302f32322d3234203d3e203532383538.roa
Signing time:             Thu 04 Apr 2024 04:00:40 +0000
ROA not before:           Thu 04 Apr 2024 03:55:40 +0000
ROA not after:            Thu 03 Apr 2025 04:00:40 +0000
asID:                     52858
IP address blocks:        177.87.64.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/4765DF83369720EE1AF514C7CA6660A475D18592.crl
                          rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/4765DF83369720EE1AF514C7CA6660A475D18592.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:2d:78:f1:34:67:ab:0b:13:0a:49:bd:7a:80:3c:a2:59:9c:37:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4765DF83369720EE1AF514C7CA6660A475D18592
        Validity
            Not Before: Apr  4 03:55:40 2024 GMT
            Not After : Apr  3 04:00:40 2025 GMT
        Subject: CN=CDE6E34C7249B1C23A02E37D4CFEEFD7084E4B7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1d:81:50:79:e0:fc:d1:4f:7b:95:6d:e9:12:
                    c1:4b:fb:44:1f:2a:d3:4d:56:58:8c:fd:9f:8a:6f:
                    2c:8b:a9:e7:65:b1:89:9a:e3:20:cc:56:8a:ea:d4:
                    15:13:62:8e:e7:b1:44:24:bd:a7:fa:cb:34:38:fd:
                    61:1b:36:67:a9:bf:ff:44:01:f0:bd:b7:7b:17:ec:
                    19:e7:43:22:df:63:3d:9a:a5:b7:33:9d:a2:c1:db:
                    90:a4:47:e6:d5:97:58:5c:e3:27:08:b6:ad:d7:be:
                    71:a1:f8:c5:fd:aa:d8:a5:e2:c6:f5:43:7c:40:18:
                    c5:a4:0c:d2:ff:a5:f1:72:14:a6:2e:6f:b3:3b:b5:
                    d6:13:6f:ea:54:52:0d:a6:7e:d4:e4:b2:0c:05:ad:
                    74:f9:5b:76:64:77:33:20:8a:54:8b:68:48:0d:67:
                    7e:43:a6:dc:25:79:82:45:81:12:59:20:00:f9:cb:
                    26:b1:9a:1a:af:59:0f:84:7a:0b:58:4c:d8:fa:52:
                    bf:50:d7:4d:c1:7b:6b:05:5a:c2:53:71:c8:93:b1:
                    4f:d3:df:0e:6c:71:6c:51:4c:29:8d:f1:5e:9b:d9:
                    b2:ac:4c:a5:8f:f3:64:65:60:2f:c1:9c:83:ec:ee:
                    90:81:8e:32:ed:56:3d:7e:cc:e4:0b:29:d9:47:67:
                    3b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E6:E3:4C:72:49:B1:C2:3A:02:E3:7D:4C:FE:EF:D7:08:4E:4B:7B
            X509v3 Authority Key Identifier:
                keyid:47:65:DF:83:36:97:20:EE:1A:F5:14:C7:CA:66:60:A4:75:D1:85:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/4765DF83369720EE1AF514C7CA6660A475D18592.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/3137372e38372e36342e302f32322d3234203d3e203532383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:5f:4b:cb:b0:b3:d5:2a:82:b2:58:f9:ef:bc:ed:5d:13:7f:
         cd:9b:9a:4f:8b:41:ee:58:a8:cd:fc:80:d7:0a:f7:91:e9:9b:
         55:6b:d7:c6:18:c0:5a:e1:59:e0:1c:8b:2f:90:1b:b2:26:27:
         1c:3b:53:5a:95:57:d7:52:99:46:15:0c:1d:24:cc:17:81:1b:
         f2:e2:17:01:e5:3f:54:c3:f5:10:32:15:b0:11:32:e0:01:d5:
         a2:3b:6e:ab:47:5c:31:4d:ed:10:95:fc:8e:6f:30:96:7a:57:
         f8:c7:46:ec:a5:2d:4c:b9:b3:10:a3:b5:b1:e9:cc:bc:9c:f3:
         60:19:a2:a5:81:e4:56:b1:f3:c8:b0:9b:8f:96:6b:20:af:f4:
         62:a1:f9:4e:3b:1b:42:74:88:53:fa:89:01:3d:23:d2:5c:43:
         b4:ad:4d:72:16:7a:4b:e4:f1:10:1a:01:de:57:39:92:10:1d:
         e4:d1:45:f4:94:5d:bf:22:b3:a2:53:cf:7e:0c:cf:fa:0a:41:
         74:94:99:f1:cf:f2:31:a8:05:28:61:21:8b:11:f9:03:60:e2:
         1a:39:e7:46:dd:b5:68:16:f5:a5:b3:4f:7e:9f:2c:62:2b:96:
         bf:44:2e:b5:ea:e7:30:7f:90:ee:f6:71:14:57:11:63:4e:46:
         21:70:5f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:07 2024 by rpki-client on console-fra.rpki-client.org