Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/3137372e38362e3133362e302f32322d3234203d3e20323731303830.roa
File:                     3137372e38362e3133362e302f32322d3234203d3e20323731303830.roa (raw, json)
Hash identifier:          ZHlld9YySajCZLbBZUaXn8LXJ+QQO0UfvjtESj9n2Lc=
Subject key identifier:   F5:76:CA:83:7D:C2:44:B7:23:A2:3D:3A:E8:53:90:7A:F8:77:E5:D9
Certificate issuer:       /CN=9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4
Certificate serial:       38230E8EEE0BA2B3BBB9E8F0074E901444E70A8B
Authority key identifier: 98:07:BC:62:DD:9B:43:B5:80:5D:89:19:B8:62:6F:3A:8E:D2:F8:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/3137372e38362e3133362e302f32322d3234203d3e20323731303830.roa
Signing time:             Thu 04 Apr 2024 12:33:16 +0000
ROA not before:           Thu 04 Apr 2024 12:28:16 +0000
ROA not after:            Thu 03 Apr 2025 12:33:16 +0000
asID:                     271080
IP address blocks:        177.86.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.crl
                          rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 14:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:23:0e:8e:ee:0b:a2:b3:bb:b9:e8:f0:07:4e:90:14:44:e7:0a:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4
        Validity
            Not Before: Apr  4 12:28:16 2024 GMT
            Not After : Apr  3 12:33:16 2025 GMT
        Subject: CN=F576CA837DC244B723A23D3AE853907AF877E5D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:98:2a:14:b8:5a:3c:39:f4:68:0b:fd:92:2f:
                    f5:65:fa:6e:83:e9:56:85:27:6d:94:21:37:2a:1c:
                    2a:0f:23:38:76:ea:b1:f3:7b:e1:26:01:be:1f:d3:
                    1c:22:4f:9b:a1:45:b5:cc:51:e8:52:26:e3:a4:f5:
                    63:e1:17:6c:88:e6:e6:a8:96:7e:37:16:6b:67:f5:
                    99:3b:71:b3:18:f9:d2:30:2c:7a:40:c2:d2:c2:17:
                    ca:bd:fc:2d:ef:7d:fb:4b:22:d7:00:31:b4:38:f2:
                    2c:97:b2:f4:a3:a0:2b:a2:5b:6b:e1:9d:f9:82:db:
                    0c:56:7e:11:8c:57:3d:9d:ba:b9:21:28:bb:53:1d:
                    14:57:d1:7c:b5:c1:db:de:e8:4f:e5:44:8f:aa:1a:
                    a7:0b:67:a1:03:5f:50:78:b8:ce:ff:e5:49:dc:36:
                    ce:44:a8:db:ad:46:c5:a1:df:e7:6f:4f:c5:09:65:
                    fe:b5:29:04:41:bd:74:de:8c:b2:63:d3:5f:4b:84:
                    16:3f:52:55:e6:ab:90:4c:cf:27:7c:11:05:c3:2d:
                    7b:ec:24:d7:04:61:e3:4e:ff:d3:31:dc:f2:9f:70:
                    15:8e:a9:b2:05:ce:0c:13:3b:69:2e:a5:17:60:48:
                    88:32:de:50:28:7b:50:29:e9:5f:fb:30:11:e2:81:
                    3d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:76:CA:83:7D:C2:44:B7:23:A2:3D:3A:E8:53:90:7A:F8:77:E5:D9
            X509v3 Authority Key Identifier:
                keyid:98:07:BC:62:DD:9B:43:B5:80:5D:89:19:B8:62:6F:3A:8E:D2:F8:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/3137372e38362e3133362e302f32322d3234203d3e20323731303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:e7:e5:1e:d0:f9:02:8d:70:fc:d7:1a:15:ac:51:bb:e6:c0:
         6b:92:04:5e:0a:51:76:5b:00:2a:95:c0:d1:f2:db:6a:58:21:
         57:b9:7b:ab:29:6b:b5:65:7e:f2:40:7f:28:13:56:c3:b9:77:
         4d:0b:0d:6e:8a:56:aa:58:47:5d:35:e7:72:f6:c1:38:c3:83:
         25:af:bc:7e:99:ba:5d:ed:79:3b:82:d5:01:78:2f:da:64:35:
         62:90:46:53:0a:f2:2d:21:f3:89:76:8f:47:3f:d8:40:6c:3f:
         30:73:28:8e:97:de:8f:c9:90:7a:4a:50:2d:2d:b1:2e:9a:89:
         ba:40:1c:9b:fa:80:a8:4f:e6:ce:44:45:3d:4d:dc:b6:9e:0c:
         c5:58:28:52:41:c2:03:c4:a8:c7:2a:3a:89:ea:04:60:a2:08:
         37:13:81:4a:b8:0c:de:62:a5:d4:44:fb:93:ed:3a:84:8c:17:
         03:e5:44:e9:65:97:5c:15:2a:30:07:17:e9:86:44:af:92:27:
         b9:ed:47:65:37:25:4f:99:7b:85:26:d2:79:87:ad:69:80:1c:
         18:c3:22:e7:94:f6:3b:6a:38:cb:2f:2a:c3:7e:a7:a9:86:81:
         49:e4:cc:1c:6c:36:ec:25:92:e8:33:b1:9d:42:8e:bc:60:b8:
         ce:ad:f1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:27:13 2024 by rpki-client on console-fra.rpki-client.org