Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131322e302f32322d3232203d3e203532393332.roa
File:                     3137372e3138352e3131322e302f32322d3232203d3e203532393332.roa (raw, json)
Hash identifier:          Sxrs+8zpCBq2qef2gFsg5DSDeoUMLUQmYY/s1G6Erkc=
Subject key identifier:   BB:46:C1:B1:67:89:1E:B4:72:6E:52:6B:9A:AC:53:95:21:FB:7E:37
Certificate issuer:       /CN=EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C
Certificate serial:       38820206DEC9920152FC8D7A1114158DD7F6A3AC
Authority key identifier: EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131322e302f32322d3232203d3e203532393332.roa
Signing time:             Wed 08 May 2024 18:21:00 +0000
ROA not before:           Wed 08 May 2024 18:16:00 +0000
ROA not after:            Wed 07 May 2025 18:21:00 +0000
asID:                     52932
IP address blocks:        177.185.112.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.crl
                          rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 11:14:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:82:02:06:de:c9:92:01:52:fc:8d:7a:11:14:15:8d:d7:f6:a3:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C
        Validity
            Not Before: May  8 18:16:00 2024 GMT
            Not After : May  7 18:21:00 2025 GMT
        Subject: CN=BB46C1B167891EB4726E526B9AAC539521FB7E37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e0:ed:99:e8:bd:fc:c9:03:37:e2:63:16:33:
                    e7:65:fd:fe:30:d8:77:d2:88:2f:33:1c:0f:2e:af:
                    82:bf:ce:98:09:9e:77:4b:b1:ac:40:4e:1c:93:98:
                    0a:9e:f8:d2:0f:8b:96:7f:bc:e5:79:40:84:b3:e0:
                    6c:e3:54:2b:da:96:10:ca:f7:d1:59:a1:a7:93:ea:
                    a8:48:0e:71:6e:2c:0a:ff:46:81:d8:fb:fa:f9:86:
                    61:3d:49:a8:84:42:2a:aa:be:38:da:f3:62:51:59:
                    e1:ab:66:bb:ae:bb:58:04:15:cc:40:09:1e:7e:47:
                    1c:ef:1c:4c:9c:ce:d3:f1:aa:c1:b1:cb:09:45:1c:
                    27:0a:63:37:3e:da:35:55:ea:c9:74:26:9c:0c:20:
                    7d:e5:40:d4:f2:15:09:7d:13:bd:40:b2:12:ad:41:
                    6a:1a:9c:49:d7:48:99:2a:95:cb:3c:3e:41:2a:9d:
                    e3:f4:24:67:1b:8f:d0:71:f7:09:25:9b:5e:b1:66:
                    9a:95:d4:fb:ae:04:21:a8:da:c1:e4:7f:c9:93:79:
                    3e:2a:84:a2:3d:c6:71:49:ea:f9:cf:16:4f:c6:38:
                    b4:9d:a5:09:7d:8b:0e:32:58:ac:65:ff:3d:f8:43:
                    e5:8e:52:e2:d4:7a:9d:67:2c:41:79:49:0b:2a:65:
                    7c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:46:C1:B1:67:89:1E:B4:72:6E:52:6B:9A:AC:53:95:21:FB:7E:37
            X509v3 Authority Key Identifier:
                keyid:EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131322e302f32322d3232203d3e203532393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:f0:64:f8:3b:75:19:e5:4e:78:22:b7:77:7d:3e:88:a8:bc:
         3a:86:8d:55:4c:89:c8:c4:c3:00:78:cc:5f:c8:99:ec:ac:0d:
         67:23:5b:ae:c0:1d:ba:07:f0:f1:e1:08:cd:19:cd:a1:d2:f8:
         f8:ae:af:27:be:fe:49:fe:8a:3e:af:d7:5b:70:11:0a:43:45:
         9e:65:ee:8b:cd:c0:c0:1f:64:dd:60:6f:46:63:1e:be:a0:56:
         b0:22:4b:dc:65:e8:95:a6:61:c4:a0:b0:be:ef:1b:a3:4d:0f:
         c8:80:53:3a:f8:19:8f:4e:16:67:5a:32:aa:21:c9:f1:a3:ac:
         8b:33:6c:9c:b8:e6:cb:ab:a9:94:0e:cb:f0:71:d0:c7:77:24:
         73:59:57:a3:15:6c:19:f3:49:c7:ab:49:af:ab:76:f3:cf:8d:
         2a:a9:fd:7e:1d:ee:49:12:45:c5:64:d5:39:2c:8e:93:a1:bf:
         29:73:7e:56:9f:2d:b9:ca:be:c5:c0:e6:ff:b1:44:21:4a:09:
         34:d6:3e:83:78:88:01:36:77:d8:75:a5:a3:08:36:bf:53:8a:
         75:13:aa:4d:13:47:9b:1e:f2:67:ad:5f:93:d7:50:e6:b7:fc:
         33:75:40:e8:0d:fb:65:66:c7:7f:d1:ef:04:25:ef:1f:cd:1f:
         13:12:1b:13
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOIICBt7JkgFS/I16ERQVjdf2o6wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUE2QUQyRjVGNUJDRTdFOURDRkY3RjNDM0VFQzRCRTAx
MjBFMUM0QzAeFw0yNDA1MDgxODE2MDBaFw0yNTA1MDcxODIxMDBaMDMxMTAvBgNV
BAMTKEJCNDZDMUIxNjc4OTFFQjQ3MjZFNTI2QjlBQUM1Mzk1MjFGQjdFMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy4O2Z6L38yQM34mMWM+dl/f4w
2HfSiC8zHA8ur4K/zpgJnndLsaxAThyTmAqe+NIPi5Z/vOV5QISz4GzjVCvalhDK
99FZoaeT6qhIDnFuLAr/RoHY+/r5hmE9SaiEQiqqvjja82JRWeGrZruuu1gEFcxA
CR5+RxzvHEycztPxqsGxywlFHCcKYzc+2jVV6sl0JpwMIH3lQNTyFQl9E71AshKt
QWoanEnXSJkqlcs8PkEqneP0JGcbj9Bx9wklm16xZpqV1PuuBCGo2sHkf8mTeT4q
hKI9xnFJ6vnPFk/GOLSdpQl9iw4yWKxl/z34Q+WOUuLUep1nLEF5SQsqZXx5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUu0bBsWeJHrRyblJrmqxTlSH7fjcwHwYDVR0j
BBgwFoAU6mrS9fW85+nc/388PuxL4BIOHEwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHhXY2s2Qm80bVExQnV4QkZiR2JBbVFVWTJ4VW4yYWhkdW01TTJ6ZHpQ
R2QvMC9FQTZBRDJGNUY1QkNFN0U5RENGRjdGM0MzRUVDNEJFMDEyMEUxQzRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBNkFEMkY1RjVCQ0U3RTlE
Q0ZGN0YzQzNFRUM0QkUwMTIwRTFDNEMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR4V2NrNkJvNG1RMUJ1eEJGYkdiQW1RVVkyeFVuMmFoZHVtNU0yemR6UEdkLzAv
MzEzNzM3MmUzMTM4MzUyZTMxMzEzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM1
MzIzOTMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxuXAwDQYJKoZIhvcNAQELBQADggEBAATwZPg7
dRnlTngit3d9PoiovDqGjVVMicjEwwB4zF/ImeysDWcjW67AHboH8PHhCM0ZzaHS
+Piurye+/kn+ij6v11twEQpDRZ5l7ovNwMAfZN1gb0ZjHr6gVrAiS9xl6JWmYcSg
sL7vG6NND8iAUzr4GY9OFmdaMqohyfGjrIszbJy45surqZQOy/Bx0Md3JHNZV6MV
bBnzScerSa+rdvPPjSqp/X4d7kkSRcVk1TksjpOhvylzflafLbnKvsXA5v+xRCFK
CTTWPoN4iAE2d9h1paMINr9TinUTqk0TR5se8metX5PXUOa3/DN1QOgN+2Vmx3/R
7wQl7x/NHxMSGxM=
-----END CERTIFICATE-----
Generated at Sat Jun 15 13:30:48 2024 by rpki-client on console-ams.rpki-client.org