Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137372e39322e3136342e302f32342d3234203d3e203631393138.roa
File:                     3137372e39322e3136342e302f32342d3234203d3e203631393138.roa (raw, json)
Hash identifier:          FwcJE3fJpF+3oWKY6ZGW5NXn5WF1CuVl/3dSC9TfXJs=
Subject key identifier:   86:13:1C:E9:67:DF:12:2D:5C:7D:EF:27:8D:2C:15:4E:D4:B2:D7:A8
Certificate issuer:       /CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
Certificate serial:       776F8939291C744624787B021599BC0C85659344
Authority key identifier: 6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137372e39322e3136342e302f32342d3234203d3e203631393138.roa
Signing time:             Wed 03 Apr 2024 18:33:18 +0000
ROA not before:           Wed 03 Apr 2024 18:28:18 +0000
ROA not after:            Wed 02 Apr 2025 18:33:18 +0000
asID:                     61918
IP address blocks:        177.92.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl
                          rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 16:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:6f:89:39:29:1c:74:46:24:78:7b:02:15:99:bc:0c:85:65:93:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
        Validity
            Not Before: Apr  3 18:28:18 2024 GMT
            Not After : Apr  2 18:33:18 2025 GMT
        Subject: CN=86131CE967DF122D5C7DEF278D2C154ED4B2D7A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7f:fc:62:cc:8e:1e:d5:ad:05:1a:63:31:f3:
                    a2:6c:af:fe:e5:ed:6b:51:7b:89:40:01:74:b0:b7:
                    fd:16:5b:e5:a2:ca:42:11:94:47:f7:b9:4e:9c:ed:
                    60:fb:78:ba:af:3d:11:4e:c5:d1:dd:ff:d7:c8:e6:
                    2c:f0:a9:24:56:34:43:59:8a:f8:50:bd:50:65:c5:
                    20:96:58:8e:a7:33:64:fd:9a:e8:1e:ee:c4:43:09:
                    7a:54:93:bc:c1:59:29:83:27:6f:f7:10:be:88:ef:
                    12:51:3b:fa:84:17:91:e2:15:e0:75:12:63:49:a7:
                    cf:b7:9e:3b:e6:c7:cd:6e:1d:b7:fe:1c:04:4b:f2:
                    2a:99:84:66:88:ae:39:5a:34:7e:13:f9:d3:99:58:
                    e2:c4:11:1e:24:58:97:ef:34:12:c1:9f:a2:69:1f:
                    e0:68:15:85:0f:d8:7d:96:04:9a:81:00:4c:05:e3:
                    08:0e:dd:80:0e:10:57:8c:60:11:24:80:88:97:4c:
                    a3:3b:da:27:95:d3:66:cf:09:f0:be:09:0e:41:7f:
                    65:7a:79:e3:07:db:0a:a7:33:c5:12:99:cb:d0:01:
                    bc:44:ad:7e:4b:6e:9a:4e:2e:c7:84:16:56:c5:d4:
                    0d:80:f7:0b:06:7c:4b:34:52:c5:3b:52:26:b1:b5:
                    81:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:13:1C:E9:67:DF:12:2D:5C:7D:EF:27:8D:2C:15:4E:D4:B2:D7:A8
            X509v3 Authority Key Identifier:
