Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3137372e38372e31302e302f32342d3234203d3e20323632363137.roa
File:                     3137372e38372e31302e302f32342d3234203d3e20323632363137.roa (raw, json)
Hash identifier:          AVnSLE6K3X3o6JlhhEEyu6uczrDREhP1T3lAeFPOLf4=
Subject key identifier:   67:49:BF:B3:1F:3D:57:C4:5B:9A:59:59:81:FA:99:2C:ED:FF:EA:3F
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       384852E8AA372F1C1881E3BCD4C243B0F24E059C
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3137372e38372e31302e302f32342d3234203d3e20323632363137.roa
Signing time:             Wed 03 Apr 2024 19:48:31 +0000
ROA not before:           Wed 03 Apr 2024 19:43:31 +0000
ROA not after:            Wed 02 Apr 2025 19:48:31 +0000
asID:                     262617
IP address blocks:        177.87.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl
                          rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:48:52:e8:aa:37:2f:1c:18:81:e3:bc:d4:c2:43:b0:f2:4e:05:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Apr  3 19:43:31 2024 GMT
            Not After : Apr  2 19:48:31 2025 GMT
        Subject: CN=6749BFB31F3D57C45B9A595981FA992CEDFFEA3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6e:22:ec:06:64:12:ea:a7:7d:91:e0:fb:fb:
                    12:33:f7:c3:d3:b1:d7:ec:55:62:a8:07:da:da:d6:
                    06:96:73:40:b3:e6:9c:f1:97:ab:d5:c2:4a:5e:40:
                    96:f2:d9:67:c8:24:93:d8:2a:86:85:4c:37:ac:e7:
                    7e:1f:8d:73:29:48:58:f0:ed:13:56:bd:4f:e6:4c:
                    ae:36:16:c9:98:d5:1b:d3:c1:52:a7:7d:6c:77:6b:
                    26:86:af:df:9b:4f:78:86:c3:9b:85:4d:97:01:f8:
                    52:30:19:33:35:d0:2b:7f:ca:60:74:ae:16:53:de:
                    79:36:7e:34:c7:5d:b9:ff:8b:e5:81:67:ab:ca:1f:
                    88:94:bd:ee:24:c4:3a:2f:d0:3a:d8:da:cb:1a:46:
                    37:a0:e9:12:72:ae:31:58:b2:84:80:9d:7f:ab:44:
                    4c:ad:d5:e0:34:4b:21:fa:f9:0c:09:a6:2b:1a:ad:
                    ea:57:ba:f2:f5:6f:7c:17:d4:35:20:63:88:81:8a:
                    6d:ee:71:b9:f0:ce:0e:bf:f1:70:14:f6:a3:00:98:
                    e8:19:ce:37:99:cb:9d:b6:00:d1:02:7f:2e:50:02:
                    53:13:7b:b7:6b:f9:77:55:e7:05:3e:38:02:b0:b4:
                    23:c9:5c:e5:0f:60:ec:ac:5d:3c:2e:42:2e:5b:63:
                    6a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:49:BF:B3:1F:3D:57:C4:5B:9A:59:59:81:FA:99:2C:ED:FF:EA:3F
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3137372e38372e31302e302f32342d3234203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:91:37:92:58:ec:f8:5d:60:0b:59:43:1b:dd:7b:65:25:d3:
         cd:5e:4b:27:89:2b:86:52:44:34:3a:5f:48:c1:65:02:1a:76:
         ed:4d:b4:70:7c:37:47:03:a1:a5:c6:7a:d6:a2:14:bc:d0:4c:
         b5:36:8d:eb:1c:53:3e:70:ec:9c:bb:47:8f:13:7e:74:d4:2f:
         3f:b7:33:de:6b:f5:57:36:60:70:84:7a:c0:cb:5f:17:16:0d:
         be:46:16:84:8e:aa:8d:6c:9d:a4:65:c4:0b:7e:68:81:d0:9b:
         2e:cb:99:0b:e8:ca:cd:47:41:87:36:b7:08:52:34:28:49:7a:
         6f:4b:c1:eb:e6:78:80:06:bb:18:65:b3:e4:a5:26:1b:dd:0d:
         c5:ad:70:4b:b3:85:5a:ae:f6:8c:81:19:d3:e6:20:42:cc:28:
         77:cb:37:fc:dd:7b:98:c7:1d:9f:31:6a:eb:16:52:3b:61:f3:
         25:26:d0:4c:43:13:a9:2d:dc:24:11:c9:ec:f7:48:ce:7d:99:
         a3:67:3a:76:c9:5d:44:0e:1e:15:b7:13:ff:1b:2d:c8:e5:80:
         4a:fa:cc:e3:2f:d6:a6:0c:f7:4f:05:95:4a:dd:d1:37:13:6e:
         3b:5b:26:93:ef:8d:12:bd:05:bd:fb:9a:ff:00:20:97:b9:01:
         dc:0c:fa:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 07:56:08 2024 by rpki-client on console-fra.rpki-client.org