Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/3137372e38342e34302e302f32322d3232203d3e203532373038.roa
File:                     3137372e38342e34302e302f32322d3232203d3e203532373038.roa (raw, json)
Hash identifier:          g6ZIqw0LmlSNu7Akbkqw6H+MnluN4gGDWyGuF7oX0x8=
Subject key identifier:   7D:FE:D5:88:75:B0:0C:22:B6:B3:97:85:C2:83:38:4C:B9:F5:B1:C1
Certificate issuer:       /CN=06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB
Certificate serial:       2CEB43D446039D7C2911EC2DCC867F0B837DA5E3
Authority key identifier: 06:18:5E:1A:AA:BD:EA:E4:2E:58:12:9B:DE:A4:CF:EC:F0:C8:F7:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/3137372e38342e34302e302f32322d3232203d3e203532373038.roa
Signing time:             Wed 03 Apr 2024 18:32:53 +0000
ROA not before:           Wed 03 Apr 2024 18:27:53 +0000
ROA not after:            Wed 02 Apr 2025 18:32:53 +0000
asID:                     52708
IP address blocks:        177.84.40.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.crl
                          rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 18:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:eb:43:d4:46:03:9d:7c:29:11:ec:2d:cc:86:7f:0b:83:7d:a5:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB
        Validity
            Not Before: Apr  3 18:27:53 2024 GMT
            Not After : Apr  2 18:32:53 2025 GMT
        Subject: CN=7DFED58875B00C22B6B39785C283384CB9F5B1C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ed:c2:fb:c9:77:0d:60:53:e4:8f:67:b3:f2:
                    20:ea:71:5f:f6:5a:6f:5b:43:1d:85:71:0b:0f:6c:
                    95:8d:0f:2d:1c:3a:8d:ff:25:05:92:0d:fa:7b:48:
                    aa:49:5d:7c:08:34:a8:0c:52:f6:05:13:f0:88:77:
                    87:98:85:ef:80:23:d7:a6:bf:0d:44:02:d8:95:ba:
                    45:94:8d:e7:4f:58:46:35:00:3a:4b:b1:75:8c:6d:
                    a7:96:24:59:54:38:34:28:a6:50:15:07:08:df:5a:
                    7f:69:e5:fe:e0:c6:2e:6a:06:9e:30:4e:ae:ab:eb:
                    ba:dd:6a:b6:2d:75:f8:b7:c6:7f:66:1d:51:b0:a6:
                    0f:39:de:2d:dd:de:ac:61:c8:66:0c:78:aa:24:77:
                    81:3c:5d:23:f0:31:1c:5b:1d:01:84:43:e2:13:97:
                    49:16:20:8a:1f:5d:19:06:a3:e6:ba:92:24:79:af:
                    9a:25:05:ee:fa:e0:f1:5a:3e:e3:c5:15:24:3d:5d:
                    fb:43:86:31:23:c0:62:01:2e:fe:34:5e:68:60:ae:
                    c0:07:16:2d:cd:96:bd:39:4a:37:6a:0f:22:46:23:
                    45:8c:66:e8:c9:e4:96:06:ae:d9:21:de:f7:93:63:
                    a1:67:2e:7a:18:a7:8d:6b:7c:30:f2:0b:2f:5d:77:
                    62:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:FE:D5:88:75:B0:0C:22:B6:B3:97:85:C2:83:38:4C:B9:F5:B1:C1
            X509v3 Authority Key Identifier:
                keyid:06:18:5E:1A:AA:BD:EA:E4:2E:58:12:9B:DE:A4:CF:EC:F0:C8:F7:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/3137372e38342e34302e302f32322d3232203d3e203532373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:df:a5:a6:bb:00:8e:59:8c:22:10:ba:b8:9c:0b:b9:a0:14:
         fa:c0:bf:7b:bd:62:c4:db:5b:cb:09:86:d1:bf:5e:9e:cc:38:
         48:e4:f5:5d:50:43:73:09:c1:e3:5e:67:5d:6b:6e:e2:94:9b:
         25:4a:b1:6b:4a:2d:a5:a5:62:bf:3f:44:c8:eb:69:de:ad:fd:
         b8:88:47:42:75:7a:a5:9d:e3:dc:8a:9b:b3:01:fa:fb:1d:e9:
         99:d5:2f:77:8c:8d:d7:49:e7:88:9d:a4:dd:bb:22:0b:af:ab:
         ae:af:e1:fe:ca:ef:fe:8c:37:3a:e7:e4:cd:97:90:d3:6e:2f:
         d9:41:ed:24:40:6c:32:fe:11:e2:1c:2a:cd:7c:b2:d3:c1:b9:
         da:99:8a:80:51:49:15:44:af:88:00:b9:70:bb:95:05:db:ab:
         dd:c1:60:b7:9f:8e:86:51:32:05:a2:04:5c:6f:01:d3:96:85:
         91:6e:e2:39:61:0a:63:e3:79:5a:c0:c1:e5:e5:34:14:60:14:
         c0:5b:cb:3c:d8:38:9e:49:ae:f1:10:af:3e:a2:ef:3a:d2:a1:
         fa:2e:cb:20:57:a5:f3:12:d2:b2:68:19:ee:e3:33:c0:6c:ab:
         a6:02:0f:40:2f:46:21:7a:36:6b:e3:80:1b:9d:63:cc:7b:df:
         4f:c2:c5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:03 2024 by rpki-client on console-fra.rpki-client.org