Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/3137372e38362e3132322e302f32342d3234203d3e203532383532.roa
File:                     3137372e38362e3132322e302f32342d3234203d3e203532383532.roa (raw, json)
Hash identifier:          1pp3BEnDwkDbw4biaWt/b8wyLQVeRZou0NhvQIon2bw=
Subject key identifier:   AF:1E:EF:E7:BE:EB:45:28:B5:95:B3:12:5A:47:BE:37:45:34:C1:2A
Certificate issuer:       /CN=0D483B0825B3E88C6437693FB9EC26E45EAACF21
Certificate serial:       0E27353DF4FAE7D399D1D876563C1870875AEC57
Authority key identifier: 0D:48:3B:08:25:B3:E8:8C:64:37:69:3F:B9:EC:26:E4:5E:AA:CF:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/3137372e38362e3132322e302f32342d3234203d3e203532383532.roa
Signing time:             Wed 03 Apr 2024 19:47:04 +0000
ROA not before:           Wed 03 Apr 2024 19:42:04 +0000
ROA not after:            Wed 02 Apr 2025 19:47:04 +0000
asID:                     52852
IP address blocks:        177.86.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.crl
                          rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:18:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:27:35:3d:f4:fa:e7:d3:99:d1:d8:76:56:3c:18:70:87:5a:ec:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D483B0825B3E88C6437693FB9EC26E45EAACF21
        Validity
            Not Before: Apr  3 19:42:04 2024 GMT
            Not After : Apr  2 19:47:04 2025 GMT
        Subject: CN=AF1EEFE7BEEB4528B595B3125A47BE374534C12A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:0e:83:f4:38:08:82:2a:3b:cd:1b:d2:9e:2d:
                    b0:e9:5a:0d:65:4a:ec:ab:e4:24:c4:89:c4:9c:5a:
                    d4:12:49:70:c8:0d:08:aa:ce:0e:a8:ea:55:91:92:
                    2c:a6:7b:93:f5:68:b7:bb:a9:62:46:2e:51:08:dd:
                    08:24:3e:2e:a9:ef:4b:65:29:c2:18:85:b0:6d:d2:
                    9e:6b:5d:fa:b7:10:dd:8c:c7:f8:8f:8b:23:3c:00:
                    ce:fe:30:6d:f0:3f:c9:d9:8e:7c:be:5f:17:85:e2:
                    8e:29:c4:b3:0b:e1:15:2b:cb:0f:5c:3a:ea:9f:73:
                    27:83:a8:66:5e:8e:63:a9:a2:0f:3b:88:b6:7e:7b:
                    6d:29:d0:3d:2e:7f:3d:cf:e7:ee:ee:bd:0c:7c:f7:
                    b7:f5:a5:2c:8b:f8:44:7e:c1:11:cf:14:bd:ef:1f:
                    51:b2:a8:b7:fb:5b:74:c6:d6:db:0b:57:13:53:34:
                    a5:b3:36:46:88:e5:29:d8:f0:5d:e4:27:af:c7:a9:
                    37:f7:e4:1e:68:ec:25:4b:67:d0:3f:4e:be:c5:ff:
                    49:39:6f:af:b9:41:b6:8e:d2:3f:ca:d3:df:90:52:
                    72:87:e5:45:c6:22:ef:ed:59:a2:4f:61:89:6b:ed:
                    cd:37:06:dd:a6:c1:20:e8:04:b6:ca:a4:2e:71:2d:
                    66:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:1E:EF:E7:BE:EB:45:28:B5:95:B3:12:5A:47:BE:37:45:34:C1:2A
            X509v3 Authority Key Identifier:
                keyid:0D:48:3B:08:25:B3:E8:8C:64:37:69:3F:B9:EC:26:E4:5E:AA:CF:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/3137372e38362e3132322e302f32342d3234203d3e203532383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:d5:cf:11:f0:01:28:35:2e:ed:a6:1c:50:27:17:9f:fa:12:
         2e:1c:23:a6:b3:d8:64:f6:9c:92:16:95:1e:1d:81:53:cf:92:
         63:b0:eb:46:a4:f6:1b:f6:cd:7e:bf:c7:7b:39:1e:96:7b:f3:
         75:34:8f:af:f9:91:d3:a2:78:83:36:b2:01:4b:b8:65:e8:3b:
         a0:27:f6:72:58:7f:f9:41:51:ff:34:d8:19:82:5d:58:76:86:
         88:1a:fc:c7:97:d5:6d:e3:fb:f4:03:76:53:91:82:4a:57:22:
         a0:c2:44:01:e1:9b:2a:41:da:26:53:c8:db:40:67:a7:6b:e5:
         8f:93:14:94:e0:48:16:99:94:51:67:5d:6e:69:24:44:21:bc:
         df:fc:86:3f:ad:7d:75:b7:c2:a1:17:cf:9d:a3:eb:75:9e:2b:
         d3:a8:74:eb:d1:b4:dc:0e:03:f7:b5:01:02:df:69:bd:ed:b7:
         ba:1b:12:ac:48:c0:f3:ab:d5:f5:7a:01:b9:84:ff:6a:f2:f9:
         ec:27:f6:88:11:2f:83:21:b1:69:ab:cb:10:86:1d:7c:3c:55:
         42:b3:0f:a9:cb:40:cc:54:5d:56:aa:98:c7:45:d3:c3:7c:07:
         47:49:7a:61:e6:b4:0d:23:55:69:e7:66:5a:66:c5:9c:2a:31:
         59:92:bf:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:18 2024 by rpki-client on console-ams.rpki-client.org