Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFdeC3zaiW3L2iZ4ZHV9vLU3z6Bw2f7Z9nhXwFB7F4ZP/1/3137372e38352e3138352e302f32342d3234203d3e20323730373837.roa
File:                     3137372e38352e3138352e302f32342d3234203d3e20323730373837.roa (raw, json)
Hash identifier:          QiAqy5yDgDgNHvPZcm81+xnc0+1YiI+iMviv1C+0iPM=
Subject key identifier:   8F:9D:47:97:43:65:7F:A8:EE:01:AF:FD:46:04:3E:7C:3E:EC:52:4B
Certificate issuer:       /CN=06188C39079C279AEC1E6D62535C4DA2C26ED244
Certificate serial:       4C93FB0C971DFBF2E1C20039ACB17E64932A3DA1
Authority key identifier: 06:18:8C:39:07:9C:27:9A:EC:1E:6D:62:53:5C:4D:A2:C2:6E:D2:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06188C39079C279AEC1E6D62535C4DA2C26ED244.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFdeC3zaiW3L2iZ4ZHV9vLU3z6Bw2f7Z9nhXwFB7F4ZP/1/3137372e38352e3138352e302f32342d3234203d3e20323730373837.roa
Signing time:             Thu 04 Apr 2024 04:00:20 +0000
ROA not before:           Thu 04 Apr 2024 03:55:20 +0000
ROA not after:            Thu 03 Apr 2025 04:00:20 +0000
asID:                     270787
IP address blocks:        177.85.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFdeC3zaiW3L2iZ4ZHV9vLU3z6Bw2f7Z9nhXwFB7F4ZP/1/06188C39079C279AEC1E6D62535C4DA2C26ED244.crl
                          rsync://rpki-repo.registro.br/repo/HFdeC3zaiW3L2iZ4ZHV9vLU3z6Bw2f7Z9nhXwFB7F4ZP/1/06188C39079C279AEC1E6D62535C4DA2C26ED244.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06188C39079C279AEC1E6D62535C4DA2C26ED244.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:46:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:93:fb:0c:97:1d:fb:f2:e1:c2:00:39:ac:b1:7e:64:93:2a:3d:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06188C39079C279AEC1E6D62535C4DA2C26ED244
        Validity
            Not Before: Apr  4 03:55:20 2024 GMT
            Not After : Apr  3 04:00:20 2025 GMT
        Subject: CN=8F9D479743657FA8EE01AFFD46043E7C3EEC524B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:11:e2:8d:4e:ce:52:94:f0:03:0e:a9:6b:a3:
                    60:93:b3:33:85:15:35:e9:83:5e:83:7c:2b:f8:a3:
                    58:f5:40:a9:de:44:d4:c3:53:b3:b1:f9:7e:4e:53:
                    d7:5d:a0:d5:a0:c8:6c:84:7c:8b:fb:50:4d:9c:9d:
                    3a:68:a8:4d:14:ea:e0:40:b5:c9:1d:46:4e:a6:0b:
                    75:84:f0:95:41:43:8c:7f:d0:e5:e5:15:69:41:a7:
                    6a:8f:64:29:0b:fc:69:f3:a2:28:f7:32:f8:ac:56:
                    42:b5:9c:89:f6:31:91:e7:68:c7:60:a6:ff:1d:97:
                    8e:55:11:28:e3:3c:0f:6d:e2:0a:c2:38:36:3f:0e:
                    bb:8a:7c:c5:c1:81:41:c8:f0:7f:24:0d:b9:d9:b9:
                    f0:01:11:92:4e:54:cd:e1:e9:fd:d8:ef:7c:15:60:
                    81:47:c5:9b:85:b2:c1:72:11:a7:89:d8:34:e8:0c:
                    ea:e2:5c:52:7c:f3:4b:9f:f4:8b:3c:1f:ca:ff:ea:
                    a6:9d:84:a8:f8:78:65:c3:3d:5a:17:00:34:15:4f:
                    18:59:47:77:b0:ff:e4:3d:ef:19:6d:b0:f8:84:34:
                    aa:3c:a2:38:c2:1b:e9:ff:1c:15:bc:8d:5d:89:43:
                    91:eb:6a:69:a4:de:47:bb:43:7f:4d:1f:52:7b:fe:
                    26:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:9D:47:97:43:65:7F:A8:EE:01:AF:FD:46:04:3E:7C:3E:EC:52:4B
            X509v3 Authority Key Identifier:
                keyid:06:18:8C:39:07:9C:27:9A:EC:1E:6D:62:53:5C:4D:A2:C2:6E:D2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFdeC3zaiW3L2iZ4ZHV9vLU3z6Bw2f7Z9nhXwFB7F4ZP/1/06188C39079C279AEC1E6D62535C4DA2C26ED244.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06188C39079C279AEC1E6D62535C4DA2C26ED244.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFdeC3zaiW3L2iZ4ZHV9vLU3z6Bw2f7Z9nhXwFB7F4ZP/1/3137372e38352e3138352e302f32342d3234203d3e20323730373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:c8:14:a7:30:2c:8d:7d:b4:b3:8a:e0:aa:f5:44:8c:4a:59:
         a5:62:23:86:76:0b:15:21:bf:71:06:e5:ff:92:5c:df:18:9e:
         0c:73:18:b4:8f:7f:50:19:db:52:04:8e:6b:6c:5d:4b:c4:0d:
         79:9b:10:26:c7:dc:5f:15:13:5d:63:f3:30:d6:ff:6c:a5:e1:
         39:de:35:d2:b7:fb:48:14:98:06:12:be:14:17:37:a7:e7:3e:
         1d:29:f6:e6:2c:8d:d6:54:19:b6:4a:45:4c:65:8b:fd:8b:f7:
         0a:35:c7:3b:7e:85:c8:1d:0c:37:01:54:89:68:e5:ee:b5:77:
         c2:cf:c8:6f:0c:dc:87:23:bf:05:b6:f1:e1:f1:b5:e0:1f:64:
         93:79:30:ee:74:f9:77:27:19:f7:39:09:88:fe:5f:8f:6f:32:
         71:9a:cf:10:a6:c6:74:94:65:61:b4:10:8f:aa:68:88:65:bf:
         a6:21:63:ba:bd:bd:3a:0d:73:ff:1f:a8:0e:fb:24:4b:3a:72:
         73:ae:e2:1c:86:64:48:f1:b6:9d:d2:55:63:03:f0:bf:2f:de:
         f8:f6:cd:ca:0d:e7:0b:39:30:69:73:19:4c:fe:2f:17:e4:78:
         da:3a:3c:e8:1d:07:0e:d9:70:e0:1c:50:08:ed:08:25:32:d9:
         49:55:e4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:53 2024 by rpki-client on console-ams.rpki-client.org