Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/3137372e38352e3136362e302f32342d3234203d3e203532373433.roa
File:                     3137372e38352e3136362e302f32342d3234203d3e203532373433.roa (raw, json)
Hash identifier:          fmr8HWry3jZoMCHAgQTaqlIDiVjEZ/G4ajZdY0jXYt8=
Subject key identifier:   74:CC:BE:FF:9A:C1:DE:98:FB:91:D6:04:82:8C:73:3E:58:DD:8D:47
Certificate issuer:       /CN=B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66
Certificate serial:       57CF84B0DCF0D68C0877F9BFBFB521F7A9CC857E
Authority key identifier: B8:5D:CA:CB:96:F5:5E:6D:2A:D1:68:6E:1E:DE:7B:55:55:4C:FE:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/3137372e38352e3136362e302f32342d3234203d3e203532373433.roa
Signing time:             Thu 04 Apr 2024 13:55:16 +0000
ROA not before:           Thu 04 Apr 2024 13:50:16 +0000
ROA not after:            Thu 03 Apr 2025 13:55:16 +0000
asID:                     52743
IP address blocks:        177.85.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl
                          rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:cf:84:b0:dc:f0:d6:8c:08:77:f9:bf:bf:b5:21:f7:a9:cc:85:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66
        Validity
            Not Before: Apr  4 13:50:16 2024 GMT
            Not After : Apr  3 13:55:16 2025 GMT
        Subject: CN=74CCBEFF9AC1DE98FB91D604828C733E58DD8D47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f6:d8:94:ec:9a:d9:e0:a1:fc:1a:f5:c1:5d:
                    48:f6:86:7c:6a:68:ea:57:6b:93:b9:85:6b:c3:50:
                    19:05:71:a8:3d:a4:9f:d4:92:7b:b3:d3:04:13:0d:
                    b4:0f:63:42:84:86:d9:44:5f:ac:15:52:4f:79:d0:
                    66:d2:23:65:e4:7a:54:93:b4:9f:6b:3b:6c:25:48:
                    ce:08:b3:09:30:d4:bf:b9:d2:52:26:fb:e3:64:b4:
                    6a:96:ba:75:c6:74:c9:66:88:13:fa:21:d9:27:cb:
                    7a:a9:b7:79:26:44:34:d9:7c:31:e5:55:d6:a5:48:
                    32:69:e6:65:62:13:be:77:39:81:7f:fd:e3:d4:5b:
                    ce:90:ff:1f:17:50:cb:52:32:d8:78:95:3a:32:c6:
                    ac:24:63:64:ef:a0:a7:af:cc:15:d7:86:b3:ff:fd:
                    f7:f0:2e:dd:e0:79:b1:99:39:f1:c7:a8:d9:b6:be:
                    7c:b4:35:17:20:5e:dc:34:a8:b7:b1:02:50:0c:14:
                    36:8d:18:c5:83:b5:57:b9:e1:b9:65:c1:32:62:4c:
                    24:ee:1b:9e:7e:36:86:e3:5f:33:08:41:8a:3b:3b:
                    a1:87:f5:65:e4:72:45:93:25:0e:13:ba:8e:57:77:
                    a4:6e:43:eb:bf:63:60:5e:71:52:56:00:02:0c:0f:
                    75:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CC:BE:FF:9A:C1:DE:98:FB:91:D6:04:82:8C:73:3E:58:DD:8D:47
            X509v3 Authority Key Identifier:
                keyid:B8:5D:CA:CB:96:F5:5E:6D:2A:D1:68:6E:1E:DE:7B:55:55:4C:FE:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/3137372e38352e3136362e302f32342d3234203d3e203532373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:0b:63:a7:c7:d4:70:cb:7c:e5:9b:67:72:99:db:bf:d3:c3:
         67:91:d0:a1:e1:a8:68:3f:0a:fa:41:b1:aa:50:0e:6f:71:be:
         a7:60:cf:98:f2:47:9b:67:f6:4a:c6:0d:24:1d:03:3f:39:59:
         09:89:92:16:54:9f:15:eb:51:0b:97:77:d8:46:e7:bb:72:e6:
         ec:99:22:07:4b:92:8f:9a:67:57:39:da:87:84:7c:9f:d0:81:
         92:4d:58:8e:03:f4:c0:f4:de:90:fc:bd:d0:04:35:38:64:2b:
         06:f2:f9:55:e9:d9:51:cb:43:b9:9d:69:65:b5:a3:6a:dd:45:
         b6:9f:9f:59:7d:93:ca:f3:b8:0d:47:cd:73:e5:13:80:4b:cd:
         00:fc:8e:26:a5:7a:26:6c:5b:f6:0f:01:69:18:bf:d2:42:90:
         63:db:c8:2e:29:f6:a3:bf:3b:ad:28:12:13:2f:38:6d:95:d4:
         f1:88:32:8d:fb:89:55:ac:6d:3f:06:3e:c9:00:04:3a:d7:c8:
         f5:4a:45:93:84:f2:72:ff:fb:de:70:01:f7:27:88:02:91:f1:
         0d:31:f5:a3:53:9c:5b:f5:96:82:dd:36:f1:02:73:e9:eb:04:
         55:98:47:ea:4e:99:01:cc:a0:c0:76:e4:d8:c7:10:fa:6c:54:
         db:cc:13:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 11:59:57 2024 by rpki-client on console-fra.rpki-client.org