Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/3137372e38352e3139312e302f32342d3234203d3e20323639343136.roa
File:                     3137372e38352e3139312e302f32342d3234203d3e20323639343136.roa (raw, json)
Hash identifier:          eAYjwWMtYTs+YnD4VBPvDLbBh2dhGGp4MudW0pgeKRI=
Subject key identifier:   59:89:BB:92:EE:3B:66:2F:22:65:87:27:53:64:ED:5C:95:AE:A3:5E
Certificate issuer:       /CN=2431B91B2498F01C25C009C9345EE622B155100B
Certificate serial:       647404FC7640BD210C2D383F0235B8726F8B173F
Authority key identifier: 24:31:B9:1B:24:98:F0:1C:25:C0:09:C9:34:5E:E6:22:B1:55:10:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B91B2498F01C25C009C9345EE622B155100B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/3137372e38352e3139312e302f32342d3234203d3e20323639343136.roa
Signing time:             Wed 30 Oct 2024 15:02:53 +0000
ROA not before:           Wed 30 Oct 2024 14:57:53 +0000
ROA not after:            Wed 29 Oct 2025 15:02:53 +0000
asID:                     269416
IP address blocks:        177.85.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/2431B91B2498F01C25C009C9345EE622B155100B.crl
                          rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/2431B91B2498F01C25C009C9345EE622B155100B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B91B2498F01C25C009C9345EE622B155100B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:74:04:fc:76:40:bd:21:0c:2d:38:3f:02:35:b8:72:6f:8b:17:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2431B91B2498F01C25C009C9345EE622B155100B
        Validity
            Not Before: Oct 30 14:57:53 2024 GMT
            Not After : Oct 29 15:02:53 2025 GMT
        Subject: CN=5989BB92EE3B662F226587275364ED5C95AEA35E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:23:dd:f3:86:42:3f:80:b3:a9:8b:39:b9:90:
                    b5:9c:16:99:9b:70:0c:c7:e2:ff:50:25:e9:1d:5e:
                    b6:38:f8:7c:4d:31:84:03:5f:d4:f5:ff:06:ce:79:
                    5e:a5:69:c6:d4:a0:c4:a6:f0:82:91:c4:ae:03:a4:
                    22:af:cb:26:23:c6:b1:f8:6a:92:f8:b6:b6:9d:6e:
                    85:02:56:0b:ad:4d:97:94:33:17:4d:43:32:95:c3:
                    e9:52:d7:82:ec:3e:13:d2:82:0f:06:18:14:54:05:
                    9b:20:e1:90:15:67:f4:93:69:20:e7:d5:bc:4d:e5:
                    08:42:6b:5e:6b:d9:f2:ae:06:61:76:ff:31:82:d3:
                    c8:ff:02:97:37:b4:3e:bf:df:05:f8:e7:6e:0c:9f:
                    c6:08:8d:c9:61:db:ce:9d:2d:34:ef:0f:88:76:b2:
                    80:98:e0:b8:56:b3:cd:eb:88:a5:66:85:e2:8d:41:
                    70:ab:ef:0a:87:29:f2:7d:dd:74:b6:3c:a0:9d:f3:
                    78:b3:c6:79:b1:22:f2:43:04:48:9a:e9:97:87:13:
                    8e:30:4d:ef:09:53:cc:4f:69:bc:2b:59:c8:54:7a:
                    30:2e:69:86:c8:2e:b4:23:a0:d3:de:a2:6a:af:b5:
                    16:e9:ed:1b:cf:52:f7:7a:0d:a5:b5:71:3f:f9:ab:
                    a2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:89:BB:92:EE:3B:66:2F:22:65:87:27:53:64:ED:5C:95:AE:A3:5E
            X509v3 Authority Key Identifier:
                keyid:24:31:B9:1B:24:98:F0:1C:25:C0:09:C9:34:5E:E6:22:B1:55:10:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/2431B91B2498F01C25C009C9345EE622B155100B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B91B2498F01C25C009C9345EE622B155100B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/3137372e38352e3139312e302f32342d3234203d3e20323639343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:7a:d6:15:47:93:bd:00:fa:aa:ef:67:9f:e7:33:1b:7e:82:
         b9:43:78:bd:74:4a:32:64:95:47:c1:e7:b3:b4:81:09:2e:cb:
         b7:a7:8b:32:3f:5a:2b:e6:77:9d:14:ac:04:3c:c2:f9:d6:cf:
         7c:68:61:a3:a4:59:65:14:4a:52:ed:0e:e8:b8:28:62:40:8e:
         93:e3:18:7b:10:ba:db:92:3c:fe:fc:4a:33:9e:4b:98:1d:71:
         2c:6b:c5:6e:e7:94:c6:fc:8a:8e:a0:d6:6e:3b:28:d2:6c:c6:
         b2:98:62:a4:75:6d:b1:8d:13:19:04:78:44:9b:d6:de:c9:d6:
         5a:3b:3b:b2:79:ea:0d:a4:21:97:39:5e:d3:f4:eb:72:5d:c8:
         15:4d:38:9d:be:ed:1e:03:9d:3f:6c:c4:dc:6e:97:92:f7:ad:
         87:24:c0:74:1f:e4:f6:b0:50:3d:e3:b9:9e:4b:03:1f:04:9d:
         54:0b:d7:71:1c:6b:87:10:e9:79:be:66:b9:e3:90:b0:9e:cc:
         5f:72:0b:bd:35:aa:b9:3d:f9:17:7f:38:5f:37:50:0f:3e:a1:
         da:1a:47:b7:06:c0:92:50:75:aa:37:3c:c1:42:00:5c:ad:7f:
         6f:eb:12:e0:60:02:65:9c:84:11:d4:66:f6:8d:08:2f:d7:59:
         17:a5:67:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:39 2024 by rpki-client on console-ams.rpki-client.org