Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/1/3137372e38352e35362e302f32312d3234203d3e203532373337.roa
File:                     3137372e38352e35362e302f32312d3234203d3e203532373337.roa (raw, json)
Hash identifier:          OGJ1/6m3HsufZS6R1V6GnZA60qLN7ToaGyzMVVDz8RI=
Subject key identifier:   2F:0C:64:75:7A:EB:04:91:B7:5A:9A:6F:36:17:CE:F8:3C:49:B0:54
Certificate issuer:       /CN=F62B9E3FC5DF8BAD85B5478E31B044A02D0B3440
Certificate serial:       6CB6733742788EE8E471AB44E539243A783F509B
Authority key identifier: F6:2B:9E:3F:C5:DF:8B:AD:85:B5:47:8E:31:B0:44:A0:2D:0B:34:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62B9E3FC5DF8BAD85B5478E31B044A02D0B3440.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/1/3137372e38352e35362e302f32312d3234203d3e203532373337.roa
Signing time:             Thu 04 Apr 2024 13:34:18 +0000
ROA not before:           Thu 04 Apr 2024 13:29:18 +0000
ROA not after:            Thu 03 Apr 2025 13:34:18 +0000
asID:                     52737
IP address blocks:        177.85.56.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/1/F62B9E3FC5DF8BAD85B5478E31B044A02D0B3440.crl
                          rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/1/F62B9E3FC5DF8BAD85B5478E31B044A02D0B3440.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62B9E3FC5DF8BAD85B5478E31B044A02D0B3440.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b6:73:37:42:78:8e:e8:e4:71:ab:44:e5:39:24:3a:78:3f:50:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F62B9E3FC5DF8BAD85B5478E31B044A02D0B3440
        Validity
            Not Before: Apr  4 13:29:18 2024 GMT
            Not After : Apr  3 13:34:18 2025 GMT
        Subject: CN=2F0C64757AEB0491B75A9A6F3617CEF83C49B054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:70:a1:d3:dd:4d:55:62:ce:01:bc:84:fc:b9:
                    e6:a2:fe:1c:c3:df:68:26:ca:68:f1:31:b4:bb:fb:
                    a1:30:9f:36:79:f2:15:b3:21:97:a3:99:05:82:a5:
                    b8:6b:a4:ea:62:e1:74:b4:71:d2:e4:01:8c:e5:a9:
                    fa:8b:6f:be:33:ab:36:19:d6:23:76:00:56:27:c0:
                    8b:95:27:9a:03:45:dd:60:05:d2:06:dc:5e:f0:2c:
                    07:1d:10:6b:91:1d:c1:2b:e7:5a:16:39:fe:a0:40:
                    e6:fd:45:4b:19:e4:f8:c7:59:0b:67:22:66:64:71:
                    29:f7:8f:f4:36:d4:e3:3f:bd:4d:d5:68:ef:a9:40:
                    44:f8:71:3a:fa:b2:a3:f2:bc:25:7b:70:56:16:08:
                    c4:10:ba:8c:9d:64:bf:da:af:73:8b:3f:e4:15:2e:
                    24:d5:24:ee:81:86:0d:df:5e:28:0f:21:03:4c:96:
                    32:53:a6:d2:4a:cd:c1:34:f5:43:be:df:a3:27:d0:
                    0a:52:a7:ba:a4:b7:43:0f:33:d4:0d:fd:0a:39:72:
                    b5:0e:7d:f6:b9:40:9a:71:08:3d:50:64:e1:65:f0:
                    eb:84:14:5e:d4:c9:a9:6c:7d:cf:df:82:bb:7c:f3:
                    f7:40:e2:12:00:08:66:46:e4:ca:92:fe:57:36:3f:
                    d6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0C:64:75:7A:EB:04:91:B7:5A:9A:6F:36:17:CE:F8:3C:49:B0:54
            X509v3 Authority Key Identifier:
                keyid:F6:2B:9E:3F:C5:DF:8B:AD:85:B5:47:8E:31:B0:44:A0:2D:0B:34:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/1/F62B9E3FC5DF8BAD85B5478E31B044A02D0B3440.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62B9E3FC5DF8BAD85B5478E31B044A02D0B3440.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wG3gjLvbkwQAa7aZJraBSNMWRXoBjv3wZCtaGdom6of/1/3137372e38352e35362e302f32312d3234203d3e203532373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         18:a0:31:e2:98:24:38:fd:35:b7:56:b8:29:53:6c:60:a6:26:
         7b:eb:20:9f:ad:61:15:7f:74:5f:01:69:55:c7:45:ea:f6:72:
         56:e6:8f:88:64:8a:26:28:e7:83:eb:1c:0b:5b:40:82:ee:fe:
         69:27:86:a1:d0:31:9f:8e:1d:8d:84:da:26:0f:6c:1e:b2:04:
         32:85:6b:93:f7:4a:a4:0c:e2:b3:91:ef:ce:d8:6c:bf:a5:91:
         1f:b8:1e:11:77:5f:79:d8:2b:5a:30:c6:6d:19:9b:f1:7d:2d:
         b7:25:2e:0b:eb:69:d0:0a:59:8a:24:b1:e3:24:1d:01:55:55:
         53:32:b6:f8:38:db:f5:d1:ce:22:0b:48:74:bc:e0:5c:b2:b5:
         85:2f:8e:30:51:0f:7d:d5:7b:ca:03:ae:e1:db:f5:78:67:c4:
         7b:8a:3a:0e:2a:c1:e0:27:71:34:46:20:9b:c9:ce:50:e3:2c:
         0a:62:dc:87:21:13:5c:09:fe:d6:97:7c:94:91:9b:93:01:2e:
         33:8e:b0:e1:28:92:36:c9:3b:9c:b4:d5:19:bd:3a:19:63:08:
         ec:6d:b3:5f:c9:50:c7:09:91:ed:c4:0d:6a:38:ee:6b:b1:46:
         d7:0e:24:1f:54:08:3a:84:41:25:97:d8:99:8d:70:ff:06:a6:
         76:0f:fa:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 11:59:55 2024 by rpki-client on console-fra.rpki-client.org