Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFdeC3zaiW3L2iZ4ZHV9vLU3z6Bw2f7Z9nhXwFB7F4ZP/1/3137372e38352e3138362e302f32332d3233203d3e20323730373837.roa
File:                     3137372e38352e3138362e302f32332d3233203d3e20323730373837.roa (raw, json)
Hash identifier:          X7gk8d1PVYjV/lD6f537v3vy++61SvWC9c/AtiviD8E=
Subject key identifier:   0D:CD:F8:55:18:BA:B9:48:61:33:E5:D9:E0:AA:6B:02:F4:93:E6:48
Certificate issuer:       /CN=06188C39079C279AEC1E6D62535C4DA2C26ED244
Certificate serial:       783A5FCBD63319091C003723719E0D2006ABD560
Authority key identifier: 06:18:8C:39:07:9C:27:9A:EC:1E:6D:62:53:5C:4D:A2:C2:6E:D2:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06188C39079C279AEC1E6D62535C4DA2C26ED244.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFdeC3zaiW3L2iZ4ZHV9vLU3z6Bw2f7Z9nhXwFB7F4ZP/1/3137372e38352e3138362e302f32332d3233203d3e20323730373837.roa
Signing time:             Thu 04 Apr 2024 04:00:21 +0000
ROA not before:           Thu 04 Apr 2024 03:55:21 +0000
ROA not after:            Thu 03 Apr 2025 04:00:21 +0000
asID:                     270787
IP address blocks:        177.85.186.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFdeC3zaiW3L2iZ4ZHV9vLU3z6Bw2f7Z9nhXwFB7F4ZP/1/06188C39079C279AEC1E6D62535C4DA2C26ED244.crl
                          rsync://rpki-repo.registro.br/repo/HFdeC3zaiW3L2iZ4ZHV9vLU3z6Bw2f7Z9nhXwFB7F4ZP/1/06188C39079C279AEC1E6D62535C4DA2C26ED244.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06188C39079C279AEC1E6D62535C4DA2C26ED244.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:46:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:3a:5f:cb:d6:33:19:09:1c:00:37:23:71:9e:0d:20:06:ab:d5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06188C39079C279AEC1E6D62535C4DA2C26ED244
        Validity
            Not Before: Apr  4 03:55:21 2024 GMT
            Not After : Apr  3 04:00:21 2025 GMT
        Subject: CN=0DCDF85518BAB9486133E5D9E0AA6B02F493E648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:14:57:79:a3:e1:8b:67:54:b0:3c:c5:0f:ad:
                    2a:a5:ff:e3:81:1a:c3:a9:4d:62:8e:e5:b1:ac:7b:
                    90:0e:28:62:10:36:7f:a0:29:0c:29:d0:3c:c3:d2:
                    af:b5:31:ef:ff:87:37:57:26:35:fa:b4:e6:00:92:
                    0d:a6:bb:12:6e:b8:fc:8c:7d:18:3a:05:59:80:4f:
                    2a:3f:02:77:2a:91:b9:73:42:eb:e6:3e:39:f2:6a:
                    72:fd:c7:0e:2f:a5:98:f8:e7:84:25:ae:18:ae:df:
                    ff:bd:4b:ad:46:a4:5a:1c:dd:b5:9f:e9:a2:87:25:
                    d9:b2:17:77:40:be:15:34:80:10:52:4d:4e:d4:42:
                    bc:1a:39:3e:c8:36:a9:8b:f7:e2:95:d7:5e:8c:da:
                    62:10:cf:b8:e3:98:5b:b2:07:20:8d:c1:56:48:55:
                    54:8b:f3:59:59:47:fe:de:c7:19:dd:82:49:16:2e:
                    64:63:f6:32:81:6a:23:66:50:df:a9:8d:0e:15:2a:
                    93:db:56:2d:32:1d:0e:01:8f:f9:8e:62:d8:a1:37:
                    79:86:f7:87:06:5f:f3:c4:f0:cc:f3:6b:08:9f:e8:
                    d0:10:c1:9b:dd:5e:aa:ff:69:90:a8:aa:96:c4:c8:
                    53:cf:fd:9c:2a:1b:d6:05:37:c2:5f:95:6b:0a:44:
                    25:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CD:F8:55:18:BA:B9:48:61:33:E5:D9:E0:AA:6B:02:F4:93:E6:48
            X509v3 Authority Key Identifier:
                keyid:06:18:8C:39:07:9C:27:9A:EC:1E:6D:62:53:5C:4D:A2:C2:6E:D2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFdeC3zaiW3L2iZ4ZHV9vLU3z6Bw2f7Z9nhXwFB7F4ZP/1/06188C39079C279AEC1E6D62535C4DA2C26ED244.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06188C39079C279AEC1E6D62535C4DA2C26ED244.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFdeC3zaiW3L2iZ4ZHV9vLU3z6Bw2f7Z9nhXwFB7F4ZP/1/3137372e38352e3138362e302f32332d3233203d3e20323730373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:49:05:5d:57:57:8b:5f:e5:20:d6:ae:d5:99:74:8f:df:7c:
         a9:92:1a:fb:95:df:bf:5c:41:ed:17:ad:e3:4b:59:22:51:88:
         bf:f8:8d:e9:b0:18:be:a4:7f:73:81:8a:be:f0:23:a0:54:d5:
         67:78:72:b6:f1:39:87:18:d7:e3:ae:c3:ef:d2:18:db:cf:9a:
         93:99:31:98:9f:a7:35:c6:0f:df:ef:6a:66:55:33:6d:5b:83:
         70:be:71:5a:63:ef:36:25:3b:28:68:79:ca:d4:1b:bf:7c:ea:
         e0:15:47:ee:71:98:49:3b:4d:df:db:96:9c:1e:b0:55:e6:45:
         a0:c3:e9:3f:94:c4:fc:05:2c:11:ca:37:1a:e3:16:16:29:cc:
         7d:2c:8d:02:50:90:37:43:6f:a1:f3:65:18:de:eb:70:2e:7f:
         05:b1:80:66:19:5f:29:e1:e5:06:b8:b3:dc:ff:f5:b0:d0:41:
         ef:9f:53:12:c1:c4:fb:c6:97:99:6c:f8:4d:e9:f5:ff:0d:79:
         e4:c4:ea:4a:81:56:e9:63:4b:f5:c2:50:29:6d:97:10:78:f9:
         6e:44:14:4a:f3:12:d9:e5:34:cc:f6:b6:3e:63:9e:33:ba:91:
         6c:6f:6a:4e:be:de:8c:8e:a1:3e:76:7b:39:04:fb:33:d0:be:
         10:01:14:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:03 2024 by rpki-client on console-fra.rpki-client.org