Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/3137372e38352e3232342e302f32342d3234203d3e20323632363136.roa
File:                     3137372e38352e3232342e302f32342d3234203d3e20323632363136.roa (raw, json)
Hash identifier:          FU76f2tHwwSF70HO4eKAA75BbbOdeLcxq/C7yvpFI/k=
Subject key identifier:   D9:A8:DC:FD:CB:70:7E:8B:7A:45:4C:CF:2E:31:87:A7:3A:21:AC:B7
Certificate issuer:       /CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
Certificate serial:       4469618E0957075CEC63F0956EA0459262A142AC
Authority key identifier: 53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/3137372e38352e3232342e302f32342d3234203d3e20323632363136.roa
Signing time:             Thu 04 Apr 2024 04:35:40 +0000
ROA not before:           Thu 04 Apr 2024 04:30:40 +0000
ROA not after:            Thu 03 Apr 2025 04:35:40 +0000
asID:                     262616
IP address blocks:        177.85.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl
                          rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:69:61:8e:09:57:07:5c:ec:63:f0:95:6e:a0:45:92:62:a1:42:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
        Validity
            Not Before: Apr  4 04:30:40 2024 GMT
            Not After : Apr  3 04:35:40 2025 GMT
        Subject: CN=D9A8DCFDCB707E8B7A454CCF2E3187A73A21ACB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:48:a7:f5:a2:28:76:94:ee:19:92:77:2e:96:
                    e8:3a:84:93:12:0c:64:c4:c0:7e:7a:a7:e0:92:17:
                    96:8f:22:75:f9:9a:ff:32:9a:d0:42:09:4a:97:ac:
                    ce:8c:93:64:73:3c:93:e1:6a:a8:cd:63:c6:80:98:
                    5c:5d:40:b2:e8:85:97:5e:63:df:51:be:69:b5:ee:
                    db:fb:af:66:4c:38:5d:cb:a3:f7:82:04:c5:5d:1d:
                    89:ef:59:1a:77:7b:ff:bd:0b:54:e7:9c:68:aa:e1:
                    b1:f7:37:37:ad:f2:e8:88:21:93:1c:c7:a1:3c:8f:
                    e5:89:ab:4a:41:37:1a:4e:7d:87:81:84:31:0c:cd:
                    3b:a6:d3:28:8a:e6:3c:ae:69:7e:ac:33:ae:85:41:
                    9d:1b:cd:a7:9b:3d:f1:c3:93:9e:f6:f9:9f:37:6d:
                    e2:81:e4:53:d3:f2:45:88:0d:7c:d2:65:aa:be:2c:
                    78:3f:22:b6:36:03:2a:b3:88:41:db:e2:fb:e4:fc:
                    5e:25:e3:5c:a2:71:9b:a5:c8:42:a7:5e:b2:92:6f:
                    79:5c:ec:ae:9e:85:f5:59:77:7e:fe:d6:24:b7:27:
                    8e:54:8b:b8:8b:6a:df:8b:6d:d0:13:53:0d:21:05:
                    7c:6d:c9:f8:2d:06:98:a9:16:ce:dd:92:0b:a2:14:
                    93:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A8:DC:FD:CB:70:7E:8B:7A:45:4C:CF:2E:31:87:A7:3A:21:AC:B7
            X509v3 Authority Key Identifier:
                keyid:53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/3137372e38352e3232342e302f32342d3234203d3e20323632363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:ed:d1:71:d5:3e:11:22:06:21:05:ee:ae:d5:10:24:33:b9:
         69:cc:91:f3:0a:1a:0c:35:5b:44:c0:ed:88:86:77:67:5e:f4:
         3b:d4:f7:e3:d1:54:a2:5a:e6:88:2c:01:ae:88:8e:90:a9:bb:
         a4:ff:24:05:94:c2:69:f7:05:1b:e9:11:97:3d:a8:cc:b0:63:
         f0:8a:19:bf:59:8c:30:3d:45:19:a4:e0:5c:3a:8a:37:2e:67:
         06:30:fb:a3:09:77:67:97:18:9e:4d:07:03:cd:bd:82:67:6c:
         17:85:b6:dd:90:35:3f:90:5d:ef:72:92:b5:b3:1c:f3:98:98:
         9d:31:45:19:1b:8f:55:09:2f:5f:0e:87:a8:8f:20:16:da:af:
         3d:48:ae:08:3a:8e:d3:b5:57:34:30:44:5f:22:1b:4d:0b:d3:
         bb:63:54:02:0a:70:c9:c4:4f:a4:1a:34:21:93:d9:4b:51:d3:
         0f:4d:72:f1:33:8e:be:1a:17:2f:ab:96:f1:99:f7:81:85:05:
         24:6f:ac:df:3b:b4:0c:83:94:ec:60:d8:c2:fc:2c:89:28:ef:
         c1:77:45:71:50:30:4a:a8:41:7b:62:60:01:4e:fa:1c:a6:6b:
         29:61:6f:eb:16:4e:f8:01:f7:e0:4a:b3:eb:d2:b8:f6:3a:7e:
         bb:9a:b8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:20 2024 by rpki-client on console-fra.rpki-client.org