Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38312e302f32342d3234203d3e203533303437.roa
File:                     3137372e3130312e38312e302f32342d3234203d3e203533303437.roa (raw, json)
Hash identifier:          hXmdVN1VGe5Wro7p72jmvQ1373zr/IACDStmDHCVRdM=
Subject key identifier:   DE:ED:7D:12:1F:82:44:CF:37:16:32:FF:BD:70:7E:44:48:E0:AD:87
Certificate issuer:       /CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
Certificate serial:       672CAA53DA0A4454CB42C713EF5B469E8C0571D4
Authority key identifier: 40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38312e302f32342d3234203d3e203533303437.roa
Signing time:             Thu 04 Apr 2024 17:39:04 +0000
ROA not before:           Thu 04 Apr 2024 17:34:04 +0000
ROA not after:            Thu 03 Apr 2025 17:39:04 +0000
asID:                     53047
IP address blocks:        177.101.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:2c:aa:53:da:0a:44:54:cb:42:c7:13:ef:5b:46:9e:8c:05:71:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
        Validity
            Not Before: Apr  4 17:34:04 2024 GMT
            Not After : Apr  3 17:39:04 2025 GMT
        Subject: CN=DEED7D121F8244CF371632FFBD707E4448E0AD87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b2:37:f0:99:3f:a7:2a:f4:dc:18:c8:e3:a9:
                    29:6d:08:08:ff:82:4d:ae:13:ce:6f:52:eb:e7:b9:
                    1c:64:6a:f3:0e:e6:dd:93:38:c5:1f:94:92:99:04:
                    ea:5f:9b:8c:c0:0e:96:9a:36:a6:b2:89:a6:31:73:
                    ba:65:b2:80:8e:46:db:4b:01:66:da:63:e3:fd:06:
                    ee:d0:3e:2e:50:3f:55:85:bc:7d:73:28:f5:0f:0b:
                    30:b4:3e:42:9e:85:4e:90:bd:d6:52:af:60:a2:01:
                    4e:54:bf:8e:6f:b7:88:c5:90:45:ae:9a:80:9c:ec:
                    fe:cd:8b:bc:91:3e:40:6d:a9:e7:95:ba:72:b1:81:
                    59:cf:9e:da:a9:e7:d3:4d:aa:5e:af:bd:d7:e0:78:
                    6e:96:3b:94:b7:39:ee:43:14:95:8b:6a:d6:56:0f:
                    56:0b:0e:40:b1:c2:e1:b1:c3:92:c1:d5:37:1e:cb:
                    01:58:cd:99:ce:76:57:28:9f:d0:9c:30:db:0d:37:
                    ae:26:15:24:bb:e5:97:34:2d:23:9f:e7:49:5b:dd:
                    f2:2f:ff:12:f5:3f:c8:9b:1e:80:fb:09:d7:19:89:
                    ce:d0:c3:c4:6d:c6:e7:2b:8d:51:0d:38:a6:89:c3:
                    1c:68:85:99:2f:66:94:60:53:d7:e5:e9:97:92:51:
                    8d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:ED:7D:12:1F:82:44:CF:37:16:32:FF:BD:70:7E:44:48:E0:AD:87
            X509v3 Authority Key Identifier:
                keyid:40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38312e302f32342d3234203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:17:d6:71:7d:b5:16:6d:2f:36:ca:a9:93:4a:a1:3a:54:fc:
