Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/3137372e38362e32312e302f32342d3234203d3e20323632363230.roa
File:                     3137372e38362e32312e302f32342d3234203d3e20323632363230.roa (raw, json)
Hash identifier:          jKua8wWraAIXW06/+SZUV7eiKjwdh6wdR0+8eizVVso=
Subject key identifier:   1E:B2:99:C0:72:51:24:A3:43:DD:8B:70:1B:3F:7B:3B:CA:14:26:F3
Certificate issuer:       /CN=D5D13CA45DDA9FFFB2CC93AF535230F23FBE01A1
Certificate serial:       6186DD3572080EAB621787BAEC2D9D2EBF0E0CE8
Authority key identifier: D5:D1:3C:A4:5D:DA:9F:FF:B2:CC:93:AF:53:52:30:F2:3F:BE:01:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5D13CA45DDA9FFFB2CC93AF535230F23FBE01A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/3137372e38362e32312e302f32342d3234203d3e20323632363230.roa
Signing time:             Thu 05 Sep 2024 11:38:53 +0000
ROA not before:           Thu 05 Sep 2024 11:33:53 +0000
ROA not after:            Thu 04 Sep 2025 11:38:53 +0000
asID:                     262620
IP address blocks:        177.86.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/D5D13CA45DDA9FFFB2CC93AF535230F23FBE01A1.crl
                          rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/D5D13CA45DDA9FFFB2CC93AF535230F23FBE01A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5D13CA45DDA9FFFB2CC93AF535230F23FBE01A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:86:dd:35:72:08:0e:ab:62:17:87:ba:ec:2d:9d:2e:bf:0e:0c:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5D13CA45DDA9FFFB2CC93AF535230F23FBE01A1
        Validity
            Not Before: Sep  5 11:33:53 2024 GMT
            Not After : Sep  4 11:38:53 2025 GMT
        Subject: CN=1EB299C0725124A343DD8B701B3F7B3BCA1426F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fe:8b:29:6c:da:6d:47:3c:3c:da:7a:a8:e3:
                    ca:07:7a:05:e3:99:7d:bb:0b:1e:cb:38:e4:39:37:
                    ff:b1:af:e7:e0:a6:c9:46:76:58:7d:93:e5:2f:f1:
                    9c:7e:82:5a:e7:85:bc:3b:b9:15:ad:bc:48:2d:fe:
                    f8:7c:ba:f7:bc:72:78:74:3f:a4:65:e5:53:3b:96:
                    0b:54:af:18:9e:66:6b:6c:7b:1e:e9:20:13:ba:20:
                    f4:aa:5b:9e:e7:af:09:d2:a1:cd:ff:94:59:87:4d:
                    d9:83:8a:29:43:62:48:96:2d:da:87:91:50:ae:39:
                    e0:99:59:a3:23:b7:e0:67:2b:12:39:e7:37:4e:e9:
                    72:1d:01:68:c0:71:af:a3:fb:23:a2:9a:d2:67:ac:
                    03:1a:fe:11:01:32:21:e2:1e:3b:40:af:1c:6a:88:
                    fd:9f:ba:ce:b1:55:bc:77:a9:79:3d:ef:a1:32:5c:
                    98:83:ef:c9:e8:f3:ee:c4:c7:1f:af:4b:8b:d3:f7:
                    d8:d9:88:9d:1e:a4:2d:18:f1:5f:f5:ae:9f:fc:c3:
                    6e:dd:6f:b0:6c:6a:0a:31:ca:e9:1d:31:1e:3c:5a:
                    e8:35:fe:98:97:8e:76:db:89:fb:36:51:9b:5b:e1:
                    ea:57:a3:cc:0a:23:cc:3f:63:d6:dd:b0:58:1c:38:
                    6e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B2:99:C0:72:51:24:A3:43:DD:8B:70:1B:3F:7B:3B:CA:14:26:F3
            X509v3 Authority Key Identifier:
                keyid:D5:D1:3C:A4:5D:DA:9F:FF:B2:CC:93:AF:53:52:30:F2:3F:BE:01:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/D5D13CA45DDA9FFFB2CC93AF535230F23FBE01A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5D13CA45DDA9FFFB2CC93AF535230F23FBE01A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pwiiRZ4afYMxwntBvKNSHG8VSaLrV5V2PitfDGN2MBQ/0/3137372e38362e32312e302f32342d3234203d3e20323632363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:92:ce:e5:fa:de:1c:85:d0:bb:82:7b:55:3b:c2:0e:e5:dd:
         66:45:aa:ed:29:d7:06:b3:e5:16:43:5b:01:fa:b6:92:01:97:
         1c:aa:5c:14:fe:5a:27:d5:42:13:c4:57:6f:33:60:0c:cb:10:
         dc:5e:d9:7e:a0:e1:f6:c3:cc:cf:0e:03:f9:e1:4f:46:cb:6f:
         c3:63:ae:a2:b0:81:38:37:58:77:33:23:f2:a2:42:e0:7e:3a:
         84:1f:f5:36:ee:e2:b7:62:8d:e9:7f:43:d9:ea:e8:7a:ce:1f:
         1a:96:32:d6:95:b6:a9:1b:d4:80:c6:ee:17:e2:f2:f9:92:70:
         05:c3:5d:8c:c9:ec:6b:df:52:dd:c0:aa:31:33:f5:bc:4c:6c:
         0a:27:33:9f:25:9b:2f:44:15:00:9a:b3:43:97:8a:91:15:60:
         07:e5:6b:42:cd:93:6d:8e:ee:81:d7:86:67:ef:f8:0a:13:fe:
         a3:77:87:1f:3e:b6:de:7a:7e:47:96:56:9c:83:94:3d:28:7a:
         05:11:d3:f4:4e:e3:1a:d3:56:55:e8:a1:01:f8:52:7e:46:5d:
         59:5b:9f:68:ac:e8:b5:92:15:1a:f5:25:0c:12:17:98:83:da:
         80:15:de:01:3d:2a:d4:38:93:1b:d7:63:05:41:4f:27:09:e6:
         06:24:ce:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:06 2024 by rpki-client on console-ams.rpki-client.org