Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/3137372e38352e3232342e302f32322d3232203d3e20323632363136.roa
File:                     3137372e38352e3232342e302f32322d3232203d3e20323632363136.roa (raw, json)
Hash identifier:          +r7ni9Fj4mfXGJApNX2aRM5B+YTunH3oEX5wStpoQlA=
Subject key identifier:   09:BA:1C:FF:E1:B4:2F:EA:9A:E4:15:67:23:6A:C9:C3:38:77:17:7D
Certificate issuer:       /CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
Certificate serial:       5AD7EABE641556EF6995810CEA6499D1EF36C278
Authority key identifier: 53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/3137372e38352e3232342e302f32322d3232203d3e20323632363136.roa
Signing time:             Thu 04 Apr 2024 04:35:38 +0000
ROA not before:           Thu 04 Apr 2024 04:30:38 +0000
ROA not after:            Thu 03 Apr 2025 04:35:38 +0000
asID:                     262616
IP address blocks:        177.85.224.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl
                          rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:d7:ea:be:64:15:56:ef:69:95:81:0c:ea:64:99:d1:ef:36:c2:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
        Validity
            Not Before: Apr  4 04:30:38 2024 GMT
            Not After : Apr  3 04:35:38 2025 GMT
        Subject: CN=09BA1CFFE1B42FEA9AE41567236AC9C33877177D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:71:f1:6d:ec:9d:af:cb:87:c3:b0:d5:ee:2a:
                    9d:1e:ae:1f:c2:8f:ce:bf:78:c6:8f:46:c3:bc:ba:
                    3e:d9:a3:56:4e:fa:92:b1:eb:b9:aa:d3:e4:96:23:
                    af:cf:32:32:6b:c6:6c:db:20:89:5a:77:a9:d0:c9:
                    de:64:6f:7a:ab:aa:99:bf:44:77:35:ad:b0:8d:3f:
                    11:ea:06:75:c2:09:49:99:e9:ce:92:ac:4e:42:d5:
                    87:6c:0e:f7:c6:a7:5f:9d:75:95:8e:1d:36:d5:17:
                    fd:a1:ea:4b:75:39:1d:53:51:34:9f:dc:3b:a3:25:
                    54:a6:ee:fc:cd:49:74:60:e4:93:d7:5f:58:e9:3d:
                    ca:ce:31:c9:1a:be:00:c5:3b:3c:08:b7:44:ff:48:
                    52:7b:a4:05:05:62:5f:2e:76:57:87:93:99:12:27:
                    d2:d8:5c:c1:8a:b6:ae:a1:47:8d:eb:40:e3:94:2e:
                    3d:6f:c5:12:ac:ea:df:64:2e:0f:03:91:88:9c:12:
                    d2:a8:bc:93:1a:ba:20:17:18:31:3e:b1:8d:99:e3:
                    d2:e0:d2:19:13:dd:95:34:bf:67:fd:5d:9a:2b:65:
                    34:f4:84:f4:41:66:91:41:04:81:56:f6:e7:b6:14:
                    00:3c:48:19:9c:06:c3:5f:cf:33:04:ea:02:bc:3c:
                    81:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:BA:1C:FF:E1:B4:2F:EA:9A:E4:15:67:23:6A:C9:C3:38:77:17:7D
            X509v3 Authority Key Identifier:
                keyid:53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/3137372e38352e3232342e302f32322d3232203d3e20323632363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:69:c9:d1:01:d6:38:ca:b8:6e:7d:f7:e6:70:0e:a0:99:2f:
         1f:10:9a:79:ad:9b:eb:bc:b5:e9:10:6e:17:5e:cd:fd:ab:6b:
         78:48:fb:c0:55:7b:75:93:36:92:43:8b:c1:9e:d7:26:af:ed:
         39:49:6d:3c:2a:7a:7f:76:83:8b:3b:cb:31:4d:07:aa:d6:0d:
         d1:1c:05:33:a8:2e:f3:3f:a5:dc:1f:1e:89:63:fd:d5:2a:be:
         36:1a:b7:31:e6:ab:41:6e:48:8a:fb:5b:62:7c:04:9a:63:1b:
         a5:d2:78:30:82:6a:1e:b3:ed:26:45:77:5a:6b:94:e1:29:ef:
         cb:41:e3:87:c5:7c:99:20:7d:22:2d:6b:32:c9:2b:5b:f3:9e:
         12:9a:ff:bd:85:59:23:93:d0:15:55:38:b5:4e:46:b7:ba:32:
         9b:b5:62:79:ae:5e:67:18:a8:8a:c7:51:22:7a:ae:81:7f:6a:
         38:cc:3c:9c:fc:f2:7b:58:18:32:38:fa:db:7e:05:35:bd:16:
         7d:51:b4:6f:9f:11:ed:87:ca:fb:4f:32:58:e1:8c:a0:60:ac:
         1c:14:12:4c:83:47:b2:89:4a:c7:21:c9:d2:68:26:a9:1a:b6:
         49:03:74:1a:00:28:52:d8:74:a4:9d:d4:d4:5f:13:0e:bc:7b:
         e3:94:02:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:20 2024 by rpki-client on console-fra.rpki-client.org