Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/5/3137372e37302e3234382e302f32322d3234203d3e20323730363238.roa
File:                     3137372e37302e3234382e302f32322d3234203d3e20323730363238.roa (raw, json)
Hash identifier:          sYTLNSy7VkkfR3O3+g2F+Buc08Bg7FQIm2eO6O90g1k=
Subject key identifier:   63:19:56:8A:2D:33:0C:0B:41:2D:BE:4A:9B:7C:AC:9E:3E:37:0A:11
Certificate issuer:       /CN=FFBC11B5DDB084014A261301018F4DAFBE36BCBB
Certificate serial:       6ACA3A30504B2573671942B907113E8FEB103345
Authority key identifier: FF:BC:11:B5:DD:B0:84:01:4A:26:13:01:01:8F:4D:AF:BE:36:BC:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFBC11B5DDB084014A261301018F4DAFBE36BCBB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/5/3137372e37302e3234382e302f32322d3234203d3e20323730363238.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     270628
IP address blocks:        177.70.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/5/FFBC11B5DDB084014A261301018F4DAFBE36BCBB.crl
                          rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/5/FFBC11B5DDB084014A261301018F4DAFBE36BCBB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFBC11B5DDB084014A261301018F4DAFBE36BCBB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ca:3a:30:50:4b:25:73:67:19:42:b9:07:11:3e:8f:eb:10:33:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFBC11B5DDB084014A261301018F4DAFBE36BCBB
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c3:8f:66:52:6b:ef:ce:b1:40:5a:e9:75:e4:
                    4a:83:45:98:22:ea:3a:98:a4:cc:79:fb:ae:d9:71:
                    23:12:6f:bd:02:72:32:7f:87:e6:5d:7a:6f:ce:91:
                    7d:da:a2:1c:dd:3d:9d:24:de:33:38:c3:63:04:57:
                    96:07:a2:4f:dd:35:fa:0d:42:fc:b7:55:9d:0d:fc:
                    77:36:26:7f:fb:fe:96:44:e0:4a:46:a2:3c:bf:bc:
                    57:70:7b:5c:4f:fa:b0:fa:8e:0e:8b:4d:17:6e:65:
                    e8:63:77:1c:52:53:6d:1d:c3:bc:f7:6b:06:80:0f:
                    45:fd:20:64:c9:13:f6:ae:07:e8:23:fb:b5:b1:6e:
                    85:9f:8a:49:be:89:d7:3c:49:2e:7d:d9:44:8e:63:
                    e4:af:9e:0e:cf:51:72:3a:66:3b:31:0c:a6:b7:d5:
                    92:88:14:13:48:8b:e6:a5:94:77:3b:ab:bc:3c:03:
                    72:d8:7d:8e:29:d8:3d:0b:02:87:e4:87:a3:5d:e7:
                    35:3b:b1:be:b4:28:f2:90:b8:2e:0f:24:0f:f5:d7:
                    74:81:d2:23:3d:52:d0:e3:e2:45:02:92:a9:d8:15:
                    1f:f4:8b:85:10:f2:a6:c1:2b:64:fd:1d:c2:91:48:
                    fa:9a:71:cf:df:29:fb:1f:53:80:71:28:ed:d2:90:
                    82:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:19:56:8A:2D:33:0C:0B:41:2D:BE:4A:9B:7C:AC:9E:3E:37:0A:11
            X509v3 Authority Key Identifier:
                keyid:FF:BC:11:B5:DD:B0:84:01:4A:26:13:01:01:8F:4D:AF:BE:36:BC:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/5/FFBC11B5DDB084014A261301018F4DAFBE36BCBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFBC11B5DDB084014A261301018F4DAFBE36BCBB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88GJqHEr8WkMPgrpixdNPLLiweU3xcCkHRKSwMYU3bqw/5/3137372e37302e3234382e302f32322d3234203d3e20323730363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:58:c3:4a:e4:eb:57:3b:69:82:f5:9d:e4:f9:12:99:c3:b8:
         2e:a5:7a:bc:dc:9e:b2:79:a9:fe:d8:ae:be:a2:74:b8:1f:8f:
         ef:a7:f8:ec:5d:8e:ed:2d:58:eb:19:60:6b:97:70:dd:dd:52:
         17:a2:5c:73:0d:8c:fe:1b:d0:49:c3:6d:c3:e0:13:7f:ce:a4:
         ca:16:ff:4c:dd:4c:fd:6a:73:25:75:e2:d9:a5:94:0c:82:26:
         ac:d3:f1:ba:a6:28:68:b6:03:56:01:0e:4f:f8:c3:63:9b:42:
         2a:76:f4:24:64:56:07:f9:b0:e0:5d:0e:98:86:2b:00:69:c2:
         6e:6f:ae:83:0d:4d:d7:78:7d:54:ed:c9:28:5c:4b:5d:53:5c:
         5b:01:2a:3b:fd:07:13:4e:b8:40:0b:e3:82:10:1a:11:28:22:
         29:6c:d5:a7:fa:72:ba:57:04:17:20:f6:09:7c:06:5b:85:37:
         c3:d0:cc:eb:ad:6a:07:80:70:44:e5:41:93:34:0b:75:74:64:
         35:fb:c6:c6:43:8b:8f:eb:59:9b:25:6e:f6:ca:c7:30:7f:a5:
         9e:ed:d2:12:0a:83:a7:10:4d:38:1e:18:34:1f:b4:5e:04:c7:
         16:f1:59:54:9d:8c:39:8d:33:d0:74:10:4f:7b:59:85:b6:ed:
         0f:d4:72:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:33 2024 by rpki-client on console-ams.rpki-client.org