Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/1/3137372e38362e35362e302f32322d3332203d3e203532353637.roa
File:                     3137372e38362e35362e302f32322d3332203d3e203532353637.roa (raw, json)
Hash identifier:          NQK8e/GLnqtpGm/C2prAsvSna53fBnRufCg6tNC8cbI=
Subject key identifier:   8D:D9:61:71:D2:9E:A0:16:FB:FB:08:47:75:66:5E:FA:A2:AE:24:AA
Certificate issuer:       /CN=5047F902BACA932C3B81B997C030811D3F845FB9
Certificate serial:       5FC29F810BD9BD5CC081DADF24AA6E1954703FC1
Authority key identifier: 50:47:F9:02:BA:CA:93:2C:3B:81:B9:97:C0:30:81:1D:3F:84:5F:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5047F902BACA932C3B81B997C030811D3F845FB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/1/3137372e38362e35362e302f32322d3332203d3e203532353637.roa
Signing time:             Thu 04 Apr 2024 00:22:18 +0000
ROA not before:           Thu 04 Apr 2024 00:17:18 +0000
ROA not after:            Thu 03 Apr 2025 00:22:18 +0000
asID:                     52567
IP address blocks:        177.86.56.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/1/5047F902BACA932C3B81B997C030811D3F845FB9.crl
                          rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/1/5047F902BACA932C3B81B997C030811D3F845FB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5047F902BACA932C3B81B997C030811D3F845FB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c2:9f:81:0b:d9:bd:5c:c0:81:da:df:24:aa:6e:19:54:70:3f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5047F902BACA932C3B81B997C030811D3F845FB9
        Validity
            Not Before: Apr  4 00:17:18 2024 GMT
            Not After : Apr  3 00:22:18 2025 GMT
        Subject: CN=8DD96171D29EA016FBFB084775665EFAA2AE24AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2f:f0:c4:d8:e3:26:66:00:10:94:45:73:3d:
                    51:fc:02:c1:a2:78:31:bf:3a:a0:64:3e:6e:a4:00:
                    4f:42:ce:4c:d1:74:23:1a:d5:f3:f2:1d:2c:91:26:
                    a6:91:de:57:d8:4a:3f:48:a6:6d:10:37:79:25:16:
                    ba:de:b1:6e:4a:86:95:1a:1b:ce:cd:0a:af:78:a3:
                    c8:7a:1f:c3:43:dd:fd:87:d4:24:34:8c:f2:e1:8d:
                    11:0d:50:8d:ae:b9:ba:d3:03:78:52:f0:41:fc:f8:
                    6e:0c:d9:8b:a9:1a:7d:65:d7:f8:16:c0:69:f9:65:
                    62:89:0a:c5:fc:e6:83:7e:af:85:f1:fd:62:f5:7f:
                    a7:32:8b:79:3d:a9:d4:b3:2c:39:26:18:63:86:53:
                    d7:98:24:56:7e:84:31:d5:fc:31:33:85:a3:d4:52:
                    26:03:17:f7:f3:4d:42:7a:44:95:d8:ae:91:9a:36:
                    ff:90:63:8b:e0:05:3b:89:fa:e1:2c:c4:90:61:0f:
                    c2:2d:af:4a:d1:cb:f5:bb:07:44:a9:e7:2a:fd:94:
                    15:0e:f8:52:25:a5:f5:7d:1e:90:b5:40:a5:a2:8e:
                    21:20:53:03:36:7e:13:bb:14:bc:61:fb:43:c6:2e:
                    df:c7:32:af:c4:62:2f:6c:57:f6:07:14:5f:9b:66:
                    65:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D9:61:71:D2:9E:A0:16:FB:FB:08:47:75:66:5E:FA:A2:AE:24:AA
            X509v3 Authority Key Identifier:
                keyid:50:47:F9:02:BA:CA:93:2C:3B:81:B9:97:C0:30:81:1D:3F:84:5F:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/1/5047F902BACA932C3B81B997C030811D3F845FB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5047F902BACA932C3B81B997C030811D3F845FB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88K17F618rGJWPDSxijUevMrmuvBoW7EnGWwnYMB5QPS/1/3137372e38362e35362e302f32322d3332203d3e203532353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:3f:7f:c6:5d:cb:a9:4d:7d:da:26:36:3c:a1:f8:29:e3:28:
         00:e5:db:ef:06:c6:34:d6:55:41:66:bf:23:56:fc:8f:10:60:
         36:8e:5b:b7:a5:b1:7c:2a:e0:c3:ae:db:dc:1d:cc:c1:5d:c4:
         3a:67:c6:6c:52:16:a0:11:4a:98:f9:97:89:c3:dc:61:21:38:
         21:9a:9a:aa:a9:43:68:4b:11:cc:f6:65:64:8c:dd:27:17:55:
         07:08:1d:1c:6d:d3:17:53:7f:9b:8a:b8:dd:d4:e6:d6:ed:3e:
         a3:3a:28:b5:8e:2c:13:7a:0c:d1:5e:c7:ce:02:7f:a2:bd:6c:
         c5:76:a0:dd:cc:b2:26:31:58:f4:4c:35:b1:c2:a5:36:5b:ca:
         f7:f3:68:a2:79:9f:37:1c:c5:6a:31:8a:f8:eb:b0:31:73:36:
         b6:18:99:a4:e6:f7:ba:1c:73:32:23:ea:55:7b:f9:a1:9d:9b:
         0a:6b:c0:03:bb:aa:c8:6c:c6:a6:bf:c8:d9:8a:c1:c8:97:a5:
         09:f0:45:83:32:dc:67:63:a9:28:bf:b2:2c:25:01:aa:e3:4c:
         50:bd:e6:97:34:9e:a6:6e:48:0b:62:0f:63:66:10:0c:a1:2d:
         e9:e2:6f:e3:c4:c3:b5:5e:8a:ee:02:76:ec:d5:36:44:e1:80:
         2f:c7:f6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:04 2024 by rpki-client on console-ams.rpki-client.org