Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3137372e3133362e38382e302f32312d3234203d3e203238323737.roa
File:                     3137372e3133362e38382e302f32312d3234203d3e203238323737.roa (raw, json)
Hash identifier:          sbB0qaEJyW4Ksy3luBsVoJgHIZgpBMTB878CdaOj2Lg=
Subject key identifier:   A1:07:F3:76:BD:2B:E4:AB:0B:B1:2B:5F:47:84:0C:17:32:90:A5:29
Certificate issuer:       /CN=A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8
Certificate serial:       47FD4112CE1D368507273248FA6A5FCBA26BDE8D
Authority key identifier: A8:6F:29:09:A8:CF:8A:80:C2:23:9E:5F:95:3F:F1:B4:AB:9D:73:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3137372e3133362e38382e302f32312d3234203d3e203238323737.roa
Signing time:             Tue 07 May 2024 19:55:37 +0000
ROA not before:           Tue 07 May 2024 19:50:37 +0000
ROA not after:            Tue 06 May 2025 19:55:37 +0000
asID:                     28277
IP address blocks:        177.136.88.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl
                          rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 00:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:fd:41:12:ce:1d:36:85:07:27:32:48:fa:6a:5f:cb:a2:6b:de:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8
        Validity
            Not Before: May  7 19:50:37 2024 GMT
            Not After : May  6 19:55:37 2025 GMT
        Subject: CN=A107F376BD2BE4AB0BB12B5F47840C173290A529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f8:37:26:88:c7:6c:1a:c8:b4:57:82:b1:51:
                    2b:b7:a6:fb:6b:a5:87:f2:8b:e5:fc:3e:c0:86:41:
                    9d:cf:ac:72:4b:5e:46:be:d2:f0:88:a4:fa:42:c1:
                    ed:22:7c:b8:7a:4e:c9:02:b2:d8:88:61:4d:2a:45:
                    96:65:c0:92:07:6f:ee:c6:02:b9:c2:c6:7c:31:fe:
                    f0:26:69:2b:0d:2d:70:e6:57:04:86:f7:65:25:99:
                    5d:db:47:cd:bb:6a:ae:b0:e7:d0:25:3b:0a:31:f2:
                    fe:ef:bf:bd:0e:30:d8:1b:91:d1:f2:54:e8:8d:ca:
                    c3:52:77:63:65:b2:d8:77:1a:bd:f7:85:f5:74:86:
                    a5:e7:f3:3e:27:6b:1b:32:23:8e:70:e5:4d:c2:a8:
                    aa:25:38:9b:c5:4b:0a:22:14:50:e7:ec:6a:ba:88:
                    d7:1c:b4:e1:32:05:80:67:17:20:80:04:c1:87:e7:
                    76:62:89:5d:84:7f:9b:b2:bb:82:45:a0:34:43:65:
                    ca:80:d1:fc:0c:70:ba:29:08:b3:3d:61:e8:c3:e4:
                    9e:09:dc:c2:3e:cf:a1:04:59:11:40:b5:f6:2c:4b:
                    09:59:27:a3:47:9e:7e:0f:f5:38:c8:b4:3c:8c:91:
                    9b:9e:de:01:97:cc:c5:aa:c7:3d:93:a4:2b:5e:29:
                    40:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:07:F3:76:BD:2B:E4:AB:0B:B1:2B:5F:47:84:0C:17:32:90:A5:29
            X509v3 Authority Key Identifier:
                keyid:A8:6F:29:09:A8:CF:8A:80:C2:23:9E:5F:95:3F:F1:B4:AB:9D:73:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3137372e3133362e38382e302f32312d3234203d3e203238323737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8d:b9:0b:e2:bf:2a:e7:3b:12:ec:5b:e5:9f:5d:37:6c:10:08:
         8d:54:cd:78:f6:f5:67:69:aa:93:b9:7d:55:b1:18:ce:f7:fa:
         34:51:2d:6b:41:2f:e8:62:49:b5:99:82:db:81:84:92:f6:fa:
         73:cd:c1:e7:60:14:74:df:7a:07:02:6b:4a:92:c7:59:05:33:
         eb:d0:8f:e9:01:b3:e8:bc:33:45:bb:ab:e9:aa:4e:1e:b4:0e:
         ce:3b:29:5c:7d:d0:6b:a0:25:4c:4c:ff:69:5e:c6:0a:62:82:
         5c:b7:cf:b3:ab:d4:2d:e7:ef:3a:72:b7:4a:1d:22:f1:fd:59:
         56:1c:84:c6:4b:f6:52:81:f1:f5:55:57:b0:8d:e7:a2:9b:87:
         34:ee:41:a5:39:4e:77:b3:5c:a7:9e:de:18:ed:ab:df:a9:15:
         0b:b1:e2:8d:df:a4:97:bc:c5:65:91:37:d1:57:2b:62:7d:b0:
         af:98:a8:e5:38:61:25:53:70:24:a0:29:45:af:4d:d8:0c:9c:
         d3:dc:2a:30:e0:c9:2c:eb:c6:6a:0c:9b:8c:74:33:f6:c3:b8:
         a4:eb:8c:b9:86:a5:b5:44:53:a6:aa:80:6d:34:34:6f:b2:5d:
         a0:19:9d:b1:3b:05:8b:8e:fb:c7:fd:3a:7e:44:d4:f6:f0:03:
         4a:84:42:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:15 2024 by rpki-client on console-ams.rpki-client.org