Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3J2xwUwG2NAeyVZDX3BkL9Y5CVnSmEm4SeDmQbR7rj5M/0/3133382e35392e3134342e302f32322d3234203d3e203533313037.roa
File:                     3133382e35392e3134342e302f32322d3234203d3e203533313037.roa (raw, json)
Hash identifier:          7b9d8p6kHjeG36YByErD0tarYRopCcg3+gkRMGY2PCQ=
Subject key identifier:   2D:F6:7A:F8:85:15:1E:EE:2D:5A:E8:E6:F9:B0:44:E4:8B:39:14:43
Certificate issuer:       /CN=77D3C2A55296FD0EA1B284CA1DF25C9BE9923F52
Certificate serial:       7DD702465345D7B47EC3023828EE1A65684DDEF4
Authority key identifier: 77:D3:C2:A5:52:96:FD:0E:A1:B2:84:CA:1D:F2:5C:9B:E9:92:3F:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77D3C2A55296FD0EA1B284CA1DF25C9BE9923F52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3J2xwUwG2NAeyVZDX3BkL9Y5CVnSmEm4SeDmQbR7rj5M/0/3133382e35392e3134342e302f32322d3234203d3e203533313037.roa
Signing time:             Fri 09 Aug 2024 19:23:09 +0000
ROA not before:           Fri 09 Aug 2024 19:18:09 +0000
ROA not after:            Fri 08 Aug 2025 19:23:09 +0000
asID:                     53107
IP address blocks:        138.59.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3J2xwUwG2NAeyVZDX3BkL9Y5CVnSmEm4SeDmQbR7rj5M/0/77D3C2A55296FD0EA1B284CA1DF25C9BE9923F52.crl
                          rsync://rpki-repo.registro.br/repo/3J2xwUwG2NAeyVZDX3BkL9Y5CVnSmEm4SeDmQbR7rj5M/0/77D3C2A55296FD0EA1B284CA1DF25C9BE9923F52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77D3C2A55296FD0EA1B284CA1DF25C9BE9923F52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:22:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d7:02:46:53:45:d7:b4:7e:c3:02:38:28:ee:1a:65:68:4d:de:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77D3C2A55296FD0EA1B284CA1DF25C9BE9923F52
        Validity
            Not Before: Aug  9 19:18:09 2024 GMT
            Not After : Aug  8 19:23:09 2025 GMT
        Subject: CN=2DF67AF885151EEE2D5AE8E6F9B044E48B391443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2e:10:94:76:24:79:a5:a6:9e:c0:34:55:46:
                    8f:0a:b3:67:b3:2a:34:9b:af:3e:cf:1d:0f:77:af:
                    d9:32:3c:ab:c4:77:96:a5:97:19:36:e5:6d:96:66:
                    43:ee:b8:49:91:8a:61:3b:cc:a2:48:6f:8b:0e:1e:
                    64:f0:a2:47:c6:58:c5:6e:87:e7:ba:8d:d5:d5:68:
                    89:1e:6b:61:69:65:ee:51:f4:6e:9c:fa:bc:50:c3:
                    5c:0f:fd:a7:a9:2d:ad:14:a4:73:7c:fe:60:2c:08:
                    d0:d3:ae:31:96:90:76:f4:00:98:3c:39:80:95:b5:
                    d4:e0:03:6f:88:99:fe:07:06:f7:e0:5a:4b:c1:69:
                    72:93:67:d2:b0:8f:e4:8d:bb:95:7f:1a:ba:5c:72:
                    47:ac:eb:b4:68:bf:50:9b:8a:9e:e0:7e:7c:bd:16:
                    ef:3e:80:54:97:1f:bf:cf:75:d0:c6:51:05:b6:5c:
                    21:4a:97:f6:ce:6f:b6:74:f7:0b:37:e1:b8:ff:ab:
                    84:fc:b4:19:2a:c8:c2:e9:d6:55:6f:bc:78:37:5d:
                    77:03:f0:9c:28:6c:dd:2b:88:ed:49:64:54:73:00:
                    83:c0:8a:ee:ca:18:16:f8:6a:b0:58:7d:36:d4:e2:
                    84:81:92:fe:0a:7b:e4:6c:e1:06:73:ea:41:35:d0:
                    cc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F6:7A:F8:85:15:1E:EE:2D:5A:E8:E6:F9:B0:44:E4:8B:39:14:43
            X509v3 Authority Key Identifier:
                keyid:77:D3:C2:A5:52:96:FD:0E:A1:B2:84:CA:1D:F2:5C:9B:E9:92:3F:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3J2xwUwG2NAeyVZDX3BkL9Y5CVnSmEm4SeDmQbR7rj5M/0/77D3C2A55296FD0EA1B284CA1DF25C9BE9923F52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77D3C2A55296FD0EA1B284CA1DF25C9BE9923F52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3J2xwUwG2NAeyVZDX3BkL9Y5CVnSmEm4SeDmQbR7rj5M/0/3133382e35392e3134342e302f32322d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:e4:ef:d1:d9:d3:a3:31:64:74:7b:6c:2a:b9:32:97:50:60:
         51:26:6b:93:46:d6:81:b8:17:84:0d:13:6f:73:8f:1c:73:81:
         1b:3b:7f:df:69:5f:cb:15:b1:b2:4b:fe:c5:b6:8b:3b:16:8b:
         11:27:a4:b5:02:d0:33:a2:79:1f:e8:86:23:30:ab:f9:04:c1:
         bd:5a:60:48:64:74:a7:99:9a:91:a0:08:bf:c2:86:58:65:f2:
         e3:c6:dd:06:63:11:2c:c0:bc:09:f8:31:41:e2:8c:a1:f7:98:
         6e:b0:e0:e9:00:88:ee:dc:2a:eb:91:8c:08:26:2b:aa:f8:33:
         32:15:72:ee:50:8a:a6:6d:a7:e8:10:a0:5b:7e:59:01:dd:0e:
         84:f9:85:b7:8e:c9:6f:30:c1:ef:25:06:a5:9e:3d:b7:1c:ea:
         27:a6:90:1a:51:17:00:73:3f:9a:c8:8e:8a:9e:5d:5a:31:e1:
         31:da:c2:dc:f4:32:dd:32:22:3b:ce:93:6d:19:79:70:21:c1:
         91:e8:85:ab:75:98:41:c7:cb:6c:83:98:4a:09:8d:ef:09:f9:
         bc:42:61:6c:5b:7a:b1:30:56:7a:7b:be:56:7f:1d:c4:02:19:
         66:e7:94:f1:60:18:e1:78:d0:c1:ec:29:73:ab:10:d2:50:e2:
         2d:57:76:9e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfdcCRlNF17R+wwI4KO4aZWhN3vQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzdEM0MyQTU1Mjk2RkQwRUExQjI4NENBMURGMjVDOUJF
OTkyM0Y1MjAeFw0yNDA4MDkxOTE4MDlaFw0yNTA4MDgxOTIzMDlaMDMxMTAvBgNV
BAMTKDJERjY3QUY4ODUxNTFFRUUyRDVBRThFNkY5QjA0NEU0OEIzOTE0NDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnLhCUdiR5paaewDRVRo8Ks2ez
KjSbrz7PHQ93r9kyPKvEd5allxk25W2WZkPuuEmRimE7zKJIb4sOHmTwokfGWMVu
h+e6jdXVaIkea2FpZe5R9G6c+rxQw1wP/aepLa0UpHN8/mAsCNDTrjGWkHb0AJg8
OYCVtdTgA2+Imf4HBvfgWkvBaXKTZ9Kwj+SNu5V/Grpcckes67Rov1Cbip7gfny9
Fu8+gFSXH7/PddDGUQW2XCFKl/bOb7Z09ws34bj/q4T8tBkqyMLp1lVvvHg3XXcD
8JwobN0riO1JZFRzAIPAiu7KGBb4arBYfTbU4oSBkv4Ke+Rs4QZz6kE10MyRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQULfZ6+IUVHu4tWujm+bBE5Is5FEMwHwYDVR0j
BBgwFoAUd9PCpVKW/Q6hsoTKHfJcm+mSP1IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0oyeHdVd0cyTkFleVZaRFgzQmtMOVk1Q1ZuU21FbTRTZURtUWJSN3Jq
NU0vMC83N0QzQzJBNTUyOTZGRDBFQTFCMjg0Q0ExREYyNUM5QkU5OTIzRjUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc3RDNDMkE1NTI5NkZEMEVB
MUIyODRDQTFERjI1QzlCRTk5MjNGNTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNKMnh3VXdHMk5BZXlWWkRYM0JrTDlZNUNWblNtRW00U2VEbVFiUjdyajVNLzAv
MzEzMzM4MmUzNTM5MmUzMTM0MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMz
MzEzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCijuQMA0GCSqGSIb3DQEBCwUAA4IBAQBT5O/R2dOj
MWR0e2wquTKXUGBRJmuTRtaBuBeEDRNvc48cc4EbO3/faV/LFbGyS/7Ftos7FosR
J6S1AtAzonkf6IYjMKv5BMG9WmBIZHSnmZqRoAi/woZYZfLjxt0GYxEswLwJ+DFB
4oyh95husODpAIju3CrrkYwIJiuq+DMyFXLuUIqmbafoEKBbflkB3Q6E+YW3jslv
MMHvJQalnj23HOonppAaURcAcz+ayI6Knl1aMeEx2sLc9DLdMiI7zpNtGXlwIcGR
6IWrdZhBx8tsg5hKCY3vCfm8QmFsW3qxMFZ6e75Wfx3EAhlm55TxYBjheNDB7Clz
qxDSUOItV3ae
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:54 2024 by rpki-client on console-ams.rpki-client.org