Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/3137372e38362e39362e302f32312d3332203d3e20323632353036.roa
File:                     3137372e38362e39362e302f32312d3332203d3e20323632353036.roa (raw, json)
Hash identifier:          NxmmovsGfPZKRzPia+x/85/bUc9RjZb3TZvRc5ER9oU=
Subject key identifier:   17:82:BE:19:AF:D9:1A:DC:5F:6D:FB:01:2F:5C:54:DA:21:19:1A:ED
Certificate issuer:       /CN=EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F
Certificate serial:       28C3063E56ED3650522A01A5249263AA20F51338
Authority key identifier: EE:36:DC:1B:CC:CA:FB:C8:05:94:DF:7A:DD:8E:48:A3:1B:BD:26:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/3137372e38362e39362e302f32312d3332203d3e20323632353036.roa
Signing time:             Thu 11 Apr 2024 13:39:56 +0000
ROA not before:           Thu 11 Apr 2024 13:34:56 +0000
ROA not after:            Thu 10 Apr 2025 13:39:56 +0000
asID:                     262506
IP address blocks:        177.86.96.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.crl
                          rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:c3:06:3e:56:ed:36:50:52:2a:01:a5:24:92:63:aa:20:f5:13:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F
        Validity
            Not Before: Apr 11 13:34:56 2024 GMT
            Not After : Apr 10 13:39:56 2025 GMT
        Subject: CN=1782BE19AFD91ADC5F6DFB012F5C54DA21191AED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:da:66:5b:1b:7e:8d:b3:17:56:d9:ee:70:00:
                    0c:37:1f:24:72:7c:4d:ff:c4:65:e8:18:52:24:bd:
                    3a:3b:87:a5:2f:ee:5c:ae:f8:9a:4f:29:94:a1:0a:
                    7e:27:1e:35:ee:18:bf:da:fc:ad:b3:3b:2a:e3:f1:
                    c6:27:ed:3d:59:3e:4a:b7:50:a7:97:be:40:e7:82:
                    26:16:78:fb:61:6c:e5:ae:58:8b:1e:d8:ca:c6:34:
                    6f:29:18:5f:ee:78:69:8f:47:68:2e:ab:c9:63:2e:
                    76:2f:ed:4f:bd:ee:c0:76:8f:6a:5c:bb:9d:07:74:
                    02:91:5d:f8:10:e0:1a:b4:df:66:d8:e7:89:c5:ab:
                    ce:31:3c:7e:67:42:3f:d4:07:86:8f:25:83:80:1e:
                    cf:60:eb:76:a6:df:8c:9c:e7:43:18:51:f1:57:34:
                    ae:ef:b7:c6:a9:d1:e5:11:6d:87:06:3d:91:62:5c:
                    2c:80:f3:a4:2b:08:67:77:c2:01:79:11:ce:4e:f8:
                    a5:91:c9:e3:6d:0b:cd:73:c7:e6:7c:6f:28:ed:ab:
                    f8:3f:77:24:a8:e2:1a:1d:7c:37:c5:3b:0f:aa:e6:
                    e5:56:13:4d:7d:dc:03:c6:83:a2:91:7b:6a:f2:85:
                    70:38:73:01:47:e0:58:5b:1c:e3:5a:7a:9d:78:50:
                    67:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:82:BE:19:AF:D9:1A:DC:5F:6D:FB:01:2F:5C:54:DA:21:19:1A:ED
            X509v3 Authority Key Identifier:
                keyid:EE:36:DC:1B:CC:CA:FB:C8:05:94:DF:7A:DD:8E:48:A3:1B:BD:26:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE36DC1BCCCAFBC80594DF7ADD8E48A31BBD264F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaU3uULDd93U98TYXPVQshCuV3Du5yoT8qhgMzcZPRq/0/3137372e38362e39362e302f32312d3332203d3e20323632353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         56:3e:06:2e:2c:78:a3:45:ae:c1:22:f7:3a:34:e1:03:96:14:
         44:d9:5d:4f:fb:96:7c:5a:34:6c:25:ef:6e:69:0b:a3:ae:6d:
         95:dc:96:a4:e4:a1:bb:f5:6a:c9:7a:85:bd:09:f7:00:15:01:
         9d:31:78:e1:41:c1:d5:ec:b7:00:9b:2f:29:d4:dd:0b:f1:61:
         95:05:61:d1:15:27:65:3a:01:e1:05:7f:1a:91:14:5f:5e:4c:
         a9:aa:56:39:7c:1a:9d:e7:2e:b0:cd:d7:1d:28:68:a0:c7:d4:
         05:e7:5f:b1:b6:7c:6f:f4:80:98:0e:77:aa:ba:e7:1b:f8:fd:
         22:be:a8:43:75:75:a6:99:e8:2e:87:2f:fc:27:e5:fe:b9:06:
         ed:9b:6a:81:7d:0a:ce:97:e9:4d:39:ee:8c:82:29:7c:03:1c:
         ed:44:fc:4b:8d:62:4f:6b:75:eb:5d:55:33:09:a0:6f:a8:08:
         36:83:d0:f2:59:29:b4:b7:54:d0:d3:de:d0:58:c6:b8:ec:4f:
         f5:f8:04:86:4d:88:95:1d:2f:81:c7:7e:4a:06:41:ea:46:b3:
         cf:c3:99:ae:a5:c4:2f:17:dc:50:e2:f7:99:eb:73:c7:54:db:
         b6:7b:44:d0:20:71:b4:ee:30:46:d4:51:fe:a0:9e:15:1b:55:
         e8:e4:50:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:36 2024 by rpki-client on console-ams.rpki-client.org