Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/3137372e38372e39322e302f32322d3234203d3e203532353932.roa
File:                     3137372e38372e39322e302f32322d3234203d3e203532353932.roa (raw, json)
Hash identifier:          sC82pz7FH/iYsVEwYZs15az+rfen1uSo1vnf4wG5pKA=
Subject key identifier:   B8:F1:F7:01:A0:9A:3E:53:72:0E:80:2B:0E:FE:83:38:25:3E:1D:6F
Certificate issuer:       /CN=CFF957416ABC451AD3955260CF69F31756051BD6
Certificate serial:       104BF046E4E65F4198CACF2B8CB16273FA982EA1
Authority key identifier: CF:F9:57:41:6A:BC:45:1A:D3:95:52:60:CF:69:F3:17:56:05:1B:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF957416ABC451AD3955260CF69F31756051BD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/3137372e38372e39322e302f32322d3234203d3e203532353932.roa
Signing time:             Thu 27 Jun 2024 12:03:47 +0000
ROA not before:           Thu 27 Jun 2024 11:58:47 +0000
ROA not after:            Thu 26 Jun 2025 12:03:47 +0000
asID:                     52592
IP address blocks:        177.87.92.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/CFF957416ABC451AD3955260CF69F31756051BD6.crl
                          rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/CFF957416ABC451AD3955260CF69F31756051BD6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF957416ABC451AD3955260CF69F31756051BD6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:4b:f0:46:e4:e6:5f:41:98:ca:cf:2b:8c:b1:62:73:fa:98:2e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFF957416ABC451AD3955260CF69F31756051BD6
        Validity
            Not Before: Jun 27 11:58:47 2024 GMT
            Not After : Jun 26 12:03:47 2025 GMT
        Subject: CN=B8F1F701A09A3E53720E802B0EFE8338253E1D6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ff:23:29:96:f9:fa:25:99:f9:01:92:18:84:
                    7c:fc:b5:05:22:fe:fe:4a:3b:7f:eb:ff:8d:29:7c:
                    42:ae:34:72:cf:28:9d:dc:16:cd:a4:34:00:f6:16:
                    60:ae:e4:32:7f:f9:52:4f:fa:f8:e7:d5:6f:91:ab:
                    ca:42:31:b8:55:07:e0:36:d7:de:97:a9:e6:d7:9e:
                    aa:83:56:e3:60:ee:dc:bf:13:3e:39:a6:4c:20:de:
                    0f:92:ae:20:13:59:ff:6a:20:e6:65:33:97:6c:5b:
                    f1:dd:7a:b3:b7:57:19:66:b2:44:36:1d:1f:ea:5b:
                    c7:0a:89:39:11:6b:5b:2a:a7:f2:6b:94:e6:fa:d5:
                    76:50:37:e4:f9:de:b7:72:96:39:e4:51:e3:1f:db:
                    3a:2d:3a:a9:03:23:0f:a8:b8:d5:ca:2c:58:e3:71:
                    8d:a1:55:84:52:d7:d9:d0:02:2c:0c:42:39:c5:94:
                    cd:46:92:69:fe:3c:fc:ec:1a:c0:f5:1a:df:23:a6:
                    f8:f4:97:f9:b2:73:44:24:08:18:68:b7:1e:4f:d4:
                    28:1a:da:be:d3:d5:03:6b:4b:80:96:28:5b:f3:8f:
                    c7:dc:d9:c2:16:61:78:88:40:f0:9c:27:58:3f:8e:
                    87:56:bd:a5:28:cf:19:4d:33:0b:47:b4:0d:e9:4e:
                    f2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F1:F7:01:A0:9A:3E:53:72:0E:80:2B:0E:FE:83:38:25:3E:1D:6F
            X509v3 Authority Key Identifier:
                keyid:CF:F9:57:41:6A:BC:45:1A:D3:95:52:60:CF:69:F3:17:56:05:1B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/CFF957416ABC451AD3955260CF69F31756051BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF957416ABC451AD3955260CF69F31756051BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/3137372e38372e39322e302f32322d3234203d3e203532353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:83:7c:97:3c:39:10:db:75:29:52:f5:27:1d:ff:f7:c5:19:
         f3:f0:cc:df:07:38:73:8b:28:bc:fa:6c:92:72:e7:0b:17:96:
         63:de:be:b5:da:05:58:5a:34:50:2a:63:3f:78:1a:62:b0:00:
         f2:6e:cf:05:e2:36:30:91:51:8f:22:14:d6:dd:f9:5c:80:a7:
         5d:36:77:ec:3c:09:17:7a:db:4b:9c:19:01:dc:0a:6b:56:53:
         28:cc:93:ba:ce:b4:80:5f:e1:20:27:d4:6d:c1:6f:ae:38:33:
         04:b9:34:4c:a1:14:f8:56:33:01:2e:93:ab:09:e1:3c:a0:ad:
         c7:02:65:74:ee:95:66:7e:a0:dd:8f:45:0f:79:dd:1a:0a:ac:
         22:3e:e2:1d:67:6d:60:6b:b4:d3:9f:71:21:d9:e3:91:01:24:
         15:9c:60:12:83:a2:f1:fa:48:c5:70:ad:75:71:f5:5e:1f:14:
         53:39:c1:5d:66:10:c0:ef:4d:d9:c0:96:59:6d:9d:91:2f:83:
         e4:1e:d5:59:5f:b8:41:9b:72:be:b6:cc:84:a9:a1:09:89:cd:
         a9:71:cf:24:d3:09:62:66:a1:5c:a4:f8:39:35:b2:fb:c4:2b:
         ca:5e:b2:6f:c7:2a:01:f0:f4:5e:fc:ad:08:96:22:0e:32:f9:
         41:40:91:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:35 2024 by rpki-client on console-fra.rpki-client.org