Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137372e38352e34382e302f32312d3231203d3e203238323130.roa
File:                     3137372e38352e34382e302f32312d3231203d3e203238323130.roa (raw, json)
Hash identifier:          H4TzAnDBGx8ujTQKGwacWiwu7EIUiNDRAX/BjMaNDtc=
Subject key identifier:   9C:EA:ED:BE:76:20:8D:FF:36:CC:41:2D:39:02:60:98:63:1B:FE:D4
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       2BDBD2B5E2CF36C4831A701067C2BF46C09AB081
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137372e38352e34382e302f32312d3231203d3e203238323130.roa
Signing time:             Thu 04 Apr 2024 04:37:49 +0000
ROA not before:           Thu 04 Apr 2024 04:32:49 +0000
ROA not after:            Thu 03 Apr 2025 04:37:49 +0000
asID:                     28210
IP address blocks:        177.85.48.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:db:d2:b5:e2:cf:36:c4:83:1a:70:10:67:c2:bf:46:c0:9a:b0:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Apr  4 04:32:49 2024 GMT
            Not After : Apr  3 04:37:49 2025 GMT
        Subject: CN=9CEAEDBE76208DFF36CC412D39026098631BFED4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1a:8e:16:40:ad:be:30:d3:46:35:6b:d8:f2:
                    64:96:ae:0f:9d:c7:6e:a2:e4:3d:ef:fd:7c:f8:79:
                    9d:9b:75:85:71:2a:ec:74:15:31:71:16:83:a5:af:
                    02:a2:95:45:5d:0a:e4:65:5b:c8:9f:41:f5:db:f2:
                    fc:6b:59:25:94:3d:d3:d8:e6:cb:21:f4:a5:65:ba:
                    34:38:b4:fa:9f:e6:72:a2:35:ba:5c:9d:3d:cf:cb:
                    53:6b:15:8a:1c:bf:79:bb:03:1d:f8:85:64:91:6c:
                    fa:93:23:6a:30:00:94:69:4b:d3:af:62:e2:2f:2a:
                    25:ef:58:aa:80:56:64:ab:21:b2:cf:c9:bf:65:eb:
                    01:95:79:0e:bb:b2:a5:0b:a5:c9:1c:b9:99:74:e0:
                    b5:6d:0a:c9:d7:ee:7c:86:e8:2d:a2:58:12:39:6f:
                    4b:90:3f:d3:ca:11:15:57:a5:ce:1a:a9:4c:74:8b:
                    f7:a2:39:40:bd:4e:0c:64:42:d5:9b:57:be:1f:e4:
                    97:59:81:39:c4:79:ac:ba:14:0f:99:ce:6a:7c:44:
                    ac:1c:d0:b6:ea:31:81:21:30:b4:3f:f2:fd:5a:38:
                    e8:2a:5e:3b:81:e3:b6:87:15:e6:a4:18:83:da:1a:
                    99:6b:64:0c:b4:e5:6d:67:f5:33:5d:61:d2:5e:00:
                    8f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:EA:ED:BE:76:20:8D:FF:36:CC:41:2D:39:02:60:98:63:1B:FE:D4
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137372e38352e34382e302f32312d3231203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         19:ad:37:be:9c:b6:c0:1b:94:01:cc:22:6f:7c:70:9c:8d:10:
         8a:71:db:2b:f7:d7:31:7f:88:a8:1d:d0:ce:2e:96:af:17:db:
         63:f5:7a:74:63:8b:14:6f:e6:41:f7:71:22:fd:cb:ed:c0:90:
         82:08:02:a0:f6:d0:f8:b4:ed:5f:06:ba:cd:e9:21:2e:95:5d:
         52:b3:d4:0d:23:c9:72:51:d0:39:4d:6d:e8:73:05:52:32:5d:
         ee:44:14:93:29:96:4d:b1:64:0b:f3:62:7e:31:87:95:ab:de:
         c7:19:07:d6:b0:13:1a:e6:32:e1:f6:7f:7f:f1:e5:d1:2f:57:
         66:f6:41:1c:c8:90:b3:20:ed:26:95:e8:97:f6:e2:4e:b6:0d:
         06:d6:44:f6:6c:19:06:03:ca:5a:06:a9:43:1b:63:7d:31:d0:
         c5:34:87:14:42:20:09:d1:6f:82:ef:6d:35:bd:e7:bf:4b:ea:
         9c:50:10:93:aa:62:9e:ed:66:68:42:f5:9d:d5:4e:fa:a6:9a:
         29:58:97:95:46:7c:0b:30:6e:36:bd:a2:5c:92:7f:55:19:00:
         41:52:cd:94:7f:78:48:64:2b:96:fb:50:bd:6e:2d:5d:2a:90:
         8d:a2:d0:43:69:05:68:36:f2:31:d1:f5:c6:0f:bf:62:a3:d7:
         ac:27:85:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:21 2024 by rpki-client on console-ams.rpki-client.org