Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/3137372e33382e3132302e302f32312d3234203d3e203532393638.roa
File:                     3137372e33382e3132302e302f32312d3234203d3e203532393638.roa (raw, json)
Hash identifier:          WC4mSL0/AEClWk5IoaDRn+yGXaRVJ3zxWE0woLBRHmc=
Subject key identifier:   C3:90:B7:A7:15:1C:50:A6:30:B9:79:E7:A8:ED:27:96:4E:C3:35:E4
Certificate issuer:       /CN=C27181D3D53BD228B34586DC6F756EBF5695A6B2
Certificate serial:       387B387EFE4615977AC2A171DFC9F78800B2296B
Authority key identifier: C2:71:81:D3:D5:3B:D2:28:B3:45:86:DC:6F:75:6E:BF:56:95:A6:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/3137372e33382e3132302e302f32312d3234203d3e203532393638.roa
Signing time:             Thu 04 Apr 2024 07:08:03 +0000
ROA not before:           Thu 04 Apr 2024 07:03:03 +0000
ROA not after:            Thu 03 Apr 2025 07:08:03 +0000
asID:                     52968
IP address blocks:        177.38.120.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.crl
                          rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:7b:38:7e:fe:46:15:97:7a:c2:a1:71:df:c9:f7:88:00:b2:29:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C27181D3D53BD228B34586DC6F756EBF5695A6B2
        Validity
            Not Before: Apr  4 07:03:03 2024 GMT
            Not After : Apr  3 07:08:03 2025 GMT
        Subject: CN=C390B7A7151C50A630B979E7A8ED27964EC335E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9a:2f:9a:9e:e9:9e:b3:03:af:be:d1:17:f8:
                    f0:af:d7:10:74:45:a7:8a:97:d6:88:7b:61:5b:8a:
                    e0:de:ee:cd:e6:90:ca:da:be:e5:8f:a4:17:1e:cb:
                    22:90:5b:d7:2b:bb:26:a5:1b:c4:8b:dd:19:e7:af:
                    e4:24:4d:70:2d:6b:9d:43:52:c6:7c:63:df:1e:29:
                    7e:cc:a8:75:78:67:fe:96:8a:9e:e2:74:88:ca:6c:
                    f4:53:d9:e1:84:44:1a:24:a4:42:80:0a:19:44:be:
                    c2:57:46:86:03:3a:64:a4:b6:29:98:70:2c:e1:bd:
                    cc:94:d1:12:ab:5a:5e:d4:c2:f1:57:4f:5f:50:53:
                    c1:95:ab:0e:9f:43:56:d4:b5:b6:85:aa:38:c6:b2:
                    31:46:67:40:75:45:47:1b:f4:65:9b:70:9c:b3:4f:
                    90:8b:44:8d:86:4f:09:8b:a5:20:17:fa:17:93:38:
                    6f:14:ee:6d:9b:43:10:b9:de:77:c4:f2:0b:49:52:
                    49:0b:54:63:ac:80:06:8b:fa:e3:7a:9e:fe:73:1d:
                    3e:a1:08:25:76:77:17:a8:51:87:15:60:b4:a1:89:
                    a2:a3:59:74:56:5a:9e:33:cc:33:c3:9a:a3:02:f2:
                    d7:4e:84:73:cb:75:32:a4:e4:3f:a8:01:4b:f8:10:
                    f7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:90:B7:A7:15:1C:50:A6:30:B9:79:E7:A8:ED:27:96:4E:C3:35:E4
            X509v3 Authority Key Identifier:
                keyid:C2:71:81:D3:D5:3B:D2:28:B3:45:86:DC:6F:75:6E:BF:56:95:A6:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C27181D3D53BD228B34586DC6F756EBF5695A6B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/1/3137372e33382e3132302e302f32312d3234203d3e203532393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a1:f4:2d:b7:78:d4:15:f5:78:8f:cd:04:cd:82:5d:49:83:6d:
         92:c7:00:c4:ad:49:b2:bd:70:f3:60:42:75:7a:19:e8:1c:9e:
         39:2b:d9:2a:bc:95:69:5a:3a:8c:8c:bc:af:3b:0e:2a:c9:2f:
         af:2c:61:8c:35:4e:b3:41:00:41:b0:6e:ab:be:8a:b3:3c:84:
         55:38:ef:89:9d:a3:1a:a8:85:13:8e:6f:f9:7f:1c:9a:06:7b:
         d8:96:64:4e:e2:9b:ec:fc:fd:45:9b:bb:71:51:45:70:2b:2c:
         f3:a4:27:ce:1b:92:14:6e:c9:86:0b:fd:f2:71:6b:9a:0b:a1:
         ef:9f:fc:34:8f:d4:55:48:b3:58:cf:1b:f6:f5:b3:6f:30:a5:
         59:9a:da:ef:01:4d:a9:44:61:41:52:19:83:6d:0d:30:3a:b1:
         6a:8b:81:af:08:18:83:2e:72:55:c6:80:75:79:a3:e5:1c:7c:
         3c:3a:28:d9:cc:bf:ac:b9:02:19:10:b4:0d:81:ba:99:db:09:
         c8:cf:e5:55:4a:26:07:44:24:39:28:28:a7:f8:34:70:d5:74:
         3e:c5:9a:ac:63:08:69:46:a0:ab:86:91:90:fd:da:79:0b:05:
         c2:66:1d:1c:13:2a:7e:44:00:80:04:af:9b:ed:fc:5b:77:d2:
         4f:4d:9d:02
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOHs4fv5GFZd6wqFx38n3iACyKWswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI3MTgxRDNENTNCRDIyOEIzNDU4NkRDNkY3NTZFQkY1
Njk1QTZCMjAeFw0yNDA0MDQwNzAzMDNaFw0yNTA0MDMwNzA4MDNaMDMxMTAvBgNV
BAMTKEMzOTBCN0E3MTUxQzUwQTYzMEI5NzlFN0E4RUQyNzk2NEVDMzM1RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcmi+anumeswOvvtEX+PCv1xB0
RaeKl9aIe2FbiuDe7s3mkMravuWPpBceyyKQW9cruyalG8SL3Rnnr+QkTXAta51D
UsZ8Y98eKX7MqHV4Z/6Wip7idIjKbPRT2eGERBokpEKAChlEvsJXRoYDOmSktimY
cCzhvcyU0RKrWl7UwvFXT19QU8GVqw6fQ1bUtbaFqjjGsjFGZ0B1RUcb9GWbcJyz
T5CLRI2GTwmLpSAX+heTOG8U7m2bQxC53nfE8gtJUkkLVGOsgAaL+uN6nv5zHT6h
CCV2dxeoUYcVYLShiaKjWXRWWp4zzDPDmqMC8tdOhHPLdTKk5D+oAUv4EPeLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUw5C3pxUcUKYwuXnnqO0nlk7DNeQwHwYDVR0j
BBgwFoAUwnGB09U70iizRYbcb3Vuv1aVprIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXNrMTVaeUxXVjdNUVoxa3VXWkp3UHBvYTIxUmEyN1JXTkJuYmQzQkRy
R2IvMS9DMjcxODFEM0Q1M0JEMjI4QjM0NTg2REM2Rjc1NkVCRjU2OTVBNkIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MyNzE4MUQzRDUzQkQyMjhC
MzQ1ODZEQzZGNzU2RUJGNTY5NUE2QjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVzazE1WnlMV1Y3TVFaMWt1V1pKd1Bwb2EyMVJhMjdSV05CbmJkM0JEckdiLzEv
MzEzNzM3MmUzMzM4MmUzMTMyMzAyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNTMy
MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsSZ4MA0GCSqGSIb3DQEBCwUAA4IBAQCh9C23eNQV
9XiPzQTNgl1Jg22SxwDErUmyvXDzYEJ1ehnoHJ45K9kqvJVpWjqMjLyvOw4qyS+v
LGGMNU6zQQBBsG6rvoqzPIRVOO+JnaMaqIUTjm/5fxyaBnvYlmRO4pvs/P1Fm7tx
UUVwKyzzpCfOG5IUbsmGC/3ycWuaC6Hvn/w0j9RVSLNYzxv29bNvMKVZmtrvAU2p
RGFBUhmDbQ0wOrFqi4GvCBiDLnJVxoB1eaPlHHw8OijZzL+suQIZELQNgbqZ2wnI
z+VVSiYHRCQ5KCin+DRw1XQ+xZqsYwhpRqCrhpGQ/dp5CwXCZh0cEyp+RACABK+b
7fxbd9JPTZ0C
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:33 2024 by rpki-client on console-fra.rpki-client.org