Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/3137372e37322e3232342e302f32312d3234203d3e203238323833.roa
File:                     3137372e37322e3232342e302f32312d3234203d3e203238323833.roa (raw, json)
Hash identifier:          f9VdtptXbq6lym9bXBIHjG1eEzsCn//EsXP7zppa0dw=
Subject key identifier:   FF:B1:8F:72:A5:FE:6B:C1:1F:EC:75:26:56:84:0D:2F:F2:3B:D0:E5
Certificate issuer:       /CN=A690240C3E88B330B9BD0B91791F519DB5BE8C59
Certificate serial:       42253ADA908DBB3BCD5C576F2F1E89E5D8BF4F36
Authority key identifier: A6:90:24:0C:3E:88:B3:30:B9:BD:0B:91:79:1F:51:9D:B5:BE:8C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/3137372e37322e3232342e302f32312d3234203d3e203238323833.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     28283
IP address blocks:        177.72.224.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.crl
                          rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:25:3a:da:90:8d:bb:3b:cd:5c:57:6f:2f:1e:89:e5:d8:bf:4f:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A690240C3E88B330B9BD0B91791F519DB5BE8C59
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e8:1e:bf:5e:4b:b4:f9:10:1a:4a:86:31:dd:
                    ff:23:82:18:5d:de:84:65:df:19:a6:6c:c6:64:8f:
                    0c:67:bb:2f:15:50:69:d6:44:ea:69:76:c0:a5:39:
                    6a:c1:ed:59:66:9d:78:2e:cf:ab:f1:b9:0e:3b:dd:
                    15:18:4a:8f:56:93:94:53:6f:3d:b4:63:f9:b0:fd:
                    1b:b6:8a:b4:2c:aa:73:76:df:23:aa:e7:dc:b2:b4:
                    4c:a6:a8:92:0b:29:00:5d:9d:d8:50:cf:a2:6b:55:
                    79:04:97:12:81:5c:8e:8e:11:07:40:68:e1:8c:6f:
                    7b:ff:20:1c:4a:69:9a:79:5c:de:54:fc:4a:7a:d4:
                    42:ed:cf:38:a8:57:c6:85:35:fd:43:4b:7a:eb:94:
                    f1:5f:3b:3f:dc:b2:0f:bd:e6:b4:8a:1f:c5:ca:33:
                    1b:6e:75:26:16:76:cf:12:38:80:7f:17:8b:cd:93:
                    0d:70:3f:25:a7:90:4d:44:dd:44:ee:13:e9:e0:cd:
                    9a:74:40:c6:48:ef:c2:79:ff:53:99:5d:f0:39:fe:
                    e9:22:ef:55:6a:02:66:4c:2d:80:f0:92:eb:57:91:
                    db:cf:94:9e:7b:7d:37:38:a3:a0:2f:40:89:f3:4c:
                    a5:aa:65:f4:7c:33:98:a3:cb:41:e2:f0:67:30:2c:
                    65:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B1:8F:72:A5:FE:6B:C1:1F:EC:75:26:56:84:0D:2F:F2:3B:D0:E5
            X509v3 Authority Key Identifier:
                keyid:A6:90:24:0C:3E:88:B3:30:B9:BD:0B:91:79:1F:51:9D:B5:BE:8C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/3137372e37322e3232342e302f32312d3234203d3e203238323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7a:ac:c7:90:f1:1d:2a:38:9e:7b:4b:b1:89:95:2f:45:59:ce:
         b2:f7:19:ba:c7:cd:b8:24:8b:ab:12:90:d6:e5:b2:74:25:3b:
         ca:ad:76:11:23:aa:0a:3a:7a:ad:9e:cb:1e:ad:ec:81:7f:16:
         bd:60:84:bd:d7:a1:7e:bd:05:00:35:7a:7c:78:d1:16:ce:14:
         2b:f5:97:e3:7a:cf:e5:d0:d3:22:61:20:4b:fc:7a:d2:70:53:
         5c:c1:4b:9d:47:47:47:ab:15:39:f1:26:31:24:be:c7:3e:32:
