Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3137372e38342e3233362e302f32332d3233203d3e203631363839.roa
File:                     3137372e38342e3233362e302f32332d3233203d3e203631363839.roa (raw, json)
Hash identifier:          qWQWelulpxgnN1NvvIrAK1Id+RacjHkfVc3PlDtf8Dg=
Subject key identifier:   44:60:83:DA:69:E4:B2:A1:98:5D:27:71:CF:91:DE:0B:02:6E:37:8F
Certificate issuer:       /CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
Certificate serial:       73469B8B0E209921CB016C9E4BC61F0203ADB54A
Authority key identifier: 10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3137372e38342e3233362e302f32332d3233203d3e203631363839.roa
Signing time:             Fri 23 Aug 2024 19:50:19 +0000
ROA not before:           Fri 23 Aug 2024 19:45:19 +0000
ROA not after:            Fri 22 Aug 2025 19:50:19 +0000
asID:                     61689
IP address blocks:        177.84.236.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl
                          rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:46:9b:8b:0e:20:99:21:cb:01:6c:9e:4b:c6:1f:02:03:ad:b5:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
        Validity
            Not Before: Aug 23 19:45:19 2024 GMT
            Not After : Aug 22 19:50:19 2025 GMT
        Subject: CN=446083DA69E4B2A1985D2771CF91DE0B026E378F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:eb:da:b8:ed:6b:25:0b:6b:75:56:27:af:19:
                    5d:d1:b7:c4:78:4a:ec:3b:76:6a:4d:81:a5:ab:29:
                    03:cb:c1:c5:55:1a:df:09:4e:09:c2:f0:a4:6f:8b:
                    85:5e:be:2d:7a:35:6b:73:e2:33:fc:99:76:aa:6c:
                    4a:15:5c:3f:8f:b3:b9:a2:59:c9:1a:81:12:70:80:
                    e8:c1:61:92:ba:5f:e2:9b:6f:e9:ca:be:68:be:e5:
                    9d:10:cb:b8:1b:ac:cd:10:83:27:ad:3b:e0:2f:00:
                    46:89:ac:f6:3b:2b:a4:90:4a:c3:5d:f7:e6:66:40:
                    ce:59:0a:2e:97:3e:7e:6a:74:59:02:02:9b:cc:05:
                    c0:8c:4e:57:5e:32:fd:3d:a9:db:71:40:86:63:6d:
                    af:b0:ae:78:b0:a6:17:9a:08:a7:17:db:cf:57:64:
                    00:57:8e:2a:34:39:3c:78:b5:c3:4e:59:b2:9f:8d:
                    90:82:de:fc:25:ce:12:4a:f4:ef:f3:40:d0:a4:1a:
                    c7:82:a3:da:1c:42:71:e3:1a:f9:49:aa:6f:76:06:
                    4e:b5:e9:88:a6:fb:94:a1:8d:19:53:67:17:60:d2:
                    4b:d1:9c:9e:27:ec:f3:18:fd:9b:89:bf:41:4b:1c:
                    d4:94:7e:1b:68:99:1d:04:d2:06:e9:da:6d:b3:03:
                    a6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:60:83:DA:69:E4:B2:A1:98:5D:27:71:CF:91:DE:0B:02:6E:37:8F
            X509v3 Authority Key Identifier:
                keyid:10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/3137372e38342e3233362e302f32332d3233203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:5b:c6:e2:6b:a5:27:ef:86:15:c9:21:ff:7a:8e:37:15:ff:
