Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/3137372e38362e37362e302f32322d3332203d3e203532353631.roa
File:                     3137372e38362e37362e302f32322d3332203d3e203532353631.roa (raw, json)
Hash identifier:          QRserbK/scIlzLXUy++gwmtfiw9pjm1gqJ/e7qEGk3A=
Subject key identifier:   2F:D1:AD:BE:DA:D1:18:6B:AE:DE:00:42:69:AF:B8:7F:B5:C8:84:CD
Certificate issuer:       /CN=8FB0A435AA71965FD7774887BFE0AE34E6E39B03
Certificate serial:       38D941DAE193C8DFD8320CFD1DC151CAE1EF35F6
Authority key identifier: 8F:B0:A4:35:AA:71:96:5F:D7:77:48:87:BF:E0:AE:34:E6:E3:9B:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/3137372e38362e37362e302f32322d3332203d3e203532353631.roa
Signing time:             Thu 19 Dec 2024 22:06:39 +0000
ROA not before:           Thu 19 Dec 2024 22:01:39 +0000
ROA not after:            Thu 18 Dec 2025 22:06:39 +0000
asID:                     52561
IP address blocks:        177.86.76.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.crl
                          rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 13:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:d9:41:da:e1:93:c8:df:d8:32:0c:fd:1d:c1:51:ca:e1:ef:35:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FB0A435AA71965FD7774887BFE0AE34E6E39B03
        Validity
            Not Before: Dec 19 22:01:39 2024 GMT
            Not After : Dec 18 22:06:39 2025 GMT
        Subject: CN=2FD1ADBEDAD1186BAEDE004269AFB87FB5C884CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:08:16:85:74:9e:6e:c7:44:7f:57:2f:0f:7f:
                    8a:44:4b:cb:77:e7:a1:29:ff:2a:90:44:74:da:81:
                    66:85:6c:25:b9:75:a4:c8:4b:77:5a:50:a0:d1:0e:
                    18:85:f6:ab:ef:15:48:57:50:cf:ae:52:67:3e:81:
                    8a:c4:3a:ba:ff:fd:3c:48:12:b6:69:a1:e6:c6:a7:
                    da:16:21:b5:3a:2c:b2:3d:32:6d:05:67:ef:ef:86:
                    7a:18:d5:f8:77:a3:69:37:be:9c:a8:4d:3e:f0:cc:
                    cd:13:1c:11:c8:9f:b1:d2:87:a6:7e:36:47:95:ea:
                    ba:23:7b:ca:1b:e7:30:48:18:f7:52:8c:72:df:3b:
                    d2:c7:42:12:66:1b:5f:7b:c4:ed:63:d1:00:e2:da:
                    35:4b:0c:30:a6:b7:e9:76:31:37:6f:25:20:48:d3:
                    a7:48:9c:6e:5b:fc:de:42:6f:a9:42:e9:37:51:26:
                    71:25:79:5f:47:3e:28:54:97:96:d6:d3:15:52:f6:
                    42:ed:26:5c:e0:96:11:80:ff:99:4e:04:4f:d3:bd:
                    32:d2:6a:ce:0d:fa:65:b1:35:2b:3a:b2:5b:ff:15:
                    41:12:45:6e:31:43:4e:90:81:e5:57:de:95:79:aa:
                    75:2e:ba:76:48:34:21:1a:dc:2e:eb:6d:c2:de:49:
                    26:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D1:AD:BE:DA:D1:18:6B:AE:DE:00:42:69:AF:B8:7F:B5:C8:84:CD
            X509v3 Authority Key Identifier:
                keyid:8F:B0:A4:35:AA:71:96:5F:D7:77:48:87:BF:E0:AE:34:E6:E3:9B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/3137372e38362e37362e302f32322d3332203d3e203532353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:92:1a:04:2d:df:3a:c7:09:16:98:6b:74:be:90:13:0a:53:
         b1:3b:64:9d:51:a1:56:d8:61:9b:a4:3d:ed:60:13:1d:45:f3:
         69:27:77:a7:ac:97:23:c7:95:b5:aa:dc:15:98:b7:e1:70:ca:
         63:ac:24:70:b0:de:26:d6:af:bf:99:22:bf:d5:99:cf:33:60:
         b4:60:b3:be:12:b5:d7:55:74:40:29:19:cd:a3:ce:e7:24:5f:
         fd:0b:db:47:30:b5:62:8b:be:6a:b3:73:bd:f6:90:38:89:fb:
         cb:85:25:a9:ba:da:c5:76:e7:00:a7:7e:73:a4:2a:61:17:e3:
         46:7a:06:03:4e:86:7b:35:e6:8d:a1:9f:84:48:36:68:22:31:
         1a:14:d5:02:35:f3:f7:33:c8:22:34:46:27:16:ca:bb:2a:fb:
         3d:4e:a6:bd:40:77:ff:ce:e4:6f:42:8d:67:90:bc:7d:4d:7c:
         51:0c:7b:99:66:5a:7a:55:40:4a:db:ec:5e:7b:01:80:ed:76:
         4d:9d:fd:e3:e1:79:e7:00:b3:38:28:54:3f:27:50:66:56:19:
         a3:da:de:16:fe:67:d0:bc:49:60:d8:d8:0d:24:43:c6:2b:9c:
         6c:49:d6:27:13:1b:39:23:2c:b4:01:2c:c1:76:00:26:42:21:
         5d:fb:b0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:13 2025 by rpki-client