Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38342e302f32332d3233203d3e203533303437.roa
File:                     3137372e3130312e38342e302f32332d3233203d3e203533303437.roa (raw, json)
Hash identifier:          iViSNKXpfVdrr9ven5vhU7CyPuOSmbQ/9slElI9WZn4=
Subject key identifier:   53:DA:BB:7C:F3:D6:15:E8:4B:3A:80:D2:0A:90:1C:77:9B:A9:61:BB
Certificate issuer:       /CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
Certificate serial:       7EFEA1FB1B90D47B1DAE524F374298CE3615BADD
Authority key identifier: 40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38342e302f32332d3233203d3e203533303437.roa
Signing time:             Thu 04 Apr 2024 17:39:05 +0000
ROA not before:           Thu 04 Apr 2024 17:34:05 +0000
ROA not after:            Thu 03 Apr 2025 17:39:05 +0000
asID:                     53047
IP address blocks:        177.101.84.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:fe:a1:fb:1b:90:d4:7b:1d:ae:52:4f:37:42:98:ce:36:15:ba:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40654D1C88C090F47A51793F972DCFF8DCF3C699
        Validity
            Not Before: Apr  4 17:34:05 2024 GMT
            Not After : Apr  3 17:39:05 2025 GMT
        Subject: CN=53DABB7CF3D615E84B3A80D20A901C779BA961BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:39:9d:52:be:41:af:9a:f6:b1:da:2b:1a:0d:
                    07:97:b6:3a:19:90:1e:dd:47:80:13:e6:4f:6f:67:
                    6c:29:76:f3:6e:0c:b9:5e:d6:77:f5:6d:00:a0:be:
                    d1:cf:0e:48:68:63:a9:38:66:aa:93:ab:f7:83:03:
                    b2:00:0c:e2:36:9f:7c:f9:9e:0f:44:db:cf:6a:ff:
                    bb:55:ec:bf:b0:32:63:c4:56:a8:d7:49:b9:a4:1d:
                    46:b5:13:fb:cd:32:1d:62:c5:fa:8b:5e:e6:c0:3e:
                    53:27:81:09:22:9b:93:5f:aa:af:93:55:22:1b:57:
                    b2:09:18:c5:30:50:38:e2:dc:17:c9:a7:d9:a0:2b:
                    46:6f:cb:9b:86:65:22:bf:4e:0f:56:95:43:ba:d6:
                    58:36:42:42:a6:96:65:bc:b4:63:86:0f:f6:ef:ce:
                    05:91:0b:0c:51:9b:63:f7:02:f5:bf:b8:ef:90:de:
                    7c:ee:34:96:48:d4:72:ac:97:b5:73:bd:b2:ab:97:
                    fb:ee:e1:ec:90:b7:1a:aa:63:b7:b1:2a:eb:3b:ba:
                    b2:e7:f3:f0:a9:71:18:07:83:34:85:70:43:01:98:
                    63:3a:35:d9:86:54:cc:08:51:1e:92:94:f7:38:b6:
                    73:e3:7f:2a:57:07:9d:dc:fa:79:e2:b4:34:d2:b2:
                    ae:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:DA:BB:7C:F3:D6:15:E8:4B:3A:80:D2:0A:90:1C:77:9B:A9:61:BB
            X509v3 Authority Key Identifier:
                keyid:40:65:4D:1C:88:C0:90:F4:7A:51:79:3F:97:2D:CF:F8:DC:F3:C6:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40654D1C88C090F47A51793F972DCFF8DCF3C699.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/1/3137372e3130312e38342e302f32332d3233203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:03:6e:06:df:4e:78:7b:7c:e9:98:ac:5d:53:68:a3:e3:e8:
         ac:6b:c1:bb:a5:19:8e:a3:10:20:83:e4:94:4a:6c:bf:a0:91:
         4b:e6:e9:8d:fe:d7:e1:eb:fb:a3:4e:87:0f:90:0f:7c:6c:db:
         5a:af:15:f8:3e:a5:9f:3c:1f:b1:32:e5:3b:39:6e:de:a5:9a:
         cc:24:35:4d:b8:97:8c:47:24:d2:ff:af:f3:52:d8:70:ac:13:
         06:d4:db:6e:db:ae:8b:63:71:d4:a9:2d:50:fc:b4:2b:a5:57:
         85:73:c4:62:58:f0:34:bf:71:a2:cb:ad:13:ab:86:f8:9d:9f:
         a9:36:2c:d8:e3:64:23:6f:3e:b0:32:6a:c8:da:df:04:7d:ea:
         4c:c2:e3:59:e7:33:21:6d:a8:b1:49:79:75:09:d4:2a:fa:cc:
         89:29:c2:d7:02:9d:47:c4:6f:e6:a8:f6:79:07:dc:c2:fd:1f:
         e3:02:3d:0e:9e:2c:f2:34:86:ed:d4:d4:4c:b0:2d:6e:53:3d:
         d9:50:0d:c8:8b:eb:31:c3:bd:06:8d:f4:c9:db:c9:10:a5:d9:
         17:62:cd:6f:f5:92:9c:d7:6c:3b:49:27:59:47:4a:4c:e9:7a:
         81:6d:d6:53:ff:bb:8c:57:d5:f0:ae:5a:bc:46:9d:17:3f:23:
         dc:74:5a:11
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfv6h+xuQ1HsdrlJPN0KYzjYVut0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDA2NTREMUM4OEMwOTBGNDdBNTE3OTNGOTcyRENGRjhE
Q0YzQzY5OTAeFw0yNDA0MDQxNzM0MDVaFw0yNTA0MDMxNzM5MDVaMDMxMTAvBgNV
BAMTKDUzREFCQjdDRjNENjE1RTg0QjNBODBEMjBBOTAxQzc3OUJBOTYxQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClOZ1SvkGvmvax2isaDQeXtjoZ
kB7dR4AT5k9vZ2wpdvNuDLle1nf1bQCgvtHPDkhoY6k4ZqqTq/eDA7IADOI2n3z5
ng9E289q/7tV7L+wMmPEVqjXSbmkHUa1E/vNMh1ixfqLXubAPlMngQkim5Nfqq+T
VSIbV7IJGMUwUDji3BfJp9mgK0Zvy5uGZSK/Tg9WlUO61lg2QkKmlmW8tGOGD/bv
zgWRCwxRm2P3AvW/uO+Q3nzuNJZI1HKsl7VzvbKrl/vu4eyQtxqqY7exKus7urLn
8/CpcRgHgzSFcEMBmGM6NdmGVMwIUR6SlPc4tnPjfypXB53c+nnitDTSsq5xAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUU9q7fPPWFehLOoDSCpAcd5upYbswHwYDVR0j
BBgwFoAUQGVNHIjAkPR6UXk/ly3P+NzzxpkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlhIb21GaDJwQlJyMkFaeHdaZGJZcFRqcEx1Ujlxa1JlRHhDUVRTZFlC
SmcvMS80MDY1NEQxQzg4QzA5MEY0N0E1MTc5M0Y5NzJEQ0ZGOERDRjNDNjk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwNjU0RDFDODhDMDkwRjQ3
QTUxNzkzRjk3MkRDRkY4RENGM0M2OTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZYSG9tRmgycEJScjJBWnh3WmRiWXBUanBMdVI5cWtSZUR4Q1FUU2RZQkpnLzEv
MzEzNzM3MmUzMTMwMzEyZTM4MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMz
MzAzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsWVUMA0GCSqGSIb3DQEBCwUAA4IBAQBfA24G3054
e3zpmKxdU2ij4+isa8G7pRmOoxAgg+SUSmy/oJFL5umN/tfh6/ujTocPkA98bNta
rxX4PqWfPB+xMuU7OW7epZrMJDVNuJeMRyTS/6/zUthwrBMG1Ntu266LY3HUqS1Q
/LQrpVeFc8RiWPA0v3Giy60Tq4b4nZ+pNizY42Qjbz6wMmrI2t8EfepMwuNZ5zMh
baixSXl1CdQq+syJKcLXAp1HxG/mqPZ5B9zC/R/jAj0OnizyNIbt1NRMsC1uUz3Z
UA3Ii+sxw70GjfTJ28kQpdkXYs1v9ZKc12w7SSdZR0pM6XqBbdZT/7uMV9Xwrlq8
Rp0XPyPcdFoR
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:10 2024 by rpki-client on console-ams.rpki-client.org