Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/3137372e38352e3136342e302f32332d3233203d3e203532373433.roa
File:                     3137372e38352e3136342e302f32332d3233203d3e203532373433.roa (raw, json)
Hash identifier:          L/cSy8NdupdNAKpYd2hH14G1j1Jgr4H0n4wcsOk0nxI=
Subject key identifier:   16:F1:4D:54:20:85:5E:6A:3A:00:0B:A8:2D:D9:C9:DC:50:CE:18:2A
Certificate issuer:       /CN=B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66
Certificate serial:       07E32285AFC22AAF1899AF3750D76EC65A95054E
Authority key identifier: B8:5D:CA:CB:96:F5:5E:6D:2A:D1:68:6E:1E:DE:7B:55:55:4C:FE:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/3137372e38352e3136342e302f32332d3233203d3e203532373433.roa
Signing time:             Thu 04 Apr 2024 13:55:17 +0000
ROA not before:           Thu 04 Apr 2024 13:50:17 +0000
ROA not after:            Thu 03 Apr 2025 13:55:17 +0000
asID:                     52743
IP address blocks:        177.85.164.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl
                          rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:e3:22:85:af:c2:2a:af:18:99:af:37:50:d7:6e:c6:5a:95:05:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66
        Validity
            Not Before: Apr  4 13:50:17 2024 GMT
            Not After : Apr  3 13:55:17 2025 GMT
        Subject: CN=16F14D5420855E6A3A000BA82DD9C9DC50CE182A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5f:26:a7:0f:82:45:d5:2c:b3:ec:d9:bf:5f:
                    c6:a9:6a:7b:a6:f5:4f:86:96:01:b7:29:1e:69:2a:
                    49:ec:8a:95:2b:20:f1:db:91:ab:4b:e6:5e:46:6d:
                    29:a5:7a:59:a7:ee:c3:1e:0f:0e:b7:d7:e7:6a:72:
                    fa:09:0e:65:f1:e4:43:4e:59:7a:5d:98:e2:7c:dc:
                    1a:1e:fd:a5:8f:e3:82:14:ec:53:c0:63:9b:8b:9f:
                    7d:dd:e1:ed:cc:6c:bf:00:e1:3a:69:80:5f:37:22:
                    df:4a:53:2d:e4:66:2a:5e:3e:bd:d0:d8:80:b6:5e:
                    a6:fe:2b:5a:85:9d:24:0d:af:cf:28:27:6a:3a:73:
                    d4:45:df:ef:5b:0b:55:62:12:5b:1c:26:de:72:1a:
                    7f:06:95:0d:ca:01:c5:d2:3f:fa:a0:3a:63:75:71:
                    bc:eb:88:86:8f:1c:e9:bd:cd:15:f0:b3:2b:ef:c7:
                    8a:29:b0:fb:22:02:c1:a9:86:1b:31:e1:2b:da:fe:
                    90:0d:7d:6f:64:c2:60:d7:34:e7:75:76:4a:5c:d6:
                    89:8f:25:c9:ec:e0:14:7e:ef:10:42:68:c8:08:92:
                    12:77:35:b2:67:11:d0:13:3a:97:9e:3c:8a:5b:52:
                    66:ec:94:db:34:32:95:fa:b8:72:69:eb:d3:6e:dd:
                    83:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F1:4D:54:20:85:5E:6A:3A:00:0B:A8:2D:D9:C9:DC:50:CE:18:2A
            X509v3 Authority Key Identifier:
                keyid:B8:5D:CA:CB:96:F5:5E:6D:2A:D1:68:6E:1E:DE:7B:55:55:4C:FE:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/3137372e38352e3136342e302f32332d3233203d3e203532373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:db:ec:c7:10:ad:b5:8c:8d:9d:4f:bb:22:3f:d9:0f:09:34:
         31:e9:f1:d5:a6:63:7b:25:48:75:ab:99:e0:70:65:73:ef:6b:
         4b:7d:65:67:3b:dd:c9:e6:3f:db:d5:18:ac:ba:63:16:e9:15:
         fa:09:dd:87:e7:f9:44:ba:cb:0d:94:ec:d5:ca:d2:82:21:cd:
         19:1c:af:63:13:e6:65:c8:71:64:32:72:a1:fd:8f:fb:3f:9e:
         6c:31:92:cf:73:86:46:cf:de:53:f6:73:f5:02:90:d2:26:3e:
         f3:e3:57:ad:8d:52:9f:e9:0e:05:f5:e9:e7:c2:95:f3:51:e7:
         7f:aa:7b:1b:a7:9b:d5:67:ab:e0:cf:e4:b1:67:e2:3c:15:aa:
         eb:56:1f:af:3e:9b:42:25:b1:9d:a4:6a:76:ca:2a:01:f6:ce:
         03:07:a1:87:1c:ab:98:06:84:75:63:21:82:91:0c:d8:ee:db:
         03:25:3e:b7:2f:cc:f6:39:b1:6c:5d:eb:0e:d2:02:e5:74:3e:
         57:88:d1:ad:4f:54:62:0d:82:8b:75:f0:67:3f:8b:ab:2c:cc:
         83:e0:39:ef:8c:11:d7:e9:54:70:5f:2e:a3:cf:54:6d:5e:dd:
         50:d7:b0:f2:bc:5c:10:86:df:63:74:18:85:c1:2c:38:17:fa:
         2a:ed:38:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 07:19:23 2024 by rpki-client on console-ams.rpki-client.org