Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/0/3137372e3133372e3232342e302f32302d3234203d3e203238313733.roa
File:                     3137372e3133372e3232342e302f32302d3234203d3e203238313733.roa (raw, json)
Hash identifier:          waGqQVK3vjwcrSfRHVjAsVytYrMTevaJ9R10Ez1aJr8=
Subject key identifier:   71:DD:76:54:2F:B8:82:94:EE:5D:C7:51:87:3D:E2:37:31:F7:2D:EF
Certificate issuer:       /CN=700C105F866D3955B5DC6A4CACFF8263EED77B4C
Certificate serial:       5C62E4F380BA19AFEAB76135B2AC3974EC81B72F
Authority key identifier: 70:0C:10:5F:86:6D:39:55:B5:DC:6A:4C:AC:FF:82:63:EE:D7:7B:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/700C105F866D3955B5DC6A4CACFF8263EED77B4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/0/3137372e3133372e3232342e302f32302d3234203d3e203238313733.roa
Signing time:             Fri 28 Jun 2024 17:02:41 +0000
ROA not before:           Fri 28 Jun 2024 16:57:41 +0000
ROA not after:            Fri 27 Jun 2025 17:02:41 +0000
asID:                     28173
IP address blocks:        177.137.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/0/700C105F866D3955B5DC6A4CACFF8263EED77B4C.crl
                          rsync://rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/0/700C105F866D3955B5DC6A4CACFF8263EED77B4C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/700C105F866D3955B5DC6A4CACFF8263EED77B4C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:62:e4:f3:80:ba:19:af:ea:b7:61:35:b2:ac:39:74:ec:81:b7:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=700C105F866D3955B5DC6A4CACFF8263EED77B4C
        Validity
            Not Before: Jun 28 16:57:41 2024 GMT
            Not After : Jun 27 17:02:41 2025 GMT
        Subject: CN=71DD76542FB88294EE5DC751873DE23731F72DEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:59:3e:db:f3:f8:0c:fe:6a:f3:fe:b7:ae:b6:
                    c3:18:8f:c0:df:da:ef:3b:e3:70:91:bc:bd:80:f5:
                    7f:15:a1:27:75:cc:6c:46:0e:51:b9:a5:d8:88:94:
                    e9:f8:84:d9:ea:c2:d3:0c:b6:64:6d:6c:72:cc:6b:
                    35:8b:54:3f:54:3a:42:8b:c0:e0:36:72:93:d6:63:
                    30:88:4d:03:47:2c:86:93:05:3d:35:76:90:09:50:
                    36:f6:52:3b:8f:7c:0a:b5:1e:0d:d0:09:39:17:42:
                    b1:94:8d:8e:7d:59:dc:f7:f4:87:ce:df:3b:8e:ef:
                    ca:a2:89:1e:1c:86:d9:46:d1:b4:ec:ff:20:4c:62:
                    cf:1f:ff:c0:9a:59:cd:81:0d:31:32:87:59:e0:80:
                    b2:4a:3b:6a:27:e2:ae:9e:40:17:01:fa:b3:3f:89:
                    47:40:e4:4e:04:cf:ad:f5:b3:b5:ce:00:16:b3:67:
                    bf:e5:47:ae:64:50:ae:b1:e4:bb:46:b6:96:a0:07:
                    4f:3f:74:4f:83:15:21:09:ba:45:08:1e:13:59:09:
                    8a:05:db:e5:cb:2e:0e:45:25:7f:f9:e7:20:6e:3f:
                    af:e4:b2:f1:33:52:cb:26:84:4e:4e:d6:5d:52:88:
                    5e:02:be:9d:af:42:62:a2:c7:28:6b:8f:7f:5b:84:
                    e8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DD:76:54:2F:B8:82:94:EE:5D:C7:51:87:3D:E2:37:31:F7:2D:EF
            X509v3 Authority Key Identifier:
