Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/3137372e3132352e3230382e302f32322d3234203d3e20323632333534.roa
File:                     3137372e3132352e3230382e302f32322d3234203d3e20323632333534.roa (raw, json)
Hash identifier:          lHXFsQFU/dH5ZkgwlOlPYyQwqVEdQJf51MPB5hCnefo=
Subject key identifier:   F4:24:BE:9F:6A:EB:30:CF:25:78:08:90:4F:E0:DC:E7:46:4C:1F:65
Certificate issuer:       /CN=217AAC1E0D7B6D92662F103316D5D4E67033B9F7
Certificate serial:       01AACF2260A4076A24D0267C2AB32292B4F6BB38
Authority key identifier: 21:7A:AC:1E:0D:7B:6D:92:66:2F:10:33:16:D5:D4:E6:70:33:B9:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/3137372e3132352e3230382e302f32322d3234203d3e20323632333534.roa
Signing time:             Thu 04 Apr 2024 07:48:33 +0000
ROA not before:           Thu 04 Apr 2024 07:43:33 +0000
ROA not after:            Thu 03 Apr 2025 07:48:33 +0000
asID:                     262354
IP address blocks:        177.125.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.crl
                          rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 08:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:aa:cf:22:60:a4:07:6a:24:d0:26:7c:2a:b3:22:92:b4:f6:bb:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=217AAC1E0D7B6D92662F103316D5D4E67033B9F7
        Validity
            Not Before: Apr  4 07:43:33 2024 GMT
            Not After : Apr  3 07:48:33 2025 GMT
        Subject: CN=F424BE9F6AEB30CF257808904FE0DCE7464C1F65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:71:4c:8a:82:7f:2e:92:fe:9d:b5:7e:f0:04:
                    66:d5:e6:1d:c7:35:12:93:91:4f:ec:b2:79:01:04:
                    0b:76:aa:15:81:f2:6d:f7:a3:38:46:b7:3d:c2:16:
                    60:62:2a:33:cc:a0:9d:3b:3f:c2:b0:fb:52:30:ac:
                    44:25:43:96:51:e0:d2:80:47:1c:88:1b:0d:34:34:
                    f6:e6:e0:06:d4:af:a3:28:ee:08:34:12:47:1f:83:
                    a0:29:f1:27:f9:66:30:47:0c:7c:14:bc:fd:6c:55:
                    fc:8f:19:0f:0b:67:1b:4a:c7:8f:db:3c:ba:51:13:
                    94:2d:f2:eb:b2:6d:98:62:83:d6:51:73:e2:a1:d4:
                    32:30:af:13:42:4c:00:bf:09:d7:e1:97:f1:bb:02:
                    30:9c:38:9a:e3:f8:41:1e:16:e0:b9:c5:d3:94:5f:
                    2d:76:fb:58:71:53:a8:8a:75:a7:90:d2:48:8f:3e:
                    e0:eb:e2:ac:08:7a:91:fa:04:12:06:38:d4:24:7f:
                    5e:51:8d:92:6b:37:de:c5:30:eb:3c:9a:27:a9:59:
                    01:bb:90:37:c6:ab:f5:96:d7:99:9b:40:b4:55:21:
                    84:ba:69:63:de:9e:7c:52:0a:00:13:43:49:17:bb:
                    22:16:a1:b8:8d:33:5a:9e:c7:57:c2:2b:ef:af:fb:
                    01:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:24:BE:9F:6A:EB:30:CF:25:78:08:90:4F:E0:DC:E7:46:4C:1F:65
            X509v3 Authority Key Identifier:
                keyid:21:7A:AC:1E:0D:7B:6D:92:66:2F:10:33:16:D5:D4:E6:70:33:B9:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/3137372e3132352e3230382e302f32322d3234203d3e20323632333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:88:51:a8:4d:1a:57:55:dc:a3:21:7e:6b:8b:68:ff:33:cb:
         0a:48:67:8a:06:24:fc:63:7b:51:0e:41:6e:3e:ce:2e:1e:84:
         af:1d:8e:85:ac:60:a0:9b:63:cd:93:3b:c3:cf:3a:ca:dc:90:
         74:45:1b:34:56:2a:ca:fc:35:49:3c:7b:e1:ed:ed:e7:0f:33:
         c5:97:f9:a7:b5:3e:20:e1:aa:c3:a8:08:80:c5:25:ea:5e:ec:
         6e:3f:6b:4f:df:25:78:bd:b5:3c:70:f2:50:58:d3:73:71:40:
         cc:5b:f6:da:10:10:f9:be:3f:51:c9:15:3c:36:0e:b6:12:23:
         67:13:a7:d8:6e:54:9a:b2:32:44:22:c4:23:63:73:35:4f:03:
         17:40:1d:f4:95:ac:73:3b:22:e4:9c:94:d9:d0:29:12:84:6b:
         5c:91:47:ba:fb:7c:1b:ac:67:2e:e3:59:50:c8:97:bd:10:e4:
         32:2e:55:f9:42:44:9a:49:6d:66:7b:83:e2:1a:11:a0:15:85:
         d3:c3:b0:af:16:39:7a:49:85:11:4a:9b:ca:01:0e:34:d9:c0:
         43:6a:cd:3a:97:53:8d:91:c3:6e:5d:be:70:f3:1b:08:92:ef:
         98:f5:33:c5:30:b4:4e:57:fe:5d:3f:14:8b:65:63:3d:5e:5c:
         d4:40:ae:67
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUAarPImCkB2ok0CZ8KrMikrT2uzgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE3QUFDMUUwRDdCNkQ5MjY2MkYxMDMzMTZENUQ0RTY3
MDMzQjlGNzAeFw0yNDA0MDQwNzQzMzNaFw0yNTA0MDMwNzQ4MzNaMDMxMTAvBgNV
BAMTKEY0MjRCRTlGNkFFQjMwQ0YyNTc4MDg5MDRGRTBEQ0U3NDY0QzFGNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBcUyKgn8ukv6dtX7wBGbV5h3H
NRKTkU/ssnkBBAt2qhWB8m33ozhGtz3CFmBiKjPMoJ07P8Kw+1IwrEQlQ5ZR4NKA
RxyIGw00NPbm4AbUr6Mo7gg0Ekcfg6Ap8Sf5ZjBHDHwUvP1sVfyPGQ8LZxtKx4/b
PLpRE5Qt8uuybZhig9ZRc+Kh1DIwrxNCTAC/Cdfhl/G7AjCcOJrj+EEeFuC5xdOU
Xy12+1hxU6iKdaeQ0kiPPuDr4qwIepH6BBIGONQkf15RjZJrN97FMOs8miepWQG7
kDfGq/WW15mbQLRVIYS6aWPennxSCgATQ0kXuyIWobiNM1qex1fCK++v+wHtAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU9CS+n2rrMM8leAiQT+Dc50ZMH2UwHwYDVR0j
BBgwFoAUIXqsHg17bZJmLxAzFtXU5nAzufcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjNLRzRtUDFRbjRjV1pYU3d1QTJtM1dFYThKWFVWTkZZQkczSHpLY0ZI
bVkvMS8yMTdBQUMxRTBEN0I2RDkyNjYyRjEwMzMxNkQ1RDRFNjcwMzNCOUY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxN0FBQzFFMEQ3QjZEOTI2
NjJGMTAzMzE2RDVENEU2NzAzM0I5RjcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzYzS0c0bVAxUW40Y1daWFN3dUEybTNXRWE4SlhVVk5GWUJHM0h6S2NGSG1ZLzEv
MzEzNzM3MmUzMTMyMzUyZTMyMzAzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMjMzMzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArF90DANBgkqhkiG9w0BAQsFAAOCAQEASYhR
qE0aV1XcoyF+a4to/zPLCkhnigYk/GN7UQ5Bbj7OLh6Erx2OhaxgoJtjzZM7w886
ytyQdEUbNFYqyvw1STx74e3t5w8zxZf5p7U+IOGqw6gIgMUl6l7sbj9rT98leL21
PHDyUFjTc3FAzFv22hAQ+b4/UckVPDYOthIjZxOn2G5UmrIyRCLEI2NzNU8DF0Ad
9JWsczsi5JyU2dApEoRrXJFHuvt8G6xnLuNZUMiXvRDkMi5V+UJEmkltZnuD4hoR
oBWF08OwrxY5ekmFEUqbygEONNnAQ2rNOpdTjZHDbl2+cPMbCJLvmPUzxTC0Tlf+
XT8Ui2VjPV5c1ECuZw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:19 2024 by rpki-client on console-ams.rpki-client.org