Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/3137372e35322e3234342e302f32322d3332203d3e20323632323835.roa
File:                     3137372e35322e3234342e302f32322d3332203d3e20323632323835.roa (raw, json)
Hash identifier:          eryF+ugxDpK0649B0TAVgFq8GQYJyK0pacP76yfr/V8=
Subject key identifier:   66:59:E0:C8:F7:DF:75:6D:8F:F5:3E:51:66:E4:B1:11:45:30:62:7F
Certificate issuer:       /CN=3D059F9D67F14B6324D19CEDD7A94CED91E5D920
Certificate serial:       1B87191928C030AC103B8A120409907495CAAD23
Authority key identifier: 3D:05:9F:9D:67:F1:4B:63:24:D1:9C:ED:D7:A9:4C:ED:91:E5:D9:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D059F9D67F14B6324D19CEDD7A94CED91E5D920.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/3137372e35322e3234342e302f32322d3332203d3e20323632323835.roa
Signing time:             Thu 06 Jun 2024 18:14:21 +0000
ROA not before:           Thu 06 Jun 2024 18:09:21 +0000
ROA not after:            Thu 05 Jun 2025 18:14:21 +0000
asID:                     262285
IP address blocks:        177.52.244.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/3D059F9D67F14B6324D19CEDD7A94CED91E5D920.crl
                          rsync://rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/3D059F9D67F14B6324D19CEDD7A94CED91E5D920.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D059F9D67F14B6324D19CEDD7A94CED91E5D920.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:87:19:19:28:c0:30:ac:10:3b:8a:12:04:09:90:74:95:ca:ad:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D059F9D67F14B6324D19CEDD7A94CED91E5D920
        Validity
            Not Before: Jun  6 18:09:21 2024 GMT
            Not After : Jun  5 18:14:21 2025 GMT
        Subject: CN=6659E0C8F7DF756D8FF53E5166E4B1114530627F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e6:9a:cd:b2:92:81:9c:e7:c4:c4:96:97:43:
                    b9:8b:dd:96:9e:2c:08:33:09:9b:b4:35:f9:27:f3:
                    f8:39:f6:58:b8:48:ca:c7:32:74:9e:20:84:4a:92:
                    ec:8e:ca:9c:1e:c3:a1:bc:c7:32:ce:88:9c:54:c8:
                    79:3f:aa:71:d6:5d:98:04:d5:39:f6:37:67:b2:54:
                    72:a8:4b:c3:6d:4f:7c:36:92:10:d8:04:59:40:08:
                    66:ec:0f:e0:51:b6:dd:85:3c:41:51:01:30:0c:c0:
                    37:e4:e5:ae:f5:57:8a:a2:fc:74:8f:f0:03:35:42:
                    90:92:a2:53:cc:47:02:dc:58:ad:cc:ea:9b:83:b7:
                    d2:91:6f:5c:4f:88:95:5b:96:fc:0a:c9:50:0d:ee:
                    2d:49:84:6a:ed:69:e5:4b:37:73:70:41:c4:bc:5e:
                    8f:93:9f:2e:40:c7:b7:9e:6f:0c:21:55:fd:c0:ea:
                    c2:ee:b0:73:98:88:b8:2e:a7:7b:63:b4:3b:2e:a2:
                    b9:1b:d7:18:db:35:dc:56:2f:59:df:7d:34:31:5c:
                    2a:79:44:91:d0:28:46:e5:f0:db:cd:e6:37:13:c1:
                    ad:07:a9:7a:64:3b:b8:dd:74:4b:a0:bb:44:f7:f6:
                    45:6b:3f:0d:5e:de:85:5f:94:d6:02:2e:07:5b:61:
                    0a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:59:E0:C8:F7:DF:75:6D:8F:F5:3E:51:66:E4:B1:11:45:30:62:7F
            X509v3 Authority Key Identifier:
