Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137372e39322e3136362e302f32342d3234203d3e203631393138.roa
File:                     3137372e39322e3136362e302f32342d3234203d3e203631393138.roa (raw, json)
Hash identifier:          pxPFF/nBiVB8+Za0VpxcGnZ5lW0Rpf6rcZekIF4184k=
Subject key identifier:   8C:F6:7F:D1:23:DD:F6:0A:66:94:F5:72:B6:FD:33:89:3C:88:1E:80
Certificate issuer:       /CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
Certificate serial:       69C8AEB792F4CC04543C942C4872594F0E3FB607
Authority key identifier: 6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137372e39322e3136362e302f32342d3234203d3e203631393138.roa
Signing time:             Wed 03 Apr 2024 18:33:18 +0000
ROA not before:           Wed 03 Apr 2024 18:28:18 +0000
ROA not after:            Wed 02 Apr 2025 18:33:18 +0000
asID:                     61918
IP address blocks:        177.92.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl
                          rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 16:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c8:ae:b7:92:f4:cc:04:54:3c:94:2c:48:72:59:4f:0e:3f:b6:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F36EC334870908A01CBF7B59BCB05A3A56B3D14
        Validity
            Not Before: Apr  3 18:28:18 2024 GMT
            Not After : Apr  2 18:33:18 2025 GMT
        Subject: CN=8CF67FD123DDF60A6694F572B6FD33893C881E80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cc:d2:4b:8f:bb:92:75:a0:7f:ef:21:fb:59:
                    59:ec:df:8b:4f:40:9f:b7:6a:4f:83:d6:40:e7:f1:
                    d2:39:c3:2d:85:66:51:7b:3b:12:38:7e:2a:3f:45:
                    a4:4c:af:f4:d0:95:94:ae:e5:93:83:da:76:83:46:
                    3e:06:a6:f7:89:3e:f5:86:33:91:09:46:57:0e:1f:
                    e9:dd:69:40:55:36:17:34:2c:f9:55:73:63:cb:46:
                    0c:b8:8a:c8:32:ff:3b:00:bd:ae:c0:08:9f:b6:90:
                    6d:16:43:8c:f1:75:32:e2:08:f0:2a:cf:16:0e:e0:
                    94:69:14:0b:8d:98:1a:66:f3:7e:85:43:cc:e2:f7:
                    44:e7:e5:88:a6:a8:d1:b1:e1:ee:dc:cf:f8:5f:e0:
                    4d:77:d7:87:de:0f:5d:79:8a:0f:4d:12:a2:35:a3:
                    26:08:b9:6a:01:c5:bf:1d:3d:29:c9:cc:6b:df:a9:
                    a2:86:ea:5e:83:91:d4:7c:d2:59:d1:87:87:e2:0e:
                    c7:f7:fc:d2:17:d5:36:c9:d3:fd:e2:aa:d6:dc:11:
                    9d:e1:d6:de:7e:0c:72:e6:1a:4a:c0:a2:73:20:fc:
                    b2:33:82:78:90:18:49:99:58:d0:fd:0f:3f:fd:e5:
                    75:f4:31:b7:c0:d5:26:29:08:27:9c:ab:1b:40:2e:
                    08:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F6:7F:D1:23:DD:F6:0A:66:94:F5:72:B6:FD:33:89:3C:88:1E:80
            X509v3 Authority Key Identifier:
                keyid:6F:36:EC:33:48:70:90:8A:01:CB:F7:B5:9B:CB:05:A3:A5:6B:3D:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F36EC334870908A01CBF7B59BCB05A3A56B3D14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GJpCTQnv6hCxFsK8875p3vACQz67AML1DaQ3VwdQc4z/1/3137372e39322e3136362e302f32342d3234203d3e203631393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.92.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:61:2e:9e:f9:6c:76:06:d3:8a:ce:55:35:12:17:29:86:51:
         3f:05:e7:7c:54:91:e2:95:44:33:45:1e:6c:f8:29:b7:af:19:
         25:de:ea:d2:c8:74:4b:a2:d9:cb:70:57:5f:52:6a:e5:77:9c:
         c7:ba:be:74:75:e2:04:9d:b0:b2:2c:1f:a2:24:21:f3:a0:bf:
         a3:4b:cd:11:3d:24:a5:3f:9f:fc:39:cd:0a:25:c4:13:49:19:
         d2:b6:60:19:b4:33:0e:a9:8a:e7:09:e5:f3:73:26:f8:d0:81:
         a1:ef:e8:58:ba:1e:40:78:4f:42:4a:e4:4e:4d:27:af:ca:44:
         00:03:b6:46:91:a7:cf:a7:2e:70:c6:bc:94:68:a0:82:a5:17:
         2a:40:1c:7a:29:ab:05:81:4e:df:56:f4:70:ba:aa:65:4b:e6:
         aa:77:54:d2:27:14:7a:06:28:17:68:f0:17:d8:5f:1c:5c:10:
         9c:a3:15:ee:ab:fd:1a:fb:9a:fc:c1:a4:62:52:4f:b4:57:c8:
         46:e8:77:80:9c:58:d6:9a:fe:de:90:c9:09:b1:12:cd:b3:64:
         ea:0c:07:44:fb:81:fa:22:32:ae:3a:cd:72:5b:77:bd:26:13:
         48:fe:a2:0d:9a:bb:2e:84:1f:28:9b:87:74:c8:0f:1b:ca:7c:
         f0:f7:bc:3f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUaciut5L0zARUPJQsSHJZTw4/tgcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkYzNkVDMzM0ODcwOTA4QTAxQ0JGN0I1OUJDQjA1QTNB
NTZCM0QxNDAeFw0yNDA0MDMxODI4MThaFw0yNTA0MDIxODMzMThaMDMxMTAvBgNV
BAMTKDhDRjY3RkQxMjNEREY2MEE2Njk0RjU3MkI2RkQzMzg5M0M4ODFFODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGzNJLj7uSdaB/7yH7WVns34tP
QJ+3ak+D1kDn8dI5wy2FZlF7OxI4fio/RaRMr/TQlZSu5ZOD2naDRj4GpveJPvWG
M5EJRlcOH+ndaUBVNhc0LPlVc2PLRgy4isgy/zsAva7ACJ+2kG0WQ4zxdTLiCPAq
zxYO4JRpFAuNmBpm836FQ8zi90Tn5YimqNGx4e7cz/hf4E1314feD115ig9NEqI1
oyYIuWoBxb8dPSnJzGvfqaKG6l6DkdR80lnRh4fiDsf3/NIX1TbJ0/3iqtbcEZ3h
1t5+DHLmGkrAonMg/LIzgniQGEmZWND9Dz/95XX0MbfA1SYpCCecqxtALggTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUjPZ/0SPd9gpmlPVytv0ziTyIHoAwHwYDVR0j
BBgwFoAUbzbsM0hwkIoBy/e1m8sFo6VrPRQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUdKcENUUW52NmhDeEZzSzg4NzVwM3ZBQ1F6NjdBTUwxRGFRM1Z3ZFFj
NHovMS82RjM2RUMzMzQ4NzA5MDhBMDFDQkY3QjU5QkNCMDVBM0E1NkIzRDE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGMzZFQzMzNDg3MDkwOEEw
MUNCRjdCNTlCQ0IwNUEzQTU2QjNEMTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVHSnBDVFFudjZoQ3hGc0s4ODc1cDN2QUNRejY3QU1MMURhUTNWd2RRYzR6LzEv
MzEzNzM3MmUzOTMyMmUzMTM2MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzkzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsVymMA0GCSqGSIb3DQEBCwUAA4IBAQCyYS6e+Wx2
BtOKzlU1EhcphlE/Bed8VJHilUQzRR5s+Cm3rxkl3urSyHRLotnLcFdfUmrld5zH
ur50deIEnbCyLB+iJCHzoL+jS80RPSSlP5/8Oc0KJcQTSRnStmAZtDMOqYrnCeXz
cyb40IGh7+hYuh5AeE9CSuROTSevykQAA7ZGkafPpy5wxryUaKCCpRcqQBx6KasF
gU7fVvRwuqplS+aqd1TSJxR6BigXaPAX2F8cXBCcoxXuq/0a+5r8waRiUk+0V8hG
6HeAnFjWmv7ekMkJsRLNs2TqDAdE+4H6IjKuOs1yW3e9JhNI/qINmrsuhB8om4d0
yA8bynzw97w/
-----END CERTIFICATE-----
Generated at Mon Nov 25 15:49:50 2024 by rpki-client on console-ams.rpki-client.org