Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38342e302f32322d3232203d3e203533303437.roa
File:                     3137372e3130312e38342e302f32322d3232203d3e203533303437.roa (raw, json)
Hash identifier:          P5oxFd7wA0nM2EBwwvJkRMd6jJaipyKmW/FEyku7KiE=
Subject key identifier:   B7:12:56:5A:4B:C2:2B:2E:CB:6D:20:5D:80:69:F2:BB:C4:A3:36:D9
Certificate issuer:       /CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
Certificate serial:       0E6811E56D8B06A5DD92BC453EA501D2499C6BE1
Authority key identifier: 40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38342e302f32322d3232203d3e203533303437.roa
Signing time:             Thu 04 Apr 2024 17:39:04 +0000
ROA not before:           Thu 04 Apr 2024 17:34:04 +0000
ROA not after:            Thu 03 Apr 2025 17:39:04 +0000
asID:                     53047
IP address blocks:        177.101.84.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:68:11:e5:6d:8b:06:a5:dd:92:bc:45:3e:a5:01:d2:49:9c:6b:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
        Validity
            Not Before: Apr  4 17:34:04 2024 GMT
            Not After : Apr  3 17:39:04 2025 GMT
        Subject: CN=B712565A4BC22B2ECB6D205D8069F2BBC4A336D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:1c:ae:7a:2d:97:2e:65:0d:f2:0e:68:38:11:
                    16:09:5a:89:bf:94:d7:c5:22:98:36:5c:e6:37:32:
                    dd:89:ef:fd:7f:1f:eb:4c:33:b2:62:e2:b0:22:b7:
                    ac:26:2a:b4:6c:5e:81:a5:65:2b:f1:b3:e8:c6:51:
                    3c:1b:4d:da:c4:9e:08:ed:3c:2b:3e:ee:78:34:71:
                    53:87:ad:94:a6:3a:60:22:23:fb:8f:22:b5:bd:c0:
                    bb:02:f3:bb:4f:92:80:12:64:8c:34:db:2b:34:22:
                    75:37:13:87:93:d5:b2:96:78:8b:8a:c7:dd:3b:29:
                    08:77:43:35:15:c8:89:11:08:22:9a:22:43:0c:37:
                    83:e3:c9:02:4f:62:86:78:e2:f2:2b:40:5f:82:c0:
                    ba:2f:36:37:39:d2:49:b5:9b:8c:4f:c0:43:31:dd:
                    34:b4:92:ee:57:65:89:20:ad:10:cd:ef:28:b0:80:
                    13:69:b2:3d:dd:ae:f8:a2:6f:7f:04:80:40:cb:01:
                    52:53:af:50:89:ff:e1:b4:4e:9e:a2:7b:53:a1:d6:
                    11:3a:7a:ce:2b:9a:eb:bc:d6:68:f2:51:80:90:ce:
                    2a:d7:ba:4f:17:63:49:84:d0:56:f7:75:5c:c4:0f:
                    74:97:d9:1e:47:2f:c7:74:3f:b5:6c:f6:3d:bd:0a:
                    8c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:12:56:5A:4B:C2:2B:2E:CB:6D:20:5D:80:69:F2:BB:C4:A3:36:D9
            X509v3 Authority Key Identifier:
                keyid:40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38342e302f32322d3232203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:28:00:9b:fd:09:6d:2b:ae:79:70:00:c0:b6:0e:b1:2e:0f:
