Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3137372e3132392e3136342e302f32342d3234203d3e20323632373938.roa
File:                     3137372e3132392e3136342e302f32342d3234203d3e20323632373938.roa (raw, json)
Hash identifier:          7AiIY1lH+ma/aFKVTZNmJHbTyWSYTIcLFHipAGV24KI=
Subject key identifier:   41:74:A7:A9:AD:21:59:E5:AD:38:0E:EE:24:CD:11:6C:0F:66:28:FD
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       1E7FED88CB43F3EE4A9A66BA42CB8BA026CC5EE0
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3137372e3132392e3136342e302f32342d3234203d3e20323632373938.roa
Signing time:             Wed 03 Apr 2024 23:08:06 +0000
ROA not before:           Wed 03 Apr 2024 23:03:06 +0000
ROA not after:            Wed 02 Apr 2025 23:08:06 +0000
asID:                     262798
IP address blocks:        177.129.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:7f:ed:88:cb:43:f3:ee:4a:9a:66:ba:42:cb:8b:a0:26:cc:5e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Apr  3 23:03:06 2024 GMT
            Not After : Apr  2 23:08:06 2025 GMT
        Subject: CN=4174A7A9AD2159E5AD380EEE24CD116C0F6628FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:66:20:9d:7c:2d:9d:17:ae:62:e6:fc:1c:c5:
                    a8:cc:ad:5c:6e:9d:c3:f2:e4:1f:97:44:61:8a:ca:
                    64:30:19:df:70:5d:f2:f6:38:89:fb:f4:a7:01:99:
                    7d:4c:0f:5c:35:86:40:c0:35:aa:fc:87:f9:38:8c:
                    12:83:8a:dc:b8:83:f8:9f:8c:8a:6d:17:f0:4d:06:
                    34:e5:8d:d3:2a:58:69:94:45:96:3c:3b:15:ec:83:
                    8d:88:e8:c4:ef:0e:93:86:7f:55:00:0a:fb:29:cc:
                    79:9c:c2:84:e0:46:a5:e1:6b:55:72:a6:a4:c7:55:
                    59:c4:bc:ac:58:39:5a:4c:7b:4d:c4:3d:36:85:9d:
                    33:6e:e4:e9:e4:49:dc:8f:f4:e4:bc:86:98:19:42:
                    b4:79:ba:f2:b8:1e:55:d4:d9:7f:8f:c2:23:3e:de:
                    f9:e9:fd:a8:85:19:6c:6c:fc:c6:6b:52:29:4e:2b:
                    32:ba:e2:ff:71:86:3f:34:2c:63:a9:70:0d:80:6e:
                    c5:cc:c1:51:2e:fc:7e:31:1e:ed:92:88:ed:fe:60:
                    58:d6:22:1c:0b:a5:96:9b:d8:d4:1f:4a:eb:f6:7b:
                    9a:7c:a9:2b:4b:2a:3d:dd:30:0b:df:68:04:73:01:
                    c6:92:ba:1f:3c:00:4d:d9:db:32:d2:4b:08:16:cc:
                    1b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:74:A7:A9:AD:21:59:E5:AD:38:0E:EE:24:CD:11:6C:0F:66:28:FD
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3137372e3132392e3136342e302f32342d3234203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:b0:03:de:0a:6b:3b:c3:3c:34:f2:77:f1:35:71:45:13:2f:
         4a:aa:5c:48:a8:6e:17:9b:b8:49:7d:b6:92:b7:4c:57:75:43:
         e4:86:46:96:d9:cc:61:bb:c0:3c:5e:42:80:f2:f5:6d:40:5a:
         20:29:37:6b:e9:9a:8d:22:8d:9d:e5:62:df:e5:6c:ca:31:7f:
         7f:e4:3a:ed:65:85:ef:47:03:31:5d:b0:40:3d:b7:6b:14:00:
         70:79:b9:fb:09:0a:e6:3e:3f:62:9e:c5:df:91:8c:1a:03:fa:
         fc:11:8f:15:80:b1:10:ac:62:ba:6c:bd:61:cb:42:6c:89:45:
         4f:7a:dc:4c:68:ba:6f:8a:c6:15:0a:78:78:e3:93:25:0d:2b:
         f8:b5:42:3f:da:5f:70:e4:37:ce:85:11:87:5a:9a:46:8f:34:
         57:d4:2c:fd:b4:5a:e4:a5:0c:cd:cd:df:38:04:5b:e6:11:26:
         93:b9:36:7e:44:b2:2a:28:01:73:89:00:4b:91:aa:7f:9f:99:
         10:e2:55:84:72:38:ff:ad:b5:87:94:d7:74:f7:78:83:6e:bf:
         c9:20:bc:f7:09:69:b9:a4:a5:a9:80:31:33:52:14:7a:5c:37:
         2a:63:4d:e0:ba:6e:cb:e4:c4:98:9b:b6:0b:d2:e3:eb:13:dc:
         6d:75:bf:8b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUHn/tiMtD8+5Kmma6QsuLoCbMXuAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREY4NEE1NUFERDJBMzRCQjIyOTIxNjA2NkUxNUFCQUJC
MEQ3RkY4QTAeFw0yNDA0MDMyMzAzMDZaFw0yNTA0MDIyMzA4MDZaMDMxMTAvBgNV
BAMTKDQxNzRBN0E5QUQyMTU5RTVBRDM4MEVFRTI0Q0QxMTZDMEY2NjI4RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTZiCdfC2dF65i5vwcxajMrVxu
ncPy5B+XRGGKymQwGd9wXfL2OIn79KcBmX1MD1w1hkDANar8h/k4jBKDity4g/if
jIptF/BNBjTljdMqWGmURZY8OxXsg42I6MTvDpOGf1UACvspzHmcwoTgRqXha1Vy
pqTHVVnEvKxYOVpMe03EPTaFnTNu5OnkSdyP9OS8hpgZQrR5uvK4HlXU2X+PwiM+
3vnp/aiFGWxs/MZrUilOKzK64v9xhj80LGOpcA2AbsXMwVEu/H4xHu2SiO3+YFjW
IhwLpZab2NQfSuv2e5p8qStLKj3dMAvfaARzAcaSuh88AE3Z2zLSSwgWzBvLAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUQXSnqa0hWeWtOA7uJM0RbA9mKP0wHwYDVR0j
BBgwFoAU34SlWt0qNLsikhYGbhWrq7DX/4owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVJFVHN1bWl0VHpKblRGd2NNRHZCYUdNWXRiTDRUMkhYVDJnam1tV2Vv
OG0vMS9ERjg0QTU1QUREMkEzNEJCMjI5MjE2MDY2RTE1QUJBQkIwRDdGRjhBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGODRBNTVBREQyQTM0QkIy
MjkyMTYwNjZFMTVBQkFCQjBEN0ZGOEEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlSRVRzdW1pdFR6Sm5URndjTUR2QmFHTVl0Ykw0VDJIWFQyZ2ptbVdlbzhtLzEv
MzEzNzM3MmUzMTMyMzkyZTMxMzYzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM3MzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALGBpDANBgkqhkiG9w0BAQsFAAOCAQEAcLAD
3gprO8M8NPJ38TVxRRMvSqpcSKhuF5u4SX22krdMV3VD5IZGltnMYbvAPF5CgPL1
bUBaICk3a+majSKNneVi3+VsyjF/f+Q67WWF70cDMV2wQD23axQAcHm5+wkK5j4/
Yp7F35GMGgP6/BGPFYCxEKxiumy9YctCbIlFT3rcTGi6b4rGFQp4eOOTJQ0r+LVC
P9pfcOQ3zoURh1qaRo80V9Qs/bRa5KUMzc3fOARb5hEmk7k2fkSyKigBc4kAS5Gq
f5+ZEOJVhHI4/621h5TXdPd4g26/ySC89wlpuaSlqYAxM1IUelw3KmNN4Lpuy+TE
mJu2C9Lj6xPcbXW/iw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:00 2024 by rpki-client on console-ams.rpki-client.org