Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3137372e38352e3233352e302f32342d3234203d3e20323632363137.roa
File:                     3137372e38352e3233352e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          vS67Dv/efkCmfLFXzOe4q1wCqh1+8tLWmvwjS88X9do=
Subject key identifier:   1F:BC:1D:DA:E7:6B:0B:C8:E8:46:5A:2A:58:C1:93:1B:A1:1E:A7:EE
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       1DE2857D7F80F991F6CE651B01E1ED3EB0508585
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3137372e38352e3233352e302f32342d3234203d3e20323632363137.roa
Signing time:             Wed 03 Apr 2024 19:48:21 +0000
ROA not before:           Wed 03 Apr 2024 19:43:21 +0000
ROA not after:            Wed 02 Apr 2025 19:48:21 +0000
asID:                     262617
IP address blocks:        177.85.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl
                          rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:e2:85:7d:7f:80:f9:91:f6:ce:65:1b:01:e1:ed:3e:b0:50:85:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Apr  3 19:43:21 2024 GMT
            Not After : Apr  2 19:48:21 2025 GMT
        Subject: CN=1FBC1DDAE76B0BC8E8465A2A58C1931BA11EA7EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e5:00:16:95:da:1d:39:40:45:08:44:e6:8f:
                    10:61:f2:4b:6e:55:e3:4b:06:82:1d:21:b6:0f:7b:
                    35:c5:68:cb:41:9b:5f:07:a0:64:e0:f0:26:0f:63:
                    34:e5:76:02:06:cc:54:12:0a:5f:b9:46:05:11:e7:
                    34:a4:f2:16:e1:b7:8f:ae:ce:e3:75:ac:de:0b:cb:
                    c1:0a:63:e2:94:a6:5b:bb:1d:76:e6:ed:5f:c0:60:
                    b4:f8:df:d8:39:34:28:5d:aa:ae:28:45:d5:f0:a7:
                    64:40:08:67:ef:29:3d:78:eb:ed:8a:3d:ef:a6:b6:
                    be:e5:01:45:69:53:b0:6f:32:6f:7c:5c:ad:69:ee:
                    c2:f8:4d:b1:76:b1:89:c9:06:86:c5:b3:5d:e9:5c:
                    44:21:a5:21:5f:aa:04:ed:e4:58:b0:75:d0:26:b3:
                    a3:d9:77:6e:b9:97:4b:d2:83:b8:51:12:98:28:2f:
                    5a:7d:80:90:4d:7b:1e:1e:2d:59:18:c1:7e:29:93:
                    c6:56:ab:3b:ce:db:cb:88:07:b4:f7:ce:70:36:1a:
                    a8:85:fa:f4:4f:96:bc:75:93:1f:a7:06:36:dc:5a:
                    6c:3a:d1:6e:78:d6:44:66:10:12:c0:c7:f0:a9:58:
                    9d:f7:a0:45:27:4d:b0:d8:e1:a7:7e:a1:db:4b:d4:
                    04:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BC:1D:DA:E7:6B:0B:C8:E8:46:5A:2A:58:C1:93:1B:A1:1E:A7:EE
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3137372e38352e3233352e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:62:c5:87:bf:14:d3:a0:14:7d:5a:a1:2a:ba:fe:d0:9c:ec:
         5e:ad:e9:d4:6f:17:01:d0:c9:0d:09:25:94:12:22:7c:82:8f:
         60:d6:0e:04:5b:00:c1:85:7f:f2:84:ea:f8:3a:e1:d0:71:38:
         df:45:f6:ab:b1:c8:72:0f:b1:a2:c4:e8:19:00:81:bb:ee:86:
         94:5d:da:c2:32:01:95:88:ea:ab:d8:75:1a:1a:cd:1b:1a:09:
         61:5e:75:47:71:51:a3:91:25:2b:e9:65:66:c1:a7:76:85:88:
         75:e9:82:a0:99:d7:6d:86:cc:35:90:c8:76:46:f6:dc:10:ee:
         f5:c8:26:16:44:47:39:7b:15:2b:83:f9:09:f4:b8:2e:9b:ed:
         91:d7:f8:e6:8f:36:89:dd:e4:48:86:fd:69:9b:d6:72:f5:97:
         9e:9c:cc:e3:30:47:40:75:26:d9:b1:8e:c0:f1:61:79:0a:06:
         97:09:e6:e1:68:95:3b:74:ad:ea:c2:9d:c8:24:90:f1:f7:48:
         f7:28:f3:ec:bb:44:51:62:ab:f0:de:05:08:87:9d:eb:52:bd:
         9d:ab:6e:8f:88:fd:25:8c:f3:ca:be:76:a5:b4:88:de:da:47:
         2b:17:3c:d0:c4:c0:72:0a:f9:6d:6a:9e:f8:64:d5:60:f7:1d:
         52:0f:11:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:37 2024 by rpki-client on console-ams.rpki-client.org