Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/3137372e38352e3232362e302f32332d3233203d3e20323632363136.roa
File:                     3137372e38352e3232362e302f32332d3233203d3e20323632363136.roa (raw, json)
Hash identifier:          6GyMPnNdmr2uA2oBiqsG+Ko/ZkHCJiQdJTd2gJEKWd8=
Subject key identifier:   58:3E:7D:2F:EE:1D:28:0E:A9:FA:0F:D9:DA:5C:94:1E:FA:BE:43:F6
Certificate issuer:       /CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
Certificate serial:       1F32C152B8032802AAE13FD925890BCC9882EC0E
Authority key identifier: 53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/3137372e38352e3232362e302f32332d3233203d3e20323632363136.roa
Signing time:             Thu 04 Apr 2024 04:35:38 +0000
ROA not before:           Thu 04 Apr 2024 04:30:38 +0000
ROA not after:            Thu 03 Apr 2025 04:35:38 +0000
asID:                     262616
IP address blocks:        177.85.226.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl
                          rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:32:c1:52:b8:03:28:02:aa:e1:3f:d9:25:89:0b:cc:98:82:ec:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
        Validity
            Not Before: Apr  4 04:30:38 2024 GMT
            Not After : Apr  3 04:35:38 2025 GMT
        Subject: CN=583E7D2FEE1D280EA9FA0FD9DA5C941EFABE43F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:71:c8:fa:44:65:59:6f:57:a4:0a:4b:ed:44:
                    8c:e7:bf:ff:99:8c:59:50:60:0a:50:53:69:15:b5:
                    60:be:bf:66:6c:3e:76:d8:79:3f:67:0c:37:df:f2:
                    de:cc:4e:1b:e4:2e:aa:85:d0:d7:fb:68:77:0c:6b:
                    d0:28:e9:37:70:c0:25:b7:37:e3:d2:23:61:e3:da:
                    7c:01:cf:41:f8:35:95:47:cf:86:1d:7e:2f:fa:73:
                    71:9f:17:b1:11:60:76:e4:96:bf:c6:e9:6b:ff:84:
                    bf:d5:7b:b1:e8:f2:7e:e6:11:64:0c:bb:b6:d2:df:
                    63:9c:8f:f8:fb:61:e5:02:21:ec:d7:12:cf:e2:33:
                    ff:5a:f1:b7:b6:90:e8:2c:e0:98:9f:9e:b7:82:5f:
                    0e:48:3f:ec:0c:5b:98:64:2b:77:2d:73:7d:20:ce:
                    d1:00:56:32:a3:4e:85:f3:ee:ec:96:8a:ae:66:48:
                    f3:b4:75:3a:e9:9c:b3:c1:db:13:b4:6c:bc:1e:24:
                    44:46:78:84:57:49:3a:03:65:9f:ce:87:5e:34:f9:
                    a4:00:fb:b6:9c:bd:40:97:94:a0:b5:74:c0:fe:60:
                    cf:06:bb:09:e4:6b:8a:08:83:15:0f:22:ac:ba:53:
                    b8:ee:40:28:12:40:a3:c9:89:3d:5d:ca:9d:9c:78:
                    50:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3E:7D:2F:EE:1D:28:0E:A9:FA:0F:D9:DA:5C:94:1E:FA:BE:43:F6
            X509v3 Authority Key Identifier:
                keyid:53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/3137372e38352e3232362e302f32332d3233203d3e20323632363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:3d:57:4c:1b:ff:9a:79:e3:11:f9:14:3a:20:ca:30:e2:f8:
         04:89:60:7a:48:52:a6:c5:e7:21:27:6f:e8:09:05:a5:76:32:
         7b:35:f9:4f:00:c8:35:d7:99:a0:65:24:ac:7f:47:58:49:42:
         84:78:9e:18:14:3f:32:57:78:f8:7a:83:a5:3f:77:45:a4:2f:
         d4:e0:13:65:c1:42:28:ee:0d:9f:44:4c:07:8f:0b:cc:0a:aa:
         f7:53:2c:90:23:93:ed:b7:c9:ee:bf:69:80:b8:52:f4:99:b1:
         55:53:dd:21:d3:32:14:33:ef:0c:b3:b8:c1:40:f5:06:e1:46:
         78:87:ad:16:82:f1:e1:1a:64:05:41:fc:ac:72:9b:9a:49:7a:
         87:4c:f1:5b:ed:12:fd:06:06:6d:71:6a:7e:72:80:d2:6c:e4:
         3a:db:ee:84:f6:c2:49:34:dd:57:a7:e9:f6:dd:ab:c5:bb:58:
         24:a9:72:1a:ca:d9:55:0d:20:57:ef:e8:95:2b:a4:91:93:cb:
         f9:3c:de:65:09:98:d8:34:bc:77:2f:a0:9c:72:c0:10:b8:f3:
         1c:48:ca:3b:d6:e5:59:8f:08:84:0f:ba:e5:4a:c4:45:1d:d4:
         2d:09:63:77:9e:65:9a:8e:f0:d5:32:6a:a2:9c:5d:0c:b2:f7:
         3e:ec:db:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:20 2024 by rpki-client on console-fra.rpki-client.org