Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38302e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e38302e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          YpU11LkjR3Dj3y0EuRpm1+zGcwR+NZ/lBtKOBMq59Zw=
Subject key identifier:   CB:9C:5D:9A:79:18:63:39:1A:0D:28:C7:CF:DD:AB:7F:49:D7:7E:C9
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       48078684470F7E332098DF207DA2C6BA7CDB853D
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38302e302f32342d3234203d3e203532363533.roa
Signing time:             Wed 03 Apr 2024 23:22:53 +0000
ROA not before:           Wed 03 Apr 2024 23:17:53 +0000
ROA not after:            Wed 02 Apr 2025 23:22:53 +0000
asID:                     52653
IP address blocks:        177.221.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:07:86:84:47:0f:7e:33:20:98:df:20:7d:a2:c6:ba:7c:db:85:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Apr  3 23:17:53 2024 GMT
            Not After : Apr  2 23:22:53 2025 GMT
        Subject: CN=CB9C5D9A791863391A0D28C7CFDDAB7F49D77EC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f7:44:9c:69:4d:a1:29:e7:bd:5a:44:5a:02:
                    08:4c:e8:30:cb:f7:42:71:d9:2f:78:44:82:42:26:
                    a4:db:f0:dd:b1:1e:08:5c:b1:1b:a7:91:b8:0d:e4:
                    79:02:a3:8b:cb:d7:1c:7e:00:b5:58:96:eb:06:11:
                    d7:39:dc:fd:c9:eb:e5:ed:59:cf:86:4f:72:6d:6b:
                    17:91:fb:b5:a0:4d:cc:da:b0:a3:51:21:f9:c7:a3:
                    fd:35:c7:5a:02:87:a9:75:8b:8b:10:02:67:96:fc:
                    7c:af:9e:2b:44:71:63:b9:7f:20:02:cb:02:81:6a:
                    ee:dd:8c:46:cf:20:a1:27:5c:86:2b:c5:2f:e6:5e:
                    eb:19:f7:31:71:3b:9c:25:f4:4e:e5:93:22:7a:3f:
                    8e:26:5b:9c:87:0d:15:70:b2:67:27:47:a6:90:a4:
                    c5:c7:dc:14:ab:67:84:16:c3:08:9d:e8:21:86:df:
                    d9:a9:cb:50:42:9a:8d:ba:d6:4c:79:9c:de:2a:e0:
                    68:54:a8:02:fe:d1:0d:25:b3:84:d5:04:af:c6:ea:
                    98:85:c4:92:98:60:48:25:70:05:b6:ab:14:30:e9:
                    80:bc:9e:64:9e:34:a9:28:17:2a:2a:e1:34:59:35:
                    ac:42:88:d6:1e:aa:a8:a0:7b:a8:27:e9:1d:e5:51:
                    86:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9C:5D:9A:79:18:63:39:1A:0D:28:C7:CF:DD:AB:7F:49:D7:7E:C9
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38302e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:f7:39:13:7f:6f:33:44:54:26:7d:96:26:5f:aa:71:49:a8:
         1a:d5:14:94:8d:13:ad:92:71:8b:6e:40:4e:b8:ca:4e:60:89:
         dd:52:df:05:ef:19:11:e9:cd:a8:61:e8:b5:b5:d5:6a:92:37:
