Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e3130322e302f32332d3233203d3e20323633333437.roa
File:                     3137372e32332e3130322e302f32332d3233203d3e20323633333437.roa (raw, json)
Hash identifier:          haSWXBQXc3bDa8f2nCrLbIXiIvj/bFwCca4t6EhoWIw=
Subject key identifier:   5C:F1:23:A4:23:C1:2E:23:38:C9:9F:FA:78:86:E1:FA:AC:8F:A0:DF
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       3DE5957975D66624A08026AF93FE2BFE7C2151CE
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e3130322e302f32332d3233203d3e20323633333437.roa
Signing time:             Thu 04 Apr 2024 17:40:29 +0000
ROA not before:           Thu 04 Apr 2024 17:35:29 +0000
ROA not after:            Thu 03 Apr 2025 17:40:29 +0000
asID:                     263347
IP address blocks:        177.23.102.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e5:95:79:75:d6:66:24:a0:80:26:af:93:fe:2b:fe:7c:21:51:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Apr  4 17:35:29 2024 GMT
            Not After : Apr  3 17:40:29 2025 GMT
        Subject: CN=5CF123A423C12E2338C99FFA7886E1FAAC8FA0DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:69:68:3c:cc:e0:bf:5f:35:80:c6:b6:e5:61:
                    91:cf:5c:1c:ad:7f:c4:2d:70:b5:a9:52:f5:39:90:
                    9f:62:c4:ac:d3:42:b4:70:e4:eb:58:1b:4e:2c:3e:
                    49:d7:1d:84:73:28:3c:1c:1e:7e:d4:c6:c8:4d:6e:
                    8b:f0:63:87:89:44:dd:79:e2:dd:3d:8c:fa:72:13:
                    25:fb:99:f3:31:41:b3:21:c2:13:72:fe:d7:da:ac:
                    dc:cc:2d:dd:2e:9e:c1:5d:f3:50:01:85:57:e2:f0:
                    4d:b0:f7:7f:0d:26:f4:eb:e7:25:1c:c2:a2:62:a3:
                    27:2b:66:f9:59:4b:1f:aa:4b:de:ff:1a:bb:51:96:
                    34:c4:12:04:08:a5:e9:8f:2e:11:ff:b0:d9:ee:84:
                    6a:92:7b:8e:9f:b7:67:95:7c:1d:7f:6b:19:b4:9b:
                    a5:4b:fa:a0:52:c9:95:82:09:76:23:57:5a:22:71:
                    20:01:84:44:22:76:c4:2e:5e:12:29:00:f6:a2:32:
                    e9:6a:80:9e:b5:b5:f1:ca:b3:d4:75:2d:c6:b6:8b:
                    b6:4c:28:4e:b3:92:da:b8:4d:39:19:f3:75:12:6c:
                    dd:2f:93:aa:18:86:74:81:c6:b7:0c:22:e2:c4:10:
                    0b:d7:d4:91:90:56:a0:5b:cb:6e:d0:4e:d2:0e:c5:
                    a9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F1:23:A4:23:C1:2E:23:38:C9:9F:FA:78:86:E1:FA:AC:8F:A0:DF
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e3130322e302f32332d3233203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:13:e4:c2:47:58:16:2d:a1:3d:cd:e6:a9:60:60:c6:03:a6:
         13:c9:0a:32:c1:1f:ae:b3:3d:e0:cd:5d:5c:36:ba:8f:28:0c:
         98:f9:3e:7b:31:99:c7:cd:e9:e4:52:4c:4f:43:a5:30:58:f1:
         9e:3f:1e:96:3d:33:9d:97:1e:b9:2e:7e:30:a3:a7:47:9a:56:
         e5:bf:62:27:00:ab:04:6f:ee:62:7f:01:f7:a9:c8:27:32:ae:
         8f:d5:ff:86:54:a5:88:4c:4f:18:98:f1:c0:18:0a:93:09:42:
         38:65:99:a0:fe:ac:8a:07:c3:66:30:37:98:b9:d6:a4:e6:12:
         3c:e4:71:05:99:d7:d2:69:ba:8d:13:c4:0f:e8:87:4e:38:b9:
         a3:54:73:e0:a5:a0:35:39:09:99:b1:be:31:90:b3:dd:49:0e:
         21:e2:a7:c1:e3:0f:10:4d:0c:45:0b:4d:f9:7a:bf:1a:84:1d:
         b0:72:76:32:d7:6e:4f:37:0f:fa:e2:c5:a8:b4:f6:b5:8e:65:
         89:0e:33:22:3a:01:22:99:5a:c0:e0:27:72:9b:bc:d8:49:f0:
         e9:3a:e3:fd:d9:47:2c:7a:a5:40:38:6d:a9:a9:cc:c0:91:0c:
         f0:59:6c:3e:3a:1f:e4:c2:2e:a1:32:35:76:e3:9a:c7:e0:8f:
         19:f2:1d:59
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPeWVeXXWZiSggCavk/4r/nwhUc4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDMwOTE2Njk3Q0M3N0ExQTg3NkU0ODY1QkUwMkY1NUE4
RUZGOUJGMjAeFw0yNDA0MDQxNzM1MjlaFw0yNTA0MDMxNzQwMjlaMDMxMTAvBgNV
BAMTKDVDRjEyM0E0MjNDMTJFMjMzOEM5OUZGQTc4ODZFMUZBQUM4RkEwREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/aWg8zOC/XzWAxrblYZHPXByt
f8QtcLWpUvU5kJ9ixKzTQrRw5OtYG04sPknXHYRzKDwcHn7UxshNbovwY4eJRN15
4t09jPpyEyX7mfMxQbMhwhNy/tfarNzMLd0unsFd81ABhVfi8E2w938NJvTr5yUc
wqJioycrZvlZSx+qS97/GrtRljTEEgQIpemPLhH/sNnuhGqSe46ft2eVfB1/axm0
m6VL+qBSyZWCCXYjV1oicSABhEQidsQuXhIpAPaiMulqgJ61tfHKs9R1Lca2i7ZM
KE6zktq4TTkZ83USbN0vk6oYhnSBxrcMIuLEEAvX1JGQVqBby27QTtIOxam5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUXPEjpCPBLiM4yZ/6eIbh+qyPoN8wHwYDVR0j
BBgwFoAUAwkWaXzHehqHbkhlvgL1Wo7/m/IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtVeWFzTm5lVW1TcXhESnVwZG15c3dteUtSdENHZEt0dmtQODUxSHh5
ZEMvMS8wMzA5MTY2OTdDQzc3QTFBODc2RTQ4NjVCRTAyRjU1QThFRkY5QkYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzMDkxNjY5N0NDNzdBMUE4
NzZFNDg2NUJFMDJGNTVBOEVGRjlCRjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrVXlhc05uZVVtU3F4REp1cGRteXN3bXlLUnRDR2RLdHZrUDg1MUh4eWRDLzEv
MzEzNzM3MmUzMjMzMmUzMTMwMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzMzMzM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxF2YwDQYJKoZIhvcNAQELBQADggEBAJ4T5MJH
WBYtoT3N5qlgYMYDphPJCjLBH66zPeDNXVw2uo8oDJj5PnsxmcfN6eRSTE9DpTBY
8Z4/HpY9M52XHrkufjCjp0eaVuW/YicAqwRv7mJ/AfepyCcyro/V/4ZUpYhMTxiY
8cAYCpMJQjhlmaD+rIoHw2YwN5i51qTmEjzkcQWZ19Jpuo0TxA/oh044uaNUc+Cl
oDU5CZmxvjGQs91JDiHip8HjDxBNDEULTfl6vxqEHbBydjLXbk83D/rixai09rWO
ZYkOMyI6ASKZWsDgJ3KbvNhJ8Ok64/3ZRyx6pUA4bampzMCRDPBZbD46H+TCLqEy
NXbjmsfgjxnyHVk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:26 2024 by rpki-client on console-fra.rpki-client.org