Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6RgXqYhRSsfPxhizAjEoVWZtffod3YjweuLmUNm888Qs/0/3137372e38372e36382e302f32322d3234203d3e203532353931.roa
File:                     3137372e38372e36382e302f32322d3234203d3e203532353931.roa (raw, json)
Hash identifier:          FJ9+Bvf41VX6nGZiDaoJtVfoQol0hePzVFI2vAJOMPs=
Subject key identifier:   8A:70:BD:13:58:8D:1A:D1:94:A9:B7:AB:DC:01:78:6B:79:AB:3D:1B
Certificate issuer:       /CN=6F3C98FD5109294099E4EDEB68BB62F2EEA4F181
Certificate serial:       67907E9D74A7A3A023EDE1DA62D458EB5C6AD459
Authority key identifier: 6F:3C:98:FD:51:09:29:40:99:E4:ED:EB:68:BB:62:F2:EE:A4:F1:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F3C98FD5109294099E4EDEB68BB62F2EEA4F181.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6RgXqYhRSsfPxhizAjEoVWZtffod3YjweuLmUNm888Qs/0/3137372e38372e36382e302f32322d3234203d3e203532353931.roa
Signing time:             Mon 26 Aug 2024 12:56:37 +0000
ROA not before:           Mon 26 Aug 2024 12:51:37 +0000
ROA not after:            Mon 25 Aug 2025 12:56:37 +0000
asID:                     52591
IP address blocks:        177.87.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6RgXqYhRSsfPxhizAjEoVWZtffod3YjweuLmUNm888Qs/0/6F3C98FD5109294099E4EDEB68BB62F2EEA4F181.crl
                          rsync://rpki-repo.registro.br/repo/6RgXqYhRSsfPxhizAjEoVWZtffod3YjweuLmUNm888Qs/0/6F3C98FD5109294099E4EDEB68BB62F2EEA4F181.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F3C98FD5109294099E4EDEB68BB62F2EEA4F181.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:90:7e:9d:74:a7:a3:a0:23:ed:e1:da:62:d4:58:eb:5c:6a:d4:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F3C98FD5109294099E4EDEB68BB62F2EEA4F181
        Validity
            Not Before: Aug 26 12:51:37 2024 GMT
            Not After : Aug 25 12:56:37 2025 GMT
        Subject: CN=8A70BD13588D1AD194A9B7ABDC01786B79AB3D1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:18:18:f1:4a:dc:1e:5b:20:cf:1b:54:1f:d6:
                    85:ed:28:a9:02:9b:33:f6:7e:d9:ab:16:f9:db:23:
                    7c:69:33:9d:37:88:ea:29:98:9b:56:f6:1c:23:fc:
                    29:4e:c9:98:fe:87:60:1f:88:46:e4:dd:70:06:1a:
                    8b:23:bc:09:ce:d0:4e:22:78:ce:7f:f2:45:6c:fd:
                    46:79:7c:1a:65:01:2c:0b:2c:a8:a4:db:03:81:39:
                    aa:98:28:89:58:8b:58:bc:77:3d:b9:eb:78:f2:93:
                    11:33:0d:a7:00:e0:61:0d:be:cd:ab:21:ed:11:7f:
                    f7:bc:cf:15:04:97:64:52:d7:97:35:2d:7e:30:33:
                    58:f3:40:0f:94:b1:78:8e:0d:98:fd:4a:20:18:44:
                    9a:6e:47:1f:f3:bd:df:c6:0c:40:b9:fb:3c:03:96:
                    d4:d1:0a:38:2a:b2:28:1c:75:c2:f0:18:31:b4:3a:
                    0b:6c:d2:1d:4e:93:7f:24:34:49:52:8f:8f:35:cd:
                    d6:63:3b:b8:2c:76:38:5e:0d:bf:51:3b:27:3e:65:
                    34:57:73:90:4d:41:42:8e:7a:bd:dd:75:50:9e:c9:
                    0f:fa:f7:3d:ac:17:c5:21:28:9e:cb:9a:3a:fa:66:
                    7d:42:98:ba:68:05:75:04:a1:00:d4:1c:d9:50:4a:
                    e0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:70:BD:13:58:8D:1A:D1:94:A9:B7:AB:DC:01:78:6B:79:AB:3D:1B
            X509v3 Authority Key Identifier:
                keyid:6F:3C:98:FD:51:09:29:40:99:E4:ED:EB:68:BB:62:F2:EE:A4:F1:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6RgXqYhRSsfPxhizAjEoVWZtffod3YjweuLmUNm888Qs/0/6F3C98FD5109294099E4EDEB68BB62F2EEA4F181.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F3C98FD5109294099E4EDEB68BB62F2EEA4F181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6RgXqYhRSsfPxhizAjEoVWZtffod3YjweuLmUNm888Qs/0/3137372e38372e36382e302f32322d3234203d3e203532353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:9e:85:c2:98:f7:6f:48:b9:f9:b0:e8:6d:c1:60:69:34:bb:
         5d:6e:a4:64:4c:8d:34:2d:f6:46:e3:66:61:e0:db:ad:4c:6a:
         9a:26:40:d7:3a:4e:27:cf:d2:e8:d1:a0:04:09:cb:24:d0:7f:
         fc:02:5c:ab:74:d4:58:d5:ee:55:21:a3:0f:c3:f4:08:dd:6c:
         7f:9a:68:ce:37:4a:2d:2c:c8:e1:82:1a:ff:81:7d:81:91:78:
         0c:cf:99:42:95:39:9e:a4:3e:21:7f:27:bc:b5:46:a1:2e:ed:
         ca:02:57:eb:9e:64:1f:57:1b:6b:7b:c9:46:8b:4f:cd:36:3e:
         a6:3d:ec:78:93:77:ed:08:05:61:dc:1c:04:34:ec:77:78:32:
         d7:cc:ad:6b:04:98:b7:41:7b:66:06:a8:b7:3d:6e:c1:95:c9:
         63:b8:04:5e:d1:c2:9e:54:31:74:4c:cb:68:0d:cb:58:0b:ff:
         92:58:c0:67:6d:45:fb:9a:2c:4b:03:f6:b1:fd:39:e2:19:75:
         fc:d3:eb:ab:f8:14:db:14:f2:ad:3c:bc:1e:16:3b:d9:6e:b6:
         32:a3:a9:d2:f0:ec:fb:67:59:6b:ba:41:8a:97:2e:24:55:14:
         cc:a1:af:e8:f7:d4:5f:b4:dd:31:48:ff:40:c6:cc:f6:30:01:
         ca:d1:02:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:17 2024 by rpki-client on console-fra.rpki-client.org