         2d:87:37:1d:ba:8e:0e:77:5d:d8:f1:2d:55:e2:74:55:41:d7:
         b0:f1:d8:d5:d0:09:ba:34:46:dd:44:d2:d3:ca:10:e2:17:36:
         13:34:bd:21:46:91:4e:b3:c2:ab:21:e7:f5:8f:f5:50:97:db:
         4f:4f:e8:27:90:fe:6f:44:fe:0a:41:e9:7a:cd:bb:a4:58:20:
         14:a9:54:51:3a:6f:6d:72:e0:0e:9b:95:aa:a9:bb:c0:c9:59:
         89:00:20:e5:52:4e:bd:3f:e9:bf:ea:8c:2c:27:42:e1:03:ce:
         50:8b:19:60:ac:86:8b:70:ee:39:88:e5:37:59:ed:de:88:87:
         84:c7:97:9a:31:f2:54:8c:99:77:86:51:b0:8e:58:a4:09:cc:
         b6:a3:20:1b:41:8d:d3:93:57:95:27:7d:a5:fd:c2:8d:5e:13:
         3e:1b:ad:6e:2a:23:27:6f:dd:0c:75:95:da:54:5b:13:5f:12:
         99:84:a2:a7:39:93:b1:01:7d:fc:55:22:96:1d:46:2a:7a:28:
         02:da:65:5a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSAeGhEcPfjMgmN8gfaLGunzbhT0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDM3NDg0NDFEOUNDN0VFMkE5M0UxNjBCQUIyNzI0REFF
Qjc5OUYzQjAeFw0yNDA0MDMyMzE3NTNaFw0yNTA0MDIyMzIyNTNaMDMxMTAvBgNV
BAMTKENCOUM1RDlBNzkxODYzMzkxQTBEMjhDN0NGRERBQjdGNDlENzdFQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg90ScaU2hKee9WkRaAghM6DDL
90Jx2S94RIJCJqTb8N2xHghcsRunkbgN5HkCo4vL1xx+ALVYlusGEdc53P3J6+Xt
Wc+GT3JtaxeR+7WgTczasKNRIfnHo/01x1oCh6l1i4sQAmeW/HyvnitEcWO5fyAC
ywKBau7djEbPIKEnXIYrxS/mXusZ9zFxO5wl9E7lkyJ6P44mW5yHDRVwsmcnR6aQ
pMXH3BSrZ4QWwwid6CGG39mpy1BCmo261kx5nN4q4GhUqAL+0Q0ls4TVBK/G6piF
xJKYYEglcAW2qxQw6YC8nmSeNKkoFyoq4TRZNaxCiNYeqqige6gn6R3lUYYXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUy5xdmnkYYzkaDSjHz92rf0nXfskwHwYDVR0j
BBgwFoAUA3SEQdnMfuKpPhYLqyck2ut5nzswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDRUVVJnQnFtWUp5b1N2QWFDTnh3YzJNZHVuWHF0SGVtNlBwS0RpVzF6
SjYvMS8wMzc0ODQ0MUQ5Q0M3RUUyQTkzRTE2MEJBQjI3MjREQUVCNzk5RjNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzNzQ4NDQxRDlDQzdFRTJB
OTNFMTYwQkFCMjcyNERBRUI3OTlGM0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ0VFVSZ0JxbVlKeW9TdkFhQ054d2MyTWR1blhxdEhlbTZQcEtEaVcxeko2LzEv
MzEzNzM3MmUzMjMyMzEyZTM4MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzYzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsd1QMA0GCSqGSIb3DQEBCwUAA4IBAQC29zkTf28z
RFQmfZYmX6pxSaga1RSUjROtknGLbkBOuMpOYIndUt8F7xkR6c2oYei1tdVqkjct
hzcduo4Od13Y8S1V4nRVQdew8djV0Am6NEbdRNLTyhDiFzYTNL0hRpFOs8KrIef1
j/VQl9tPT+gnkP5vRP4KQel6zbukWCAUqVRROm9tcuAOm5WqqbvAyVmJACDlUk69
P+m/6owsJ0LhA85QixlgrIaLcO45iOU3We3eiIeEx5eaMfJUjJl3hlGwjlikCcy2
oyAbQY3Tk1eVJ32l/cKNXhM+G61uKiMnb90MdZXaVFsTXxKZhKKnOZOxAX38VSKW
HUYqeigC2mVa
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:40 2024 by rpki-client on console-fra.rpki-client.org