Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/3137372e31302e3232342e302f32312d3234203d3e20323632383631.roa
File:                     3137372e31302e3232342e302f32312d3234203d3e20323632383631.roa (raw, json)
Hash identifier:          +TTAbTl90Odl8wKm+fTOTzZ5m5bfSuBI9EqXBs2JYxI=
Subject key identifier:   AD:68:35:52:42:FB:27:AC:A7:BF:FA:E3:64:E8:A6:2D:F7:6B:B0:59
Certificate issuer:       /CN=43230BA37049255C04E85C87D9F4BDD3B9313605
Certificate serial:       38178B63DB0063E9F23BFDC0500577896B07B201
Authority key identifier: 43:23:0B:A3:70:49:25:5C:04:E8:5C:87:D9:F4:BD:D3:B9:31:36:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/3137372e31302e3232342e302f32312d3234203d3e20323632383631.roa
Signing time:             Thu 04 Apr 2024 08:22:45 +0000
ROA not before:           Thu 04 Apr 2024 08:17:45 +0000
ROA not after:            Thu 03 Apr 2025 08:22:45 +0000
asID:                     262861
IP address blocks:        177.10.224.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.crl
                          rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 18:53:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:17:8b:63:db:00:63:e9:f2:3b:fd:c0:50:05:77:89:6b:07:b2:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43230BA37049255C04E85C87D9F4BDD3B9313605
        Validity
            Not Before: Apr  4 08:17:45 2024 GMT
            Not After : Apr  3 08:22:45 2025 GMT
        Subject: CN=AD68355242FB27ACA7BFFAE364E8A62DF76BB059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f2:4d:59:4d:c9:9f:5d:96:c6:49:b4:45:18:
                    ef:a7:cb:f2:86:37:fb:97:73:01:48:27:5b:87:ab:
                    3b:e1:cb:93:fa:40:b6:48:0b:47:e4:39:17:7d:28:
                    fb:6d:a0:68:55:db:65:6e:ea:40:ec:fc:fb:38:0c:
                    9c:a7:a3:13:d5:c8:3f:12:d6:53:53:0b:19:7e:8c:
                    8e:52:48:68:4e:3e:dc:3b:32:c6:71:ed:26:36:bb:
                    25:86:2f:4b:6f:cf:93:28:9f:a6:2b:40:dc:7b:d7:
                    8e:da:6e:cc:55:2f:2e:89:eb:36:c5:7d:22:1f:68:
                    8a:18:57:73:c2:a9:ee:97:94:dd:96:e0:53:7f:4d:
                    56:77:27:60:2c:cb:a9:10:34:d6:63:0f:1a:07:22:
                    d0:2a:ae:c9:b5:4b:b5:d0:38:04:f5:7a:5e:ec:86:
                    00:a3:83:6b:1d:f5:47:95:7b:ae:6a:82:84:c7:2d:
                    2f:d4:da:2f:a5:98:76:49:7d:7b:ff:1d:45:8a:71:
                    af:ce:39:3d:d2:f3:dc:16:49:0c:fb:3f:c7:42:5c:
                    7e:08:15:cc:b6:ee:4a:32:d3:c4:a3:06:44:41:a4:
                    6b:70:b5:89:b3:5d:20:58:52:10:21:fe:bb:ce:6c:
                    42:4b:16:ea:cd:53:d4:07:10:d2:78:45:29:8c:8f:
                    a6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:68:35:52:42:FB:27:AC:A7:BF:FA:E3:64:E8:A6:2D:F7:6B:B0:59
            X509v3 Authority Key Identifier:
