Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e3130322e302f32342d3234203d3e20323633333437.roa
File:                     3137372e32332e3130322e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          KEBvrEItEBXt6DQAzyHKKby6sJkzfKYovjeE8BmWauU=
Subject key identifier:   27:74:1E:D6:1C:0F:40:53:B9:9C:74:B0:1B:F6:59:3A:0E:99:BD:1F
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       2369DDBD88063D9CE56E7C74094EB86396A56284
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e3130322e302f32342d3234203d3e20323633333437.roa
Signing time:             Sat 09 Nov 2024 13:51:02 +0000
ROA not before:           Sat 09 Nov 2024 13:46:02 +0000
ROA not after:            Sat 08 Nov 2025 13:51:02 +0000
asID:                     263347
IP address blocks:        177.23.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:69:dd:bd:88:06:3d:9c:e5:6e:7c:74:09:4e:b8:63:96:a5:62:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Nov  9 13:46:02 2024 GMT
            Not After : Nov  8 13:51:02 2025 GMT
        Subject: CN=27741ED61C0F4053B99C74B01BF6593A0E99BD1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:9c:f2:9e:ed:2c:12:a6:fa:64:d3:fc:7d:2a:
                    88:92:5f:63:1d:53:5c:36:ae:77:f0:ba:c7:01:fc:
                    66:53:04:58:2b:ea:34:ed:45:11:eb:0c:70:30:51:
                    99:f2:7a:9f:77:92:2a:7c:1d:0d:8b:27:fd:4d:60:
                    d7:87:80:17:9b:88:65:32:f1:3f:9e:1d:ac:12:e4:
                    11:d3:3d:df:d6:b9:2b:07:75:61:6e:19:47:fc:80:
                    d3:96:42:99:47:1e:b8:1c:50:da:55:24:74:96:d4:
                    bb:64:87:de:3c:96:b3:56:a9:77:7d:05:3f:95:a1:
                    a2:26:b6:cc:fe:1a:58:07:a6:ff:3a:54:45:fc:bf:
                    c2:f1:eb:a7:a0:f4:8e:2a:a3:a7:9b:59:a9:22:b1:
                    f1:cc:04:08:3a:1e:29:aa:e7:be:9a:0f:e7:95:4b:
                    a9:b9:ef:19:55:b1:75:ee:ce:16:97:ff:13:20:9f:
                    aa:5b:e7:92:d8:0e:ff:28:3f:b0:77:01:3c:bf:da:
                    bc:89:13:6a:19:b1:60:08:c1:a9:e5:45:72:30:c9:
                    30:b4:de:c3:cf:d8:97:1c:32:46:cf:52:7a:09:1c:
                    19:95:e4:13:3b:c6:d6:94:cb:88:ea:14:49:94:62:
                    e6:cd:14:0e:ca:b1:e0:fc:06:0e:41:3c:c1:05:93:
                    21:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:74:1E:D6:1C:0F:40:53:B9:9C:74:B0:1B:F6:59:3A:0E:99:BD:1F
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e3130322e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:da:d2:b8:5f:a5:de:25:c2:10:e2:1b:1c:1c:7c:88:c0:79:
         dc:f8:6d:ea:85:f0:ae:ef:f9:a2:75:e2:fe:a9:c0:af:6d:65:
         86:d9:5e:33:a1:28:c3:04:98:30:2f:78:b6:b5:8c:33:b0:6c:
         2f:e7:21:87:2f:8b:0a:d0:57:04:5e:a3:ff:6e:5d:bf:56:f6:
         37:4d:c5:b2:78:d6:10:94:f9:7e:5e:0d:4b:62:5c:a7:69:24:
         5c:34:7a:96:3c:1a:03:1a:cf:ae:04:32:c4:10:de:cc:3d:c9:
         ca:4b:ae:21:b2:98:a7:ca:8a:36:cd:35:ee:4d:8a:33:e0:ba:
         48:e3:82:aa:53:9b:3b:70:20:90:9c:b0:71:b7:5d:ff:17:48:
         f6:0e:e2:35:2e:9c:e0:27:71:0c:71:3a:5e:6f:83:de:cd:20:
         b4:be:eb:61:37:25:0e:e1:d5:5c:e5:bb:2b:cd:55:18:e1:dd:
         4d:69:01:19:94:93:31:82:5d:7c:8e:42:1a:e5:df:c1:7a:d8:
         72:99:ed:17:01:26:8d:c4:a6:e4:0d:f4:4d:b5:06:a0:d3:82:
         d0:87:79:cb:fa:90:b6:77:15:2c:22:b5:56:06:a9:42:35:aa:
         77:3d:fb:5e:b9:9d:ff:dc:12:8d:c9:1c:93:4f:69:a5:02:a7:
         7e:a3:67:01
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUI2ndvYgGPZzlbnx0CU64Y5alYoQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDMwOTE2Njk3Q0M3N0ExQTg3NkU0ODY1QkUwMkY1NUE4
RUZGOUJGMjAeFw0yNDExMDkxMzQ2MDJaFw0yNTExMDgxMzUxMDJaMDMxMTAvBgNV
BAMTKDI3NzQxRUQ2MUMwRjQwNTNCOTlDNzRCMDFCRjY1OTNBMEU5OUJEMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDonPKe7SwSpvpk0/x9KoiSX2Md
U1w2rnfwuscB/GZTBFgr6jTtRRHrDHAwUZnyep93kip8HQ2LJ/1NYNeHgBebiGUy
8T+eHawS5BHTPd/WuSsHdWFuGUf8gNOWQplHHrgcUNpVJHSW1Ltkh948lrNWqXd9
BT+VoaImtsz+GlgHpv86VEX8v8Lx66eg9I4qo6ebWakisfHMBAg6Himq576aD+eV
S6m57xlVsXXuzhaX/xMgn6pb55LYDv8oP7B3ATy/2ryJE2oZsWAIwanlRXIwyTC0
3sPP2JccMkbPUnoJHBmV5BM7xtaUy4jqFEmUYubNFA7KseD8Bg5BPMEFkyGfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUJ3Qe1hwPQFO5nHSwG/ZZOg6ZvR8wHwYDVR0j
BBgwFoAUAwkWaXzHehqHbkhlvgL1Wo7/m/IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtVeWFzTm5lVW1TcXhESnVwZG15c3dteUtSdENHZEt0dmtQODUxSHh5
ZEMvMS8wMzA5MTY2OTdDQzc3QTFBODc2RTQ4NjVCRTAyRjU1QThFRkY5QkYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzMDkxNjY5N0NDNzdBMUE4
NzZFNDg2NUJFMDJGNTVBOEVGRjlCRjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrVXlhc05uZVVtU3F4REp1cGRteXN3bXlLUnRDR2RLdHZrUDg1MUh4eWRDLzEv
MzEzNzM3MmUzMjMzMmUzMTMwMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMzM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxF2YwDQYJKoZIhvcNAQELBQADggEBAJHa0rhf
pd4lwhDiGxwcfIjAedz4beqF8K7v+aJ14v6pwK9tZYbZXjOhKMMEmDAveLa1jDOw
bC/nIYcviwrQVwReo/9uXb9W9jdNxbJ41hCU+X5eDUtiXKdpJFw0epY8GgMaz64E
MsQQ3sw9ycpLriGymKfKijbNNe5NijPgukjjgqpTmztwIJCcsHG3Xf8XSPYO4jUu
nOAncQxxOl5vg97NILS+62E3JQ7h1VzluyvNVRjh3U1pARmUkzGCXXyOQhrl38F6
2HKZ7RcBJo3EpuQN9E21BqDTgtCHecv6kLZ3FSwitVYGqUI1qnc9+165nf/cEo3J
HJNPaaUCp36jZwE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:26 2024 by rpki-client on console-fra.rpki-client.org