Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e3130332e302f32342d3234203d3e20323633333437.roa
File:                     3137372e32332e3130332e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          05Q3shgV1FpWbrF/QQ7ZpWMg3jiQgMAyOgc14aTdvSU=
Subject key identifier:   F9:1A:7D:F5:FA:F5:E4:FA:79:5D:80:20:70:C7:97:6A:95:5A:B0:1B
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       0BB2C0D98AA8CC90D77F24B04F50D5B07DEE1080
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e3130332e302f32342d3234203d3e20323633333437.roa
Signing time:             Sat 09 Nov 2024 13:51:12 +0000
ROA not before:           Sat 09 Nov 2024 13:46:12 +0000
ROA not after:            Sat 08 Nov 2025 13:51:12 +0000
asID:                     263347
IP address blocks:        177.23.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:b2:c0:d9:8a:a8:cc:90:d7:7f:24:b0:4f:50:d5:b0:7d:ee:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Nov  9 13:46:12 2024 GMT
            Not After : Nov  8 13:51:12 2025 GMT
        Subject: CN=F91A7DF5FAF5E4FA795D802070C7976A955AB01B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7b:48:f1:1b:6f:5d:30:2b:20:5a:c5:e8:e5:
                    8c:41:ed:93:a2:87:a8:7f:70:ca:b5:25:28:3d:7d:
                    96:19:dc:5e:e3:7d:23:72:18:fa:86:52:91:39:c8:
                    43:99:5f:76:b5:45:c9:03:5a:c0:3b:db:d7:b2:4d:
                    7d:25:40:f5:74:32:47:27:ef:1d:90:0d:f5:26:e3:
                    eb:16:50:92:db:b5:6d:11:e7:23:c3:ac:03:7b:77:
                    38:97:77:f5:7b:43:6d:e6:5b:7c:0e:2f:c8:68:12:
                    42:a0:92:db:fb:20:27:12:26:bd:65:01:40:18:1d:
                    7b:35:87:81:3b:97:5b:77:02:53:e1:41:49:16:35:
                    dc:e1:0d:c7:68:f0:8e:49:a0:af:5c:bd:22:4a:a8:
                    47:23:24:2e:df:b6:97:0d:75:c1:33:4b:ff:66:e5:
                    f6:ee:69:29:ce:74:91:2a:48:b1:9d:a7:72:a8:69:
                    63:ff:3c:d5:21:94:fb:2c:85:79:2c:6c:bc:13:c6:
                    ea:d5:d8:70:0f:24:10:d5:07:03:7a:6c:c7:e4:94:
                    fe:cd:aa:e8:43:51:b7:0b:4f:81:cc:97:f5:90:1f:
                    33:db:a7:79:71:21:94:9f:5e:ac:23:9a:5b:28:7a:
                    fd:2a:9d:d3:7a:48:75:83:69:a4:b3:ce:4f:d4:f7:
                    d0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1A:7D:F5:FA:F5:E4:FA:79:5D:80:20:70:C7:97:6A:95:5A:B0:1B
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3137372e32332e3130332e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:26:5f:80:a2:fc:1d:38:42:74:66:12:68:30:eb:c2:08:85:
         bf:38:dd:93:1a:f8:a5:72:03:79:b2:d8:96:53:61:ba:cd:1f:
