Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/3137372e38352e3232372e302f32342d3234203d3e20323632363136.roa
File:                     3137372e38352e3232372e302f32342d3234203d3e20323632363136.roa (raw, json)
Hash identifier:          A6HeTL/J2IOcx/DZxo+BCr0WuZHpqceN6lPfgGjFw7Q=
Subject key identifier:   AC:0D:21:7A:3A:22:23:C7:E0:93:4D:D3:BF:F2:26:18:DB:B7:D3:FD
Certificate issuer:       /CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
Certificate serial:       3FF7A1E75FCFD47C738EF161D001DB1C0D8D3D49
Authority key identifier: 53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/3137372e38352e3232372e302f32342d3234203d3e20323632363136.roa
Signing time:             Thu 04 Apr 2024 04:35:39 +0000
ROA not before:           Thu 04 Apr 2024 04:30:39 +0000
ROA not after:            Thu 03 Apr 2025 04:35:39 +0000
asID:                     262616
IP address blocks:        177.85.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl
                          rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f7:a1:e7:5f:cf:d4:7c:73:8e:f1:61:d0:01:db:1c:0d:8d:3d:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
        Validity
            Not Before: Apr  4 04:30:39 2024 GMT
            Not After : Apr  3 04:35:39 2025 GMT
        Subject: CN=AC0D217A3A2223C7E0934DD3BFF22618DBB7D3FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:26:67:e5:bb:92:81:d3:57:9c:6a:8d:c8:75:
                    01:69:e3:57:71:bb:fb:ed:d6:ba:af:83:d0:00:58:
                    71:0d:ca:04:8d:c7:76:02:31:6e:5c:2f:41:dd:d7:
                    60:fc:73:f1:cd:27:96:2c:b6:54:2e:a7:18:d7:f4:
                    82:36:9e:2c:1a:e6:e3:f9:4b:3e:0a:28:37:29:3a:
                    25:c4:4b:24:6d:c1:41:5d:34:3f:03:fd:20:aa:a7:
                    49:a2:c0:f1:dc:ed:6f:0a:42:e2:0b:1c:3d:45:8b:
                    ff:19:fa:ac:1b:cc:4b:96:34:a6:31:6b:bf:85:ef:
                    6a:ef:96:64:66:4e:ba:5c:2c:88:e5:58:42:4a:14:
                    05:22:fc:52:95:73:bd:15:f5:3f:ca:f9:86:34:54:
                    27:21:6a:f3:7c:71:8f:4b:3a:0d:46:c2:5e:91:db:
                    7d:b6:5b:76:1d:9f:8c:9f:a9:ff:ee:30:d9:c1:70:
                    b1:39:f2:ca:d4:3d:5d:17:e7:74:ea:f6:53:03:da:
                    bc:86:44:89:25:6c:f6:73:dd:2b:19:29:87:75:09:
                    59:4b:34:7e:46:b3:dc:5e:61:2a:c5:92:f5:bd:dc:
                    51:e5:72:35:b7:49:c3:a7:a0:0d:bc:4e:de:ab:a5:
                    0c:09:44:3b:8e:ef:33:df:a5:e4:9e:90:35:32:bf:
                    73:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0D:21:7A:3A:22:23:C7:E0:93:4D:D3:BF:F2:26:18:DB:B7:D3:FD
            X509v3 Authority Key Identifier:
                keyid:53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/3137372e38352e3232372e302f32342d3234203d3e20323632363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:c8:43:8f:80:fb:c6:71:32:d2:67:78:d0:e8:0b:c9:ae:50:
         21:80:a3:5a:28:94:75:30:cd:c4:47:55:2c:81:e0:cd:b5:3d:
         f7:3c:f0:cc:2e:b2:74:5f:81:eb:b9:fc:f3:fb:76:a8:01:eb:
         09:05:1d:e8:d3:83:17:76:c8:55:4c:8b:43:bb:cb:09:c6:c4:
         cd:fa:df:c0:41:f8:87:a5:c2:78:34:56:16:83:ed:5c:ac:11:
         92:3d:6a:11:17:a4:dc:3b:cd:7c:96:27:54:c6:e4:21:03:21:
         13:82:ee:9c:a2:72:8c:eb:9e:99:52:08:e9:6a:31:5f:62:64:
         cd:c2:d7:4e:46:e1:b2:10:39:93:4c:74:ea:ac:78:cb:c9:f2:
         2b:4c:32:79:d1:14:0d:68:d6:2b:19:62:28:0d:d6:2f:f7:5c:
         e3:17:fc:c2:08:87:ed:83:3b:ea:32:1f:31:31:74:19:13:0f:
         b4:05:c9:c0:11:e4:15:e8:68:71:b7:2d:61:53:f9:ef:37:f2:
         48:16:46:12:54:7a:22:28:fb:4b:78:4d:65:ba:87:27:3f:4c:
         a9:67:41:7e:6b:79:ec:7a:ca:9c:a6:3e:65:a0:93:1d:15:e9:
         7c:09:f7:7c:76:fd:4e:59:7a:d5:2d:76:77:73:f9:67:f0:fa:
         87:ab:66:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:20 2024 by rpki-client on console-fra.rpki-client.org