Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFdeC3zaiW3L2iZ4ZHV9vLU3z6Bw2f7Z9nhXwFB7F4ZP/1/3137372e38352e3138362e302f32342d3234203d3e20323730373837.roa
File:                     3137372e38352e3138362e302f32342d3234203d3e20323730373837.roa (raw, json)
Hash identifier:          cju4aN9hHk7a+l+QIeaZe7AMvOLZjUjfx4CzS3dp2iw=
Subject key identifier:   9D:AD:03:93:7A:64:AA:AD:33:A9:BA:18:E4:F3:F1:DE:E7:2D:84:34
Certificate issuer:       /CN=06188C39079C279AEC1E6D62535C4DA2C26ED244
Certificate serial:       1A8D0BC409A8EB343DD7CAA77E0357476733D474
Authority key identifier: 06:18:8C:39:07:9C:27:9A:EC:1E:6D:62:53:5C:4D:A2:C2:6E:D2:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06188C39079C279AEC1E6D62535C4DA2C26ED244.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFdeC3zaiW3L2iZ4ZHV9vLU3z6Bw2f7Z9nhXwFB7F4ZP/1/3137372e38352e3138362e302f32342d3234203d3e20323730373837.roa
Signing time:             Thu 04 Apr 2024 04:00:21 +0000
ROA not before:           Thu 04 Apr 2024 03:55:21 +0000
ROA not after:            Thu 03 Apr 2025 04:00:21 +0000
asID:                     270787
IP address blocks:        177.85.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFdeC3zaiW3L2iZ4ZHV9vLU3z6Bw2f7Z9nhXwFB7F4ZP/1/06188C39079C279AEC1E6D62535C4DA2C26ED244.crl
                          rsync://rpki-repo.registro.br/repo/HFdeC3zaiW3L2iZ4ZHV9vLU3z6Bw2f7Z9nhXwFB7F4ZP/1/06188C39079C279AEC1E6D62535C4DA2C26ED244.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06188C39079C279AEC1E6D62535C4DA2C26ED244.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:8d:0b:c4:09:a8:eb:34:3d:d7:ca:a7:7e:03:57:47:67:33:d4:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06188C39079C279AEC1E6D62535C4DA2C26ED244
        Validity
            Not Before: Apr  4 03:55:21 2024 GMT
            Not After : Apr  3 04:00:21 2025 GMT
        Subject: CN=9DAD03937A64AAAD33A9BA18E4F3F1DEE72D8434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e1:8d:dd:18:71:d6:8d:56:03:22:07:48:7a:
                    bb:38:b0:1e:e6:a4:06:42:4a:b4:ab:75:2c:2f:a5:
                    b0:77:65:38:b5:64:1a:61:27:20:74:35:bd:2c:ec:
                    f4:1f:ee:19:f5:e7:f9:6a:3e:da:b5:95:6d:cc:4e:
                    de:a9:d3:a5:f9:bb:1e:2f:f6:8f:21:62:d7:0f:f5:
                    5f:7d:6c:90:29:be:de:b7:82:bf:33:71:39:79:d1:
                    6c:cf:cd:bf:7e:68:92:a1:91:05:a7:d8:03:63:17:
                    c5:3a:d3:ff:e0:c4:91:67:8b:31:ba:09:70:a6:18:
                    82:7d:40:4e:48:82:a8:59:06:ac:8d:fb:48:16:7e:
                    9c:ac:90:4e:db:66:5c:75:a3:82:06:98:06:84:62:
                    1c:12:1e:10:1c:e7:71:75:d0:81:16:3f:e3:9a:c2:
                    c1:b2:0a:71:38:5d:92:27:d1:19:08:ee:60:5b:6a:
                    bd:75:8b:52:f5:6a:bb:83:16:9a:3e:80:f4:cf:9e:
                    24:62:fb:3d:b6:a2:01:c3:0f:ab:42:da:ba:61:59:
                    28:c0:11:90:01:1b:8c:36:51:af:5f:a4:74:1b:e5:
                    fc:85:99:47:c7:97:3e:01:74:17:62:4b:f6:bd:9e:
                    4c:c8:f1:67:2c:9c:a4:b1:4c:de:ca:40:d0:ea:af:
                    9d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AD:03:93:7A:64:AA:AD:33:A9:BA:18:E4:F3:F1:DE:E7:2D:84:34
            X509v3 Authority Key Identifier:
                keyid:06:18:8C:39:07:9C:27:9A:EC:1E:6D:62:53:5C:4D:A2:C2:6E:D2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFdeC3zaiW3L2iZ4ZHV9vLU3z6Bw2f7Z9nhXwFB7F4ZP/1/06188C39079C279AEC1E6D62535C4DA2C26ED244.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06188C39079C279AEC1E6D62535C4DA2C26ED244.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFdeC3zaiW3L2iZ4ZHV9vLU3z6Bw2f7Z9nhXwFB7F4ZP/1/3137372e38352e3138362e302f32342d3234203d3e20323730373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:51:bd:88:ba:a6:45:21:85:86:95:ae:36:47:dc:ca:52:d8:
         02:1e:b8:61:88:da:70:6e:de:f1:f3:e7:5a:16:63:cf:ef:ae:
         01:b0:7a:92:06:0c:34:f5:7e:48:1d:92:55:83:3c:51:91:8c:
         86:5c:ac:8d:c1:e2:f2:1c:34:60:71:a5:1e:8b:5a:1e:38:a6:
         17:0f:be:25:9c:65:be:8e:55:99:90:84:2f:3a:45:2b:70:d6:
         28:5e:81:a9:3a:d4:47:a6:76:f6:a5:1d:ad:50:77:b8:de:da:
         34:4d:20:c9:ad:7d:db:16:3b:e7:8f:42:f1:1b:b0:5a:2c:eb:
         c1:50:19:5f:a1:c7:2f:d4:c6:14:20:a7:8d:fe:b6:d9:5d:65:
         fe:85:77:a0:35:ab:13:1f:d8:93:46:d0:81:3b:3f:5e:f2:3f:
         ef:bf:f4:fe:18:44:8f:60:27:7a:46:86:66:00:4e:99:da:9d:
         99:fb:c7:ff:0a:d9:45:90:fe:7a:68:4d:75:9c:05:39:7b:0e:
         b1:18:8a:12:9f:66:52:e8:9c:9c:1e:61:9a:e3:72:68:ab:c2:
         0a:89:69:8f:d6:0e:18:f0:ef:7a:39:b4:1a:7b:25:5d:1b:0c:
         f4:e2:54:be:7b:8b:23:48:66:88:f3:b5:45:3b:8b:d5:ec:23:
         78:fd:6b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:27:05 2024 by rpki-client on console-ams.rpki-client.org