Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137372e38372e3230332e302f32342d3234203d3e203532353837.roa
File:                     3137372e38372e3230332e302f32342d3234203d3e203532353837.roa (raw, json)
Hash identifier:          UaHPxEv0wEVGF/RRbjwuVKETTe3z0gPR7zgY0W71GC0=
Subject key identifier:   A3:B3:94:AD:8A:87:92:93:C3:E4:E5:39:8E:F4:21:08:C0:A0:B0:5E
Certificate issuer:       /CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
Certificate serial:       7B65EF75CFEDBAB9B0FBFD6B51D4CF73136081E7
Authority key identifier: 0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137372e38372e3230332e302f32342d3234203d3e203532353837.roa
Signing time:             Tue 02 Jul 2024 20:42:48 +0000
ROA not before:           Tue 02 Jul 2024 20:37:48 +0000
ROA not after:            Tue 01 Jul 2025 20:42:48 +0000
asID:                     52587
IP address blocks:        177.87.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl
                          rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:65:ef:75:cf:ed:ba:b9:b0:fb:fd:6b:51:d4:cf:73:13:60:81:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
        Validity
            Not Before: Jul  2 20:37:48 2024 GMT
            Not After : Jul  1 20:42:48 2025 GMT
        Subject: CN=A3B394AD8A879293C3E4E5398EF42108C0A0B05E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:25:72:ff:89:c4:04:a1:42:1e:a1:8e:32:22:
                    f8:fa:84:79:c3:4c:5b:f6:d3:1d:c0:98:fc:c6:eb:
                    c5:92:7e:90:a5:b8:f2:77:de:2e:c3:37:0b:14:31:
                    9a:93:64:8e:d6:ed:10:b9:dc:b4:e1:ec:dc:d6:81:
                    61:6a:70:95:93:78:b6:b3:64:aa:9c:75:0e:91:e3:
                    c4:78:e5:8f:cb:77:e7:cc:9f:ee:b9:e4:77:0c:81:
                    9f:d1:d9:3f:6d:21:9e:d0:79:57:22:9d:63:3d:3b:
                    1c:9a:a6:d8:92:af:44:dd:25:b0:3d:63:a1:d1:64:
                    b2:a1:ce:75:2c:9f:11:08:a4:54:d1:a1:96:92:7f:
                    12:89:0d:7b:c3:21:6e:ba:8b:a2:c3:0c:d7:c7:77:
                    23:d9:f4:9b:f2:ad:80:76:99:47:2a:7f:5f:b1:77:
                    fa:62:0a:83:aa:93:39:d3:92:05:76:b1:95:a7:a1:
                    18:79:0f:34:22:e8:57:cf:8f:0f:9e:c4:11:e4:30:
                    24:e6:fb:0f:72:9a:92:50:2b:60:c4:50:50:38:12:
                    d7:96:2d:e6:e6:ce:75:ce:d4:91:60:4f:11:f9:db:
                    ea:37:95:5a:15:fe:4b:14:9f:57:21:ac:f7:0f:e0:
                    21:1c:35:26:69:b1:3c:b5:d5:d1:a2:69:71:53:d9:
                    11:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B3:94:AD:8A:87:92:93:C3:E4:E5:39:8E:F4:21:08:C0:A0:B0:5E
            X509v3 Authority Key Identifier:
                keyid:0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137372e38372e3230332e302f32342d3234203d3e203532353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:9b:0e:48:e9:f2:81:cb:eb:7f:96:ff:8b:f2:bb:74:53:2f:
         e0:d8:db:c9:aa:2c:71:32:c7:46:a8:b3:58:05:61:82:c7:1c:
         38:e0:21:95:80:50:d0:8d:a5:25:1d:b6:71:78:e6:e1:fd:c1:
         6b:93:2d:f9:9b:37:39:b6:03:38:26:88:eb:2d:0e:73:f1:25:
         68:00:44:23:82:8a:2d:6f:38:85:57:65:78:32:a3:a8:ef:98:
         ea:f8:52:bc:91:51:2a:2f:60:e8:ef:2a:94:36:db:cc:6b:77:
         cc:ac:79:2e:e8:10:f4:b3:2b:64:9c:b2:17:78:21:7a:7c:44:
         da:ed:b3:cb:6a:11:8a:fc:f6:4a:99:9b:c3:66:6a:1b:0b:99:
         52:92:82:33:ad:51:ba:9e:2a:91:a5:f9:5e:76:88:b3:74:0c:
         74:db:9f:44:8f:d5:bb:e3:ea:34:4a:b4:6e:f0:89:c8:7a:e9:
         9f:eb:80:05:1a:01:42:fa:5f:68:17:a2:16:8b:57:a8:48:ba:
         ed:17:79:8a:28:1b:21:b5:77:a9:d6:01:88:ad:7f:ca:c8:b7:
         c4:3a:fb:74:76:05:f2:be:56:2e:7c:db:97:b3:35:88:30:22:
         78:07:88:00:b4:c1:3e:ce:1f:fc:f4:c8:e4:82:25:23:d6:17:
         9b:93:c9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:39 2024 by rpki-client on console-ams.rpki-client.org