Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/1/3137372e37322e3135362e302f32322d3332203d3e203532383231.roa
File:                     3137372e37322e3135362e302f32322d3332203d3e203532383231.roa (raw, json)
Hash identifier:          UsmNJMkM0SxDwYyq2HRU5y7FaPmFEPQqoTvFTByUrdo=
Subject key identifier:   1F:49:8F:39:83:FE:F7:02:16:CC:06:45:83:13:0E:4F:E7:DF:D8:0C
Certificate issuer:       /CN=AA090686B63C4DDE208B445E0CACD3F4386E8D00
Certificate serial:       0FFA4998C0B835D091E626A9B7BBE9CA24AFD3FE
Authority key identifier: AA:09:06:86:B6:3C:4D:DE:20:8B:44:5E:0C:AC:D3:F4:38:6E:8D:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA090686B63C4DDE208B445E0CACD3F4386E8D00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/1/3137372e37322e3135362e302f32322d3332203d3e203532383231.roa
Signing time:             Fri 05 Apr 2024 04:49:16 +0000
ROA not before:           Fri 05 Apr 2024 04:44:16 +0000
ROA not after:            Fri 04 Apr 2025 04:49:16 +0000
asID:                     52821
IP address blocks:        177.72.156.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/1/AA090686B63C4DDE208B445E0CACD3F4386E8D00.crl
                          rsync://rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/1/AA090686B63C4DDE208B445E0CACD3F4386E8D00.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA090686B63C4DDE208B445E0CACD3F4386E8D00.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:fa:49:98:c0:b8:35:d0:91:e6:26:a9:b7:bb:e9:ca:24:af:d3:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA090686B63C4DDE208B445E0CACD3F4386E8D00
        Validity
            Not Before: Apr  5 04:44:16 2024 GMT
            Not After : Apr  4 04:49:16 2025 GMT
        Subject: CN=1F498F3983FEF70216CC064583130E4FE7DFD80C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a1:27:c2:52:73:a2:0c:f9:0a:37:a3:a0:c3:
                    01:ee:a5:fc:c6:eb:6e:5c:74:81:5d:92:d4:6d:09:
                    b1:5d:fc:95:41:da:70:93:74:8e:59:35:03:bb:fb:
                    7b:b2:6b:a3:60:48:14:bd:05:e6:d4:41:2b:09:bc:
                    7f:e0:a3:57:ed:3e:68:30:c6:cc:81:4f:6d:48:60:
                    9b:09:e9:c0:50:a9:fd:ef:f4:ec:b0:ba:91:b5:4b:
                    c8:74:c0:32:75:74:d9:fe:73:88:34:ef:02:35:74:
                    8c:e2:5d:c4:12:6b:f6:07:29:a6:ae:a7:68:0f:4a:
                    9e:b5:5a:9b:08:3e:eb:fb:f2:e5:56:c8:d9:92:3a:
                    e2:a7:50:7f:d1:cb:c9:c8:57:1c:9f:76:21:ae:2c:
                    52:66:d6:84:f7:7c:a3:96:41:e8:3e:12:9f:0b:b4:
                    57:78:4d:b6:7d:b7:58:de:af:7f:09:e3:f5:44:da:
                    86:43:ab:b0:3c:97:92:57:9b:f1:a3:1c:b3:ec:36:
                    42:2a:bc:b4:91:04:17:b8:1e:e8:7a:90:f9:61:af:
                    b7:55:77:d4:77:a9:e0:97:d2:5f:aa:40:b4:4c:eb:
                    53:c1:d5:3d:41:4b:4b:a0:1b:1b:8b:99:bf:72:8e:
                    95:ca:f5:6f:23:53:05:d0:73:8d:1e:3d:76:a7:b5:
                    43:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:49:8F:39:83:FE:F7:02:16:CC:06:45:83:13:0E:4F:E7:DF:D8:0C
            X509v3 Authority Key Identifier:
                keyid:AA:09:06:86:B6:3C:4D:DE:20:8B:44:5E:0C:AC:D3:F4:38:6E:8D:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/1/AA090686B63C4DDE208B445E0CACD3F4386E8D00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA090686B63C4DDE208B445E0CACD3F4386E8D00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/1/3137372e37322e3135362e302f32322d3332203d3e203532383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:e1:bb:b8:08:d9:b6:db:51:04:e3:69:36:e6:82:cc:11:72:
         ca:da:5e:06:ba:3e:c7:73:15:ad:bc:1a:10:4c:ca:b0:3d:66:
         2a:b2:77:ef:5f:cb:84:76:25:d7:a1:fa:49:55:df:95:7d:63:
         a4:57:09:e7:a1:ae:57:ed:5d:1e:c5:60:4e:28:40:48:7a:81:
         52:04:b9:f6:e4:79:8c:8f:07:77:bd:e9:00:e3:87:0f:10:b6:
         bd:0f:98:e0:8d:22:0c:0f:98:56:47:0f:d8:28:b9:b2:7f:2c:
         00:11:7f:12:fd:40:40:40:d9:c6:70:4c:ea:80:93:94:b0:22:
         64:ca:fc:64:94:cb:2e:6f:2b:d4:2b:66:31:67:13:f1:2e:b0:
         40:87:6e:70:0b:66:4f:65:11:a2:21:eb:d7:15:e8:33:92:cb:
         9a:a3:ed:e7:bb:63:27:72:c3:c7:15:a0:37:78:5b:f1:94:1c:
         b3:95:c0:c1:71:f7:9a:f3:7e:0d:d8:dc:b8:31:eb:11:09:53:
         5e:78:17:e2:46:06:12:0c:5a:9d:ab:54:34:ac:71:79:80:d4:
         df:c7:ef:fd:a9:b7:5e:8e:b5:f2:1d:e6:85:e1:04:04:81:10:
         90:04:3b:db:c7:77:e8:8e:0f:6d:a0:b9:82:6b:f7:4e:3a:08:
         d7:7c:30:70
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUD/pJmMC4NdCR5iapt7vpyiSv0/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUEwOTA2ODZCNjNDNERERTIwOEI0NDVFMENBQ0QzRjQz
ODZFOEQwMDAeFw0yNDA0MDUwNDQ0MTZaFw0yNTA0MDQwNDQ5MTZaMDMxMTAvBgNV
BAMTKDFGNDk4RjM5ODNGRUY3MDIxNkNDMDY0NTgzMTMwRTRGRTdERkQ4MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDoSfCUnOiDPkKN6OgwwHupfzG
625cdIFdktRtCbFd/JVB2nCTdI5ZNQO7+3uya6NgSBS9BebUQSsJvH/go1ftPmgw
xsyBT21IYJsJ6cBQqf3v9OywupG1S8h0wDJ1dNn+c4g07wI1dIziXcQSa/YHKaau
p2gPSp61WpsIPuv78uVWyNmSOuKnUH/Ry8nIVxyfdiGuLFJm1oT3fKOWQeg+Ep8L
tFd4TbZ9t1jer38J4/VE2oZDq7A8l5JXm/GjHLPsNkIqvLSRBBe4Huh6kPlhr7dV
d9R3qeCX0l+qQLRM61PB1T1BS0ugGxuLmb9yjpXK9W8jUwXQc40ePXantUOxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUH0mPOYP+9wIWzAZFgxMOT+ff2AwwHwYDVR0j
BBgwFoAUqgkGhrY8Td4gi0ReDKzT9DhujQAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlNnRFkxaVhWa1VaRGt0dUJoTTZlU2h4Q0tMR3J0VGVWNjFnY0NiUnFi
SmUvMS9BQTA5MDY4NkI2M0M0RERFMjA4QjQ0NUUwQ0FDRDNGNDM4NkU4RDAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBMDkwNjg2QjYzQzREREUy
MDhCNDQ1RTBDQUNEM0Y0Mzg2RThEMDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZTZ0RZMWlYVmtVWkRrdHVCaE02ZVNoeENLTEdydFRlVjYxZ2NDYlJxYkplLzEv
MzEzNzM3MmUzNzMyMmUzMTM1MzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzNTMy
MzgzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsUicMA0GCSqGSIb3DQEBCwUAA4IBAQAW4bu4CNm2
21EE42k25oLMEXLK2l4Guj7HcxWtvBoQTMqwPWYqsnfvX8uEdiXXofpJVd+VfWOk
Vwnnoa5X7V0exWBOKEBIeoFSBLn25HmMjwd3vekA44cPELa9D5jgjSIMD5hWRw/Y
KLmyfywAEX8S/UBAQNnGcEzqgJOUsCJkyvxklMsubyvUK2YxZxPxLrBAh25wC2ZP
ZRGiIevXFegzksuao+3nu2MncsPHFaA3eFvxlByzlcDBcfea834N2Ny4MesRCVNe
eBfiRgYSDFqdq1Q0rHF5gNTfx+/9qbdejrXyHeaF4QQEgRCQBDvbx3fojg9toLmC
a/dOOgjXfDBw
-----END CERTIFICATE-----
Generated at Sat Sep 28 05:42:27 2024 by rpki-client on console-fra.rpki-client.org