Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/3137372e38362e3131362e302f32322d3234203d3e203532353730.roa
File:                     3137372e38362e3131362e302f32322d3234203d3e203532353730.roa (raw, json)
Hash identifier:          CFpu8RQP02K8mfMysBtMeHpJUcGHMZmd7BF/VaU76GQ=
Subject key identifier:   E9:F3:42:A8:95:77:D9:D6:3F:C6:F3:FF:1D:B0:CE:A6:57:0B:E6:4C
Certificate issuer:       /CN=5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9
Certificate serial:       5F92C7A382620C60C13E683D5D8BF12CDF5EDFEB
Authority key identifier: 5F:F5:DC:22:C9:F3:8E:4B:3A:5F:FA:CC:76:89:C6:EB:52:A6:5D:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/3137372e38362e3131362e302f32322d3234203d3e203532353730.roa
Signing time:             Wed 03 Apr 2024 19:11:58 +0000
ROA not before:           Wed 03 Apr 2024 19:06:58 +0000
ROA not after:            Wed 02 Apr 2025 19:11:58 +0000
asID:                     52570
IP address blocks:        177.86.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.crl
                          rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:92:c7:a3:82:62:0c:60:c1:3e:68:3d:5d:8b:f1:2c:df:5e:df:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9
        Validity
            Not Before: Apr  3 19:06:58 2024 GMT
            Not After : Apr  2 19:11:58 2025 GMT
        Subject: CN=E9F342A89577D9D63FC6F3FF1DB0CEA6570BE64C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:26:8c:58:e8:d1:a8:36:81:89:5b:16:07:f7:
                    fc:6c:6b:19:e2:ed:34:77:f9:5b:eb:e3:b0:02:c9:
                    7d:7d:e2:2d:56:2c:cb:7d:a6:ae:b9:e2:bc:0c:44:
                    75:ee:de:3b:fe:39:0c:d4:d5:6e:6e:87:7f:dd:df:
                    48:74:c8:ca:1b:43:2a:76:7f:59:e5:5b:e5:11:19:
                    be:55:eb:c7:63:fd:14:fe:22:df:50:91:b3:6d:9d:
                    a1:7a:08:f1:8e:51:0a:c3:36:49:93:7f:2b:34:f7:
                    a6:40:66:45:c8:2f:3c:bc:dd:58:68:4d:d9:76:60:
                    87:85:15:5d:60:9f:07:bc:66:73:b4:b2:b8:a5:a6:
                    d0:0d:d8:b9:aa:37:a3:69:4b:11:65:a3:02:ce:78:
                    4f:01:6f:33:63:0b:91:a2:07:7e:2a:a5:18:2b:98:
                    de:d6:08:a1:03:b7:3e:43:e3:c8:af:26:b4:22:9e:
                    54:37:0a:bb:66:bd:1e:c9:86:43:74:58:21:8b:e1:
                    31:6b:14:34:90:51:cc:c7:9c:2f:54:ac:b3:bb:ef:
                    54:86:52:92:85:fc:db:9b:58:d4:82:54:eb:0d:0c:
                    0f:00:9a:67:77:51:3e:a0:2c:e8:d5:67:7c:45:80:
                    c5:15:21:ed:16:20:5b:73:f5:f7:d1:de:fe:67:55:
                    74:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F3:42:A8:95:77:D9:D6:3F:C6:F3:FF:1D:B0:CE:A6:57:0B:E6:4C
            X509v3 Authority Key Identifier:
                keyid:5F:F5:DC:22:C9:F3:8E:4B:3A:5F:FA:CC:76:89:C6:EB:52:A6:5D:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FF5DC22C9F38E4B3A5FFACC7689C6EB52A65DB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RuRLLauazzqQd75GiZLitNaQZxmdUq6LDJZj8fqeyd2/1/3137372e38362e3131362e302f32322d3234203d3e203532353730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:3d:19:12:3b:ee:db:43:13:2b:31:c6:d8:d5:27:d6:7b:27:
         96:13:93:ac:ea:a7:4f:84:b0:32:b3:86:c2:93:7c:6a:13:78:
         2e:77:2c:6d:45:da:1f:72:6b:2f:6d:e7:f2:bd:00:82:71:6a:
         99:7d:ba:c9:23:72:bb:c8:81:a1:db:55:2c:0e:5a:6f:c5:51:
         86:e3:ca:bc:b4:2f:8d:3e:d2:e8:74:7f:80:0b:6a:32:97:15:
         63:94:56:f6:16:01:5c:2b:ce:92:0a:f5:ed:29:2f:0d:f8:f9:
         26:65:da:e3:4e:5d:68:0f:01:65:8d:45:26:1a:71:7f:c5:55:
         f9:c2:6d:98:93:43:a5:1a:b4:58:2d:0e:8f:0c:de:bf:e4:02:
         66:3e:9e:5e:11:97:f0:0b:d4:b9:a2:28:fa:0a:cd:53:15:fc:
         ec:26:e9:16:3e:21:cb:b4:bb:08:6d:26:f1:fe:38:4a:b0:bf:
         84:3f:d2:4d:cb:61:a7:0e:8d:c9:4f:e3:0c:a0:86:a6:8b:9f:
         84:3f:01:63:b6:df:7e:72:42:26:78:f7:2b:40:19:40:c7:5e:
         8d:0d:e3:56:eb:46:d6:d7:63:a6:d6:58:75:bc:40:20:5f:a3:
         c4:f7:07:2c:5f:95:a8:72:a4:21:3e:1f:5c:7a:9b:7d:ae:44:
         61:d1:eb:52
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUX5LHo4JiDGDBPmg9XYvxLN9e3+swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZGNURDMjJDOUYzOEU0QjNBNUZGQUNDNzY4OUM2RUI1
MkE2NURCOTAeFw0yNDA0MDMxOTA2NThaFw0yNTA0MDIxOTExNThaMDMxMTAvBgNV
BAMTKEU5RjM0MkE4OTU3N0Q5RDYzRkM2RjNGRjFEQjBDRUE2NTcwQkU2NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHJoxY6NGoNoGJWxYH9/xsaxni
7TR3+Vvr47ACyX194i1WLMt9pq654rwMRHXu3jv+OQzU1W5uh3/d30h0yMobQyp2
f1nlW+URGb5V68dj/RT+It9QkbNtnaF6CPGOUQrDNkmTfys096ZAZkXILzy83Vho
Tdl2YIeFFV1gnwe8ZnO0srilptAN2LmqN6NpSxFlowLOeE8BbzNjC5GiB34qpRgr
mN7WCKEDtz5D48ivJrQinlQ3CrtmvR7JhkN0WCGL4TFrFDSQUczHnC9UrLO771SG
UpKF/NubWNSCVOsNDA8Ammd3UT6gLOjVZ3xFgMUVIe0WIFtz9ffR3v5nVXSJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU6fNCqJV32dY/xvP/HbDOplcL5kwwHwYDVR0j
BBgwFoAUX/XcIsnzjks6X/rMdonG61KmXbkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1J1UkxMYXVhenpxUWQ3NUdpWkxpdE5hUVp4bWRVcTZMREpaajhmcWV5
ZDIvMS81RkY1REMyMkM5RjM4RTRCM0E1RkZBQ0M3Njg5QzZFQjUyQTY1REI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVGRjVEQzIyQzlGMzhFNEIz
QTVGRkFDQzc2ODlDNkVCNTJBNjVEQjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNSdVJMTGF1YXp6cVFkNzVHaVpMaXROYVFaeG1kVXE2TERKWmo4ZnFleWQyLzEv
MzEzNzM3MmUzODM2MmUzMTMxMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMy
MzUzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsVZ0MA0GCSqGSIb3DQEBCwUAA4IBAQBdPRkSO+7b
QxMrMcbY1SfWeyeWE5Os6qdPhLAys4bCk3xqE3gudyxtRdofcmsvbefyvQCCcWqZ
fbrJI3K7yIGh21UsDlpvxVGG48q8tC+NPtLodH+AC2oylxVjlFb2FgFcK86SCvXt
KS8N+PkmZdrjTl1oDwFljUUmGnF/xVX5wm2Yk0OlGrRYLQ6PDN6/5AJmPp5eEZfw
C9S5oij6Cs1TFfzsJukWPiHLtLsIbSbx/jhKsL+EP9JNy2GnDo3JT+MMoIami5+E
PwFjtt9+ckImePcrQBlAx16NDeNW60bW12Om1lh1vEAgX6PE9wcsX5WocqQhPh9c
ept9rkRh0etS
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:35 2024 by rpki-client on console-ams.rpki-client.org