         fb:40:12:0e:77:aa:af:44:13:a1:b5:5c:fc:80:d7:a5:de:da:
         4a:43:4a:47:9a:ac:d8:73:6c:32:e5:49:32:d9:06:6b:12:51:
         81:c2:aa:f2:b6:13:f2:7b:1c:97:c0:6e:8a:10:a5:78:5c:2d:
         1b:e7:fc:45:47:59:6a:ef:25:b1:4b:77:ec:24:2c:5f:88:f1:
         b0:8d:81:8c:d1:1e:e2:d3:c0:c3:5d:10:62:09:51:ba:e4:e1:
         0c:91:a4:d1:89:85:df:97:d2:95:07:d3:39:9a:75:6b:9a:5f:
         ec:59:82:6b:c4:3c:d2:22:31:46:8f:2c:99:99:fd:28:62:7c:
         f0:b6:cc:b7:8d:3f:25:0b:19:4b:7b:dc:52:a7:4a:8f:d6:86:
         7e:ca:a7:44:90:d7:b8:fe:79:5c:62:b6:a3:f8:0d:70:ee:87:
         14:f4:b7:af:c1:af:7c:93:8d:05:08:46:42:bf:dc:c9:02:7b:
         bd:4a:ea:9a:92:80:28:96:9e:6a:f0:16:c6:f8:ef:35:37:ca:
         58:e5:1a:3e:fc:fb:9d:a7:c8:44:c4:6e:80:37:67:5f:e2:53:
         c7:db:2a:33:06:70:93:48:19:3d:03:14:1e:9b:81:0e:bf:f6:
         0a:d8:e3:b6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUc0abiw4gmSHLAWyeS8YfAgOttUowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBBRThDQkNBMDkyQkJEQUUzQzA2REY5OTQxRTRDMDBB
QjA2NTZGODAeFw0yNDA4MjMxOTQ1MTlaFw0yNTA4MjIxOTUwMTlaMDMxMTAvBgNV
BAMTKDQ0NjA4M0RBNjlFNEIyQTE5ODVEMjc3MUNGOTFERTBCMDI2RTM3OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt69q47WslC2t1VievGV3Rt8R4
Suw7dmpNgaWrKQPLwcVVGt8JTgnC8KRvi4Vevi16NWtz4jP8mXaqbEoVXD+Ps7mi
WckagRJwgOjBYZK6X+Kbb+nKvmi+5Z0Qy7gbrM0QgyetO+AvAEaJrPY7K6SQSsNd
9+ZmQM5ZCi6XPn5qdFkCApvMBcCMTldeMv09qdtxQIZjba+wrniwpheaCKcX289X
ZABXjio0OTx4tcNOWbKfjZCC3vwlzhJK9O/zQNCkGseCo9ocQnHjGvlJqm92Bk61
6Yim+5ShjRlTZxdg0kvRnJ4n7PMY/ZuJv0FLHNSUfhtomR0E0gbp2m2zA6bhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQURGCD2mnksqGYXSdxz5HeCwJuN48wHwYDVR0j
BBgwFoAUEK6MvKCSu9rjwG35lB5MAKsGVvgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODVud3A5c1BMdEwyNWlFTDFnNFIyZDlSenNtemtSVkNHM1d0ZXJFS1py
WHUvMC8xMEFFOENCQ0EwOTJCQkRBRTNDMDZERjk5NDFFNEMwMEFCMDY1NkY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEwQUU4Q0JDQTA5MkJCREFF
M0MwNkRGOTk0MUU0QzAwQUIwNjU2RjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg1bndwOXNQTHRMMjVpRUwxZzRSMmQ5UnpzbXprUlZDRzNXdGVyRUtaclh1LzAv
MzEzNzM3MmUzODM0MmUzMjMzMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNjMx
MzYzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsVTsMA0GCSqGSIb3DQEBCwUAA4IBAQBBW8bia6Un
74YVySH/eo43Ff/7QBIOd6qvRBOhtVz8gNel3tpKQ0pHmqzYc2wy5Uky2QZrElGB
wqrythPyexyXwG6KEKV4XC0b5/xFR1lq7yWxS3fsJCxfiPGwjYGM0R7i08DDXRBi
CVG65OEMkaTRiYXfl9KVB9M5mnVrml/sWYJrxDzSIjFGjyyZmf0oYnzwtsy3jT8l
CxlLe9xSp0qP1oZ+yqdEkNe4/nlcYraj+A1w7ocU9Levwa98k40FCEZCv9zJAnu9
SuqakoAolp5q8BbG+O81N8pY5Ro+/Pudp8hExG6AN2df4lPH2yozBnCTSBk9AxQe
m4EOv/YK2OO2
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:32 2024 by rpki-client on console-fra.rpki-client.org