                keyid:70:0C:10:5F:86:6D:39:55:B5:DC:6A:4C:AC:FF:82:63:EE:D7:7B:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/0/700C105F866D3955B5DC6A4CACFF8263EED77B4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/700C105F866D3955B5DC6A4CACFF8263EED77B4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/0/3137372e3133372e3232342e302f32302d3234203d3e203238313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         59:75:b1:63:8d:66:60:66:79:88:75:b9:f4:86:f0:a5:37:81:
         95:1d:6e:22:53:a8:ae:72:e3:6e:2b:07:ef:48:c0:67:93:fa:
         9b:2b:40:c8:c2:a5:54:eb:0b:85:fc:10:fe:d1:dc:1c:72:97:
         b8:d4:ee:57:70:c4:40:8b:03:9d:36:5c:cb:f5:f5:f4:fa:90:
         b7:f8:13:c9:57:26:51:be:51:12:a7:9e:85:94:ee:67:db:e9:
         ef:07:3a:5a:77:ad:a1:2b:ae:0e:03:37:be:2e:83:7c:40:6d:
         99:4f:57:a4:11:8e:31:7b:89:d9:30:29:65:d6:a2:31:93:e1:
         7b:17:5a:c5:c0:eb:fd:8d:bf:19:4b:c5:fb:c9:38:9d:d6:5d:
         72:72:a7:07:ba:cd:bd:65:29:7c:fe:9e:cf:17:78:06:1c:79:
         5e:46:cc:2a:d3:b0:df:c4:c1:49:c6:ec:b6:e4:6d:41:95:ab:
         5e:64:80:a3:bb:04:7a:31:f9:ec:2b:5a:66:66:e6:5e:5e:8b:
         be:df:8a:12:aa:04:e8:51:dd:7c:73:f5:ef:fe:fd:a5:5a:ea:
         6c:c2:be:8f:41:c0:5b:a5:d4:5b:da:db:e1:0d:d6:dd:c6:3a:
         2a:00:d9:08:f3:97:90:28:8a:38:76:15:bc:4c:55:82:c7:ac:
         8e:f1:f9:8a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXGLk84C6Ga/qt2E1sqw5dOyBty8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzAwQzEwNUY4NjZEMzk1NUI1REM2QTRDQUNGRjgyNjNF
RUQ3N0I0QzAeFw0yNDA2MjgxNjU3NDFaFw0yNTA2MjcxNzAyNDFaMDMxMTAvBgNV
BAMTKDcxREQ3NjU0MkZCODgyOTRFRTVEQzc1MTg3M0RFMjM3MzFGNzJERUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0WT7b8/gM/mrz/reutsMYj8Df
2u8743CRvL2A9X8VoSd1zGxGDlG5pdiIlOn4hNnqwtMMtmRtbHLMazWLVD9UOkKL
wOA2cpPWYzCITQNHLIaTBT01dpAJUDb2UjuPfAq1Hg3QCTkXQrGUjY59Wdz39IfO
3zuO78qiiR4chtlG0bTs/yBMYs8f/8CaWc2BDTEyh1nggLJKO2on4q6eQBcB+rM/
iUdA5E4Ez631s7XOABazZ7/lR65kUK6x5LtGtpagB08/dE+DFSEJukUIHhNZCYoF
2+XLLg5FJX/55yBuP6/ksvEzUssmhE5O1l1SiF4Cvp2vQmKixyhrj39bhOj5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcd12VC+4gpTuXcdRhz3iNzH3Le8wHwYDVR0j
BBgwFoAUcAwQX4ZtOVW13GpMrP+CY+7Xe0wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTdpNkVoRlJwR1lpNG5hOHFhRjFYWXdtd1lvemlrN3lXdnVQVFZ2TVdn
TE0vMC83MDBDMTA1Rjg2NkQzOTU1QjVEQzZBNENBQ0ZGODI2M0VFRDc3QjRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwMEMxMDVGODY2RDM5NTVC
NURDNkE0Q0FDRkY4MjYzRUVENzdCNEMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU3aTZFaEZScEdZaTRuYThxYUYxWFl3bXdZb3ppazd5V3Z1UFRWdk1XZ0xNLzAv
MzEzNzM3MmUzMTMzMzcyZTMyMzIzNDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMy
MzgzMTM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASxieAwDQYJKoZIhvcNAQELBQADggEBAFl1sWON
ZmBmeYh1ufSG8KU3gZUdbiJTqK5y424rB+9IwGeT+psrQMjCpVTrC4X8EP7R3Bxy
l7jU7ldwxECLA502XMv19fT6kLf4E8lXJlG+URKnnoWU7mfb6e8HOlp3raErrg4D
N74ug3xAbZlPV6QRjjF7idkwKWXWojGT4XsXWsXA6/2NvxlLxfvJOJ3WXXJypwe6
zb1lKXz+ns8XeAYceV5GzCrTsN/EwUnG7LbkbUGVq15kgKO7BHox+ewrWmZm5l5e
i77fihKqBOhR3Xxz9e/+/aVa6mzCvo9BwFul1Fva2+EN1t3GOioA2Qjzl5Aoijh2
FbxMVYLHrI7x+Yo=
-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:51 2024 by rpki-client on console-fra.rpki-client.org