                keyid:3D:05:9F:9D:67:F1:4B:63:24:D1:9C:ED:D7:A9:4C:ED:91:E5:D9:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/3D059F9D67F14B6324D19CEDD7A94CED91E5D920.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D059F9D67F14B6324D19CEDD7A94CED91E5D920.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CRkoZdGo79T8JKgVNEhu9N64BDZyqygCXn8C6oREw55/0/3137372e35322e3234342e302f32322d3332203d3e20323632323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:a6:ee:89:90:57:69:05:9b:59:b9:6e:d3:92:9c:66:55:72:
         35:d5:f7:64:00:a4:27:f0:c3:04:b1:c1:62:71:db:dd:d3:1d:
         a6:b5:7f:59:af:2d:23:cd:c4:cf:d0:d7:d0:16:0b:e6:f6:36:
         16:8e:46:5b:13:8a:78:42:0b:40:9d:3f:46:f6:05:67:54:fd:
         a8:9d:0f:9e:03:26:15:5f:4d:cc:cd:ed:4b:ab:96:c0:36:54:
         b7:c0:14:86:f4:11:08:ba:5d:4a:95:3f:cd:37:e4:ac:93:16:
         53:ed:23:74:c4:fc:fe:15:ea:ae:e7:b7:84:42:ec:1d:f9:81:
         41:9f:88:4f:cb:4d:36:ca:71:d5:05:74:51:c0:6b:d1:c3:fa:
         02:e1:f7:71:c2:a0:82:65:6b:45:54:00:37:4f:a2:8d:d4:d3:
         7d:02:f9:7e:61:38:e3:44:91:f9:49:9b:7b:31:71:98:21:21:
         ab:09:07:a5:20:fc:41:32:08:61:af:53:28:3d:4a:ba:75:97:
         8b:be:e4:03:13:5f:52:e1:b0:d7:5a:e2:44:c8:90:58:32:7a:
         46:08:cb:48:59:0a:5b:72:ba:df:f0:b5:e3:5f:c3:3d:00:d9:
         bd:02:ec:9d:4b:8b:7d:c4:13:4e:8c:73:5a:95:4c:90:42:94:
         da:a3:ef:01
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUG4cZGSjAMKwQO4oSBAmQdJXKrSMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0QwNTlGOUQ2N0YxNEI2MzI0RDE5Q0VERDdBOTRDRUQ5
MUU1RDkyMDAeFw0yNDA2MDYxODA5MjFaFw0yNTA2MDUxODE0MjFaMDMxMTAvBgNV
BAMTKDY2NTlFMEM4RjdERjc1NkQ4RkY1M0U1MTY2RTRCMTExNDUzMDYyN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb5prNspKBnOfExJaXQ7mL3Zae
LAgzCZu0Nfkn8/g59li4SMrHMnSeIIRKkuyOypwew6G8xzLOiJxUyHk/qnHWXZgE
1Tn2N2eyVHKoS8NtT3w2khDYBFlACGbsD+BRtt2FPEFRATAMwDfk5a71V4qi/HSP
8AM1QpCSolPMRwLcWK3M6puDt9KRb1xPiJVblvwKyVAN7i1JhGrtaeVLN3NwQcS8
Xo+Tny5Ax7eebwwhVf3A6sLusHOYiLgup3tjtDsuorkb1xjbNdxWL1nffTQxXCp5
RJHQKEbl8NvN5jcTwa0HqXpkO7jddEugu0T39kVrPw1e3oVflNYCLgdbYQqjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZlngyPffdW2P9T5RZuSxEUUwYn8wHwYDVR0j
BBgwFoAUPQWfnWfxS2Mk0Zzt16lM7ZHl2SAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNENSa29aZEdvNzlUOEpLZ1ZORWh1OU42NEJEWnlxeWdDWG44QzZvUkV3
NTUvMC8zRDA1OUY5RDY3RjE0QjYzMjREMTlDRUREN0E5NENFRDkxRTVEOTIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNEMDU5RjlENjdGMTRCNjMy
NEQxOUNFREQ3QTk0Q0VEOTFFNUQ5MjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRDUmtvWmRHbzc5VDhKS2dWTkVodTlONjRCRFp5cXlnQ1huOEM2b1JFdzU1LzAv
MzEzNzM3MmUzNTMyMmUzMjM0MzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzIzMjM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxNPQwDQYJKoZIhvcNAQELBQADggEBAKqm7omQ
V2kFm1m5btOSnGZVcjXV92QApCfwwwSxwWJx293THaa1f1mvLSPNxM/Q19AWC+b2
NhaORlsTinhCC0CdP0b2BWdU/aidD54DJhVfTczN7UurlsA2VLfAFIb0EQi6XUqV
P8035KyTFlPtI3TE/P4V6q7nt4RC7B35gUGfiE/LTTbKcdUFdFHAa9HD+gLh93HC
oIJla0VUADdPoo3U030C+X5hOONEkflJm3sxcZghIasJB6Ug/EEyCGGvUyg9Srp1
l4u+5AMTX1LhsNda4kTIkFgyekYIy0hZCltyut/wteNfwz0A2b0C7J1Li33EE06M
c1qVTJBClNqj7wE=
-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:30 2024 by rpki-client on console-ams.rpki-client.org