Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/1/3137372e3132352e35362e302f32322d3234203d3e203532363037.roa
File:                     3137372e3132352e35362e302f32322d3234203d3e203532363037.roa (raw, json)
Hash identifier:          E8CQsEsb8QRI2P+Zw7FLcoMIjcuCZdkacva6Yp6KwCQ=
Subject key identifier:   B2:6F:4E:17:08:31:BC:A6:C8:52:57:F3:88:3F:3B:80:2C:CB:C0:F8
Certificate issuer:       /CN=EC37D17C061BE878628F004F6A8613266553C3FB
Certificate serial:       7539D0E576C1C4442E56F56BC50E31038296A114
Authority key identifier: EC:37:D1:7C:06:1B:E8:78:62:8F:00:4F:6A:86:13:26:65:53:C3:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC37D17C061BE878628F004F6A8613266553C3FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/1/3137372e3132352e35362e302f32322d3234203d3e203532363037.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     52607
IP address blocks:        177.125.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/1/EC37D17C061BE878628F004F6A8613266553C3FB.crl
                          rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/1/EC37D17C061BE878628F004F6A8613266553C3FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC37D17C061BE878628F004F6A8613266553C3FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:39:d0:e5:76:c1:c4:44:2e:56:f5:6b:c5:0e:31:03:82:96:a1:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC37D17C061BE878628F004F6A8613266553C3FB
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject: CN=3082010A0282010100B5E5B16F53AF778D1B15CFCCD08E68AE5D34425AD472A6C381AF60E562DEB8A324B445FED2C4E48E0FD11776C872AC0AA4931B02434615B9742500A41806ADB017B778DC48B238D8C5026AF296A6DBD111BAE85D1C58BD334AC68B7CA133A37BB26167F49830A7D124650AA27DB0A74850C1893E03035AC57A55914C791215BA3AB0007F6A3D94073982CDE942C70140F3BC2745CA9DC9DD69665279B7087147784CDF52C1A2A82B6235AF5E0477CCD801CC0134E2D6AA508086D8539E3034259078D9253568291CEE8A62841E536894FB04F6B14A3AB07BBD4B8219E07B785DB20EF190592E8A7DBCBFFE694E5A99C000684CF621394E01B6999AAC3877009D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e5:b1:6f:53:af:77:8d:1b:15:cf:cc:d0:8e:
                    68:ae:5d:34:42:5a:d4:72:a6:c3:81:af:60:e5:62:
                    de:b8:a3:24:b4:45:fe:d2:c4:e4:8e:0f:d1:17:76:
                    c8:72:ac:0a:a4:93:1b:02:43:46:15:b9:74:25:00:
                    a4:18:06:ad:b0:17:b7:78:dc:48:b2:38:d8:c5:02:
                    6a:f2:96:a6:db:d1:11:ba:e8:5d:1c:58:bd:33:4a:
                    c6:8b:7c:a1:33:a3:7b:b2:61:67:f4:98:30:a7:d1:
                    24:65:0a:a2:7d:b0:a7:48:50:c1:89:3e:03:03:5a:
                    c5:7a:55:91:4c:79:12:15:ba:3a:b0:00:7f:6a:3d:
                    94:07:39:82:cd:e9:42:c7:01:40:f3:bc:27:45:ca:
                    9d:c9:dd:69:66:52:79:b7:08:71:47:78:4c:df:52:
                    c1:a2:a8:2b:62:35:af:5e:04:77:cc:d8:01:cc:01:
                    34:e2:d6:aa:50:80:86:d8:53:9e:30:34:25:90:78:
                    d9:25:35:68:29:1c:ee:8a:62:84:1e:53:68:94:fb:
                    04:f6:b1:4a:3a:b0:7b:bd:4b:82:19:e0:7b:78:5d:
                    b2:0e:f1:90:59:2e:8a:7d:bc:bf:fe:69:4e:5a:99:
                    c0:00:68:4c:f6:21:39:4e:01:b6:99:9a:ac:38:77:
                    00:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:6F:4E:17:08:31:BC:A6:C8:52:57:F3:88:3F:3B:80:2C:CB:C0:F8
            X509v3 Authority Key Identifier:
                keyid:EC:37:D1:7C:06:1B:E8:78:62:8F:00:4F:6A:86:13:26:65:53:C3:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/1/EC37D17C061BE878628F004F6A8613266553C3FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC37D17C061BE878628F004F6A8613266553C3FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/1/3137372e3132352e35362e302f32322d3234203d3e203532363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:80:51:fe:75:10:7a:83:b4:b1:d9:c7:76:ea:91:76:fa:6c:
         2a:b6:56:23:44:1a:f4:4e:07:8b:f1:75:24:36:34:8b:38:57:
         81:54:42:37:e2:33:db:30:da:ae:ca:e9:7e:6c:6e:95:8e:8a:
         de:01:7f:a0:66:1f:73:76:ee:20:16:48:e2:0e:50:28:8b:3a:
         fc:0d:ae:3e:d8:22:bf:91:26:6b:aa:8a:f6:17:d0:35:28:af:
         28:81:5b:b6:45:ad:82:cc:a9:d7:33:74:f6:53:3d:1a:44:45:
         4f:26:c6:ff:28:08:e8:bf:25:5e:5f:39:b4:44:dc:5b:db:b8:
         57:94:44:82:2e:a1:c7:30:20:08:4c:ab:79:43:7e:23:22:8e:
         14:75:58:67:c2:f9:a6:d5:f7:b9:a7:62:c3:b1:03:5c:96:13:
         59:de:9c:81:12:9f:b5:5b:b1:c2:9c:45:2d:0b:07:bf:3d:ac:
         ee:43:ca:6e:f1:2c:3b:27:23:4f:dd:73:7b:8f:dc:97:b6:75:
         ca:3f:d5:21:9f:6d:69:81:fd:0f:bc:5e:22:f9:d1:bf:45:55:
         88:a4:ce:ac:50:65:4d:79:ea:a5:a3:ff:8a:a1:e8:5b:aa:bb:
         71:6e:9a:53:ae:5e:b8:00:8d:8e:b4:51:e5:67:93:32:94:3b:
         2c:02:c7:3c
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUdTnQ5XbBxEQuVvVrxQ4xA4KWoRQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMzN0QxN0MwNjFCRTg3ODYyOEYwMDRGNkE4NjEzMjY2
NTUzQzNGQjAeFw0yNDA0MDMxODU1MDBaFw0yNTA0MDMxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjVFNUIxNkY1M0FGNzc4RDFC
MTVDRkNDRDA4RTY4QUU1RDM0NDI1QUQ0NzJBNkMzODFBRjYwRTU2MkRFQjhBMzI0
QjQ0NUZFRDJDNEU0OEUwRkQxMTc3NkM4NzJBQzBBQTQ5MzFCMDI0MzQ2MTVCOTc0
MjUwMEE0MTgwNkFEQjAxN0I3NzhEQzQ4QjIzOEQ4QzUwMjZBRjI5NkE2REJEMTEx
QkFFODVEMUM1OEJEMzM0QUM2OEI3Q0ExMzNBMzdCQjI2MTY3RjQ5ODMwQTdEMTI0
NjUwQUEyN0RCMEE3NDg1MEMxODkzRTAzMDM1QUM1N0E1NTkxNEM3OTEyMTVCQTNB
QjAwMDdGNkEzRDk0MDczOTgyQ0RFOTQyQzcwMTQwRjNCQzI3NDVDQTlEQzlERDY5
NjY1Mjc5QjcwODcxNDc3ODRDREY1MkMxQTJBODJCNjIzNUFGNUUwNDc3Q0NEODAx
Q0MwMTM0RTJENkFBNTA4MDg2RDg1MzlFMzAzNDI1OTA3OEQ5MjUzNTY4MjkxQ0VF
OEE2Mjg0MUU1MzY4OTRGQjA0RjZCMTRBM0FCMDdCQkQ0QjgyMTlFMDdCNzg1REIy
MEVGMTkwNTkyRThBN0RCQ0JGRkU2OTRFNUE5OUMwMDA2ODRDRjYyMTM5NEUwMUI2
OTk5QUFDMzg3NzAwOUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAteWxb1Ovd40bFc/M0I5orl00QlrUcqbDga9g5WLeuKMktEX+0sTk
jg/RF3bIcqwKpJMbAkNGFbl0JQCkGAatsBe3eNxIsjjYxQJq8pam29ERuuhdHFi9
M0rGi3yhM6N7smFn9Jgwp9EkZQqifbCnSFDBiT4DA1rFelWRTHkSFbo6sAB/aj2U
BzmCzelCxwFA87wnRcqdyd1pZlJ5twhxR3hM31LBoqgrYjWvXgR3zNgBzAE04taq
UICG2FOeMDQlkHjZJTVoKRzuimKEHlNolPsE9rFKOrB7vUuCGeB7eF2yDvGQWS6K
fby//mlOWpnAAGhM9iE5TgG2mZqsOHcAnQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FLJvThcIMbymyFJX84g/O4Asy8D4MB8GA1UdIwQYMBaAFOw30XwGG+h4Yo8AT2qG
EyZlU8P7MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRUU21adktSaDdDNWk3
UWE1Sm11Y1NvY2Q1MzNaOXVIbWNjVXBEc2JSVnc2LzEvRUMzN0QxN0MwNjFCRTg3
ODYyOEYwMDRGNkE4NjEzMjY2NTUzQzNGQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9FQzM3RDE3QzA2MUJFODc4NjI4RjAwNEY2QTg2MTMyNjY1NTND
M0ZCLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80VFNtWnZLUmg3QzVpN1FhNUpt
dWNTb2NkNTMzWjl1SG1jY1VwRHNiUlZ3Ni8xLzMxMzczNzJlMzEzMjM1MmUzNTM2
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjM2MzAzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArF9
ODANBgkqhkiG9w0BAQsFAAOCAQEAjoBR/nUQeoO0sdnHduqRdvpsKrZWI0Qa9E4H
i/F1JDY0izhXgVRCN+Iz2zDarsrpfmxulY6K3gF/oGYfc3buIBZI4g5QKIs6/A2u
Ptgiv5Ema6qK9hfQNSivKIFbtkWtgsyp1zN09lM9GkRFTybG/ygI6L8lXl85tETc
W9u4V5REgi6hxzAgCEyreUN+IyKOFHVYZ8L5ptX3uadiw7EDXJYTWd6cgRKftVux
wpxFLQsHvz2s7kPKbvEsOycjT91ze4/cl7Z1yj/VIZ9taYH9D7xeIvnRv0VViKTO
rFBlTXnqpaP/iqHoW6q7cW6aU65euACNjrRR5WeTMpQ7LALHPA==
-----END CERTIFICATE-----
Generated at Sat Jun 29 07:19:13 2024 by rpki-client on console-ams.rpki-client.org