Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137372e38372e3230302e302f32322d3234203d3e203532353837.roa
File:                     3137372e38372e3230302e302f32322d3234203d3e203532353837.roa (raw, json)
Hash identifier:          98DoXhfkVOwtg5iYHWcqq05JrQtuq4hqFfwXIkQ/bsQ=
Subject key identifier:   98:9C:C8:28:A6:D0:C6:21:76:E8:D8:6C:C3:A4:30:DF:AE:8C:5F:B6
Certificate issuer:       /CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
Certificate serial:       2EF39BC5F8CED75D06DAEE220CCD04FD00EAEF06
Authority key identifier: 0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137372e38372e3230302e302f32322d3234203d3e203532353837.roa
Signing time:             Fri 24 May 2024 18:36:11 +0000
ROA not before:           Fri 24 May 2024 18:31:11 +0000
ROA not after:            Fri 23 May 2025 18:36:11 +0000
asID:                     52587
IP address blocks:        177.87.200.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl
                          rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 13 Jun 2024 11:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:f3:9b:c5:f8:ce:d7:5d:06:da:ee:22:0c:cd:04:fd:00:ea:ef:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
        Validity
            Not Before: May 24 18:31:11 2024 GMT
            Not After : May 23 18:36:11 2025 GMT
        Subject: CN=989CC828A6D0C62176E8D86CC3A430DFAE8C5FB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:12:35:5d:b6:16:7d:fa:06:c6:76:1d:ee:39:
                    b2:10:20:e8:99:1b:cc:07:fa:83:2d:a5:e7:73:57:
                    84:5a:9a:fe:e3:7a:9e:80:ae:7d:c4:a3:d7:d9:d1:
                    59:34:ae:2e:9e:03:9b:f5:d0:01:bd:ba:e6:76:23:
                    d6:8a:0c:73:f1:1c:a9:bb:0f:ee:9b:09:83:eb:30:
                    13:8b:c8:67:e6:05:7a:f9:5f:4c:ed:37:c4:16:de:
                    b8:ff:77:a4:2e:1e:77:51:f8:e9:d6:73:b3:fc:ae:
                    2c:2e:31:8f:9a:c7:57:99:be:aa:ce:8f:33:85:ae:
                    03:36:ab:56:3c:b5:a3:2c:b0:1d:04:76:4d:56:ce:
                    e8:f5:f4:c6:ff:40:d0:75:85:8b:10:19:19:ca:82:
                    02:e7:7f:8a:70:35:46:87:d5:e8:b8:0d:31:24:cd:
                    8f:01:ac:16:87:6b:8e:2c:4a:ce:74:84:57:f2:82:
                    8f:c9:26:9b:de:08:37:9f:e8:6b:06:1d:70:5c:d1:
                    b9:6b:79:2c:06:52:1d:cc:bf:09:89:d7:2f:5e:62:
                    98:75:38:5b:a2:7e:62:ab:f4:97:eb:f3:e3:59:e1:
                    84:0a:bd:5a:55:41:e4:33:d3:d6:a3:63:0c:20:41:
                    ab:38:a6:37:41:5e:b1:c6:de:82:ae:63:70:7b:95:
                    1b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:9C:C8:28:A6:D0:C6:21:76:E8:D8:6C:C3:A4:30:DF:AE:8C:5F:B6
            X509v3 Authority Key Identifier:
                keyid:0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137372e38372e3230302e302f32322d3234203d3e203532353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:77:d0:b0:7b:db:40:48:d3:dc:4b:0a:ae:3f:37:a5:04:a7:
         a6:dd:fd:b7:fc:01:6b:3e:b4:1a:36:89:1a:ed:0d:51:37:70:
         91:44:2d:a2:f5:ec:7a:f4:24:56:57:49:41:35:13:1a:5d:60:
         0d:f9:1d:da:4d:46:da:4f:d0:c5:44:cf:70:90:af:e7:4a:80:
         80:81:86:6d:52:6f:80:af:7e:ec:6b:fd:f1:55:32:8c:d8:be:
         82:73:81:b3:05:77:a9:eb:7f:af:6c:77:bd:6b:af:84:b5:3c:
         d1:36:64:fd:0f:69:55:da:7d:49:e6:99:17:2a:9a:45:3a:25:
         69:f5:2e:33:82:29:26:d7:b2:bd:6b:94:70:ec:68:23:fd:81:
         da:21:22:ac:10:53:8e:02:f5:c2:f2:3b:c6:b0:38:ba:be:c6:
         52:a8:3b:df:a7:38:d8:4f:32:1a:ed:29:9c:45:b6:24:f0:56:
         6f:48:98:94:f7:0a:a0:e1:ee:9e:91:66:c7:60:4d:52:ac:ab:
         cd:8a:8f:e9:eb:47:e0:6b:12:f7:69:4c:d3:08:0e:bc:4d:c6:
         c1:2c:71:7d:33:91:d9:7d:be:30:1b:f9:31:e4:b7:29:5c:78:
         66:32:3e:9c:82:c5:be:c2:97:ac:82:61:dd:e9:fc:de:d0:d2:
         33:7b:00:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 11:58:01 2024 by rpki-client on console-fra.rpki-client.org