Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/3137372e38362e3133362e302f32342d3234203d3e20323731303830.roa
File:                     3137372e38362e3133362e302f32342d3234203d3e20323731303830.roa (raw, json)
Hash identifier:          huZBXjBveXbkeDl9Ygz407fh26bfhevldZk2IvNbD+c=
Subject key identifier:   FB:A7:B9:BA:1D:C2:F1:BF:75:B7:DE:AE:8C:40:3F:B0:30:8E:4E:C2
Certificate issuer:       /CN=9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4
Certificate serial:       392C2E4CDF133A63241222FA959EF707BA699356
Authority key identifier: 98:07:BC:62:DD:9B:43:B5:80:5D:89:19:B8:62:6F:3A:8E:D2:F8:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/3137372e38362e3133362e302f32342d3234203d3e20323731303830.roa
Signing time:             Sat 01 Feb 2025 19:55:43 +0000
ROA not before:           Sat 01 Feb 2025 19:50:43 +0000
ROA not after:            Sat 31 Jan 2026 19:55:43 +0000
asID:                     271080
IP address blocks:        177.86.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.crl
                          rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:14:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:2c:2e:4c:df:13:3a:63:24:12:22:fa:95:9e:f7:07:ba:69:93:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4
        Validity
            Not Before: Feb  1 19:50:43 2025 GMT
            Not After : Jan 31 19:55:43 2026 GMT
        Subject: CN=FBA7B9BA1DC2F1BF75B7DEAE8C403FB0308E4EC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ae:68:6b:13:0a:91:26:50:ce:63:ea:e7:c9:
                    79:b2:45:08:06:b1:7b:db:18:8f:1a:3c:99:76:d6:
                    f3:6e:a9:26:f5:a5:c5:21:2d:9a:3e:3a:a3:35:02:
                    d2:89:43:7d:4c:6d:c0:43:30:96:67:7c:23:f6:2f:
                    ed:0c:ef:4b:fa:62:7d:87:4c:63:59:18:31:09:43:
                    87:ec:ba:aa:50:ce:47:38:11:1a:ba:86:29:83:30:
                    b6:19:03:69:70:1c:9e:51:de:67:d9:7a:e7:15:8b:
                    a0:dd:1a:d1:54:1c:ef:f8:36:17:4d:4c:ca:87:37:
                    38:83:66:32:af:ba:1b:b1:53:3e:9d:e0:d5:79:52:
                    1f:61:22:02:26:5f:9b:0e:48:f0:29:04:d5:1c:5d:
                    dd:e8:65:94:48:9f:73:82:48:f9:f1:2c:2b:ad:eb:
                    8d:4c:02:4f:7c:95:56:dc:77:6f:d5:83:dd:82:50:
                    0c:1d:71:1d:e1:55:f8:8f:82:07:d3:7c:ea:5f:2b:
                    20:63:9f:f2:bb:85:e0:2c:2a:d6:01:aa:b9:78:19:
                    56:5c:20:24:0d:f7:4e:71:e7:b5:17:3a:96:db:b8:
                    a0:6a:ed:d3:61:46:bc:b4:df:31:92:52:0a:f1:ea:
                    7c:1f:2f:44:a0:95:91:be:24:a3:1e:13:35:e8:60:
                    e0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A7:B9:BA:1D:C2:F1:BF:75:B7:DE:AE:8C:40:3F:B0:30:8E:4E:C2
            X509v3 Authority Key Identifier:
                keyid:98:07:BC:62:DD:9B:43:B5:80:5D:89:19:B8:62:6F:3A:8E:D2:F8:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/3137372e38362e3133362e302f32342d3234203d3e20323731303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:40:ed:15:86:df:20:aa:63:cb:b1:c3:5b:f4:f3:e4:48:f0:
         ab:0e:00:54:63:c8:36:8e:a7:c1:36:91:61:77:ac:5f:42:a5:
         b4:9b:81:3a:6b:d8:28:64:ec:b6:6b:64:df:46:0e:57:97:02:
         fe:f3:35:ea:44:6c:87:df:6b:d2:4d:46:24:66:ac:6a:6d:9f:
         08:3e:62:d5:fe:fe:fb:18:17:63:a8:c2:91:29:01:90:0d:12:
         c1:ef:e2:a0:af:97:31:02:a2:eb:d9:5f:8a:e1:ee:2f:d7:85:
         a2:8a:fa:39:59:00:cd:12:61:dd:e0:5d:31:2b:89:96:c9:4b:
         4d:f3:f4:81:25:c6:0d:b7:ce:84:ad:1b:9d:eb:95:34:d2:dd:
         80:ea:8b:c8:e4:7e:21:7b:df:d9:6c:3e:a1:62:79:b1:03:23:
         4f:a5:84:43:7b:57:cb:f0:44:b6:d7:f8:7a:aa:89:bc:48:da:
         df:fd:e5:ee:1e:7b:df:89:96:fb:c0:8e:30:7c:88:65:e4:5d:
         9c:cc:d5:ba:a3:33:28:9d:d3:b1:02:e9:1b:fe:92:9e:72:11:
         c8:97:05:30:13:62:ff:3e:63:5d:e3:19:14:90:7c:fe:dd:3e:
         f6:4d:0c:2a:cd:62:fa:05:d7:63:02:57:0f:62:ae:2d:b6:b9:
         e0:42:46:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:47:13 2025 by rpki-client