Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3137372e38372e32352e302f32342d3234203d3e203238333338.roa
File:                     3137372e38372e32352e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          rJvNJkKrQefiMrXpicpts2z7Vy215N3DOGQSN9cz3c8=
Subject key identifier:   3D:6E:93:E3:0D:C2:CC:40:9A:B4:92:A4:AE:2A:51:F8:BE:99:C9:B4
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       4ABF0596040440497D40B84169DBFDC85008F1F4
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3137372e38372e32352e302f32342d3234203d3e203238333338.roa
Signing time:             Wed 29 May 2024 18:17:17 +0000
ROA not before:           Wed 29 May 2024 18:12:17 +0000
ROA not after:            Wed 28 May 2025 18:17:17 +0000
asID:                     28338
IP address blocks:        177.87.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 18:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:bf:05:96:04:04:40:49:7d:40:b8:41:69:db:fd:c8:50:08:f1:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: May 29 18:12:17 2024 GMT
            Not After : May 28 18:17:17 2025 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:77:2d:86:6e:ab:0d:40:6f:90:91:1b:c8:2e:
                    e2:1e:4a:5d:f7:ac:ee:b2:95:f2:2b:2d:c7:8a:ba:
                    7b:5d:14:5c:c6:1c:e8:64:2e:fa:c9:7a:51:21:c7:
                    7b:f0:8b:e6:bc:3f:64:ae:1b:e7:57:8b:e9:d8:c2:
                    bc:ad:e9:cc:76:01:2f:e6:2b:5d:e0:80:dc:a6:2a:
                    96:57:19:a1:25:cd:7d:2f:41:a4:3c:a6:b7:34:f6:
                    00:55:c6:26:e4:dd:38:f3:43:c0:4a:04:e1:56:31:
                    05:52:29:52:84:98:2e:fb:c8:e6:af:f2:55:0c:70:
                    8e:3f:dd:90:eb:62:5c:0d:18:ce:ec:4c:38:36:90:
                    3b:c9:e6:34:cd:7b:7e:0c:cd:17:49:db:fc:d6:49:
                    4b:bb:86:a3:3c:58:ed:29:7f:c5:08:f1:62:a7:43:
                    f6:7a:8f:e7:ec:ac:5b:d6:1d:e6:48:dd:b3:0e:a9:
                    27:20:88:dc:c0:5c:c1:fa:8d:f3:ff:52:50:b3:e7:
                    3e:ac:8d:c5:9c:6c:e5:43:39:0d:99:65:e9:23:44:
                    0d:70:51:e9:f0:d6:aa:7d:64:b5:37:9c:17:b3:29:
                    66:3f:ca:45:fe:36:2f:e0:2e:69:db:0b:cf:ac:b7:
                    83:2f:83:bd:ac:26:42:4c:49:31:c3:a9:e7:ea:41:
                    a2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:6E:93:E3:0D:C2:CC:40:9A:B4:92:A4:AE:2A:51:F8:BE:99:C9:B4
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/3137372e38372e32352e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:93:b3:3e:a6:31:42:6c:1f:40:4c:1c:76:a6:86:bd:10:31:
         ba:4d:a1:63:9c:92:eb:8e:7d:69:18:d0:fa:bc:3b:d1:6e:be:
         e4:d7:cb:2a:dc:02:18:48:10:60:72:20:3a:0f:fc:7a:31:16:
         02:c2:e8:cb:36:3a:23:e6:9d:ff:16:fb:69:ca:74:ee:54:e7:
         fd:a1:44:c0:18:80:1e:40:f1:0c:db:c5:1c:de:90:d1:0a:0c:
         f3:c4:01:e9:c3:7f:94:87:11:ba:0c:12:01:ad:0b:44:87:ee:
         5a:55:07:2f:7c:db:63:c2:f6:b0:6d:5c:1a:11:3d:d1:f3:a9:
         0d:bb:52:57:fb:ec:54:53:4b:20:90:b7:1d:20:66:b2:f2:97:
         3a:0e:8d:a8:a3:ed:b7:2f:87:90:57:20:ea:9a:59:dc:8a:fa:
         91:7a:9c:71:43:20:b1:08:ba:3a:90:9c:ed:1c:17:19:63:c8:
         77:86:18:21:ff:b3:ff:4a:b4:f2:d2:ca:18:88:74:58:40:b9:
         7b:ae:2d:70:84:0a:c5:18:09:07:06:7f:65:8d:3d:18:e1:be:
         10:c3:2a:22:90:9a:da:50:6d:e8:ae:e3:28:ec:b8:d8:61:df:
         71:f8:46:c8:67:65:92:5a:e2:34:fb:c9:35:24:99:ae:f7:4f:
         20:51:e3:eb
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUSr8FlgQEQEl9QLhBadv9yFAI8fQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdGNjJENTVEQzc1ODg3NUI0OUFEQ0EwRkNEMTE1ODA3
QjJGMUREMTAeFw0yNDA1MjkxODEyMTdaFw0yNTA1MjgxODE3MTdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjg3NzJEODY2RUFCMEQ0MDZG
OTA5MTFCQzgyRUUyMUU0QTVERjdBQ0VFQjI5NUYyMkIyREM3OEFCQTdCNUQxNDVD
QzYxQ0U4NjQyRUZBQzk3QTUxMjFDNzdCRjA4QkU2QkMzRjY0QUUxQkU3NTc4QkU5
RDhDMkJDQURFOUNDNzYwMTJGRTYyQjVERTA4MERDQTYyQTk2NTcxOUExMjVDRDdE
MkY0MUE0M0NBNkI3MzRGNjAwNTVDNjI2RTRERDM4RjM0M0MwNEEwNEUxNTYzMTA1
NTIyOTUyODQ5ODJFRkJDOEU2QUZGMjU1MEM3MDhFM0ZERDkwRUI2MjVDMEQxOENF
RUM0QzM4MzY5MDNCQzlFNjM0Q0Q3QjdFMENDRDE3NDlEQkZDRDY0OTRCQkI4NkEz
M0M1OEVEMjk3RkM1MDhGMTYyQTc0M0Y2N0E4RkU3RUNBQzVCRDYxREU2NDhEREIz
MEVBOTI3MjA4OERDQzA1Q0MxRkE4REYzRkY1MjUwQjNFNzNFQUM4REM1OUM2Q0U1
NDMzOTBEOTk2NUU5MjM0NDBENzA1MUU5RjBENkFBN0Q2NEI1Mzc5QzE3QjMyOTY2
M0ZDQTQ1RkUzNjJGRTAyRTY5REIwQkNGQUNCNzgzMkY4M0JEQUMyNjQyNEM0OTMx
QzNBOUU3RUE0MUEyMEYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuHcthm6rDUBvkJEbyC7iHkpd96zuspXyKy3Hirp7XRRcxhzoZC76
yXpRIcd78IvmvD9krhvnV4vp2MK8renMdgEv5itd4IDcpiqWVxmhJc19L0GkPKa3
NPYAVcYm5N0480PASgThVjEFUilShJgu+8jmr/JVDHCOP92Q62JcDRjO7Ew4NpA7
yeY0zXt+DM0XSdv81klLu4ajPFjtKX/FCPFip0P2eo/n7Kxb1h3mSN2zDqknIIjc
wFzB+o3z/1JQs+c+rI3FnGzlQzkNmWXpI0QNcFHp8NaqfWS1N5wXsylmP8pF/jYv
4C5p2wvPrLeDL4O9rCZCTEkxw6nn6kGiDwIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FD1uk+MNwsxAmrSSpK4qUfi+mcm0MB8GA1UdIwQYMBaAFLf2LVXcdYh1tJrcoPzR
FYB7Lx3RMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRCeDg4RlhlOG41Ujc0
OXBXZ3JrQVMzZGV5cjVtZHl5ZnhCTmlXejV5dnZNLzEvQjdGNjJENTVEQzc1ODg3
NUI0OUFEQ0EwRkNEMTE1ODA3QjJGMUREMS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9CN0Y2MkQ1NURDNzU4ODc1QjQ5QURDQTBGQ0QxMTU4MDdCMkYx
REQxLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80Qng4OEZYZThuNVI3NDlwV2dy
a0FTM2RleXI1bWR5eWZ4Qk5pV3o1eXZ2TS8xLzMxMzczNzJlMzgzNzJlMzIzNTJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzgzMzMzMzgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACxVxkw
DQYJKoZIhvcNAQELBQADggEBAI2Tsz6mMUJsH0BMHHamhr0QMbpNoWOckuuOfWkY
0Pq8O9FuvuTXyyrcAhhIEGByIDoP/HoxFgLC6Ms2OiPmnf8W+2nKdO5U5/2hRMAY
gB5A8QzbxRzekNEKDPPEAenDf5SHEboMEgGtC0SH7lpVBy9822PC9rBtXBoRPdHz
qQ27Ulf77FRTSyCQtx0gZrLylzoOjaij7bcvh5BXIOqaWdyK+pF6nHFDILEIujqQ
nO0cFxljyHeGGCH/s/9KtPLSyhiIdFhAuXuuLXCECsUYCQcGf2WNPRjhvhDDKiKQ
mtpQbeiu4yjsuNhh33H4RshnZZJa4jT7yTUkma73TyBR4+s=
-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:05 2024 by rpki-client on console-ams.rpki-client.org