         12:4f:70:f9:2f:8d:b6:dd:6d:87:f4:08:8b:59:81:f5:a6:4c:
         51:30:f5:7f:8a:9f:6e:b5:45:c2:06:c8:2b:c2:cc:7f:ab:28:
         7b:bd:b7:74:7e:db:bf:15:b1:87:07:3f:b4:c3:2b:3e:71:30:
         de:23:85:62:29:1e:85:be:97:41:87:51:c7:73:2e:0d:3c:e0:
         43:57:db:a6:07:33:15:97:0e:1b:ff:31:cf:14:d7:01:07:38:
         a9:7e:6d:30:9f:72:ff:04:4f:bd:97:7e:01:ab:d1:7b:f6:63:
         02:c2:27:24:6e:93:6c:f7:8f:c2:89:42:59:47:26:ea:5a:8e:
         08:f9:03:cc:6b:dd:1f:a2:34:50:d8:31:ae:5f:2f:c9:cc:c9:
         6a:0e:8c:b4
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUQiU62pCNuzvNXFdvLx6J5di/TzYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTY5MDI0MEMzRTg4QjMzMEI5QkQwQjkxNzkxRjUxOURC
NUJFOEM1OTAeFw0yNDA0MDMxODU1MDFaFw0yNTA0MDMxOTAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0NFODFFQkY1RTRCQjRGOTEw
MUE0QTg2MzFEREZGMjM4MjE4NURERTg0NjVERjE5QTY2Q0M2NjQ4RjBDNjdCQjJG
MTU1MDY5RDY0NEVBNjk3NkMwQTUzOTZBQzFFRDU5NjY5RDc4MkVDRkFCRjFCOTBF
M0JERDE1MTg0QThGNTY5Mzk0NTM2RjNEQjQ2M0Y5QjBGRDFCQjY4QUI0MkNBQTcz
NzZERjIzQUFFN0RDQjJCNDRDQTZBODkyMEIyOTAwNUQ5REQ4NTBDRkEyNkI1NTc5
MDQ5NzEyODE1QzhFOEUxMTA3NDA2OEUxOEM2RjdCRkYyMDFDNEE2OTlBNzk1Q0RF
NTRGQzRBN0FENDQyRURDRjM4QTg1N0M2ODUzNUZENDM0QjdBRUI5NEYxNUYzQjNG
RENCMjBGQkRFNkI0OEExRkM1Q0EzMzFCNkU3NTI2MTY3NkNGMTIzODgwN0YxNzhC
Q0Q5MzBENzAzRjI1QTc5MDRENDRERDQ0RUUxM0U5RTBDRDlBNzQ0MEM2NDhFRkMy
NzlGRjUzOTk1REYwMzlGRUU5MjJFRjU1NkEwMjY2NEMyRDgwRjA5MkVCNTc5MURC
Q0Y5NDlFN0I3RDM3MzhBM0EwMkY0MDg5RjM0Q0E1QUE2NUY0N0MzMzk4QTNDQjQx
RTJGMDY3MzAyQzY1OUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzOgev15LtPkQGkqGMd3/I4IYXd6EZd8ZpmzGZI8MZ7svFVBp1kTq
aXbApTlqwe1ZZp14Ls+r8bkOO90VGEqPVpOUU289tGP5sP0btoq0LKpzdt8jqufc
srRMpqiSCykAXZ3YUM+ia1V5BJcSgVyOjhEHQGjhjG97/yAcSmmaeVzeVPxKetRC
7c84qFfGhTX9Q0t665TxXzs/3LIPvea0ih/FyjMbbnUmFnbPEjiAfxeLzZMNcD8l
p5BNRN1E7hPp4M2adEDGSO/Cef9TmV3wOf7pIu9VagJmTC2A8JLrV5Hbz5See303
OKOgL0CJ80ylqmX0fDOYo8tB4vBnMCxlmwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FP+xj3Kl/mvBH+x1JlaEDS/yO9DlMB8GA1UdIwQYMBaAFKaQJAw+iLMwub0LkXkf
UZ21voxZMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNyY2c0cTExRTdXQVFL
cVRyTWVBOFFrYlc5bU5MdTdad3h6dmlDakxuZkZ2LzEvQTY5MDI0MEMzRTg4QjMz
MEI5QkQwQjkxNzkxRjUxOURCNUJFOEM1OS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BNjkwMjQwQzNFODhCMzMwQjlCRDBCOTE3OTFGNTE5REI1QkU4
QzU5LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zcmNnNHExMUU3V0FRS3FUck1l
QThRa2JXOW1OTHU3Wnd4enZpQ2pMbmZGdi8xLzMxMzczNzJlMzczMjJlMzIzMjM0
MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzODMyMzgzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA7FI
4DANBgkqhkiG9w0BAQsFAAOCAQEAeqzHkPEdKjiee0uxiZUvRVnOsvcZusfNuCSL
qxKQ1uWydCU7yq12ESOqCjp6rZ7LHq3sgX8WvWCEvdehfr0FADV6fHjRFs4UK/WX
43rP5dDTImEgS/x60nBTXMFLnUdHR6sVOfEmMSS+xz4yEk9w+S+Ntt1th/QIi1mB
9aZMUTD1f4qfbrVFwgbIK8LMf6soe723dH7bvxWxhwc/tMMrPnEw3iOFYikehb6X
QYdRx3MuDTzgQ1fbpgczFZcOG/8xzxTXAQc4qX5tMJ9y/wRPvZd+AavRe/ZjAsIn
JG6TbPePwolCWUcm6lqOCPkDzGvdH6I0UNgxrl8vyczJag6MtA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:35 2024 by rpki-client on console-ams.rpki-client.org