         58:6e:b4:02:f4:7e:19:f0:94:cf:d2:0d:10:38:4c:ab:bc:13:
         cd:b9:44:e1:8f:3a:70:18:a0:49:bb:ca:d6:7d:4d:5a:2d:1c:
         e0:bd:9a:4c:00:06:89:a7:7e:64:5d:a0:e9:9f:e0:36:2e:6a:
         68:67:66:4c:2b:9b:cf:3e:05:5b:55:ce:7d:90:34:2d:65:bf:
         f5:da:91:e6:49:2c:64:7b:ad:f1:e5:85:6e:9f:18:dc:23:af:
         f7:f1:07:aa:62:b5:2c:96:71:ff:18:f1:78:87:f5:84:b8:64:
         fb:a1:d2:f5:a6:57:f1:d6:3f:e4:2a:74:f8:8b:e6:cf:05:35:
         c0:86:7f:34:56:bf:1d:98:31:13:02:4f:be:1d:e3:3e:32:ce:
         a3:a0:40:48:14:4f:42:31:98:ba:d4:3e:d5:2c:c7:a0:17:c0:
         f3:d6:24:59:b5:9f:f1:13:07:19:ae:7c:6e:da:fb:82:88:22:
         7e:3b:b8:5e:14:0d:81:ff:62:e7:77:df:6b:ee:63:f1:2e:99:
         d7:eb:b3:a4:5d:60:4b:54:40:4f:44:be:ad:d7:f3:9d:4b:d0:
         a1:c2:a5:7f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUC7LA2YqozJDXfySwT1DVsH3uEIAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDMwOTE2Njk3Q0M3N0ExQTg3NkU0ODY1QkUwMkY1NUE4
RUZGOUJGMjAeFw0yNDExMDkxMzQ2MTJaFw0yNTExMDgxMzUxMTJaMDMxMTAvBgNV
BAMTKEY5MUE3REY1RkFGNUU0RkE3OTVEODAyMDcwQzc5NzZBOTU1QUIwMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDne0jxG29dMCsgWsXo5YxB7ZOi
h6h/cMq1JSg9fZYZ3F7jfSNyGPqGUpE5yEOZX3a1RckDWsA729eyTX0lQPV0Mkcn
7x2QDfUm4+sWUJLbtW0R5yPDrAN7dziXd/V7Q23mW3wOL8hoEkKgktv7ICcSJr1l
AUAYHXs1h4E7l1t3AlPhQUkWNdzhDcdo8I5JoK9cvSJKqEcjJC7ftpcNdcEzS/9m
5fbuaSnOdJEqSLGdp3KoaWP/PNUhlPsshXksbLwTxurV2HAPJBDVBwN6bMfklP7N
quhDUbcLT4HMl/WQHzPbp3lxIZSfXqwjmlsoev0qndN6SHWDaaSzzk/U99DPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+Rp99fr15Pp5XYAgcMeXapVasBswHwYDVR0j
BBgwFoAUAwkWaXzHehqHbkhlvgL1Wo7/m/IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtVeWFzTm5lVW1TcXhESnVwZG15c3dteUtSdENHZEt0dmtQODUxSHh5
ZEMvMS8wMzA5MTY2OTdDQzc3QTFBODc2RTQ4NjVCRTAyRjU1QThFRkY5QkYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzMDkxNjY5N0NDNzdBMUE4
NzZFNDg2NUJFMDJGNTVBOEVGRjlCRjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrVXlhc05uZVVtU3F4REp1cGRteXN3bXlLUnRDR2RLdHZrUDg1MUh4eWRDLzEv
MzEzNzM3MmUzMjMzMmUzMTMwMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMzM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxF2cwDQYJKoZIhvcNAQELBQADggEBAFsmX4Ci
/B04QnRmEmgw68IIhb843ZMa+KVyA3my2JZTYbrNH1hutAL0fhnwlM/SDRA4TKu8
E825ROGPOnAYoEm7ytZ9TVotHOC9mkwABomnfmRdoOmf4DYuamhnZkwrm88+BVtV
zn2QNC1lv/XakeZJLGR7rfHlhW6fGNwjr/fxB6pitSyWcf8Y8XiH9YS4ZPuh0vWm
V/HWP+QqdPiL5s8FNcCGfzRWvx2YMRMCT74d4z4yzqOgQEgUT0IxmLrUPtUsx6AX
wPPWJFm1n/ETBxmufG7a+4KIIn47uF4UDYH/Yud332vuY/Eumdfrs6RdYEtUQE9E
vq3X851L0KHCpX8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:00 2024 by rpki-client on console-ams.rpki-client.org