Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3133382e33362e38382e302f32322d3234203d3e203238323934.roa
File:                     3133382e33362e38382e302f32322d3234203d3e203238323934.roa (raw, json)
Hash identifier:          o7uh8FEDVB+mUFrsK6nQIriRyYRsprSnZzeDlfIQWVU=
Subject key identifier:   F5:71:A4:A4:07:0D:AE:46:58:E0:A7:60:48:21:C5:D0:13:07:A0:8E
Certificate issuer:       /CN=77F99B6CA31CA48560A700A53D4385030C475345
Certificate serial:       60E8220796A96058801DDD917856AF34A937FF1B
Authority key identifier: 77:F9:9B:6C:A3:1C:A4:85:60:A7:00:A5:3D:43:85:03:0C:47:53:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3133382e33362e38382e302f32322d3234203d3e203238323934.roa
Signing time:             Thu 11 Jul 2024 11:57:11 +0000
ROA not before:           Thu 11 Jul 2024 11:52:11 +0000
ROA not after:            Thu 10 Jul 2025 11:57:11 +0000
asID:                     28294
IP address blocks:        138.36.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.crl
                          rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e8:22:07:96:a9:60:58:80:1d:dd:91:78:56:af:34:a9:37:ff:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F99B6CA31CA48560A700A53D4385030C475345
        Validity
            Not Before: Jul 11 11:52:11 2024 GMT
            Not After : Jul 10 11:57:11 2025 GMT
        Subject: CN=F571A4A4070DAE4658E0A7604821C5D01307A08E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e5:a3:67:89:21:2c:83:a6:24:25:c8:29:59:
                    3c:7c:01:a0:0a:65:cf:95:e1:3b:17:1a:93:db:a8:
                    92:06:b8:60:25:40:28:b2:6f:4a:8e:6f:5a:64:af:
                    ed:37:e9:f5:9d:51:0f:65:0d:ec:b9:3b:ba:df:d7:
                    cb:83:c5:cd:31:f2:76:19:f3:76:21:75:25:b7:26:
                    3c:04:94:8a:9d:da:69:52:58:07:83:9c:95:9d:9d:
                    c7:78:5d:05:14:95:d0:a4:d7:9b:9e:9b:db:d7:cc:
                    b2:65:7d:41:70:fc:a7:0b:45:e1:b8:31:a5:b7:de:
                    f9:0d:45:00:2e:e7:89:c0:03:00:98:c5:bb:2f:18:
                    de:68:4e:9b:14:6e:1b:f3:cc:26:ec:a6:99:b4:a4:
                    a5:c9:0e:9f:43:e1:c4:f7:0c:7b:88:45:c1:0c:84:
                    09:b6:93:eb:86:90:4a:3a:98:b4:93:36:bd:78:54:
                    92:8f:e8:29:91:47:3b:1c:07:a6:e0:5c:97:c4:ac:
                    b1:3d:95:33:23:b1:92:ad:9c:a7:da:17:7b:ed:67:
                    f2:4d:49:c9:33:a3:b2:d8:fd:16:f6:57:cb:8f:4b:
                    ce:28:df:e9:8d:0c:a3:dd:ba:26:02:80:80:d0:44:
                    6d:5f:02:88:b6:fe:1b:ec:59:8f:85:a5:a8:f1:00:
                    00:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:71:A4:A4:07:0D:AE:46:58:E0:A7:60:48:21:C5:D0:13:07:A0:8E
            X509v3 Authority Key Identifier:
                keyid:77:F9:9B:6C:A3:1C:A4:85:60:A7:00:A5:3D:43:85:03:0C:47:53:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/77F99B6CA31CA48560A700A53D4385030C475345.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77F99B6CA31CA48560A700A53D4385030C475345.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6YbJzQW5LM9JXgKJg7BAp7nBCnBFWk6TXSxR7hwCNB4c/0/3133382e33362e38382e302f32322d3234203d3e203238323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:de:d4:6e:7a:8b:6f:df:44:3a:04:06:01:f1:59:a5:f5:1f:
         5d:40:60:97:8b:e3:7c:46:f0:ef:55:b6:fc:82:1b:fe:4f:e7:
         43:d5:c6:a6:5f:5a:68:dd:dd:62:a6:a0:83:7f:e7:78:eb:2a:
         7a:0d:42:78:ad:62:9f:5c:18:2c:66:2a:68:24:b8:45:5c:67:
         2d:e4:1f:2a:e3:23:8f:19:f3:da:74:50:7f:6d:20:45:09:7c:
         36:ba:8c:6e:6f:c1:61:92:94:88:39:23:06:a7:c9:d6:1a:fc:
         c4:9d:1c:4b:01:ff:d6:18:dd:b6:af:45:20:0d:da:f7:72:c9:
         ee:28:c1:4b:bb:23:30:c8:7e:ab:53:1c:a5:f7:9f:0c:59:47:
         ec:a3:27:7e:92:a5:a8:12:d3:23:8d:72:bf:d0:82:e7:f3:09:
         f6:13:2b:11:b6:9d:df:55:77:fc:5c:e6:f9:b8:30:6e:f4:09:
         f2:c3:94:6e:ca:fb:c7:c1:fa:44:4b:79:bb:81:10:79:7d:25:
         bc:57:6c:f5:2a:06:aa:1d:d4:e8:b8:87:ae:3e:34:27:c0:09:
         ac:fb:87:ea:26:65:46:b4:5f:c5:64:16:b1:9e:a1:d2:74:96:
         89:d3:98:b5:ff:92:a8:60:40:f7:42:9b:06:9b:2d:6a:61:6a:
         ea:6a:e3:4e
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUYOgiB5apYFiAHd2ReFavNKk3/xswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzdGOTlCNkNBMzFDQTQ4NTYwQTcwMEE1M0Q0Mzg1MDMw
QzQ3NTM0NTAeFw0yNDA3MTExMTUyMTFaFw0yNTA3MTAxMTU3MTFaMDMxMTAvBgNV
BAMTKEY1NzFBNEE0MDcwREFFNDY1OEUwQTc2MDQ4MjFDNUQwMTMwN0EwOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR5aNniSEsg6YkJcgpWTx8AaAK
Zc+V4TsXGpPbqJIGuGAlQCiyb0qOb1pkr+036fWdUQ9lDey5O7rf18uDxc0x8nYZ
83YhdSW3JjwElIqd2mlSWAeDnJWdncd4XQUUldCk15uem9vXzLJlfUFw/KcLReG4
MaW33vkNRQAu54nAAwCYxbsvGN5oTpsUbhvzzCbsppm0pKXJDp9D4cT3DHuIRcEM
hAm2k+uGkEo6mLSTNr14VJKP6CmRRzscB6bgXJfErLE9lTMjsZKtnKfaF3vtZ/JN
Sckzo7LY/Rb2V8uPS84o3+mNDKPduiYCgIDQRG1fAoi2/hvsWY+FpajxAAAnAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU9XGkpAcNrkZY4KdgSCHF0BMHoI4wHwYDVR0j
BBgwFoAUd/mbbKMcpIVgpwClPUOFAwxHU0UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlliSnpRVzVMTTlKWGdLSmc3QkFwN25CQ25CRldrNlRYU3hSN2h3Q05C
NGMvMC83N0Y5OUI2Q0EzMUNBNDg1NjBBNzAwQTUzRDQzODUwMzBDNDc1MzQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc3Rjk5QjZDQTMxQ0E0ODU2
MEE3MDBBNTNENDM4NTAzMEM0NzUzNDUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZZYkp6UVc1TE05SlhnS0pnN0JBcDduQkNuQkZXazZUWFN4Ujdod0NOQjRjLzAv
MzEzMzM4MmUzMzM2MmUzODM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzODMy
MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAookWDANBgkqhkiG9w0BAQsFAAOCAQEAad7UbnqLb99E
OgQGAfFZpfUfXUBgl4vjfEbw71W2/IIb/k/nQ9XGpl9aaN3dYqagg3/neOsqeg1C
eK1in1wYLGYqaCS4RVxnLeQfKuMjjxnz2nRQf20gRQl8NrqMbm/BYZKUiDkjBqfJ
1hr8xJ0cSwH/1hjdtq9FIA3a93LJ7ijBS7sjMMh+q1McpfefDFlH7KMnfpKlqBLT
I41yv9CC5/MJ9hMrEbad31V3/Fzm+bgwbvQJ8sOUbsr7x8H6REt5u4EQeX0lvFds
9SoGqh3U6LiHrj40J8AJrPuH6iZlRrRfxWQWsZ6h0nSWidOYtf+SqGBA90KbBpst
amFq6mrjTg==
-----END CERTIFICATE-----
Generated at Mon Nov 25 09:02:14 2024 by rpki-client on console-ams.rpki-client.org