Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/3137372e37312e33322e302f32302d3234203d3e203533303232.roa
File:                     3137372e37312e33322e302f32302d3234203d3e203533303232.roa (raw, json)
Hash identifier:          FhMCyAoyMeM+OuSpFhZ/JiCe1WpgIF8zyGybBs3Zb9Y=
Subject key identifier:   68:A3:38:20:13:C1:5C:69:3E:F2:76:2C:21:E0:17:7C:A4:92:30:28
Certificate issuer:       /CN=93E4BA76EC60DA98DE98103D4C88131B429F3326
Certificate serial:       63E470BB116EE95D11285C30E34FD1879F38D6AD
Authority key identifier: 93:E4:BA:76:EC:60:DA:98:DE:98:10:3D:4C:88:13:1B:42:9F:33:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93E4BA76EC60DA98DE98103D4C88131B429F3326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/3137372e37312e33322e302f32302d3234203d3e203533303232.roa
Signing time:             Thu 04 Apr 2024 09:46:32 +0000
ROA not before:           Thu 04 Apr 2024 09:41:32 +0000
ROA not after:            Thu 03 Apr 2025 09:46:32 +0000
asID:                     53022
IP address blocks:        177.71.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/93E4BA76EC60DA98DE98103D4C88131B429F3326.crl
                          rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/93E4BA76EC60DA98DE98103D4C88131B429F3326.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93E4BA76EC60DA98DE98103D4C88131B429F3326.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e4:70:bb:11:6e:e9:5d:11:28:5c:30:e3:4f:d1:87:9f:38:d6:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E4BA76EC60DA98DE98103D4C88131B429F3326
        Validity
            Not Before: Apr  4 09:41:32 2024 GMT
            Not After : Apr  3 09:46:32 2025 GMT
        Subject: CN=68A3382013C15C693EF2762C21E0177CA4923028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:43:bd:26:a6:77:c5:9d:e6:1d:94:08:75:ed:
                    a6:27:35:82:03:2c:69:f2:e1:34:18:be:d1:20:85:
                    ba:8a:d7:b4:97:56:50:ed:7f:b0:f2:94:18:df:12:
                    e5:44:70:49:97:6e:c5:d4:08:61:92:e3:7e:9f:1d:
                    59:42:a6:a9:2b:a1:c8:c1:19:42:20:bb:13:45:e4:
                    23:a9:54:0f:c6:5d:bf:5b:75:54:9c:89:8d:90:f2:
                    fe:45:ba:95:c2:78:0e:a3:cc:e8:21:84:65:37:eb:
                    40:bd:dc:1e:15:91:4d:c0:4d:bf:8a:7f:99:1f:e9:
                    07:18:a1:87:18:41:d8:4a:07:a4:7b:ef:2d:b0:be:
                    1d:e1:e9:9a:85:8b:f8:39:0c:2f:4f:42:d9:33:33:
                    67:b7:c7:d8:00:d3:00:5b:3f:e0:39:1b:c5:fa:81:
                    a4:b5:12:ca:d4:4d:cc:a6:d5:d6:0d:fd:d1:ff:38:
                    51:0c:b9:01:51:13:59:e7:77:bd:c8:b6:c9:3c:21:
                    a6:e6:d9:09:4d:30:e6:19:83:69:60:ad:91:52:13:
                    69:c9:8a:f4:bc:f2:18:a1:12:58:50:8c:d2:5b:39:
                    df:11:ff:c8:80:ff:20:81:de:d2:30:f7:fe:06:cd:
                    e2:09:a5:f6:fa:12:7d:be:7c:2e:c6:f2:d9:90:fa:
                    87:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A3:38:20:13:C1:5C:69:3E:F2:76:2C:21:E0:17:7C:A4:92:30:28
            X509v3 Authority Key Identifier:
                keyid:93:E4:BA:76:EC:60:DA:98:DE:98:10:3D:4C:88:13:1B:42:9F:33:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/93E4BA76EC60DA98DE98103D4C88131B429F3326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93E4BA76EC60DA98DE98103D4C88131B429F3326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8DFFaWJrZQzAk1o4S5oVY5v2pExFAERWfQcpn2aHzAaW/1/3137372e37312e33322e302f32302d3234203d3e203533303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         26:a7:45:8b:21:61:f3:62:cc:5a:bf:59:02:8e:70:29:a0:68:
         83:8f:bf:f7:47:30:18:b3:04:75:8c:bb:dd:75:d1:27:0d:82:
         1e:50:50:1d:d3:c5:c3:a0:d7:6f:62:b5:43:29:3a:81:2e:f2:
         4d:6c:61:d4:71:a2:3a:98:a0:05:ce:6e:5c:03:3c:1a:b0:84:
         4d:83:62:c4:fe:6f:7a:f9:02:05:a1:40:9f:e3:f5:35:7f:6e:
         72:78:db:53:e8:8e:6f:67:ff:2c:f8:16:c7:06:34:96:9f:70:
         71:69:46:e1:b7:24:58:d1:e7:0f:69:d7:50:4e:3f:97:33:ab:
         13:ef:3a:91:11:fb:94:89:a9:82:92:6d:3b:88:24:4d:5b:62:
         e4:6f:7f:b7:d5:56:96:e0:b8:d7:ee:4d:03:55:c6:02:6f:79:
         15:93:8b:0b:0f:b3:3e:dd:1b:33:e7:5e:f1:ff:d6:bc:e9:7e:
         c0:d6:45:d4:ef:47:59:6f:ce:cd:bb:80:8f:8e:b4:b0:10:41:
         71:6d:fe:7d:98:a5:61:cc:e5:b9:48:73:8e:f7:ed:d9:01:2e:
         8b:18:23:9b:5d:7a:3e:b3:65:e6:c1:ae:47:25:71:d8:19:e3:
         aa:32:ff:b2:18:42:f3:2f:a2:95:52:f9:b2:0d:97:55:73:0d:
         ea:54:58:8a
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUY+RwuxFu6V0RKFww40/Rh5841q0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNFNEJBNzZFQzYwREE5OERFOTgxMDNENEM4ODEzMUI0
MjlGMzMyNjAeFw0yNDA0MDQwOTQxMzJaFw0yNTA0MDMwOTQ2MzJaMDMxMTAvBgNV
BAMTKDY4QTMzODIwMTNDMTVDNjkzRUYyNzYyQzIxRTAxNzdDQTQ5MjMwMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Q70mpnfFneYdlAh17aYnNYID
LGny4TQYvtEghbqK17SXVlDtf7DylBjfEuVEcEmXbsXUCGGS436fHVlCpqkrocjB
GUIguxNF5COpVA/GXb9bdVSciY2Q8v5FupXCeA6jzOghhGU360C93B4VkU3ATb+K
f5kf6QcYoYcYQdhKB6R77y2wvh3h6ZqFi/g5DC9PQtkzM2e3x9gA0wBbP+A5G8X6
gaS1EsrUTcym1dYN/dH/OFEMuQFRE1nnd73Itsk8Iabm2QlNMOYZg2lgrZFSE2nJ
ivS88hihElhQjNJbOd8R/8iA/yCB3tIw9/4GzeIJpfb6En2+fC7G8tmQ+ofBAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUaKM4IBPBXGk+8nYsIeAXfKSSMCgwHwYDVR0j
BBgwFoAUk+S6duxg2pjemBA9TIgTG0KfMyYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOERGRmFXSnJaUXpBazFvNFM1b1ZZNXYycEV4RkFFUldmUWNwbjJhSHpB
YVcvMS85M0U0QkE3NkVDNjBEQTk4REU5ODEwM0Q0Qzg4MTMxQjQyOUYzMzI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzRTRCQTc2RUM2MERBOThE
RTk4MTAzRDRDODgxMzFCNDI5RjMzMjYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhERkZhV0pyWlF6QWsxbzRTNW9WWTV2MnBFeEZBRVJXZlFjcG4yYUh6QWFXLzEv
MzEzNzM3MmUzNzMxMmUzMzMyMmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzUzMzMw
MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBLFHIDANBgkqhkiG9w0BAQsFAAOCAQEAJqdFiyFh82LM
Wr9ZAo5wKaBog4+/90cwGLMEdYy73XXRJw2CHlBQHdPFw6DXb2K1Qyk6gS7yTWxh
1HGiOpigBc5uXAM8GrCETYNixP5vevkCBaFAn+P1NX9ucnjbU+iOb2f/LPgWxwY0
lp9wcWlG4bckWNHnD2nXUE4/lzOrE+86kRH7lImpgpJtO4gkTVti5G9/t9VWluC4
1+5NA1XGAm95FZOLCw+zPt0bM+de8f/WvOl+wNZF1O9HWW/OzbuAj460sBBBcW3+
fZilYczluUhzjvft2QEuixgjm116PrNl5sGuRyVx2BnjqjL/shhC8y+ilVL5sg2X
VXMN6lRYig==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:19 2024 by rpki-client on console-ams.rpki-client.org