Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/3137372e38352e3232342e302f32332d3233203d3e20323632363136.roa
File:                     3137372e38352e3232342e302f32332d3233203d3e20323632363136.roa (raw, json)
Hash identifier:          7JPBJZmxyg8YhJVJfenz8UwbunyuyDWuN0B2v58DlgI=
Subject key identifier:   55:9C:E7:C7:9A:EE:A3:38:E8:18:BC:DA:89:5D:B4:CD:C1:87:97:49
Certificate issuer:       /CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
Certificate serial:       396A540882660540CAC307951D9E12502CFF3AAD
Authority key identifier: 53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/3137372e38352e3232342e302f32332d3233203d3e20323632363136.roa
Signing time:             Thu 04 Apr 2024 04:35:37 +0000
ROA not before:           Thu 04 Apr 2024 04:30:37 +0000
ROA not after:            Thu 03 Apr 2025 04:35:37 +0000
asID:                     262616
IP address blocks:        177.85.224.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl
                          rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:6a:54:08:82:66:05:40:ca:c3:07:95:1d:9e:12:50:2c:ff:3a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
        Validity
            Not Before: Apr  4 04:30:37 2024 GMT
            Not After : Apr  3 04:35:37 2025 GMT
        Subject: CN=559CE7C79AEEA338E818BCDA895DB4CDC1879749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e2:d9:5a:c1:85:c5:3d:ee:81:0a:ca:bb:54:
                    d4:68:86:20:b6:ac:85:cb:f4:8b:80:de:62:a9:7e:
                    a4:19:17:14:fd:e9:06:0d:00:4c:00:69:86:a6:98:
                    46:b6:b7:de:ef:00:bd:69:e6:73:ff:10:6d:07:4c:
                    24:e0:07:34:1e:c1:76:a3:48:ed:e2:c1:2e:c8:74:
                    8d:28:72:0b:b5:d1:96:bd:67:b2:76:84:a4:de:9f:
                    9b:ed:cc:98:bc:70:86:7a:a2:5e:e1:9a:33:84:ee:
                    6f:30:68:18:d8:48:bb:72:37:4e:fe:dc:4f:e8:ce:
                    0f:43:85:9b:9d:a5:3b:e9:de:7a:25:a9:44:2f:b0:
                    1a:54:f7:c1:87:68:37:9f:13:ea:3c:91:52:18:39:
                    25:09:ae:97:20:a0:5b:e2:d7:93:28:bf:45:a2:12:
                    3b:2e:86:b2:5e:f5:b3:87:22:d0:17:47:ac:00:fa:
                    56:d1:f8:88:d5:85:47:7a:88:a9:7e:51:21:96:19:
                    21:a9:32:9f:78:b5:67:da:cb:7b:44:8a:30:4b:2c:
                    3e:31:79:09:ed:c2:05:41:5e:de:44:87:64:07:3e:
                    8b:7c:2b:b9:13:cf:4d:66:cf:c3:25:b5:58:97:69:
                    7a:d9:58:a4:66:ac:fe:ff:71:9d:e4:40:d7:01:ad:
                    29:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:9C:E7:C7:9A:EE:A3:38:E8:18:BC:DA:89:5D:B4:CD:C1:87:97:49
            X509v3 Authority Key Identifier:
                keyid:53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/3137372e38352e3232342e302f32332d3233203d3e20323632363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:99:de:f1:ce:91:a0:bb:1e:16:2a:4b:aa:45:b7:00:e6:ee:
         1f:e1:d3:7f:53:78:de:f0:f1:2f:38:99:a3:99:3f:6f:0f:bb:
         ad:2e:a4:2b:6e:29:2e:e3:43:3e:85:f4:c0:95:ea:63:64:de:
         c5:16:fe:88:69:b5:f3:79:02:6e:19:33:58:30:d4:ca:0a:fb:
         82:6b:01:77:e0:e3:e7:51:50:9e:dc:1e:ed:3a:3d:54:77:f8:
         78:be:22:fc:93:62:34:4d:ba:80:98:17:11:ee:c8:c9:bb:21:
         6a:c6:4a:1d:ce:d9:80:81:84:8a:6e:52:08:f8:ef:47:6a:6e:
         ea:04:bf:be:3b:d5:0f:df:2b:4d:b2:99:9e:71:d1:0d:0f:5c:
         e6:a7:97:9a:77:57:1c:8a:0a:30:84:e5:c2:7c:00:fb:36:a8:
         12:d7:3e:9d:49:b3:ff:59:1e:c8:cb:9c:8f:39:7a:a5:be:87:
         1c:34:c5:7f:88:50:bc:0c:91:e2:1f:0d:61:aa:84:f6:b1:7b:
         ef:b6:79:69:6f:95:fc:cd:10:b0:67:f1:47:f3:55:e5:2c:6b:
         a9:63:a5:cd:c8:5a:bb:99:c8:56:c0:06:dc:9f:61:03:e6:d9:
         2b:4e:87:81:72:9c:6e:a6:1d:7f:d7:7b:be:c0:76:e3:7a:0a:
         9b:ed:b4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:30 2024 by rpki-client on console-ams.rpki-client.org