Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3137372e38352e3138312e302f32342d3234203d3e20323632363131.roa
File:                     3137372e38352e3138312e302f32342d3234203d3e20323632363131.roa (raw, json)
Hash identifier:          oHgQToGiRkVLTJUQfAbi2SV4ceWfwIvl6Nae5B7qa6E=
Subject key identifier:   5C:5A:F6:42:34:5D:BD:E8:8B:7D:0B:3B:E0:20:4D:5C:EF:6F:CD:B4
Certificate issuer:       /CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73
Certificate serial:       67D8A1530F869B1706EF7B7B2DA77EA2A67E4446
Authority key identifier: D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3137372e38352e3138312e302f32342d3234203d3e20323632363131.roa
Signing time:             Wed 17 Apr 2024 14:20:27 +0000
ROA not before:           Wed 17 Apr 2024 14:15:27 +0000
ROA not after:            Wed 16 Apr 2025 14:20:27 +0000
asID:                     262611
IP address blocks:        177.85.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl
                          rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:d8:a1:53:0f:86:9b:17:06:ef:7b:7b:2d:a7:7e:a2:a6:7e:44:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73
        Validity
            Not Before: Apr 17 14:15:27 2024 GMT
            Not After : Apr 16 14:20:27 2025 GMT
        Subject: CN=5C5AF642345DBDE88B7D0B3BE0204D5CEF6FCDB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ae:fe:a3:43:9c:d3:fd:c2:7f:35:89:f0:d5:
                    5b:ab:cb:2b:89:db:23:35:96:40:4d:8b:81:ed:cc:
                    31:b4:17:3e:11:4f:b9:83:17:87:92:ed:b0:48:39:
                    a0:7d:dc:95:d2:29:86:0d:49:ca:5d:08:75:a6:8f:
                    e3:0c:89:e6:98:0c:5a:70:26:c5:f1:da:fe:16:7b:
                    00:ee:0c:c2:73:ce:47:c0:c3:b8:ab:b1:03:d1:66:
                    b2:c1:c2:6e:34:20:f7:54:ba:22:75:6f:c8:dc:cf:
                    92:06:f9:d4:c4:00:ed:f8:66:5a:37:54:e6:90:ae:
                    f8:8d:9a:7a:0f:d8:5b:99:f3:ba:0b:99:ea:8a:72:
                    31:10:0a:e8:0e:f3:17:d7:d7:c3:f5:82:ea:0f:39:
                    ae:4c:9d:8f:2e:1d:d0:36:21:5b:7b:54:6b:93:4b:
                    7b:5e:00:29:78:0d:36:55:a8:6b:13:1c:c0:c6:c2:
                    46:40:60:d9:b3:f9:38:5c:81:03:1d:55:80:93:bc:
                    e1:88:ac:5b:c7:ed:32:ff:37:1b:85:f4:7e:bb:7b:
                    49:3b:a4:6d:79:52:ca:04:87:ca:57:28:2a:cd:8f:
                    2a:97:75:a4:c7:0d:8d:0a:e6:8e:3f:99:71:46:0a:
                    e5:0e:c6:47:17:5f:82:10:b8:32:d6:6d:a1:74:4a:
                    03:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:5A:F6:42:34:5D:BD:E8:8B:7D:0B:3B:E0:20:4D:5C:EF:6F:CD:B4
            X509v3 Authority Key Identifier:
                keyid:D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3137372e38352e3138312e302f32342d3234203d3e20323632363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:b8:57:d6:66:8b:a0:02:c2:2b:f6:53:3c:9b:e7:a1:50:21:
         37:21:68:f4:76:c3:c2:69:29:8e:e8:bf:16:ac:c7:e4:57:3e:
         6f:2e:cb:60:df:ae:ef:7d:1f:a7:96:11:7b:09:a3:32:cc:65:
         79:cc:3c:1a:48:0e:f0:cb:3d:9a:71:1b:70:89:58:17:4c:3f:
         31:a8:63:5f:f8:81:29:e7:0a:93:8c:92:fc:4f:c2:56:25:9f:
         53:e3:86:79:2d:b2:0f:f2:b0:47:f8:55:1b:d5:bd:ab:51:86:
         a6:93:20:09:1b:5b:3b:49:bc:34:cf:50:c1:cf:3c:a1:f1:80:
         c3:76:41:0d:ad:33:fb:30:ca:67:f2:c2:21:9e:f8:0c:16:20:
         9d:84:95:96:e1:e0:3b:8a:74:6b:e5:c7:e2:dc:fe:db:99:e1:
         6f:2c:65:e9:16:d4:4e:3f:45:95:f4:32:3d:23:c3:c6:30:9b:
         59:51:15:1a:a2:14:41:60:eb:07:eb:6f:7a:91:d3:f4:53:7d:
         4f:17:5a:f9:cc:9f:f5:f0:af:d8:2e:7f:de:30:40:3b:56:ce:
         d8:08:02:55:1c:01:49:41:14:c9:09:b1:c8:3b:49:ed:39:95:
         b6:27:4e:ae:6c:2c:63:39:f7:61:62:cc:39:fe:a2:e6:c5:be:
         ca:cd:7c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 07:56:07 2024 by rpki-client on console-fra.rpki-client.org