Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFdeC3zaiW3L2iZ4ZHV9vLU3z6Bw2f7Z9nhXwFB7F4ZP/1/3137372e38352e3138342e302f32342d3234203d3e20323730373837.roa
File:                     3137372e38352e3138342e302f32342d3234203d3e20323730373837.roa (raw, json)
Hash identifier:          EKDYwpR7vAaVcIMTG2aXfQKhd9Oh9M68+I4+4T9s6E8=
Subject key identifier:   E2:93:1F:B3:5E:A0:89:FE:CB:58:22:73:9D:7F:A0:25:32:94:9E:2E
Certificate issuer:       /CN=06188C39079C279AEC1E6D62535C4DA2C26ED244
Certificate serial:       7FD182712D3D887620FC91450BA056B66522DCDA
Authority key identifier: 06:18:8C:39:07:9C:27:9A:EC:1E:6D:62:53:5C:4D:A2:C2:6E:D2:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06188C39079C279AEC1E6D62535C4DA2C26ED244.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFdeC3zaiW3L2iZ4ZHV9vLU3z6Bw2f7Z9nhXwFB7F4ZP/1/3137372e38352e3138342e302f32342d3234203d3e20323730373837.roa
Signing time:             Thu 04 Apr 2024 04:00:21 +0000
ROA not before:           Thu 04 Apr 2024 03:55:21 +0000
ROA not after:            Thu 03 Apr 2025 04:00:21 +0000
asID:                     270787
IP address blocks:        177.85.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFdeC3zaiW3L2iZ4ZHV9vLU3z6Bw2f7Z9nhXwFB7F4ZP/1/06188C39079C279AEC1E6D62535C4DA2C26ED244.crl
                          rsync://rpki-repo.registro.br/repo/HFdeC3zaiW3L2iZ4ZHV9vLU3z6Bw2f7Z9nhXwFB7F4ZP/1/06188C39079C279AEC1E6D62535C4DA2C26ED244.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06188C39079C279AEC1E6D62535C4DA2C26ED244.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:46:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d1:82:71:2d:3d:88:76:20:fc:91:45:0b:a0:56:b6:65:22:dc:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06188C39079C279AEC1E6D62535C4DA2C26ED244
        Validity
            Not Before: Apr  4 03:55:21 2024 GMT
            Not After : Apr  3 04:00:21 2025 GMT
        Subject: CN=E2931FB35EA089FECB5822739D7FA02532949E2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ef:2c:bc:aa:4f:1c:03:21:97:44:8f:47:b7:
                    95:94:90:bb:e5:c4:7c:e3:20:e9:08:7a:09:e9:0a:
                    49:09:98:cf:53:22:95:dc:72:7f:bc:86:64:de:28:
                    3d:b3:c6:88:3c:30:d7:1e:4a:15:b0:c4:e0:eb:8c:
                    1a:04:8c:a8:c8:27:60:07:0f:a9:59:43:93:7d:a4:
                    0c:e4:74:47:5c:31:f6:dc:f9:a8:f5:7b:51:69:38:
                    c1:8c:c5:3b:16:61:fe:a7:14:cd:82:14:0c:38:8e:
                    a3:46:9c:2a:fc:3a:e8:fc:02:72:7c:a9:38:ba:92:
                    04:e0:18:55:0d:37:85:68:93:02:19:81:a0:af:47:
                    5a:d5:cd:b6:7e:ce:c2:83:3f:98:0c:3a:ba:64:ea:
                    fb:0a:13:80:88:b3:40:a7:b3:be:e4:99:29:52:ee:
                    87:4a:c6:8a:fa:44:f4:b6:6b:71:11:09:af:ea:e9:
                    74:b4:f9:ee:e9:85:e8:fe:07:14:61:57:a5:df:64:
                    ef:51:33:54:f3:22:aa:d4:db:a1:ae:99:f1:4c:96:
                    05:cc:22:c6:1d:8d:cf:c5:28:14:7d:d6:b7:43:f9:
                    bf:3d:96:b8:48:80:39:63:c8:1d:61:22:c8:74:7c:
                    80:67:e1:cd:a5:34:08:f5:ab:10:14:66:4a:fc:58:
                    81:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:93:1F:B3:5E:A0:89:FE:CB:58:22:73:9D:7F:A0:25:32:94:9E:2E
            X509v3 Authority Key Identifier:
                keyid:06:18:8C:39:07:9C:27:9A:EC:1E:6D:62:53:5C:4D:A2:C2:6E:D2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFdeC3zaiW3L2iZ4ZHV9vLU3z6Bw2f7Z9nhXwFB7F4ZP/1/06188C39079C279AEC1E6D62535C4DA2C26ED244.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06188C39079C279AEC1E6D62535C4DA2C26ED244.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFdeC3zaiW3L2iZ4ZHV9vLU3z6Bw2f7Z9nhXwFB7F4ZP/1/3137372e38352e3138342e302f32342d3234203d3e20323730373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:aa:2c:bf:24:90:cb:74:cf:af:40:5e:dd:3d:cf:95:29:6f:
         40:af:52:1d:0d:dd:9e:47:ff:14:a0:f6:fe:10:7e:71:34:f5:
         5f:d9:e8:86:f5:5f:2d:04:68:d1:dd:78:fb:d5:25:45:50:22:
         6d:05:f7:67:c7:32:91:9e:b3:cb:83:e8:a4:c7:54:e6:6f:7a:
         6c:d3:a1:14:55:10:2c:c1:93:3c:20:88:f2:25:b0:f3:74:a7:
         a6:55:53:c5:1d:c3:dc:70:b8:9d:0c:35:1a:d7:81:e6:d9:09:
         17:57:6a:09:fd:ee:01:72:be:16:f4:53:89:b1:45:f1:c4:8b:
         bf:4a:cd:14:80:6e:55:01:3f:74:45:8b:55:96:bc:7b:d1:2f:
         34:c4:4b:37:a6:82:7f:ed:71:3f:14:a6:0e:e1:a2:24:df:0a:
         ae:b5:21:8b:17:ce:3c:64:a9:3d:bf:67:8e:61:f8:ac:d1:f4:
         45:95:98:ac:25:d4:a4:68:d3:6e:32:85:3a:62:f4:22:22:a6:
         2b:c4:39:ad:dd:2f:fe:d3:70:ba:3e:15:4d:53:e6:d1:ec:be:
         9d:4f:4b:e6:3f:1f:96:2d:1b:57:5c:fd:92:37:1f:21:fd:49:
         f4:87:91:be:da:bf:ae:8b:2d:6a:86:31:c2:03:03:ce:79:75:
         f0:69:5f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:03 2024 by rpki-client on console-fra.rpki-client.org