                keyid:43:23:0B:A3:70:49:25:5C:04:E8:5C:87:D9:F4:BD:D3:B9:31:36:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/3137372e31302e3232342e302f32312d3234203d3e20323632383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1f:50:83:a3:e5:f7:d9:05:6f:d3:7b:3d:24:0f:b1:c0:35:5a:
         b4:e8:33:d6:65:95:dc:f3:15:7a:06:53:95:55:2e:e7:33:48:
         b2:e2:3b:c7:0c:a0:ec:39:b3:3e:3e:c6:30:f0:9b:52:90:7e:
         5e:74:9a:61:34:92:4e:c9:69:00:8c:07:c1:e3:ea:5e:55:9e:
         25:fb:f3:75:2b:cf:74:80:99:e1:59:34:49:99:09:3d:e0:28:
         4c:80:a3:b0:45:54:57:00:31:b8:fc:64:bc:5b:b1:4a:f9:2c:
         05:93:7d:a0:24:ec:77:34:69:a2:e6:e6:ab:41:26:f2:67:f4:
         90:16:d3:20:fc:48:64:b5:f2:c7:be:99:7b:f8:4b:0e:93:39:
         2a:73:6f:95:2a:ae:bd:12:fc:cb:3b:43:49:06:6e:46:ad:c2:
         7a:00:14:24:9e:24:1f:ec:ed:48:a6:3b:6b:fd:70:5d:fb:47:
         74:79:03:6e:2c:16:84:4a:54:d2:e9:14:5e:71:c9:d5:e9:49:
         be:6b:3c:23:16:b5:af:54:f2:6d:01:43:b5:c0:27:5b:f5:b9:
         02:27:f4:de:de:88:3b:6d:09:97:5c:36:cb:94:70:42:d8:d0:
         26:33:f4:e8:dc:69:a9:54:2e:72:75:ba:0a:a1:bd:1e:6a:5b:
         9c:d2:89:b0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOBeLY9sAY+nyO/3AUAV3iWsHsgEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDMyMzBCQTM3MDQ5MjU1QzA0RTg1Qzg3RDlGNEJERDNC
OTMxMzYwNTAeFw0yNDA0MDQwODE3NDVaFw0yNTA0MDMwODIyNDVaMDMxMTAvBgNV
BAMTKEFENjgzNTUyNDJGQjI3QUNBN0JGRkFFMzY0RThBNjJERjc2QkIwNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC78k1ZTcmfXZbGSbRFGO+ny/KG
N/uXcwFIJ1uHqzvhy5P6QLZIC0fkORd9KPttoGhV22Vu6kDs/Ps4DJynoxPVyD8S
1lNTCxl+jI5SSGhOPtw7MsZx7SY2uyWGL0tvz5Mon6YrQNx7147absxVLy6J6zbF
fSIfaIoYV3PCqe6XlN2W4FN/TVZ3J2Asy6kQNNZjDxoHItAqrsm1S7XQOAT1el7s
hgCjg2sd9UeVe65qgoTHLS/U2i+lmHZJfXv/HUWKca/OOT3S89wWSQz7P8dCXH4I
Fcy27koy08SjBkRBpGtwtYmzXSBYUhAh/rvObEJLFurNU9QHENJ4RSmMj6Z7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUrWg1UkL7J6ynv/rjZOimLfdrsFkwHwYDVR0j
BBgwFoAUQyMLo3BJJVwE6FyH2fS907kxNgUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHR3V0Rpa2R2UjFZWWpVTExCemtFMkJCQlFadVdITGdQdHgxTGgyWUpz
cWcvMS80MzIzMEJBMzcwNDkyNTVDMDRFODVDODdEOUY0QkREM0I5MzEzNjA1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzMjMwQkEzNzA0OTI1NUMw
NEU4NUM4N0Q5RjRCREQzQjkzMTM2MDUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h0d1dEaWtkdlIxWVlqVUxMQnprRTJCQkJRWnVXSExnUHR4MUxoMllKc3FnLzEv
MzEzNzM3MmUzMTMwMmUzMjMyMzQyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2
MzIzODM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOxCuAwDQYJKoZIhvcNAQELBQADggEBAB9Qg6Pl
99kFb9N7PSQPscA1WrToM9ZlldzzFXoGU5VVLuczSLLiO8cMoOw5sz4+xjDwm1KQ
fl50mmE0kk7JaQCMB8Hj6l5VniX783Urz3SAmeFZNEmZCT3gKEyAo7BFVFcAMbj8
ZLxbsUr5LAWTfaAk7Hc0aaLm5qtBJvJn9JAW0yD8SGS18se+mXv4Sw6TOSpzb5Uq
rr0S/Ms7Q0kGbkatwnoAFCSeJB/s7UimO2v9cF37R3R5A24sFoRKVNLpFF5xydXp
Sb5rPCMWta9U8m0BQ7XAJ1v1uQIn9N7eiDttCZdcNsuUcELY0CYz9OjcaalULnJ1
ugqhvR5qW5zSibA=
-----END CERTIFICATE-----
Generated at Thu Jun 27 21:50:26 2024 by rpki-client on console-ams.rpki-client.org