Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/1/3137372e38372e3233322e302f32332d3233203d3e203532353933.roa
File:                     3137372e38372e3233322e302f32332d3233203d3e203532353933.roa (raw, json)
Hash identifier:          RtaJlIntYnkjrSkwCrYR24o7Hv0R8pCuUeKAlooWDV0=
Subject key identifier:   19:0F:96:65:9E:2D:F2:1E:E1:99:0A:C8:67:12:3F:AB:54:A4:71:6C
Certificate issuer:       /CN=71F86B10A77D1BB0176438DDC470DFE2D19A6F14
Certificate serial:       7FBE96AD47A5AB326A536EA55A78613927883793
Authority key identifier: 71:F8:6B:10:A7:7D:1B:B0:17:64:38:DD:C4:70:DF:E2:D1:9A:6F:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71F86B10A77D1BB0176438DDC470DFE2D19A6F14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/1/3137372e38372e3233322e302f32332d3233203d3e203532353933.roa
Signing time:             Wed 03 Apr 2024 22:00:28 +0000
ROA not before:           Wed 03 Apr 2024 21:55:28 +0000
ROA not after:            Wed 02 Apr 2025 22:00:28 +0000
asID:                     52593
IP address blocks:        177.87.232.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/1/71F86B10A77D1BB0176438DDC470DFE2D19A6F14.crl
                          rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/1/71F86B10A77D1BB0176438DDC470DFE2D19A6F14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71F86B10A77D1BB0176438DDC470DFE2D19A6F14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:be:96:ad:47:a5:ab:32:6a:53:6e:a5:5a:78:61:39:27:88:37:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F86B10A77D1BB0176438DDC470DFE2D19A6F14
        Validity
            Not Before: Apr  3 21:55:28 2024 GMT
            Not After : Apr  2 22:00:28 2025 GMT
        Subject: CN=190F96659E2DF21EE1990AC867123FAB54A4716C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:04:4c:0b:f0:be:cf:ab:f0:04:a4:dc:43:23:
                    ee:88:b2:97:62:72:9e:57:1e:01:17:ed:00:27:eb:
                    a1:73:66:a5:d1:e3:3e:25:93:e3:f3:e9:52:69:a2:
                    4c:32:06:dd:aa:18:0a:0b:21:5a:29:b1:30:26:b6:
                    f2:b5:c9:2d:73:18:7b:c8:30:de:88:1c:ca:8c:23:
                    a0:db:22:96:b0:9e:30:59:d7:a3:1c:5c:bd:b1:aa:
                    ea:e3:ed:9a:b1:9e:12:5b:c4:31:11:5c:dc:c6:cf:
                    40:e1:63:c7:77:0d:c0:07:b1:af:cc:99:37:fb:27:
                    10:5d:43:5d:e7:49:58:27:cb:c8:f4:ca:d4:53:0c:
                    e8:5c:66:76:50:39:bb:5a:69:5a:2c:b6:29:70:5a:
                    ec:08:eb:67:81:e6:0a:e4:94:92:96:ea:bf:36:2a:
                    c4:3e:25:4f:c7:7d:15:27:f1:a0:82:e6:c8:ea:46:
                    33:50:de:8d:41:7f:bb:ce:e1:79:56:1a:3e:17:ba:
                    d7:24:98:9c:1c:a2:a5:c6:c3:6f:7a:eb:d5:63:5d:
                    0f:cd:0f:bb:36:8f:f2:63:a5:a3:42:3c:86:8a:73:
                    fd:df:5c:d5:c0:18:09:b8:a9:21:0d:f8:a0:f8:13:
                    e6:44:d7:eb:90:a4:c5:40:a5:39:44:75:48:3c:68:
                    78:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:0F:96:65:9E:2D:F2:1E:E1:99:0A:C8:67:12:3F:AB:54:A4:71:6C
            X509v3 Authority Key Identifier:
                keyid:71:F8:6B:10:A7:7D:1B:B0:17:64:38:DD:C4:70:DF:E2:D1:9A:6F:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/1/71F86B10A77D1BB0176438DDC470DFE2D19A6F14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71F86B10A77D1BB0176438DDC470DFE2D19A6F14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/1/3137372e38372e3233322e302f32332d3233203d3e203532353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:b8:7f:0b:ab:fb:d3:9c:5c:93:49:65:d9:91:fb:91:8b:02:
         c5:47:5a:89:38:c6:1b:2e:b4:aa:a2:4a:ff:fb:9f:e2:42:b6:
         bb:af:76:18:1f:c2:aa:95:c6:26:82:8e:c5:a4:f0:52:0f:d0:
         2b:0e:6f:99:f9:83:3e:1e:8e:cf:ad:23:a0:bc:1f:47:c6:4a:
         7e:f4:be:d5:c7:40:f0:d0:f2:c2:8e:8a:1a:62:4b:99:dc:43:
         6a:98:45:ca:1d:f0:6a:73:8e:95:7b:ee:dc:d5:3a:19:5d:ac:
         e8:fb:66:c6:a4:5a:6d:76:9c:ac:3e:68:ab:9a:76:18:6f:e5:
         8d:ae:63:3e:fc:fa:64:fe:7d:53:6a:f9:9d:23:9b:cc:47:44:
         b8:e0:16:57:f1:8e:15:4d:10:71:bb:1e:24:af:54:35:80:56:
         7e:76:ad:b9:71:94:14:97:6e:b9:df:7b:c8:72:38:ee:43:0d:
         1e:62:97:7f:a2:6d:20:54:1a:89:2f:01:d3:3c:7c:a7:5b:88:
         83:da:ce:59:18:57:24:61:7f:da:55:42:97:53:b6:d0:11:88:
         51:db:af:fb:8d:3e:a2:38:d0:cb:90:1b:e4:29:33:25:e8:f1:
         8d:9c:6d:57:fb:4d:93:9e:00:a4:84:81:72:45:89:71:3a:ba:
         77:d7:8b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:39 2024 by rpki-client on console-fra.rpki-client.org