Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e38352e38382e302f32322d3332203d3e20323632373733.roa
File:                     3137372e38352e38382e302f32322d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          vPk3kgGVqirPhPUh49DihaBu/MXo0GtPWIt3oUCCAdY=
Subject key identifier:   59:13:E6:0A:1A:5D:80:D9:37:23:25:C8:21:74:A1:05:7C:89:36:6A
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       354823119967590AE1C9BF3F080383836349566E
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e38352e38382e302f32322d3332203d3e20323632373733.roa
Signing time:             Mon 09 Sep 2024 15:01:55 +0000
ROA not before:           Mon 09 Sep 2024 14:56:55 +0000
ROA not after:            Mon 08 Sep 2025 15:01:55 +0000
asID:                     262773
IP address blocks:        177.85.88.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:48:23:11:99:67:59:0a:e1:c9:bf:3f:08:03:83:83:63:49:56:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Sep  9 14:56:55 2024 GMT
            Not After : Sep  8 15:01:55 2025 GMT
        Subject: CN=5913E60A1A5D80D9372325C82174A1057C89366A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0d:c7:7f:28:63:fe:1d:f7:6a:00:5c:fa:75:
                    b4:71:91:c7:03:5a:4e:11:17:8f:18:8d:34:95:55:
                    c8:05:1d:52:19:ac:22:f4:4a:f5:12:89:60:e4:40:
                    8e:ea:e9:e5:ba:31:9f:04:58:8a:12:01:ca:69:6c:
                    c4:e0:55:1c:ff:25:6d:b4:c8:94:e7:3f:ce:96:f7:
                    16:72:1b:af:e3:f6:2b:b1:e6:d2:73:29:d8:0c:93:
                    4d:33:65:7d:15:b8:19:ba:e0:cf:ca:da:8f:25:62:
                    6f:dd:85:73:a8:1b:57:25:1d:e2:d0:49:ea:3c:92:
                    f6:c8:36:da:88:10:ca:d8:09:72:c1:1e:77:21:b0:
                    95:6d:1d:ae:2e:80:a2:1b:5a:90:73:28:5b:17:8e:
                    e1:5d:e7:7f:ad:0a:90:fe:c1:79:33:e5:e5:41:4f:
                    74:1d:ea:7f:d3:69:7a:4c:1c:05:1d:fe:4f:06:8f:
                    d7:26:a3:8f:0c:4e:5e:12:04:e5:3c:fd:94:64:af:
                    57:b8:04:85:f0:84:9c:77:b4:d2:c2:6c:e5:bd:3d:
                    2f:e3:d6:1e:97:09:5f:b9:5f:47:b6:9d:2e:aa:04:
                    d4:5e:72:77:46:29:48:2b:f0:ba:f4:57:fb:59:d3:
                    e2:15:66:d7:01:3f:24:52:13:7c:ea:c5:34:da:d5:
                    6f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:13:E6:0A:1A:5D:80:D9:37:23:25:C8:21:74:A1:05:7C:89:36:6A
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e38352e38382e302f32322d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:25:95:e7:48:c3:a8:9e:1d:96:1d:8a:22:b6:ec:55:af:b3:
         ab:6e:c7:eb:7f:0a:04:11:5d:9c:09:32:33:5b:5b:f6:94:d0:
         de:84:cc:ac:de:b8:20:f6:a4:35:58:07:04:a1:ee:58:fe:5f:
         5c:ac:18:24:ab:c3:3d:2b:dc:c5:fb:6c:30:71:a2:da:69:4f:
         62:67:67:6d:56:fa:94:b8:43:98:8a:de:f0:41:97:08:da:60:
         67:a9:55:9a:ad:f8:6b:84:82:af:97:eb:cf:44:18:bf:6d:54:
         16:c5:28:98:17:96:12:a0:d5:aa:d7:0f:1b:c6:69:3d:97:bf:
         76:43:82:6b:b6:7a:67:03:40:ac:11:ec:bd:42:f1:b2:e2:a2:
         82:7d:94:a7:3f:a9:2f:9b:b1:5b:d7:9d:ae:4e:f2:3b:1d:58:
         c4:1e:36:7f:75:d3:1c:e0:c0:c6:27:9e:4b:ff:9a:6f:ee:53:
         d8:fa:b6:05:7e:e6:b6:cd:5f:2d:7d:61:94:03:e2:df:05:e2:
         ab:6d:8f:e9:c0:f8:0d:e4:03:0b:72:ba:af:c8:7d:05:a0:6e:
         88:6e:de:49:be:3d:f5:5e:6a:75:39:26:d7:c6:6f:56:19:fe:
         72:65:fd:b7:2b:a5:3f:6d:ff:74:ea:f0:f4:86:4e:7e:69:ce:
         8b:c4:41:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:41 2024 by rpki-client on console-ams.rpki-client.org