                keyid:6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137372e39322e3136342e302f32342d3234203d3e203631393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.92.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:3e:5e:3c:0e:b5:37:93:e8:df:18:7e:c4:7f:e9:6f:3b:d6:
         63:3c:5b:e8:2f:54:9d:b6:35:13:8c:61:f5:52:ca:21:03:6c:
         a7:99:11:6d:94:66:78:c7:2c:50:bc:ea:23:cd:d7:53:6d:7e:
         d7:bc:8b:21:b5:c5:a6:65:6c:12:72:7b:cc:df:48:81:ac:8d:
         e9:b7:78:b4:5f:ab:c8:cb:e5:a9:75:d5:00:0b:fe:7c:f8:cd:
         85:c0:6b:33:a3:0c:07:8f:17:8d:8d:31:c3:e0:4a:7f:d9:15:
         6c:a5:9d:2d:0d:af:a1:46:c2:40:eb:c7:aa:92:fe:a2:04:36:
         5e:df:6e:a3:fc:a9:4b:2f:45:47:98:d9:92:00:29:ae:12:b5:
         98:bc:a4:6a:85:2f:e8:0b:03:7c:98:cd:dd:37:52:2e:33:51:
         7d:3e:4a:e3:0f:7c:3b:e1:a8:fb:9a:83:50:b8:3c:6e:71:33:
         68:04:a7:30:bb:cd:50:dc:a6:9a:9a:06:e1:5c:26:19:97:cb:
         62:d5:3f:74:a5:c8:8a:27:a1:c4:86:27:50:13:23:cf:27:15:
         9a:5f:30:b0:dc:a7:ee:e6:a1:e8:c6:2b:b7:9e:cd:ff:49:6a:
         51:1e:01:36:7f:01:7f:7e:25:91:52:fd:13:1c:7e:10:2f:7c:
         67:13:f6:dc
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUd2+JOSkcdEYkeHsCFZm8DIVlk0QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkYzNkVDMzM0ODcwOTA4QTAxQ0JGN0I1OUJDQjA1QTNB
NTZCM0QxNDAeFw0yNDA0MDMxODI4MThaFw0yNTA0MDIxODMzMThaMDMxMTAvBgNV
BAMTKDg2MTMxQ0U5NjdERjEyMkQ1QzdERUYyNzhEMkMxNTRFRDRCMkQ3QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFf/xizI4e1a0FGmMx86Jsr/7l
7WtRe4lAAXSwt/0WW+WiykIRlEf3uU6c7WD7eLqvPRFOxdHd/9fI5izwqSRWNENZ
ivhQvVBlxSCWWI6nM2T9muge7sRDCXpUk7zBWSmDJ2/3EL6I7xJRO/qEF5HiFeB1
EmNJp8+3njvmx81uHbf+HARL8iqZhGaIrjlaNH4T+dOZWOLEER4kWJfvNBLBn6Jp
H+BoFYUP2H2WBJqBAEwF4wgO3YAOEFeMYBEkgIiXTKM72ieV02bPCfC+CQ5Bf2V6
eeMH2wqnM8USmcvQAbxErX5LbppOLseEFlbF1A2A9wsGfEs0UsU7UiaxtYHlAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUhhMc6WffEi1cfe8njSwVTtSy16gwHwYDVR0j
BBgwFoAUbzbsM0hwkIoBy/e1m8sFo6VrPRQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUdKcENUUW52NmhDeEZzSzg4NzVwM3ZBQ1F6NjdBTUwxRGFRM1Z3ZFFj
NHovMS82RjM2RUMzMzQ4NzA5MDhBMDFDQkY3QjU5QkNCMDVBM0E1NkIzRDE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGMzZFQzMzNDg3MDkwOEEw
MUNCRjdCNTlCQ0IwNUEzQTU2QjNEMTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVHSnBDVFFudjZoQ3hGc0s4ODc1cDN2QUNRejY3QU1MMURhUTNWd2RRYzR6LzEv
MzEzNzM3MmUzOTMyMmUzMTM2MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzkzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsVykMA0GCSqGSIb3DQEBCwUAA4IBAQALPl48DrU3
k+jfGH7Ef+lvO9ZjPFvoL1SdtjUTjGH1UsohA2ynmRFtlGZ4xyxQvOojzddTbX7X
vIshtcWmZWwScnvM30iBrI3pt3i0X6vIy+WpddUAC/58+M2FwGszowwHjxeNjTHD
4Ep/2RVspZ0tDa+hRsJA68eqkv6iBDZe326j/KlLL0VHmNmSACmuErWYvKRqhS/o
CwN8mM3dN1IuM1F9PkrjD3w74aj7moNQuDxucTNoBKcwu81Q3KaamgbhXCYZl8ti
1T90pciKJ6HEhidQEyPPJxWaXzCw3Kfu5qHoxiu3ns3/SWpRHgE2fwF/fiWRUv0T
HH4QL3xnE/bc
-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:44 2024 by rpki-client on console-fra.rpki-client.org