Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3137372e38352e3138322e302f32342d3234203d3e20323632363131.roa
File:                     3137372e38352e3138322e302f32342d3234203d3e20323632363131.roa (raw, json)
Hash identifier:          l0HKbAydSjJhykp7aBCz8RkHXzA0ehRKcBRAlZd4JxA=
Subject key identifier:   2D:CB:49:AF:95:22:2A:2E:2A:0D:03:08:D4:7A:D0:0C:58:F3:72:0D
Certificate issuer:       /CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73
Certificate serial:       479A7D84F5F48246B2049B1C29FADBAA66641A9F
Authority key identifier: D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3137372e38352e3138322e302f32342d3234203d3e20323632363131.roa
Signing time:             Wed 17 Apr 2024 14:20:28 +0000
ROA not before:           Wed 17 Apr 2024 14:15:28 +0000
ROA not after:            Wed 16 Apr 2025 14:20:28 +0000
asID:                     262611
IP address blocks:        177.85.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl
                          rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:9a:7d:84:f5:f4:82:46:b2:04:9b:1c:29:fa:db:aa:66:64:1a:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73
        Validity
            Not Before: Apr 17 14:15:28 2024 GMT
            Not After : Apr 16 14:20:28 2025 GMT
        Subject: CN=2DCB49AF95222A2E2A0D0308D47AD00C58F3720D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9f:47:bf:a7:ae:24:14:00:cf:dd:f5:85:42:
                    55:8c:06:e2:7c:74:9c:2d:8e:32:dc:5b:8a:2c:e7:
                    46:09:ae:16:99:4d:0d:a7:fe:34:2d:2f:e4:88:db:
                    ea:e4:50:87:f7:48:e0:01:5b:03:5a:c6:8b:bc:5e:
                    a0:4d:e6:db:af:ef:60:11:0a:5f:58:70:18:d6:07:
                    f3:66:40:21:4f:45:bf:04:89:2c:15:01:c8:3c:ae:
                    bf:da:46:6f:c9:ce:71:3a:24:e1:7c:e6:a2:13:fb:
                    3c:b8:ec:fb:31:bb:1e:b1:1c:39:56:8a:78:36:4a:
                    5d:66:80:00:bc:a3:6e:19:ad:e9:93:dd:83:4f:cd:
                    e1:db:af:da:34:3d:09:2b:d4:27:e6:0c:e9:ab:0b:
                    85:80:3c:5f:88:3b:a3:21:fe:9b:67:a4:ea:9d:e7:
                    fd:58:df:5f:b2:c2:f3:ec:22:1c:ef:d4:d9:3f:b0:
                    ef:13:d2:7d:27:f4:d2:6d:99:39:05:ed:28:99:e3:
                    e1:2a:f5:a6:af:73:9d:22:bf:4d:da:14:85:9e:0b:
                    4f:16:c1:e4:36:06:a4:ae:04:ae:9f:08:84:a8:8a:
                    2f:20:ad:4d:cd:7c:a6:3b:6f:25:0f:37:ee:93:9a:
                    ee:b8:42:5e:94:a7:27:f3:00:c6:85:83:09:8f:3a:
                    60:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:CB:49:AF:95:22:2A:2E:2A:0D:03:08:D4:7A:D0:0C:58:F3:72:0D
            X509v3 Authority Key Identifier:
                keyid:D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3137372e38352e3138322e302f32342d3234203d3e20323632363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:ce:61:54:4d:93:a2:05:89:16:7a:65:cf:0e:d2:c8:dc:d8:
         23:e8:e7:80:3e:3b:88:8c:f9:71:d8:12:e1:66:44:9c:a5:7f:
         fb:90:80:4b:1c:9f:bc:b4:0c:f2:4c:50:75:23:c9:e3:db:63:
         47:2a:c3:16:d5:ec:89:27:21:c4:4b:dc:64:c6:e1:9c:64:7d:
         37:81:a9:89:f6:6d:6c:bb:f2:ae:d8:75:9b:c1:68:96:2a:6b:
         de:6e:0f:68:e8:c6:c8:7d:a3:67:7e:17:08:e5:5c:64:1d:dc:
         c4:ba:b6:c8:ff:ff:14:06:53:7f:5a:45:9e:e3:18:51:94:fe:
         63:fa:d9:54:d2:2a:3c:19:7c:de:7f:0c:3e:db:29:7f:1d:f0:
         06:89:bf:aa:c4:16:f5:7d:66:46:b8:8d:66:77:24:5a:47:43:
         22:98:6c:dd:21:f7:4d:8f:74:6e:e6:45:ae:33:eb:09:f5:6d:
         9c:fb:51:f1:84:6f:2b:70:96:81:a5:67:61:fa:5b:ad:06:53:
         9e:47:3c:d5:36:1a:88:8e:27:b4:3b:2b:ad:50:4d:fb:55:b0:
         52:f0:a9:77:be:d8:1b:5a:86:57:7e:41:72:3c:28:aa:ba:41:
         be:e6:12:70:ec:97:76:26:6b:9d:5a:e5:43:d6:7c:1a:6e:f3:
         e1:f6:f9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:56 2024 by rpki-client on console-fra.rpki-client.org