         35:25:71:5b:67:5d:54:c8:16:40:0c:a6:0d:92:c3:a5:3a:19:
         94:fc:d5:6a:0f:21:05:02:52:30:be:af:d9:34:25:1f:eb:f5:
         a7:84:33:50:68:a3:a1:b0:8c:f6:2d:7c:2a:20:e8:b6:df:eb:
         eb:54:68:1a:69:00:ec:0f:0f:e4:7b:25:91:f4:7d:ee:f3:b9:
         82:fd:c9:74:48:e7:c4:a5:7c:18:e8:48:db:65:8d:dd:2e:45:
         ba:53:e9:cc:73:6a:2b:fc:a2:62:34:88:45:81:9f:27:15:26:
         86:bf:03:a8:7b:98:f3:1e:c1:59:c4:11:d4:36:ae:2a:ae:ab:
         f8:a7:8f:e2:34:8a:17:0b:8a:92:50:86:a8:00:58:69:27:5c:
         27:d3:ad:21:f7:d2:08:47:0e:02:2a:83:81:3d:02:20:e0:c8:
         b9:41:62:44:c8:f9:16:3c:44:24:26:98:f3:e6:59:13:e9:dd:
         57:69:5f:96:6c:c7:43:b3:ac:62:3e:99:4b:b3:58:d3:9b:78:
         e2:5b:aa:6a:22:3d:63:5a:49:75:a6:ca:95:7d:a3:af:19:f9:
         1e:b6:ea:38:3e:73:0f:4a:de:36:c8:0f:fa:44:0a:19:e4:c1:
         e5:31:82:4f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZyyqU9oKRFTLQscT71tGnowFcdQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDA2NTREMUM4OEMwOTBGNDdBNTE3OTNGOTcyRENGRjhE
Q0YzQzY5OTAeFw0yNDA0MDQxNzM0MDRaFw0yNTA0MDMxNzM5MDRaMDMxMTAvBgNV
BAMTKERFRUQ3RDEyMUY4MjQ0Q0YzNzE2MzJGRkJENzA3RTQ0NDhFMEFEODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzsjfwmT+nKvTcGMjjqSltCAj/
gk2uE85vUuvnuRxkavMO5t2TOMUflJKZBOpfm4zADpaaNqayiaYxc7plsoCORttL
AWbaY+P9Bu7QPi5QP1WFvH1zKPUPCzC0PkKehU6QvdZSr2CiAU5Uv45vt4jFkEWu
moCc7P7Ni7yRPkBtqeeVunKxgVnPntqp59NNql6vvdfgeG6WO5S3Oe5DFJWLatZW
D1YLDkCxwuGxw5LB1TceywFYzZnOdlcon9CcMNsNN64mFSS75Zc0LSOf50lb3fIv
/xL1P8ibHoD7CdcZic7Qw8RtxucrjVENOKaJwxxohZkvZpRgU9fl6ZeSUY1xAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU3u19Eh+CRM83FjL/vXB+REjgrYcwHwYDVR0j
BBgwFoAUQGVNHIjAkPR6UXk/ly3P+NzzxpkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlhIb21GaDJwQlJyMkFaeHdaZGJZcFRqcEx1Ujlxa1JlRHhDUVRTZFlC
SmcvMS80MDY1NEQxQzg4QzA5MEY0N0E1MTc5M0Y5NzJEQ0ZGOERDRjNDNjk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwNjU0RDFDODhDMDkwRjQ3
QTUxNzkzRjk3MkRDRkY4RENGM0M2OTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZYSG9tRmgycEJScjJBWnh3WmRiWXBUanBMdVI5cWtSZUR4Q1FUU2RZQkpnLzEv
MzEzNzM3MmUzMTMwMzEyZTM4MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMz
MzAzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsWVRMA0GCSqGSIb3DQEBCwUAA4IBAQBAF9ZxfbUW
bS82yqmTSqE6VPw1JXFbZ11UyBZADKYNksOlOhmU/NVqDyEFAlIwvq/ZNCUf6/Wn
hDNQaKOhsIz2LXwqIOi23+vrVGgaaQDsDw/keyWR9H3u87mC/cl0SOfEpXwY6Ejb
ZY3dLkW6U+nMc2or/KJiNIhFgZ8nFSaGvwOoe5jzHsFZxBHUNq4qrqv4p4/iNIoX
C4qSUIaoAFhpJ1wn060h99IIRw4CKoOBPQIg4Mi5QWJEyPkWPEQkJpjz5lkT6d1X
aV+WbMdDs6xiPplLs1jTm3jiW6pqIj1jWkl1psqVfaOvGfketuo4PnMPSt42yA/6
RAoZ5MHlMYJP
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:44 2024 by rpki-client on console-fra.rpki-client.org