Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137372e38372e3230312e302f32342d3234203d3e203532353837.roa
File:                     3137372e38372e3230312e302f32342d3234203d3e203532353837.roa (raw, json)
Hash identifier:          3pvwfaM8ZnturSDRjUifoYeyMaUcUu1nwpFEp3AwlP8=
Subject key identifier:   E3:2C:22:9C:66:0A:1D:FE:D1:00:A1:30:1E:DF:47:09:03:28:F1:7E
Certificate issuer:       /CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
Certificate serial:       20E8A763961DB02A82504C451753772B8C5BD562
Authority key identifier: 0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137372e38372e3230312e302f32342d3234203d3e203532353837.roa
Signing time:             Tue 02 Jul 2024 20:40:07 +0000
ROA not before:           Tue 02 Jul 2024 20:35:07 +0000
ROA not after:            Tue 01 Jul 2025 20:40:07 +0000
asID:                     52587
IP address blocks:        177.87.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl
                          rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e8:a7:63:96:1d:b0:2a:82:50:4c:45:17:53:77:2b:8c:5b:d5:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
        Validity
            Not Before: Jul  2 20:35:07 2024 GMT
            Not After : Jul  1 20:40:07 2025 GMT
        Subject: CN=E32C229C660A1DFED100A1301EDF47090328F17E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c0:94:26:4c:0f:0d:be:f9:30:c4:5d:1f:a6:
                    92:4f:d4:9d:25:11:9c:69:f0:1f:c6:0c:8e:24:58:
                    0a:a4:68:9a:a6:dd:a2:5b:3b:be:75:ee:d7:f8:d7:
                    8e:98:1c:ba:b4:d7:56:0e:ec:47:88:9a:3b:c5:ba:
                    06:97:fb:bb:58:5b:40:68:cb:e3:9d:24:ba:fc:55:
                    ce:1f:7a:52:d2:62:aa:08:31:17:86:43:ce:f7:07:
                    0e:5c:da:fa:32:10:a3:12:ab:fe:ef:e2:19:73:c0:
                    4f:dc:4b:a8:f4:e7:ae:2f:4d:7c:69:07:4d:29:4c:
                    24:8e:cf:0c:fc:b7:3c:e9:d3:03:f2:51:86:a2:5e:
                    4a:68:67:17:73:97:e9:8c:d0:0f:a8:fc:87:45:92:
                    2b:d1:98:2b:ed:63:cd:60:9b:59:1f:44:4f:1e:cb:
                    c0:f9:c0:dd:3c:40:f1:76:5e:b0:2f:c9:85:1d:df:
                    52:31:b6:53:0e:ab:b0:e3:99:e2:72:6f:9c:c2:b6:
                    54:55:85:97:8c:b6:00:86:d8:13:ed:f0:dd:20:85:
                    87:05:d3:77:42:02:15:5f:da:38:37:ca:4e:12:fa:
                    92:c9:e5:49:ae:4a:25:7c:97:bb:47:52:91:27:ac:
                    2c:60:78:08:f1:f5:cd:73:3b:13:1b:b4:e3:b9:3d:
                    97:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2C:22:9C:66:0A:1D:FE:D1:00:A1:30:1E:DF:47:09:03:28:F1:7E
            X509v3 Authority Key Identifier:
                keyid:0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137372e38372e3230312e302f32342d3234203d3e203532353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:8f:c1:45:2d:b1:96:59:f7:e4:09:1f:a0:3c:1e:d5:87:22:
         3d:46:4c:9b:be:08:bc:54:a2:41:56:97:f9:66:eb:c5:e3:f1:
         27:9c:a9:94:35:6f:ed:19:d3:e2:9e:bf:aa:bf:13:d5:f9:e4:
         ad:09:5a:79:02:d3:ec:73:6c:d5:e8:77:47:c0:ef:80:b2:b6:
         93:d0:ea:9d:15:db:b0:e7:e9:37:f2:d5:9a:da:8a:4a:b0:f4:
         41:b1:ca:02:82:14:af:15:80:52:5d:98:c1:04:13:66:9f:36:
         57:e5:fb:2c:6e:40:fd:dc:db:7b:e1:fb:37:38:b4:18:54:d4:
         d7:fd:59:e0:8a:09:a2:25:44:5f:5c:5d:b1:7e:4e:66:c6:33:
         3e:eb:48:53:8d:0e:28:0f:c9:93:58:d6:7c:75:f3:23:ad:f5:
         57:ac:14:81:31:6a:77:7f:46:07:20:7b:cc:6b:33:35:ed:c5:
         20:07:c5:06:75:52:16:ba:a3:04:29:85:d6:1c:a2:fc:e1:b3:
         38:59:75:62:9f:b0:1c:3b:77:b2:d5:46:a7:29:02:fc:84:f7:
         ba:7a:78:40:f5:d1:0c:d0:fb:04:14:4a:a5:f9:4c:0e:72:59:
         e1:b0:30:8b:3a:c7:63:f1:9f:61:63:9d:aa:01:1b:60:12:22:
         88:27:5a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:39 2024 by rpki-client on console-ams.rpki-client.org