Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/3137372e38352e3130382e302f32322d3332203d3e203532373431.roa
File:                     3137372e38352e3130382e302f32322d3332203d3e203532373431.roa (raw, json)
Hash identifier:          F0KuG4uysH++6RqizqpW6ig6cRZNZpAU+UHYv16FJd4=
Subject key identifier:   65:42:CE:C4:0A:B8:A8:EB:32:35:25:32:F0:AB:76:78:72:07:AF:2E
Certificate issuer:       /CN=7FD5C7957E68877AE72AEF66ED2FEA315201BF3E
Certificate serial:       2870CBE850F063174F0559C0956823A8BA06BF49
Authority key identifier: 7F:D5:C7:95:7E:68:87:7A:E7:2A:EF:66:ED:2F:EA:31:52:01:BF:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FD5C7957E68877AE72AEF66ED2FEA315201BF3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/3137372e38352e3130382e302f32322d3332203d3e203532373431.roa
Signing time:             Fri 27 Sep 2024 12:44:48 +0000
ROA not before:           Fri 27 Sep 2024 12:39:48 +0000
ROA not after:            Fri 26 Sep 2025 12:44:48 +0000
asID:                     52741
IP address blocks:        177.85.108.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/7FD5C7957E68877AE72AEF66ED2FEA315201BF3E.crl
                          rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/7FD5C7957E68877AE72AEF66ED2FEA315201BF3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FD5C7957E68877AE72AEF66ED2FEA315201BF3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:70:cb:e8:50:f0:63:17:4f:05:59:c0:95:68:23:a8:ba:06:bf:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FD5C7957E68877AE72AEF66ED2FEA315201BF3E
        Validity
            Not Before: Sep 27 12:39:48 2024 GMT
            Not After : Sep 26 12:44:48 2025 GMT
        Subject: CN=6542CEC40AB8A8EB32352532F0AB76787207AF2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ee:2e:d5:8e:f2:29:5c:71:fa:85:e8:e1:6b:
                    15:bb:68:5d:e7:7f:b0:96:a3:0b:c0:9b:87:49:1e:
                    23:91:3d:f4:3b:fc:a8:17:c4:f5:e6:58:4b:69:68:
                    fd:d8:a6:71:8c:43:ad:ee:c0:63:11:7f:b9:da:d6:
                    0c:33:89:80:ea:cf:43:ea:b7:9d:5f:1f:f9:a9:b1:
                    9d:f2:5e:43:0b:20:ee:e1:db:bb:87:35:04:f6:06:
                    cb:1b:52:49:42:a8:c7:4c:03:a1:1f:5d:6e:1e:7b:
                    0b:23:66:8c:40:7d:aa:a0:68:4e:6c:e4:7e:e7:66:
                    18:b2:58:61:08:b7:46:8b:01:ae:d9:43:7b:a0:3d:
                    df:8d:a6:5d:fe:95:27:1e:7c:6b:7b:f4:35:87:e7:
                    97:22:e4:b5:85:43:37:fb:8a:fd:8d:b3:62:51:a8:
                    cd:09:30:91:3e:3a:2b:09:b6:27:3a:bd:92:0d:69:
                    ab:25:4d:4f:21:f8:40:fd:2b:39:30:31:06:3a:26:
                    71:da:b9:22:35:58:24:e4:ed:36:a4:d5:f5:1c:42:
                    df:64:e9:ff:7f:af:c9:8a:b4:ef:fa:dc:cc:c6:73:
                    a5:ce:6e:30:c3:1a:39:a2:e3:b6:43:ee:79:05:a6:
                    9b:c1:45:98:91:24:a0:d0:c3:06:20:61:5a:99:2d:
                    67:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:42:CE:C4:0A:B8:A8:EB:32:35:25:32:F0:AB:76:78:72:07:AF:2E
            X509v3 Authority Key Identifier:
                keyid:7F:D5:C7:95:7E:68:87:7A:E7:2A:EF:66:ED:2F:EA:31:52:01:BF:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/7FD5C7957E68877AE72AEF66ED2FEA315201BF3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FD5C7957E68877AE72AEF66ED2FEA315201BF3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/3137372e38352e3130382e302f32322d3332203d3e203532373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:02:19:08:78:e9:dd:ad:7d:6c:ab:4a:77:47:95:e7:a9:7e:
         99:5f:74:11:b9:b1:45:54:98:c7:a8:96:c2:cf:8d:69:89:7f:
         3b:8e:60:fe:8b:bc:8c:03:f4:c0:0f:8a:24:62:ee:f4:be:05:
         77:f4:13:8d:e5:c6:e4:08:c9:c3:e2:f1:91:0e:33:78:75:a3:
         0f:7f:60:cf:af:4c:58:27:c1:23:6d:3e:2e:ca:d3:dc:dc:67:
         47:0b:85:2e:e4:4b:c0:0b:54:ca:82:9d:27:a5:f7:35:fb:1a:
         32:90:29:35:3f:1a:07:b1:ff:91:69:97:98:93:00:75:cd:2b:
         b1:5e:da:89:92:29:1b:f1:a5:0a:06:9e:36:fb:71:b6:36:33:
         85:50:40:4f:e6:6d:ad:a5:1a:7a:57:5c:4d:00:21:88:2e:54:
         f8:cc:c6:ac:a0:2b:a5:5f:12:d2:86:b6:e4:85:cf:8f:a6:bf:
         52:e6:50:c6:ba:c7:cd:80:2e:ab:88:c1:2c:fc:82:78:a0:f4:
         af:c3:a3:af:d4:17:dc:2f:59:34:9c:ba:bd:5b:bb:03:3f:0b:
         0d:43:ed:1e:2e:06:0a:ad:64:7b:1b:19:f6:0e:d2:1c:2f:1e:
         ae:f7:9c:e5:26:4f:20:b0:a1:09:b6:42:aa:8e:f9:b8:8a:15:
         f6:16:63:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:59 2024 by rpki-client on console-fra.rpki-client.org