Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/3137372e37352e3234302e302f32342d3234203d3e20323632363031.roa
File:                     3137372e37352e3234302e302f32342d3234203d3e20323632363031.roa (raw, json)
Hash identifier:          uEoOrtS46nf+3gHtysO3+Uxb3wYK+bdB8m1UfbSd0YE=
Subject key identifier:   AD:35:22:BD:D1:35:D5:62:DC:10:FA:5E:64:86:EC:BC:CB:71:E3:75
Certificate issuer:       /CN=8FA5DE968220D66A9164CA3AA24677EF9C127EE8
Certificate serial:       420FF6DDD774284E651C471F89FC8B192939E248
Authority key identifier: 8F:A5:DE:96:82:20:D6:6A:91:64:CA:3A:A2:46:77:EF:9C:12:7E:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/3137372e37352e3234302e302f32342d3234203d3e20323632363031.roa
Signing time:             Tue 18 Jun 2024 18:49:55 +0000
ROA not before:           Tue 18 Jun 2024 18:44:55 +0000
ROA not after:            Tue 17 Jun 2025 18:49:55 +0000
asID:                     262601
IP address blocks:        177.75.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.crl
                          rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 14:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:0f:f6:dd:d7:74:28:4e:65:1c:47:1f:89:fc:8b:19:29:39:e2:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FA5DE968220D66A9164CA3AA24677EF9C127EE8
        Validity
            Not Before: Jun 18 18:44:55 2024 GMT
            Not After : Jun 17 18:49:55 2025 GMT
        Subject: CN=AD3522BDD135D562DC10FA5E6486ECBCCB71E375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d2:7b:06:7f:80:88:3a:b2:1d:96:4b:04:1e:
                    f4:f3:25:51:e3:ee:b2:8a:95:0a:78:b8:91:44:52:
                    6c:2b:30:8a:38:5e:50:d4:6e:4a:93:cf:ff:c3:48:
                    46:f2:f4:15:9d:6b:e0:d9:1c:a1:46:98:20:2b:8a:
                    57:39:a3:96:5b:7d:83:39:e4:33:57:50:9c:66:97:
                    39:a8:8d:eb:43:81:71:03:62:58:c0:8f:a0:18:a0:
                    5c:eb:24:a0:d7:24:27:94:36:3c:03:17:0b:2e:8f:
                    9e:f4:10:cb:eb:9e:04:8e:13:c2:1f:54:ec:dd:f1:
                    5c:db:91:77:17:72:78:89:81:77:05:a8:27:c0:7e:
                    a9:0d:fe:21:37:59:98:ef:30:98:7a:9b:ec:5b:a0:
                    a9:5d:30:13:40:d5:48:f4:0c:81:ac:2e:39:62:b8:
                    df:f6:69:87:93:fd:61:b2:b3:fc:9a:51:6e:a8:4e:
                    68:49:1f:7b:db:ba:bf:db:70:04:72:b6:2d:31:40:
                    80:6b:72:b0:4b:db:13:e0:16:f5:c7:93:91:38:61:
                    1c:17:3d:d0:56:9b:d0:e8:0c:71:3f:bd:68:3f:45:
                    5f:be:1f:b4:d6:74:25:0b:f6:68:ca:e8:10:e2:9d:
                    b6:5b:87:b0:3d:b6:4a:42:91:ea:8b:f2:1f:bf:62:
                    90:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:35:22:BD:D1:35:D5:62:DC:10:FA:5E:64:86:EC:BC:CB:71:E3:75
            X509v3 Authority Key Identifier:
                keyid:8F:A5:DE:96:82:20:D6:6A:91:64:CA:3A:A2:46:77:EF:9C:12:7E:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/3137372e37352e3234302e302f32342d3234203d3e20323632363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:d4:0c:67:78:cb:55:e7:d8:a5:8c:a2:51:99:be:97:e9:ee:
         e0:30:53:9c:35:a7:57:df:f4:92:ef:3f:51:21:2c:bd:b3:a6:
         d3:a6:7f:73:31:d4:db:23:cd:37:02:ef:a3:02:4e:b3:a7:ff:
         59:27:cb:83:ea:a3:17:91:93:ff:36:71:f1:ca:49:0b:1a:40:
         c1:af:a9:1d:15:59:8b:79:5c:f3:73:2b:32:66:4d:db:7d:80:
         a2:4d:99:a2:17:16:4d:6b:cd:3f:7d:9d:81:3d:3b:85:f2:93:
         20:96:11:c5:a8:2a:d0:54:8f:ca:01:4d:07:96:93:a7:66:18:
         be:d0:96:42:19:99:67:21:f0:d3:55:14:d6:95:32:72:1e:8d:
         e0:ea:4a:62:14:22:f1:9c:63:c4:b0:1a:eb:a4:7b:f3:0b:53:
         f6:5c:bc:b3:3a:2d:c6:1b:2c:5c:91:63:a6:10:15:8c:e5:4e:
         38:8d:64:7d:b9:00:3d:74:c0:da:6d:52:24:93:98:6d:5b:b0:
         46:50:28:bd:4d:7f:4d:e9:c4:0c:3e:09:86:d0:c1:a2:49:d4:
         4c:78:1a:a0:16:c3:e0:4f:f6:04:72:59:11:d9:d8:e9:cd:0b:
         61:de:0f:77:92:c4:06:5f:2b:32:2e:6a:a7:17:b3:64:ea:ed:
         df:ab:48:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:21 2024 by rpki-client on console-ams.rpki-client.org