Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3137372e37342e36342e302f32302d3332203d3e20323632333136.roa
File:                     3137372e37342e36342e302f32302d3332203d3e20323632333136.roa (raw, json)
Hash identifier:          JsnziU9iCAoeC8kwsnPbWT921TOBbD8HmJ++tDaKRo0=
Subject key identifier:   14:76:43:C2:E1:B2:1D:E6:91:5A:08:4A:BB:3D:92:C7:1C:83:C4:24
Certificate issuer:       /CN=DBAFD5BAC30F1A9CBD583FD0909CA4ED075F04C5
Certificate serial:       2BDBC9C7C4C6AE41986A2937DEC251F41FF13FF1
Authority key identifier: DB:AF:D5:BA:C3:0F:1A:9C:BD:58:3F:D0:90:9C:A4:ED:07:5F:04:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBAFD5BAC30F1A9CBD583FD0909CA4ED075F04C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3137372e37342e36342e302f32302d3332203d3e20323632333136.roa
Signing time:             Sat 08 Jun 2024 12:37:02 +0000
ROA not before:           Sat 08 Jun 2024 12:32:02 +0000
ROA not after:            Sat 07 Jun 2025 12:37:02 +0000
asID:                     262316
IP address blocks:        177.74.64.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/DBAFD5BAC30F1A9CBD583FD0909CA4ED075F04C5.crl
                          rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/DBAFD5BAC30F1A9CBD583FD0909CA4ED075F04C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBAFD5BAC30F1A9CBD583FD0909CA4ED075F04C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:db:c9:c7:c4:c6:ae:41:98:6a:29:37:de:c2:51:f4:1f:f1:3f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBAFD5BAC30F1A9CBD583FD0909CA4ED075F04C5
        Validity
            Not Before: Jun  8 12:32:02 2024 GMT
            Not After : Jun  7 12:37:02 2025 GMT
        Subject: CN=147643C2E1B21DE6915A084ABB3D92C71C83C424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a4:cf:87:1e:43:fe:5c:90:f7:c3:dc:1e:00:
                    0e:7a:36:bb:35:7c:29:43:81:78:32:b0:c3:c5:06:
                    64:b3:6d:47:7c:d7:68:4c:ce:71:7b:f9:4c:05:8d:
                    74:98:58:17:29:d6:0b:4c:ce:c3:da:b5:d2:29:72:
                    fb:d4:49:fe:d5:cb:6f:41:89:f9:14:28:10:60:91:
                    39:5b:65:de:e1:50:29:76:d6:90:28:3c:50:6d:e2:
                    d5:a7:a1:16:ae:c9:f8:8f:1e:b3:fe:42:4a:d6:e6:
                    a0:ee:fd:7c:6d:0b:cb:b4:77:b2:a4:7d:1a:2d:1f:
                    7e:01:0b:d6:5f:0e:b0:6a:d4:b0:0e:b1:1b:68:59:
                    6c:51:6a:3b:0c:57:a1:16:57:d8:10:19:86:0b:10:
                    a6:18:b9:de:0f:cb:82:10:11:fd:13:dd:bf:c7:da:
                    df:6e:75:09:c8:f1:ff:ea:71:57:c8:bf:72:6a:24:
                    fb:64:33:8b:16:20:76:b4:c5:80:e6:fb:c3:d0:a5:
                    b3:69:0e:7f:18:aa:f7:29:a0:64:8f:9d:49:54:d6:
                    32:ef:56:ab:3e:f7:41:28:0a:6f:16:7f:49:78:05:
                    44:8c:90:26:7e:a2:d9:66:f0:3b:12:a5:a4:d3:9f:
                    9d:19:48:0e:d1:d7:14:37:e7:b8:38:89:63:86:bf:
                    fd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:76:43:C2:E1:B2:1D:E6:91:5A:08:4A:BB:3D:92:C7:1C:83:C4:24
            X509v3 Authority Key Identifier:
                keyid:DB:AF:D5:BA:C3:0F:1A:9C:BD:58:3F:D0:90:9C:A4:ED:07:5F:04:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/DBAFD5BAC30F1A9CBD583FD0909CA4ED075F04C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBAFD5BAC30F1A9CBD583FD0909CA4ED075F04C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3137372e37342e36342e302f32302d3332203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         87:f8:3d:a9:03:67:66:07:9f:8b:e2:cf:e8:9f:cb:09:8c:c3:
         e9:1f:30:5d:ef:10:05:08:90:a6:32:f9:89:1a:ff:4b:fa:8a:
         96:6e:99:b0:3e:37:a2:46:4a:ae:03:16:8a:44:c4:52:e4:b8:
         db:a2:6c:f5:02:00:7b:e7:98:8a:52:4f:d8:fe:0d:b9:3f:7e:
         ce:6e:42:18:68:d6:34:a9:81:df:6a:33:d4:06:1c:d9:fa:36:
         af:d0:34:3b:c2:7a:a8:ff:da:86:a0:f4:1d:76:36:3f:ad:d9:
         df:35:aa:42:f8:6b:34:ff:a8:30:42:ef:a4:c3:bd:87:e4:cb:
         61:74:7c:d5:66:ef:e6:be:db:68:61:dc:29:e2:73:ee:59:c5:
         ac:af:05:6b:3a:1c:d5:6f:3c:85:5c:fe:4d:08:35:c4:b0:40:
         ab:d5:c7:dd:f4:ad:00:67:93:12:07:20:eb:f2:e3:f2:64:ec:
         9b:92:64:b8:b8:7f:b4:13:ef:35:62:0a:61:37:01:a5:a9:7f:
         33:e5:c4:84:db:51:77:a6:33:61:23:f2:4a:ba:23:9b:c0:57:
         5b:b6:8c:9b:e8:a6:ef:d4:d4:67:fe:e8:2a:1a:47:f3:9e:c2:
         07:46:92:f9:69:f0:5f:75:0f:bb:ba:a5:34:0a:be:2c:ce:a1:
         a3:99:22:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:18 2024 by rpki-client on console-ams.rpki-client.org