Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38342e302f32342d3234203d3e203532363533.roa
File:                     3137372e3232312e38342e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          +vGoTG431a4gmLh9wiz7UqhvvJeJvgk3BHDdv8Qc3AI=
Subject key identifier:   0B:7F:2D:2E:AB:1D:B0:90:ED:86:FD:D1:87:CF:92:59:6E:6C:6C:8A
Certificate issuer:       /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial:       492BC8539254BE51891CCCDF1E88BE9C52BA50D9
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38342e302f32342d3234203d3e203532363533.roa
Signing time:             Wed 03 Apr 2024 23:22:53 +0000
ROA not before:           Wed 03 Apr 2024 23:17:53 +0000
ROA not after:            Wed 02 Apr 2025 23:22:53 +0000
asID:                     52653
IP address blocks:        177.221.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
                          rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:2b:c8:53:92:54:be:51:89:1c:cc:df:1e:88:be:9c:52:ba:50:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
        Validity
            Not Before: Apr  3 23:17:53 2024 GMT
            Not After : Apr  2 23:22:53 2025 GMT
        Subject: CN=0B7F2D2EAB1DB090ED86FDD187CF92596E6C6C8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cb:da:e9:0e:db:a1:74:78:98:5f:75:9d:34:
                    d3:02:06:6c:80:99:d4:e4:81:b8:2c:a6:f5:24:d6:
                    2d:28:27:ab:cd:80:27:0b:00:51:53:16:92:10:f4:
                    5d:c8:fb:fa:37:3e:11:a6:af:f3:6a:66:f4:95:ee:
                    6b:a7:bd:e7:36:a5:2b:0f:b6:66:c0:28:09:08:5a:
                    0f:63:a2:f4:04:2f:e1:db:75:2d:04:d0:c4:32:5f:
                    21:5a:7b:ab:75:ac:51:66:fd:7b:23:02:02:8e:94:
                    39:33:1e:55:ac:28:4f:f0:ec:76:92:9c:cc:c8:59:
                    bd:96:8e:cc:e6:8c:75:6e:bd:bd:f4:a6:77:04:f9:
                    0a:25:ef:13:de:bc:e0:25:33:39:97:4a:9e:b6:a0:
                    0d:29:f0:e6:17:f8:96:44:6f:ea:a1:cd:73:9a:e8:
                    72:e4:2d:ad:3d:83:b9:db:96:55:d8:e9:ed:a1:f0:
                    c9:2a:1a:22:86:a6:04:35:98:dc:3c:24:14:41:b5:
                    40:18:88:10:fd:2f:d9:cc:69:e9:ae:5f:a6:10:d4:
                    8e:2e:2a:27:3f:9e:1f:6d:c4:fb:0e:4c:ea:e9:d9:
                    a6:fe:3a:e3:19:1d:ff:ac:38:56:59:fe:9a:84:a8:
                    96:b9:6b:03:98:e7:16:b4:22:d5:c0:19:e6:7f:2b:
                    34:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:7F:2D:2E:AB:1D:B0:90:ED:86:FD:D1:87:CF:92:59:6E:6C:6C:8A
            X509v3 Authority Key Identifier:
                keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/3137372e3232312e38342e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:c7:42:18:32:4a:04:98:5d:1e:f4:7d:e9:70:10:d1:ea:af:
         a0:6f:3c:d6:e3:2b:b4:ce:7c:73:f1:68:b9:a1:87:57:dc:8a:
         95:69:39:e2:f6:2c:07:d1:33:89:8e:e3:f5:e7:69:ed:8e:a8:
         08:62:25:0f:1b:d6:d1:5d:37:05:96:40:7b:8c:c4:6d:db:ab:
         ee:77:dd:29:77:88:70:5d:59:53:a0:06:1c:b6:39:39:0b:f3:
         3c:f6:9e:fd:c9:0d:66:c6:58:a9:13:1a:ce:e8:42:1d:77:2a:
         96:2c:63:1e:7b:5e:88:ab:61:52:07:bc:c8:cd:dc:52:24:f3:
         fb:52:a4:5a:fa:87:df:52:22:7d:60:41:50:fc:04:c6:64:da:
         a2:c9:d3:ad:bd:f1:2d:ac:b9:ca:88:76:b7:f0:63:e7:38:b5:
         d2:80:81:6b:ae:ee:e2:5b:9e:66:34:49:0e:c8:c7:d4:fc:1a:
         b2:c4:f5:ad:db:e5:d2:f3:06:29:af:65:6a:66:ab:01:ad:0f:
         d8:3f:e2:7a:79:aa:52:d0:04:23:cc:f5:ef:f6:d5:18:dc:aa:
         b1:1d:ea:90:3f:da:bf:5f:e1:b8:95:c6:e2:80:41:91:56:87:
         b3:a5:d1:1d:78:53:24:65:1f:fc:49:5b:56:34:77:0d:1b:90:
         24:07:5c:c4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSSvIU5JUvlGJHMzfHoi+nFK6UNkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDM3NDg0NDFEOUNDN0VFMkE5M0UxNjBCQUIyNzI0REFF
Qjc5OUYzQjAeFw0yNDA0MDMyMzE3NTNaFw0yNTA0MDIyMzIyNTNaMDMxMTAvBgNV
BAMTKDBCN0YyRDJFQUIxREIwOTBFRDg2RkREMTg3Q0Y5MjU5NkU2QzZDOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMy9rpDtuhdHiYX3WdNNMCBmyA
mdTkgbgspvUk1i0oJ6vNgCcLAFFTFpIQ9F3I+/o3PhGmr/NqZvSV7munvec2pSsP
tmbAKAkIWg9jovQEL+HbdS0E0MQyXyFae6t1rFFm/XsjAgKOlDkzHlWsKE/w7HaS
nMzIWb2WjszmjHVuvb30pncE+Qol7xPevOAlMzmXSp62oA0p8OYX+JZEb+qhzXOa
6HLkLa09g7nbllXY6e2h8MkqGiKGpgQ1mNw8JBRBtUAYiBD9L9nMaemuX6YQ1I4u
Kic/nh9txPsOTOrp2ab+OuMZHf+sOFZZ/pqEqJa5awOY5xa0ItXAGeZ/KzS5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUC38tLqsdsJDthv3Rh8+SWW5sbIowHwYDVR0j
BBgwFoAUA3SEQdnMfuKpPhYLqyck2ut5nzswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDRUVVJnQnFtWUp5b1N2QWFDTnh3YzJNZHVuWHF0SGVtNlBwS0RpVzF6
SjYvMS8wMzc0ODQ0MUQ5Q0M3RUUyQTkzRTE2MEJBQjI3MjREQUVCNzk5RjNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzNzQ4NDQxRDlDQzdFRTJB
OTNFMTYwQkFCMjcyNERBRUI3OTlGM0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ0VFVSZ0JxbVlKeW9TdkFhQ054d2MyTWR1blhxdEhlbTZQcEtEaVcxeko2LzEv
MzEzNzM3MmUzMjMyMzEyZTM4MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzYzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsd1UMA0GCSqGSIb3DQEBCwUAA4IBAQBix0IYMkoE
mF0e9H3pcBDR6q+gbzzW4yu0znxz8Wi5oYdX3IqVaTni9iwH0TOJjuP152ntjqgI
YiUPG9bRXTcFlkB7jMRt26vud90pd4hwXVlToAYctjk5C/M89p79yQ1mxlipExrO
6EIddyqWLGMee16Iq2FSB7zIzdxSJPP7UqRa+offUiJ9YEFQ/ATGZNqiydOtvfEt
rLnKiHa38GPnOLXSgIFrru7iW55mNEkOyMfU/BqyxPWt2+XS8wYpr2VqZqsBrQ/Y
P+J6eapS0AQjzPXv9tUY3KqxHeqQP9q/X+G4lcbigEGRVoezpdEdeFMkZR/8SVtW
NHcNG5AkB1zE
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:40 2024 by rpki-client on console-fra.rpki-client.org