Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3137372e38352e3137362e302f32342d3234203d3e20323632363131.roa
File:                     3137372e38352e3137362e302f32342d3234203d3e20323632363131.roa (raw, json)
Hash identifier:          j0Nodm9IYfIyW6WuNLY2Eu4aTs5gDhtN909fmaASpP8=
Subject key identifier:   3A:23:E0:7C:A8:82:F6:43:03:8A:B0:23:DE:0C:23:40:0E:65:71:96
Certificate issuer:       /CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73
Certificate serial:       2F03A4DA41A9F0709CD8080EFFF9E15B178FFF47
Authority key identifier: D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3137372e38352e3137362e302f32342d3234203d3e20323632363131.roa
Signing time:             Wed 17 Apr 2024 14:20:27 +0000
ROA not before:           Wed 17 Apr 2024 14:15:27 +0000
ROA not after:            Wed 16 Apr 2025 14:20:27 +0000
asID:                     262611
IP address blocks:        177.85.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl
                          rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 05:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:03:a4:da:41:a9:f0:70:9c:d8:08:0e:ff:f9:e1:5b:17:8f:ff:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73
        Validity
            Not Before: Apr 17 14:15:27 2024 GMT
            Not After : Apr 16 14:20:27 2025 GMT
        Subject: CN=3A23E07CA882F643038AB023DE0C23400E657196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:00:33:77:11:3e:31:61:e4:85:03:39:74:85:
                    d5:74:46:70:f5:f2:e0:6d:33:98:bd:1b:af:53:72:
                    c0:93:a2:8b:7b:74:b2:b2:94:65:1d:9a:95:50:eb:
                    89:92:9e:e9:2e:1f:fa:84:b8:02:d9:a5:d8:c0:d8:
                    f9:f5:d9:43:14:33:ba:4b:d2:f1:ca:44:9c:1e:50:
                    97:89:e7:a0:b3:15:11:19:af:37:2d:46:1d:02:be:
                    81:4c:4c:d2:b8:dc:fb:00:b4:1c:27:1d:0e:b4:d1:
                    3f:d1:fb:d5:e7:86:87:63:ab:e7:c3:62:69:a8:fb:
                    59:28:e1:b5:b4:fd:1d:fc:a3:ef:2b:18:3b:a8:fb:
                    db:96:3e:b8:25:54:36:c3:ef:85:da:29:0d:74:41:
                    b4:59:e6:36:e8:e0:fa:62:7c:de:d8:a0:7d:b1:86:
                    82:90:26:b6:b2:4d:be:42:1a:6b:08:2a:c5:19:a9:
                    d2:33:d8:57:fa:25:fd:50:e8:9e:58:d4:ea:df:75:
                    1c:2b:60:6c:7f:3c:26:b2:8f:2c:eb:d4:71:2c:7f:
                    dd:c8:80:d8:d1:87:7b:18:e7:c1:77:43:88:00:50:
                    91:41:b3:cf:98:52:a8:0a:12:18:c1:9a:c7:f7:36:
                    ab:f7:66:9d:a3:bc:37:8c:d8:2e:c3:93:7d:bf:ba:
                    a5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:23:E0:7C:A8:82:F6:43:03:8A:B0:23:DE:0C:23:40:0E:65:71:96
            X509v3 Authority Key Identifier:
                keyid:D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3137372e38352e3137362e302f32342d3234203d3e20323632363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:19:c6:d1:ec:61:0b:24:73:9e:d0:cc:1d:7d:5e:15:61:c7:
         a1:ee:f7:52:dc:a3:1a:60:32:28:9f:14:1c:8e:2e:0c:66:b4:
         19:ae:6a:ef:49:20:c1:d4:34:14:59:9a:c4:73:8b:c4:59:bf:
         5f:9c:c5:e8:af:fe:7e:7f:1c:c5:ee:aa:11:c4:da:2f:5c:f3:
         1d:50:93:7a:24:0c:f5:1c:30:89:ed:57:36:ad:9b:74:fe:ef:
         98:42:73:56:c7:6a:ca:3b:25:cb:f0:97:7d:2b:21:68:67:ae:
         07:54:9c:16:20:6d:c7:8a:3a:17:14:75:86:fe:4a:d1:27:00:
         84:93:d3:c3:2c:e7:ee:a5:24:a7:e3:4e:0a:ca:6f:16:e2:d4:
         bf:2d:c3:9a:31:7e:6d:84:ee:d0:91:ce:ab:eb:b7:7d:95:d9:
         d6:e4:e8:8d:45:a3:84:4f:21:4a:de:62:7b:e7:31:f6:19:08:
         b9:d9:b0:26:28:4f:61:d9:6a:4a:3c:d8:cb:bd:b8:d5:d5:9a:
         fc:34:c3:df:6f:95:44:6e:c6:60:21:22:a5:ec:a1:49:02:2b:
         d7:8b:00:a9:40:a7:b8:e6:0d:0d:0c:3c:d8:81:ab:4b:86:a6:
         99:aa:8e:aa:fd:68:6e:78:6f:1b:c6:86:8d:91:68:d2:94:ad:
         cd:e1:a1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 09:32:32 2024 by rpki-client on console-fra.rpki-client.org