Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFdeC3zaiW3L2iZ4ZHV9vLU3z6Bw2f7Z9nhXwFB7F4ZP/1/3137372e38352e3138372e302f32342d3234203d3e20323730373837.roa
File:                     3137372e38352e3138372e302f32342d3234203d3e20323730373837.roa (raw, json)
Hash identifier:          7Ej5r21eEIIIAsVSUdA2VCLz9d/OjSqcG1dvaXYddGg=
Subject key identifier:   25:83:7A:59:6C:46:84:AF:19:A0:DC:83:62:E6:B6:90:DC:87:9A:16
Certificate issuer:       /CN=06188C39079C279AEC1E6D62535C4DA2C26ED244
Certificate serial:       715D87043B411D630614ED06246D83877B429CEC
Authority key identifier: 06:18:8C:39:07:9C:27:9A:EC:1E:6D:62:53:5C:4D:A2:C2:6E:D2:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06188C39079C279AEC1E6D62535C4DA2C26ED244.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFdeC3zaiW3L2iZ4ZHV9vLU3z6Bw2f7Z9nhXwFB7F4ZP/1/3137372e38352e3138372e302f32342d3234203d3e20323730373837.roa
Signing time:             Thu 04 Apr 2024 04:00:21 +0000
ROA not before:           Thu 04 Apr 2024 03:55:21 +0000
ROA not after:            Thu 03 Apr 2025 04:00:21 +0000
asID:                     270787
IP address blocks:        177.85.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFdeC3zaiW3L2iZ4ZHV9vLU3z6Bw2f7Z9nhXwFB7F4ZP/1/06188C39079C279AEC1E6D62535C4DA2C26ED244.crl
                          rsync://rpki-repo.registro.br/repo/HFdeC3zaiW3L2iZ4ZHV9vLU3z6Bw2f7Z9nhXwFB7F4ZP/1/06188C39079C279AEC1E6D62535C4DA2C26ED244.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06188C39079C279AEC1E6D62535C4DA2C26ED244.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:46:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:5d:87:04:3b:41:1d:63:06:14:ed:06:24:6d:83:87:7b:42:9c:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06188C39079C279AEC1E6D62535C4DA2C26ED244
        Validity
            Not Before: Apr  4 03:55:21 2024 GMT
            Not After : Apr  3 04:00:21 2025 GMT
        Subject: CN=25837A596C4684AF19A0DC8362E6B690DC879A16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:31:67:80:67:ca:75:e9:58:a7:c8:d0:a9:4b:
                    19:57:e1:63:d3:7c:67:38:14:25:8e:0f:6e:69:b1:
                    83:9a:04:b0:5c:5b:1f:5b:fc:7f:cf:0e:85:f7:94:
                    dd:fb:51:fa:21:f8:09:63:ca:3b:0b:0f:34:77:f9:
                    2f:fc:31:d9:bc:10:9b:81:e1:67:e1:05:ea:9f:0b:
                    32:27:e2:a8:10:2d:28:c4:a5:58:75:32:e5:a5:08:
                    3d:15:fd:49:66:2e:1d:02:5f:01:80:4a:8a:d7:5f:
                    eb:24:65:90:8d:b4:6d:e3:c0:d8:87:0f:ed:f1:fa:
                    cb:6b:e9:25:29:c9:86:d1:a2:96:2e:dc:09:c6:fb:
                    fb:da:5e:4b:1f:34:5d:ae:3e:a0:b3:a3:5f:e2:e1:
                    9e:ff:86:de:12:c4:20:bb:a9:97:77:93:bd:00:1b:
                    9a:6a:04:76:dc:ac:aa:e4:3b:6a:bc:b8:73:69:f8:
                    57:45:35:e3:34:0a:d1:b6:58:40:ee:a0:da:38:40:
                    aa:e0:b3:7c:e5:cd:79:f1:79:ec:b1:fb:d2:83:92:
                    74:f3:23:78:73:af:ce:40:06:60:98:e5:a7:a9:04:
                    05:71:3d:07:0a:73:42:ba:ae:93:3c:07:2b:c5:a7:
                    d8:c8:bc:2e:eb:53:05:f0:a6:00:71:a0:9a:97:aa:
                    b8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:83:7A:59:6C:46:84:AF:19:A0:DC:83:62:E6:B6:90:DC:87:9A:16
            X509v3 Authority Key Identifier:
                keyid:06:18:8C:39:07:9C:27:9A:EC:1E:6D:62:53:5C:4D:A2:C2:6E:D2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFdeC3zaiW3L2iZ4ZHV9vLU3z6Bw2f7Z9nhXwFB7F4ZP/1/06188C39079C279AEC1E6D62535C4DA2C26ED244.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06188C39079C279AEC1E6D62535C4DA2C26ED244.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFdeC3zaiW3L2iZ4ZHV9vLU3z6Bw2f7Z9nhXwFB7F4ZP/1/3137372e38352e3138372e302f32342d3234203d3e20323730373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:f1:04:66:1a:be:6f:80:59:a6:10:67:90:6d:5d:3b:c9:37:
         80:14:d5:e3:5f:a7:9b:9b:3a:20:7c:83:b6:a0:2a:c6:87:63:
         24:e5:eb:01:75:ec:9d:ea:d7:a2:a7:2f:85:fd:d9:3e:f5:b4:
         e7:e5:e7:07:29:72:ca:cc:1c:95:ea:a3:90:e9:61:cd:b3:46:
         ef:c9:be:4a:dd:d3:d9:c4:50:79:47:4e:c6:81:29:52:f6:fc:
         9d:ca:9c:6f:4e:61:c4:52:34:b4:32:96:a5:e9:54:2b:36:39:
         01:8f:41:2e:24:1a:98:5e:41:24:2e:9a:ba:f4:7e:af:f9:43:
         0e:c6:0a:1c:89:38:64:f2:18:a6:b2:74:e1:08:5f:ae:65:ef:
         14:99:fb:89:4c:cb:57:6e:4a:ee:3d:52:ab:9a:be:d9:8e:73:
         e5:66:4c:70:e3:8a:19:c1:c9:d6:19:ca:58:39:05:97:d3:f5:
         dc:9a:e0:23:d6:19:66:d3:a2:0b:a7:d8:d4:e5:5e:19:a3:1f:
         30:ec:74:6e:0a:18:83:b9:21:5b:51:6b:7b:94:62:8c:b5:c0:
         5e:96:33:82:bd:cc:bc:82:f3:07:ec:81:de:0a:48:ed:67:9d:
         70:d9:17:27:b6:e3:9e:64:08:88:65:08:71:78:aa:fc:f0:08:
         ac:e4:95:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:53 2024 by rpki-client on console-ams.rpki-client.org