Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3137372e35362e302e302f31342d3234203d3e203232303835.roa
File:                     3137372e35362e302e302f31342d3234203d3e203232303835.roa (raw, json)
Hash identifier:          fUY04JOWpZhaFydYfUR3zldpsu0TF2BBnLHy3P0uu2E=
Subject key identifier:   91:0A:AE:B7:92:7F:27:74:6B:EA:FE:18:85:E5:A0:E5:96:2B:21:A8
Certificate issuer:       /CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Certificate serial:       2FA955D82DE8A047910CCCB6271D164D16583141
Authority key identifier: D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3137372e35362e302e302f31342d3234203d3e203232303835.roa
Signing time:             Tue 16 Jul 2024 14:23:15 +0000
ROA not before:           Tue 16 Jul 2024 14:18:15 +0000
ROA not after:            Tue 15 Jul 2025 14:23:15 +0000
asID:                     22085
IP address blocks:        177.56.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl
                          rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 02:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a9:55:d8:2d:e8:a0:47:91:0c:cc:b6:27:1d:16:4d:16:58:31:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
        Validity
            Not Before: Jul 16 14:18:15 2024 GMT
            Not After : Jul 15 14:23:15 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f4:a7:ab:9c:41:a2:4e:f5:f8:7d:3e:ec:aa:
                    52:1c:cf:6f:5b:91:b5:df:0a:96:55:63:46:f9:f8:
                    2a:e3:ff:96:54:86:c6:cf:1a:cf:c0:e6:08:ca:a3:
                    59:5d:95:73:bc:5b:c4:ac:0e:9f:83:09:44:ca:04:
                    8e:74:13:ce:36:f5:2a:81:fc:1a:8b:29:8e:02:34:
                    f3:32:d8:4c:19:a0:06:cc:16:75:71:b9:bb:8d:5a:
                    30:95:1c:ca:46:1f:ef:32:ea:b7:ed:d4:31:7c:f8:
                    11:df:9c:8b:dd:90:f0:8b:d3:8f:6f:e9:68:d8:0a:
                    ca:c1:7a:56:ed:91:8f:2c:2b:e6:7e:57:5d:6c:98:
                    a1:65:ee:bc:91:16:41:99:92:b7:ad:60:b2:e8:ad:
                    a3:b0:b0:6f:23:b3:8d:bb:5c:db:24:86:3d:79:b9:
                    23:d5:77:7c:4a:2f:a3:b3:de:2b:dd:5f:73:ba:31:
                    f8:64:15:e7:25:49:7e:4c:f2:d6:b6:3b:aa:4a:7d:
                    f1:6c:3c:a6:b4:ba:7c:36:e9:36:c1:c7:00:6f:60:
                    c0:88:f7:fd:53:52:43:55:af:eb:d8:71:7a:5b:45:
                    c5:98:29:73:55:09:36:ea:15:c5:08:70:15:8c:b5:
                    2f:70:bd:15:8d:a8:09:89:21:5e:27:13:c5:ff:85:
                    a6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0A:AE:B7:92:7F:27:74:6B:EA:FE:18:85:E5:A0:E5:96:2B:21:A8
            X509v3 Authority Key Identifier:
                keyid:D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3137372e35362e302e302f31342d3234203d3e203232303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.56.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         31:0a:58:b4:3e:d5:fe:31:e5:eb:a3:05:7f:2a:d3:a0:19:b0:
         ae:77:95:df:fc:21:b1:22:4c:f3:87:54:51:c8:40:1f:4d:3f:
         66:45:c0:56:2f:07:5a:90:04:aa:57:43:61:1b:ad:4f:9c:c6:
         c0:25:7d:4e:9d:9b:29:b5:1a:54:9d:99:38:ce:b6:57:75:62:
         ed:c9:ee:69:31:ec:b9:4c:63:64:79:ac:34:5c:2d:a0:72:93:
         45:48:c4:07:3c:a4:3d:7d:b9:1d:dd:ea:b0:4d:96:f3:c6:1f:
         db:2c:f9:84:96:ae:81:21:1a:f3:40:f9:ff:5d:ac:2c:e5:54:
         3e:c6:aa:c7:95:7a:cc:b7:17:58:13:6f:30:37:ec:56:f9:2f:
         7c:b9:a5:90:9d:fd:9d:6d:d8:8b:3b:08:16:43:6b:13:9f:9e:
         bc:02:50:78:54:07:83:a6:c3:6e:c6:64:1d:a2:c7:94:db:f0:
         d6:2b:22:46:6c:e1:3c:10:36:56:b7:9a:00:47:98:8d:10:a9:
         bc:20:ec:6c:d5:d9:c4:72:d9:f2:5a:ae:c7:b0:72:a9:0f:07:
         72:75:f5:81:35:1f:6f:88:8b:9d:10:bd:9e:ef:02:90:38:7d:
         89:0f:e1:48:03:6b:8e:92:c3:1e:21:77:ea:7a:4e:25:00:ea:
         e2:61:c0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:09 2024 by rpki-client on console-fra.rpki-client.org