Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/3137372e38352e382e302f32342d3234203d3e20323731323633.roa
File:                     3137372e38352e382e302f32342d3234203d3e20323731323633.roa (raw, json)
Hash identifier:          VIpqoV4b2vD0srnJ6FqJIt5JJ3bwq2AvgXbExdi7NQQ=
Subject key identifier:   88:7A:BC:6A:16:4E:47:DB:F5:30:4C:22:F6:91:C7:AD:AB:67:B5:EB
Certificate issuer:       /CN=6A3922C63D251D52E98CA62A1651A24AE3DC8026
Certificate serial:       357193042D227205B30ADB5DB3C477748ECE7902
Authority key identifier: 6A:39:22:C6:3D:25:1D:52:E9:8C:A6:2A:16:51:A2:4A:E3:DC:80:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A3922C63D251D52E98CA62A1651A24AE3DC8026.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/3137372e38352e382e302f32342d3234203d3e20323731323633.roa
Signing time:             Mon 13 May 2024 20:02:47 +0000
ROA not before:           Mon 13 May 2024 19:57:47 +0000
ROA not after:            Mon 12 May 2025 20:02:47 +0000
asID:                     271263
IP address blocks:        177.85.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/6A3922C63D251D52E98CA62A1651A24AE3DC8026.crl
                          rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/6A3922C63D251D52E98CA62A1651A24AE3DC8026.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A3922C63D251D52E98CA62A1651A24AE3DC8026.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:71:93:04:2d:22:72:05:b3:0a:db:5d:b3:c4:77:74:8e:ce:79:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A3922C63D251D52E98CA62A1651A24AE3DC8026
        Validity
            Not Before: May 13 19:57:47 2024 GMT
            Not After : May 12 20:02:47 2025 GMT
        Subject: CN=887ABC6A164E47DBF5304C22F691C7ADAB67B5EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:66:6c:70:92:ca:e1:4e:3b:8a:3e:80:76:63:
                    ce:ff:39:13:e7:b8:59:df:2c:5f:ca:01:95:0a:26:
                    9e:36:ba:e9:7a:81:2e:a0:b0:a2:06:19:af:d1:af:
                    c9:89:d0:b2:2f:df:51:95:87:11:e0:b0:1b:35:46:
                    ce:bd:45:92:2a:49:02:9a:ab:7e:d1:eb:56:6e:b6:
                    76:e4:a1:a2:07:b1:fe:b3:47:aa:f9:46:f2:d7:72:
                    e5:ff:c5:81:7e:ee:60:23:df:60:3b:03:95:82:18:
                    cd:f7:0a:f1:ee:51:a4:33:a3:6c:c4:11:93:08:ae:
                    b1:25:45:7b:7a:6b:dd:4e:4f:80:c8:96:41:a6:3b:
                    08:70:21:2a:13:3a:9b:1f:1c:6e:e8:a7:08:13:2a:
                    bc:91:ef:ec:c5:c7:de:bb:33:aa:c1:dc:c7:61:e7:
                    cc:5d:72:f7:20:02:f3:6d:72:39:f7:81:68:e1:81:
                    01:b7:47:e7:4c:7b:65:c9:cf:77:06:6f:41:ed:77:
                    95:dd:04:c8:fd:29:37:b5:12:3f:ff:65:58:39:d1:
                    7c:78:fb:4a:2f:6f:69:a5:90:f7:04:f6:a7:33:c4:
                    c0:cf:a9:6e:02:bc:da:cc:04:3b:88:b7:23:1f:7f:
                    bc:e8:dc:7b:12:2b:a1:2f:ea:69:f1:92:bf:9e:5c:
                    d5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:7A:BC:6A:16:4E:47:DB:F5:30:4C:22:F6:91:C7:AD:AB:67:B5:EB
            X509v3 Authority Key Identifier:
                keyid:6A:39:22:C6:3D:25:1D:52:E9:8C:A6:2A:16:51:A2:4A:E3:DC:80:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/6A3922C63D251D52E98CA62A1651A24AE3DC8026.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A3922C63D251D52E98CA62A1651A24AE3DC8026.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/3137372e38352e382e302f32342d3234203d3e20323731323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:ce:44:73:40:cf:fb:44:2b:ce:c8:af:50:04:62:0f:2b:14:
         23:ed:c6:b2:74:a7:f9:c2:c2:a0:0f:83:17:a7:61:fd:aa:61:
         09:a0:8d:23:7d:04:6d:ec:7b:d6:86:4d:ab:81:a9:23:8c:6b:
         87:0e:f5:6c:b0:42:db:c9:48:ba:9d:5e:41:ef:1e:cc:17:af:
         d3:a8:8a:3d:12:ac:b4:a3:02:26:c1:94:b8:9e:fa:09:33:c5:
         68:b4:42:98:f4:45:ff:ad:a7:cf:ee:45:5e:09:d8:2b:34:29:
         79:70:e8:16:0b:b3:ea:e9:fb:ba:3b:1d:51:4e:ef:99:4c:8a:
         8c:ea:37:b6:3e:b0:ed:ab:3a:64:93:d0:4e:e7:c4:c1:d0:bf:
         a7:1b:fe:79:3d:1a:cf:6d:0c:2e:14:ed:17:b5:2b:34:a8:ae:
         76:83:d1:ab:e6:f4:71:e1:b8:f8:bf:64:c3:42:18:b8:1e:f2:
         fa:e8:2b:da:50:67:4d:d8:24:e1:0f:fc:a0:41:6f:a5:54:0c:
         71:ef:8d:31:38:16:cf:2a:30:60:0f:7d:10:e6:0c:db:25:e8:
         70:3b:fc:b2:82:d4:db:4a:f7:cd:e4:c1:e8:8e:70:6e:bd:71:
         8e:a3:24:5f:06:83:c7:77:7f:c6:c6:df:81:ed:53:d5:b0:02:
         25:e4:0c:28
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUNXGTBC0icgWzCttds8R3dI7OeQIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkEzOTIyQzYzRDI1MUQ1MkU5OENBNjJBMTY1MUEyNEFF
M0RDODAyNjAeFw0yNDA1MTMxOTU3NDdaFw0yNTA1MTIyMDAyNDdaMDMxMTAvBgNV
BAMTKDg4N0FCQzZBMTY0RTQ3REJGNTMwNEMyMkY2OTFDN0FEQUI2N0I1RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvZmxwksrhTjuKPoB2Y87/ORPn
uFnfLF/KAZUKJp42uul6gS6gsKIGGa/Rr8mJ0LIv31GVhxHgsBs1Rs69RZIqSQKa
q37R61ZutnbkoaIHsf6zR6r5RvLXcuX/xYF+7mAj32A7A5WCGM33CvHuUaQzo2zE
EZMIrrElRXt6a91OT4DIlkGmOwhwISoTOpsfHG7opwgTKryR7+zFx967M6rB3Mdh
58xdcvcgAvNtcjn3gWjhgQG3R+dMe2XJz3cGb0Htd5XdBMj9KTe1Ej//ZVg50Xx4
+0ovb2mlkPcE9qczxMDPqW4CvNrMBDuItyMff7zo3HsSK6Ev6mnxkr+eXNXHAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUiHq8ahZOR9v1MEwi9pHHratnteswHwYDVR0j
BBgwFoAUajkixj0lHVLpjKYqFlGiSuPcgCYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHRQbkxydER0cUFpQnJBY25xTk5rb3hWSjJndjV2ZjdGNXNHRnpYYnM4
eksvMC82QTM5MjJDNjNEMjUxRDUyRTk4Q0E2MkExNjUxQTI0QUUzREM4MDI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZBMzkyMkM2M0QyNTFENTJF
OThDQTYyQTE2NTFBMjRBRTNEQzgwMjYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR0UG5McnREdHFBaUJyQWNucU5Oa294VkoyZ3Y1dmY3RjVzR0Z6WGJzOHpLLzAv
MzEzNzM3MmUzODM1MmUzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMTMy
MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALFVCDANBgkqhkiG9w0BAQsFAAOCAQEAlM5Ec0DP+0Qr
zsivUARiDysUI+3GsnSn+cLCoA+DF6dh/aphCaCNI30Ebex71oZNq4GpI4xrhw71
bLBC28lIup1eQe8ezBev06iKPRKstKMCJsGUuJ76CTPFaLRCmPRF/62nz+5FXgnY
KzQpeXDoFguz6un7ujsdUU7vmUyKjOo3tj6w7as6ZJPQTufEwdC/pxv+eT0az20M
LhTtF7UrNKiudoPRq+b0ceG4+L9kw0IYuB7y+ugr2lBnTdgk4Q/8oEFvpVQMce+N
MTgWzyowYA99EOYM2yXocDv8soLU20r3zeTB6I5wbr1xjqMkXwaDx3d/xsbfge1T
1bACJeQMKA==
-----END CERTIFICATE-----
Generated at Fri Jun 28 13:25:07 2024 by rpki-client on console-ams.rpki-client.org