Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5WhsivEPeCf5YEzK37F2SWs2xNLwZC8dXpD3vJzW1iDz/0/3137372e31312e3134342e302f32312d3332203d3e20323632383738.roa
File:                     3137372e31312e3134342e302f32312d3332203d3e20323632383738.roa (raw, json)
Hash identifier:          3uegWcFGMDxbm3cDZxsa9zeIhmuLjKTXjnb5nKlKcWk=
Subject key identifier:   2B:CA:F9:53:89:77:B6:DB:44:E0:A3:81:CF:7A:26:63:78:EC:F2:D5
Certificate issuer:       /CN=6ACC269E9B94AD6A283D6B25E6F2D37F036A2740
Certificate serial:       7F153F89F74379457884CB635FE3F52BA4949D16
Authority key identifier: 6A:CC:26:9E:9B:94:AD:6A:28:3D:6B:25:E6:F2:D3:7F:03:6A:27:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6ACC269E9B94AD6A283D6B25E6F2D37F036A2740.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5WhsivEPeCf5YEzK37F2SWs2xNLwZC8dXpD3vJzW1iDz/0/3137372e31312e3134342e302f32312d3332203d3e20323632383738.roa
Signing time:             Thu 25 Jul 2024 14:38:04 +0000
ROA not before:           Thu 25 Jul 2024 14:33:04 +0000
ROA not after:            Thu 24 Jul 2025 14:38:04 +0000
asID:                     262878
IP address blocks:        177.11.144.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5WhsivEPeCf5YEzK37F2SWs2xNLwZC8dXpD3vJzW1iDz/0/6ACC269E9B94AD6A283D6B25E6F2D37F036A2740.crl
                          rsync://rpki-repo.registro.br/repo/5WhsivEPeCf5YEzK37F2SWs2xNLwZC8dXpD3vJzW1iDz/0/6ACC269E9B94AD6A283D6B25E6F2D37F036A2740.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6ACC269E9B94AD6A283D6B25E6F2D37F036A2740.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:15:3f:89:f7:43:79:45:78:84:cb:63:5f:e3:f5:2b:a4:94:9d:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ACC269E9B94AD6A283D6B25E6F2D37F036A2740
        Validity
            Not Before: Jul 25 14:33:04 2024 GMT
            Not After : Jul 24 14:38:04 2025 GMT
        Subject: CN=2BCAF9538977B6DB44E0A381CF7A266378ECF2D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1e:c6:ea:f0:46:67:1d:5d:fa:6d:d3:58:43:
                    41:d8:f9:e4:c2:dd:0f:80:c4:00:1a:19:84:dd:30:
                    45:8e:57:12:41:f7:a3:41:0b:31:ee:c3:4a:57:8f:
                    11:3b:a2:93:fe:83:bb:af:f3:a7:f3:0f:95:4d:a8:
                    54:7e:ff:2e:42:84:8f:b1:61:aa:a1:3c:23:28:07:
                    b1:fd:af:a4:36:81:f8:5e:f4:6f:46:a6:20:16:64:
                    61:93:28:92:51:88:ee:a2:1a:e3:77:00:50:6f:77:
                    d2:4d:e4:28:c5:ff:ed:86:b2:99:19:70:42:5b:fc:
                    fc:6c:ee:29:68:01:a6:10:4e:ff:3f:2e:10:70:9e:
                    d9:7a:da:c0:6d:81:6c:c8:94:95:69:1b:1a:f0:08:
                    ac:cb:8b:61:71:ef:74:d7:17:6a:86:3a:01:cb:77:
                    ac:b5:f2:fb:c8:9f:c6:b7:74:96:65:68:7b:cb:37:
                    f3:80:60:9f:4f:e0:b9:85:b6:1b:06:7b:c5:4f:53:
                    2f:9d:7b:c2:ff:1e:4b:95:6d:50:9a:d0:44:f2:23:
                    ba:55:91:e0:b6:b8:26:aa:58:d4:67:6a:bc:c0:39:
                    d2:12:2e:50:15:72:e4:dc:21:70:d7:09:85:95:31:
                    1a:16:b8:2c:a7:34:84:23:ed:cc:3d:1a:9e:0d:73:
                    de:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:CA:F9:53:89:77:B6:DB:44:E0:A3:81:CF:7A:26:63:78:EC:F2:D5
            X509v3 Authority Key Identifier:
                keyid:6A:CC:26:9E:9B:94:AD:6A:28:3D:6B:25:E6:F2:D3:7F:03:6A:27:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5WhsivEPeCf5YEzK37F2SWs2xNLwZC8dXpD3vJzW1iDz/0/6ACC269E9B94AD6A283D6B25E6F2D37F036A2740.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6ACC269E9B94AD6A283D6B25E6F2D37F036A2740.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5WhsivEPeCf5YEzK37F2SWs2xNLwZC8dXpD3vJzW1iDz/0/3137372e31312e3134342e302f32312d3332203d3e20323632383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         93:56:c4:4b:53:2d:29:c1:6f:a7:42:a8:aa:40:2c:55:e9:c1:
         cd:c1:3e:2a:cb:c5:21:d3:6a:a6:7d:25:e5:91:6f:cc:70:65:
         bf:a2:80:71:6e:9f:37:ba:21:5f:f3:01:37:ee:58:62:20:68:
         9b:3a:3a:45:27:45:eb:63:59:a6:d9:e3:a4:5d:3a:d3:d6:98:
         ef:7d:9c:f5:d0:b3:65:dd:cf:50:4c:ac:43:48:0f:63:08:82:
         6e:d3:96:ea:b3:9d:82:4b:d7:63:f6:a5:11:c1:2e:26:66:f1:
         fe:a7:72:48:b9:b0:3f:9a:1e:cc:fd:33:2b:ce:78:ca:75:be:
         26:bf:6f:9a:4d:b2:2b:16:36:68:aa:d5:90:51:a4:96:5e:24:
         b5:00:80:d3:ae:7f:eb:89:12:45:7a:3f:8b:e9:8f:83:1b:5d:
         cc:04:52:ac:b7:2f:da:80:19:50:0a:ce:c9:56:69:af:f6:f9:
         9a:f5:a6:ba:87:2e:b6:68:5e:fe:aa:e9:5e:01:1a:ca:bb:c0:
         dc:62:6d:93:d2:67:cb:fa:92:82:d1:bd:93:23:88:dd:86:17:
         3b:a0:73:f3:ab:8d:01:0b:7d:f0:dc:a8:b6:7b:40:40:4f:4f:
         10:48:0b:82:af:2c:96:e7:b3:e4:46:a2:01:df:d6:e8:7a:7e:
         32:9e:51:0e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfxU/ifdDeUV4hMtjX+P1K6SUnRYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFDQzI2OUU5Qjk0QUQ2QTI4M0Q2QjI1RTZGMkQzN0Yw
MzZBMjc0MDAeFw0yNDA3MjUxNDMzMDRaFw0yNTA3MjQxNDM4MDRaMDMxMTAvBgNV
BAMTKDJCQ0FGOTUzODk3N0I2REI0NEUwQTM4MUNGN0EyNjYzNzhFQ0YyRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUHsbq8EZnHV36bdNYQ0HY+eTC
3Q+AxAAaGYTdMEWOVxJB96NBCzHuw0pXjxE7opP+g7uv86fzD5VNqFR+/y5ChI+x
YaqhPCMoB7H9r6Q2gfhe9G9GpiAWZGGTKJJRiO6iGuN3AFBvd9JN5CjF/+2GspkZ
cEJb/Pxs7iloAaYQTv8/LhBwntl62sBtgWzIlJVpGxrwCKzLi2Fx73TXF2qGOgHL
d6y18vvIn8a3dJZlaHvLN/OAYJ9P4LmFthsGe8VPUy+de8L/HkuVbVCa0ETyI7pV
keC2uCaqWNRnarzAOdISLlAVcuTcIXDXCYWVMRoWuCynNIQj7cw9Gp4Nc949AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUK8r5U4l3tttE4KOBz3omY3js8tUwHwYDVR0j
BBgwFoAUaswmnpuUrWooPWsl5vLTfwNqJ0AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVdoc2l2RVBlQ2Y1WUV6SzM3RjJTV3MyeE5Md1pDOGRYcEQzdkp6VzFp
RHovMC82QUNDMjY5RTlCOTRBRDZBMjgzRDZCMjVFNkYyRDM3RjAzNkEyNzQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZBQ0MyNjlFOUI5NEFENkEy
ODNENkIyNUU2RjJEMzdGMDM2QTI3NDAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVXaHNpdkVQZUNmNVlFekszN0YyU1dzMnhOTHdaQzhkWHBEM3ZKelcxaUR6LzAv
MzEzNzM3MmUzMTMxMmUzMTM0MzQyZTMwMmYzMjMxMmQzMzMyMjAzZDNlMjAzMjM2
MzIzODM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOxC5AwDQYJKoZIhvcNAQELBQADggEBAJNWxEtT
LSnBb6dCqKpALFXpwc3BPirLxSHTaqZ9JeWRb8xwZb+igHFunze6IV/zATfuWGIg
aJs6OkUnRetjWabZ46RdOtPWmO99nPXQs2Xdz1BMrENID2MIgm7TluqznYJL12P2
pRHBLiZm8f6ncki5sD+aHsz9MyvOeMp1via/b5pNsisWNmiq1ZBRpJZeJLUAgNOu
f+uJEkV6P4vpj4MbXcwEUqy3L9qAGVAKzslWaa/2+Zr1prqHLrZoXv6q6V4BGsq7
wNxibZPSZ8v6koLRvZMjiN2GFzugc/OrjQELffDcqLZ7QEBPTxBIC4KvLJbns+RG
ogHf1uh6fjKeUQ4=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:37 2024 by rpki-client on console-ams.rpki-client.org