Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e332e302f32342d3234203d3e20323632363432.roa
File:                     3137372e38372e332e302f32342d3234203d3e20323632363432.roa (raw, json)
Hash identifier:          tODepPWAcukNQMVKsE3Ja0ZjRUnplzIfscbdRomFzxY=
Subject key identifier:   09:8F:6C:6D:01:F6:DF:C2:A0:36:56:24:3F:9C:E7:6A:F9:94:76:C8
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       0A37D005F45C027B7336FB00958A0F859249712D
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e332e302f32342d3234203d3e20323632363432.roa
Signing time:             Thu 04 Apr 2024 03:24:12 +0000
ROA not before:           Thu 04 Apr 2024 03:19:12 +0000
ROA not after:            Thu 03 Apr 2025 03:24:12 +0000
asID:                     262642
IP address blocks:        177.87.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:37:d0:05:f4:5c:02:7b:73:36:fb:00:95:8a:0f:85:92:49:71:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Apr  4 03:19:12 2024 GMT
            Not After : Apr  3 03:24:12 2025 GMT
        Subject: CN=098F6C6D01F6DFC2A03656243F9CE76AF99476C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0b:f0:07:f6:0f:4b:9d:04:be:ee:3b:03:d7:
                    89:48:21:54:c8:4f:d6:20:f9:ed:41:21:b0:5b:41:
                    32:d3:7a:ab:7d:c4:b3:c3:2b:c5:07:54:41:0e:86:
                    8f:0b:2c:e3:b1:07:a2:1d:31:08:4c:74:a6:93:44:
                    2d:48:a2:dc:e5:17:f6:ea:d3:02:56:23:3b:d1:80:
                    45:ab:79:cb:86:3f:4b:c6:31:7c:df:a4:aa:5e:0a:
                    f0:8d:21:a6:10:b5:7e:93:45:bd:07:ce:76:93:40:
                    9b:a8:23:7a:c5:5a:e9:97:48:32:76:52:06:a0:d9:
                    d6:c0:71:c8:50:d7:52:a9:21:f1:19:8a:d4:ad:0a:
                    c3:a9:d4:50:b5:c2:9d:58:61:2d:5d:cf:18:61:87:
                    d2:3b:84:77:33:59:76:b3:3f:06:35:52:f8:22:69:
                    fb:7c:90:98:c9:cb:80:5c:3b:8c:50:ee:32:d6:c5:
                    e3:d5:7f:96:1c:0a:f4:39:69:e7:55:27:d3:5a:02:
                    1f:1d:2f:d5:8f:33:82:ee:47:98:c4:09:db:41:c2:
                    86:00:30:a2:e4:8b:ef:7c:50:31:91:14:ab:c1:8f:
                    4b:d7:02:aa:a6:4b:26:8b:11:91:27:63:c0:96:09:
                    c4:3b:48:37:6a:62:99:52:78:d1:30:3b:00:56:ad:
                    4e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:8F:6C:6D:01:F6:DF:C2:A0:36:56:24:3F:9C:E7:6A:F9:94:76:C8
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137372e38372e332e302f32342d3234203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:81:13:9f:5d:2e:32:44:5d:6e:7f:23:49:20:5c:e6:72:e3:
         72:58:bc:1f:d8:91:6d:c6:5d:a7:23:27:f8:80:8d:3b:35:7a:
         40:4c:d6:52:ac:31:a2:61:6f:1e:2b:0c:c7:b4:3a:4d:22:a3:
         ac:21:37:ae:9d:29:42:83:37:99:1a:59:c6:33:b9:3f:a7:32:
         34:de:52:91:38:74:4f:66:cb:4f:6b:b4:e5:48:1c:cf:84:ed:
         f0:39:4d:c7:96:e6:5d:3b:68:07:73:c5:fb:aa:26:c3:f1:38:
         97:80:3f:f1:b6:d7:04:4b:aa:be:e5:5f:08:5b:7f:7e:3c:86:
         6c:e6:88:ae:3d:a0:42:1f:1b:c6:39:4a:b9:8f:f8:d5:c9:cd:
         dd:3a:c5:27:92:b7:cc:de:5d:70:54:b8:bf:e4:5c:62:43:a1:
         b8:51:6e:d2:8a:26:07:7d:96:80:8e:8f:64:b9:b9:66:18:3e:
         22:91:a1:58:b1:ed:57:bd:b3:8d:8c:6e:57:04:24:3d:98:f7:
         a1:42:db:65:5c:d0:fb:7a:17:36:b0:4b:c0:2c:da:05:ad:49:
         4f:60:06:a6:23:0c:99:12:b6:ac:08:e5:cd:21:ed:00:44:83:
         d2:ba:b5:af:c1:46:5d:11:35:25:4e:35:7d:97:50:75:15:36:
         10:e1:25:55
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUCjfQBfRcAntzNvsAlYoPhZJJcS0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ4RDhEOTZGMUZGRUM1RjIwQzZGMUY3MzNFRTY5NTAz
RTcxNjc0NTAeFw0yNDA0MDQwMzE5MTJaFw0yNTA0MDMwMzI0MTJaMDMxMTAvBgNV
BAMTKDA5OEY2QzZEMDFGNkRGQzJBMDM2NTYyNDNGOUNFNzZBRjk5NDc2QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlC/AH9g9LnQS+7jsD14lIIVTI
T9Yg+e1BIbBbQTLTeqt9xLPDK8UHVEEOho8LLOOxB6IdMQhMdKaTRC1IotzlF/bq
0wJWIzvRgEWrecuGP0vGMXzfpKpeCvCNIaYQtX6TRb0HznaTQJuoI3rFWumXSDJ2
Ugag2dbAcchQ11KpIfEZitStCsOp1FC1wp1YYS1dzxhhh9I7hHczWXazPwY1Uvgi
aft8kJjJy4BcO4xQ7jLWxePVf5YcCvQ5aedVJ9NaAh8dL9WPM4LuR5jECdtBwoYA
MKLki+98UDGRFKvBj0vXAqqmSyaLEZEnY8CWCcQ7SDdqYplSeNEwOwBWrU75AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUCY9sbQH238KgNlYkP5znavmUdsgwHwYDVR0j
BBgwFoAUxI2NlvH/7F8gxvH3M+5pUD5xZ0UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjlHd2FpakNzZGExTm1EWG5jWGlkeDJyTGZiTWFtd3VKVXlUNFNvczUy
YWYvMS9DNDhEOEQ5NkYxRkZFQzVGMjBDNkYxRjczM0VFNjk1MDNFNzE2NzQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M0OEQ4RDk2RjFGRkVDNUYy
MEM2RjFGNzMzRUU2OTUwM0U3MTY3NDUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY5R3dhaWpDc2RhMU5tRFhuY1hpZHgyckxmYk1hbXd1SlV5VDRTb3M1MmFmLzEv
MzEzNzM3MmUzODM3MmUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMjM2
MzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALFXAzANBgkqhkiG9w0BAQsFAAOCAQEASoETn10uMkRd
bn8jSSBc5nLjcli8H9iRbcZdpyMn+ICNOzV6QEzWUqwxomFvHisMx7Q6TSKjrCE3
rp0pQoM3mRpZxjO5P6cyNN5SkTh0T2bLT2u05Ugcz4Tt8DlNx5bmXTtoB3PF+6om
w/E4l4A/8bbXBEuqvuVfCFt/fjyGbOaIrj2gQh8bxjlKuY/41cnN3TrFJ5K3zN5d
cFS4v+RcYkOhuFFu0oomB32WgI6PZLm5Zhg+IpGhWLHtV72zjYxuVwQkPZj3oULb
ZVzQ+3oXNrBLwCzaBa1JT2AGpiMMmRK2rAjlzSHtAESD0rq1r8FGXRE1JU41fZdQ
dRU2EOElVQ==
-----END CERTIFICATE-----
Generated at Sat Sep 28 06:35:33 2024 by rpki-client on console-ams.rpki-client.org