Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/1/3137302e38332e33362e302f32322d3332203d3e20323033.roa
File:                     3137302e38332e33362e302f32322d3332203d3e20323033.roa (raw, json)
Hash identifier:          xDtWlXXVw3pI3X3/eorHC3BodvCWVBmJngwkTnKww+8=
Subject key identifier:   7C:9D:EE:80:F5:05:73:AF:82:F4:9B:8D:FB:1B:2A:16:57:18:9F:03
Certificate issuer:       /CN=C6515BA471C9733A2EE467323C9F6EE88BE098A6
Certificate serial:       2D143A708767A64C72AAB903AFCA34193C247256
Authority key identifier: C6:51:5B:A4:71:C9:73:3A:2E:E4:67:32:3C:9F:6E:E8:8B:E0:98:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6515BA471C9733A2EE467323C9F6EE88BE098A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/1/3137302e38332e33362e302f32322d3332203d3e20323033.roa
Signing time:             Fri 05 Apr 2024 01:03:59 +0000
ROA not before:           Fri 05 Apr 2024 00:58:59 +0000
ROA not after:            Fri 04 Apr 2025 01:03:59 +0000
asID:                     203
IP address blocks:        170.83.36.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/1/C6515BA471C9733A2EE467323C9F6EE88BE098A6.crl
                          rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/1/C6515BA471C9733A2EE467323C9F6EE88BE098A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6515BA471C9733A2EE467323C9F6EE88BE098A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 12:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:14:3a:70:87:67:a6:4c:72:aa:b9:03:af:ca:34:19:3c:24:72:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6515BA471C9733A2EE467323C9F6EE88BE098A6
        Validity
            Not Before: Apr  5 00:58:59 2024 GMT
            Not After : Apr  4 01:03:59 2025 GMT
        Subject: CN=7C9DEE80F50573AF82F49B8DFB1B2A1657189F03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7a:2f:d9:8c:12:b7:91:0e:e6:44:9e:d7:9b:
                    00:c4:2b:07:55:61:5f:69:56:ee:c5:fa:f9:2f:0f:
                    98:04:42:6b:a2:2c:88:f9:6b:e7:9d:52:6d:05:c7:
                    57:1d:44:8b:bb:98:32:d7:c7:dd:11:f2:74:c1:bb:
                    3e:29:00:41:9d:de:fe:2f:46:54:3f:a7:05:4e:0f:
                    7d:29:de:d9:c8:70:9f:75:8a:36:16:a7:97:a1:da:
                    7e:1d:c7:8c:04:f6:f7:5b:31:cf:fc:b7:ed:90:be:
                    cf:b0:0d:b4:a3:be:bf:d2:d3:4d:ad:83:a4:b8:d3:
                    30:84:f0:0a:3e:28:46:98:08:4f:1e:e6:3e:71:13:
                    55:33:13:e6:a0:17:f2:1d:3a:b9:c0:e7:82:5c:f4:
                    29:52:86:af:cc:31:47:4e:b7:48:95:8d:cb:f6:60:
                    26:69:b9:6a:50:ce:f5:b7:c3:e3:98:1d:f0:b3:3d:
                    e7:56:ba:b3:4e:5f:38:85:b9:c8:a5:de:1a:87:2c:
                    83:5c:46:37:48:8e:54:18:0d:9d:26:d5:1e:ba:85:
                    bf:ed:f8:bd:70:9d:70:0d:c8:00:a8:9b:3b:28:54:
                    82:12:98:ed:30:60:d4:67:90:69:5b:81:d1:9b:9a:
                    07:02:2f:d2:89:02:f2:cf:42:6b:a4:61:50:0c:25:
                    3d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:9D:EE:80:F5:05:73:AF:82:F4:9B:8D:FB:1B:2A:16:57:18:9F:03
            X509v3 Authority Key Identifier:
                keyid:C6:51:5B:A4:71:C9:73:3A:2E:E4:67:32:3C:9F:6E:E8:8B:E0:98:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/1/C6515BA471C9733A2EE467323C9F6EE88BE098A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6515BA471C9733A2EE467323C9F6EE88BE098A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/1/3137302e38332e33362e302f32322d3332203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:12:47:f8:f2:32:40:dd:28:52:dc:7f:9c:69:9b:54:11:4a:
         70:7f:be:d5:e6:1e:c7:69:c6:6e:ca:33:46:da:8e:dc:b9:10:
         bc:fb:ed:03:a0:a2:ec:b6:bd:47:dc:d6:0d:14:89:73:a0:74:
         4c:21:0d:86:6b:f1:03:9e:f6:3c:52:82:30:59:e6:48:71:eb:
         c6:74:a5:88:ff:1e:eb:b6:5b:a9:92:fc:02:77:9f:b1:b6:69:
         d2:9c:47:c4:c0:d8:3b:6c:cf:f3:05:2d:8a:70:4e:6c:27:14:
         b8:26:41:0e:4e:57:77:5b:cf:61:db:2f:47:40:5c:28:2b:75:
         2b:c4:d2:24:cc:2f:72:c2:4b:9c:bf:29:41:d8:b9:5f:93:a0:
         0a:21:43:9a:3b:af:98:5f:b9:fc:68:d3:1f:11:4b:da:6c:e8:
         25:65:b0:0b:7d:de:79:05:7a:e9:24:81:1e:d6:ad:0c:5f:f7:
         af:5e:b3:e5:dd:9d:cf:b9:67:65:aa:3a:66:7a:09:50:c9:8f:
         62:4a:3e:6f:16:12:d7:e2:79:22:99:e2:4a:4a:10:a1:ff:04:
         17:01:40:3c:e0:76:14:a7:9a:45:e2:ee:2f:86:6d:e1:56:19:
         43:ab:36:77:f2:4a:84:c7:7b:b4:c0:f0:41:aa:87:57:df:3d:
         69:df:86:54
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIULRQ6cIdnpkxyqrkDr8o0GTwkclYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY1MTVCQTQ3MUM5NzMzQTJFRTQ2NzMyM0M5RjZFRTg4
QkUwOThBNjAeFw0yNDA0MDUwMDU4NTlaFw0yNTA0MDQwMTAzNTlaMDMxMTAvBgNV
BAMTKDdDOURFRTgwRjUwNTczQUY4MkY0OUI4REZCMUIyQTE2NTcxODlGMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ei/ZjBK3kQ7mRJ7XmwDEKwdV
YV9pVu7F+vkvD5gEQmuiLIj5a+edUm0Fx1cdRIu7mDLXx90R8nTBuz4pAEGd3v4v
RlQ/pwVOD30p3tnIcJ91ijYWp5eh2n4dx4wE9vdbMc/8t+2Qvs+wDbSjvr/S002t
g6S40zCE8Ao+KEaYCE8e5j5xE1UzE+agF/IdOrnA54Jc9ClShq/MMUdOt0iVjcv2
YCZpuWpQzvW3w+OYHfCzPedWurNOXziFucil3hqHLINcRjdIjlQYDZ0m1R66hb/t
+L1wnXANyAComzsoVIISmO0wYNRnkGlbgdGbmgcCL9KJAvLPQmukYVAMJT0DAgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQUfJ3ugPUFc6+C9JuN+xsqFlcYnwMwHwYDVR0j
BBgwFoAUxlFbpHHJczou5GcyPJ9u6IvgmKYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM05GN2FIdlZlYVpvM0M1THRmWVFweEFzWFhDTkUyeThZSEx1WnU3SkxZ
cWIvMS9DNjUxNUJBNDcxQzk3MzNBMkVFNDY3MzIzQzlGNkVFODhCRTA5OEE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M2NTE1QkE0NzFDOTczM0Ey
RUU0NjczMjNDOUY2RUU4OEJFMDk4QTYuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCB
kwYIKwYBBQUHMAuGgYZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNORjdhSHZWZWFabzNDNUx0ZllRcHhBc1hYQ05FMnk4WUhMdVp1N0pMWXFiLzEv
MzEzNzMwMmUzODMzMmUzMzM2MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzMDMz
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCqlMkMA0GCSqGSIb3DQEBCwUAA4IBAQBLEkf48jJA3ShS3H+c
aZtUEUpwf77V5h7HacZuyjNG2o7cuRC8++0DoKLstr1H3NYNFIlzoHRMIQ2Ga/ED
nvY8UoIwWeZIcevGdKWI/x7rtlupkvwCd5+xtmnSnEfEwNg7bM/zBS2KcE5sJxS4
JkEOTld3W89h2y9HQFwoK3UrxNIkzC9ywkucvylB2Llfk6AKIUOaO6+YX7n8aNMf
EUvabOglZbALfd55BXrpJIEe1q0MX/evXrPl3Z3PuWdlqjpmeglQyY9iSj5vFhLX
4nkimeJKShCh/wQXAUA84HYUp5pF4u4vhm3hVhlDqzZ38kqEx3u0wPBBqodX3z1p
34ZU
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:08 2024 by rpki-client on console-fra.rpki-client.org