         97:c5:16:af:6f:84:1c:dd:6d:e7:0f:fa:0f:b9:6a:3f:a5:27:
         11:45:c9:b8:57:bb:d7:4a:e4:d9:55:ed:7c:01:d0:2d:02:9d:
         35:b7:67:95:48:e3:01:41:fb:e0:1d:e9:09:3a:f4:04:2e:40:
         30:40:b6:07:d3:92:7c:08:14:8d:33:40:90:22:e5:b1:87:1f:
         48:21:e9:97:0d:2c:bc:92:1c:d2:89:25:10:1c:bc:3c:35:ce:
         ee:5d:f0:79:c8:00:60:b2:d2:e2:c5:b5:99:2e:27:03:d6:78:
         3d:68:87:f3:60:fc:21:bd:88:77:c2:73:c8:99:5d:e1:ac:2c:
         0a:88:41:f6:67:f2:9f:47:f4:ea:4b:a9:35:84:94:84:cd:7e:
         57:6a:6d:cd:6d:7b:c0:42:79:5f:a0:c4:22:e0:67:66:a1:56:
         fb:10:68:c2:11:33:25:b2:7b:b9:a0:aa:10:a1:9e:ed:ac:f9:
         08:7c:eb:19:d6:df:50:79:7f:86:ab:b8:a8:3c:40:87:a3:7c:
         34:6c:c2:17:55:42:1d:63:cd:3a:69:a7:3d:99:c7:8d:97:14:
         a0:e9:20:3d:80:9d:07:0e:6e:16:bd:f7:0e:21:39:53:e5:18:
         43:e6:5f:c1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUDmgR5W2LBqXdkrxFPqUB0kmca+EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDA2NTREMUM4OEMwOTBGNDdBNTE3OTNGOTcyRENGRjhE
Q0YzQzY5OTAeFw0yNDA0MDQxNzM0MDRaFw0yNTA0MDMxNzM5MDRaMDMxMTAvBgNV
BAMTKEI3MTI1NjVBNEJDMjJCMkVDQjZEMjA1RDgwNjlGMkJCQzRBMzM2RDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzHK56LZcuZQ3yDmg4ERYJWom/
lNfFIpg2XOY3Mt2J7/1/H+tMM7Ji4rAit6wmKrRsXoGlZSvxs+jGUTwbTdrEngjt
PCs+7ng0cVOHrZSmOmAiI/uPIrW9wLsC87tPkoASZIw02ys0InU3E4eT1bKWeIuK
x907KQh3QzUVyIkRCCKaIkMMN4PjyQJPYoZ44vIrQF+CwLovNjc50km1m4xPwEMx
3TS0ku5XZYkgrRDN7yiwgBNpsj3drviib38EgEDLAVJTr1CJ/+G0Tp6ie1Oh1hE6
es4rmuu81mjyUYCQzirXuk8XY0mE0Fb3dVzED3SX2R5HL8d0P7Vs9j29CoxRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUtxJWWkvCKy7LbSBdgGnyu8SjNtkwHwYDVR0j
BBgwFoAUQGVNHIjAkPR6UXk/ly3P+NzzxpkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlhIb21GaDJwQlJyMkFaeHdaZGJZcFRqcEx1Ujlxa1JlRHhDUVRTZFlC
SmcvMS80MDY1NEQxQzg4QzA5MEY0N0E1MTc5M0Y5NzJEQ0ZGOERDRjNDNjk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwNjU0RDFDODhDMDkwRjQ3
QTUxNzkzRjk3MkRDRkY4RENGM0M2OTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZYSG9tRmgycEJScjJBWnh3WmRiWXBUanBMdVI5cWtSZUR4Q1FUU2RZQkpnLzEv
MzEzNzM3MmUzMTMwMzEyZTM4MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTMz
MzAzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsWVUMA0GCSqGSIb3DQEBCwUAA4IBAQBCKACb/Qlt
K655cADAtg6xLg+XxRavb4Qc3W3nD/oPuWo/pScRRcm4V7vXSuTZVe18AdAtAp01
t2eVSOMBQfvgHekJOvQELkAwQLYH05J8CBSNM0CQIuWxhx9IIemXDSy8khzSiSUQ
HLw8Nc7uXfB5yABgstLixbWZLicD1ng9aIfzYPwhvYh3wnPImV3hrCwKiEH2Z/Kf
R/TqS6k1hJSEzX5Xam3NbXvAQnlfoMQi4GdmoVb7EGjCETMlsnu5oKoQoZ7trPkI
fOsZ1t9QeX+Gq7ioPECHo3w0bMIXVUIdY806aac9mceNlxSg6SA9gJ0HDm4WvfcO
ITlT5RhD5l/B
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:44 2024 by rpki-client on console-fra.rpki-client.org