Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFdeC3zaiW3L2iZ4ZHV9vLU3z6Bw2f7Z9nhXwFB7F4ZP/1/3137372e38352e3138342e302f32332d3233203d3e20323730373837.roa
File:                     3137372e38352e3138342e302f32332d3233203d3e20323730373837.roa (raw, json)
Hash identifier:          4cTQw2OyxJ6IjpnOaPrFywfM5PLyVfsCA4bEnhGPAUM=
Subject key identifier:   1A:7C:55:9D:D2:D2:8B:5A:7C:90:C4:F9:15:48:D5:B4:24:AD:F7:83
Certificate issuer:       /CN=06188C39079C279AEC1E6D62535C4DA2C26ED244
Certificate serial:       7465FD1AF1F3FAE7D7F7EC3AC7985EC5E708F406
Authority key identifier: 06:18:8C:39:07:9C:27:9A:EC:1E:6D:62:53:5C:4D:A2:C2:6E:D2:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06188C39079C279AEC1E6D62535C4DA2C26ED244.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFdeC3zaiW3L2iZ4ZHV9vLU3z6Bw2f7Z9nhXwFB7F4ZP/1/3137372e38352e3138342e302f32332d3233203d3e20323730373837.roa
Signing time:             Thu 04 Apr 2024 04:00:20 +0000
ROA not before:           Thu 04 Apr 2024 03:55:20 +0000
ROA not after:            Thu 03 Apr 2025 04:00:20 +0000
asID:                     270787
IP address blocks:        177.85.184.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFdeC3zaiW3L2iZ4ZHV9vLU3z6Bw2f7Z9nhXwFB7F4ZP/1/06188C39079C279AEC1E6D62535C4DA2C26ED244.crl
                          rsync://rpki-repo.registro.br/repo/HFdeC3zaiW3L2iZ4ZHV9vLU3z6Bw2f7Z9nhXwFB7F4ZP/1/06188C39079C279AEC1E6D62535C4DA2C26ED244.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06188C39079C279AEC1E6D62535C4DA2C26ED244.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:46:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:65:fd:1a:f1:f3:fa:e7:d7:f7:ec:3a:c7:98:5e:c5:e7:08:f4:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06188C39079C279AEC1E6D62535C4DA2C26ED244
        Validity
            Not Before: Apr  4 03:55:20 2024 GMT
            Not After : Apr  3 04:00:20 2025 GMT
        Subject: CN=1A7C559DD2D28B5A7C90C4F91548D5B424ADF783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ce:86:4e:9f:8b:40:47:e9:fe:f5:be:59:6b:
                    10:a2:f2:f6:0e:7f:ae:77:37:eb:36:2d:d5:12:dc:
                    0e:97:06:26:bc:5f:c4:f1:ea:68:ca:aa:0b:37:89:
                    1b:ae:e5:38:d2:a1:0e:78:e9:12:e5:04:a1:4f:2b:
                    65:b7:86:3b:e0:7e:70:e3:b4:e9:b7:e6:e4:35:ae:
                    e1:67:f9:17:e9:45:bf:ef:a6:6d:41:50:2d:8a:dc:
                    83:7f:94:d6:4e:8f:db:59:1f:40:b3:f0:ca:fa:09:
                    1d:bc:4f:49:fd:5a:6e:11:b1:b1:1b:35:4a:9d:10:
                    57:5d:47:91:01:7a:49:91:ee:90:cb:94:62:eb:ec:
                    55:79:8d:90:8e:c4:eb:48:a6:6f:69:e2:89:51:be:
                    b0:f1:fc:f4:58:f6:db:44:d2:77:cb:56:df:fa:1e:
                    ff:6f:1e:4b:4a:f9:11:24:70:e2:cf:fa:41:69:5b:
                    01:7b:aa:35:71:c2:58:bf:b7:59:7a:0c:51:82:c6:
                    b7:81:b5:90:66:39:66:af:3c:62:55:4a:7e:56:64:
                    68:3b:90:65:2d:35:90:1c:11:c8:ad:97:05:ad:c2:
                    42:2b:d0:90:03:ac:37:9d:4f:ff:7e:61:89:5e:d8:
                    ce:69:aa:21:d9:87:3c:05:ed:f4:ad:9f:8e:33:fe:
                    a1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:7C:55:9D:D2:D2:8B:5A:7C:90:C4:F9:15:48:D5:B4:24:AD:F7:83
            X509v3 Authority Key Identifier:
                keyid:06:18:8C:39:07:9C:27:9A:EC:1E:6D:62:53:5C:4D:A2:C2:6E:D2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFdeC3zaiW3L2iZ4ZHV9vLU3z6Bw2f7Z9nhXwFB7F4ZP/1/06188C39079C279AEC1E6D62535C4DA2C26ED244.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06188C39079C279AEC1E6D62535C4DA2C26ED244.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFdeC3zaiW3L2iZ4ZHV9vLU3z6Bw2f7Z9nhXwFB7F4ZP/1/3137372e38352e3138342e302f32332d3233203d3e20323730373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:9d:a4:fc:82:53:c0:41:86:e9:98:a9:1f:ea:b4:04:e9:92:
         9e:e2:da:73:aa:b6:68:0f:fd:e0:e4:d5:57:bd:a1:6b:55:50:
         a1:bd:fd:5b:01:69:fe:0e:af:ab:e5:32:d8:d8:c8:21:e6:65:
         44:cb:c9:bf:a9:60:a5:2f:c6:b0:79:fb:80:34:54:c6:a1:24:
         e4:72:a8:11:e6:c7:27:2d:94:03:b3:70:1a:60:22:17:b4:e5:
         6c:0c:0f:58:42:4e:a3:bd:89:ce:87:88:70:ce:8a:68:16:30:
         be:54:5d:21:58:b0:7f:b0:af:c2:53:98:e0:4f:2d:18:c6:71:
         9e:67:25:1a:e4:d2:ca:0a:43:a7:45:30:82:0c:71:5f:81:91:
         d7:f0:c2:dd:2b:97:e3:b4:29:c0:00:04:59:f3:ad:73:88:7d:
         05:98:cf:7f:40:e9:48:cb:83:71:8a:ff:30:06:e4:39:e2:46:
         84:56:ae:60:3f:f7:67:88:e3:07:78:af:08:76:4e:db:f4:88:
         4a:c6:6f:60:aa:df:0a:7b:83:70:b4:a7:61:d0:5b:de:24:d2:
         39:13:fe:35:97:4f:04:93:46:d7:8b:c8:b7:66:cd:49:09:48:
         60:b4:2c:21:86:31:ca:84:c6:d3:c3:1b:ee:99:fb:7d:9e:e8:
         3b:d1:42:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:53 2024 by rpki-client on console-ams.rpki-client.org