Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3137372e3132392e3136362e302f32342d3234203d3e20323632373938.roa
File:                     3137372e3132392e3136362e302f32342d3234203d3e20323632373938.roa (raw, json)
Hash identifier:          ut3qq8t5myp/1/OpVb9T3M/E1ENSHWX3SDcd8NE0zNw=
Subject key identifier:   06:C1:2E:DC:40:35:BE:BE:59:82:6B:07:F6:15:D8:D1:97:B8:7D:86
Certificate issuer:       /CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
Certificate serial:       457654A1B5BE264AD197F896B9B63FB089DC2154
Authority key identifier: DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3137372e3132392e3136362e302f32342d3234203d3e20323632373938.roa
Signing time:             Wed 03 Apr 2024 23:08:04 +0000
ROA not before:           Wed 03 Apr 2024 23:03:04 +0000
ROA not after:            Wed 02 Apr 2025 23:08:04 +0000
asID:                     262798
IP address blocks:        177.129.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl
                          rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:76:54:a1:b5:be:26:4a:d1:97:f8:96:b9:b6:3f:b0:89:dc:21:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF84A55ADD2A34BB229216066E15ABABB0D7FF8A
        Validity
            Not Before: Apr  3 23:03:04 2024 GMT
            Not After : Apr  2 23:08:04 2025 GMT
        Subject: CN=06C12EDC4035BEBE59826B07F615D8D197B87D86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:92:a8:97:84:e3:a2:79:ff:95:b3:90:e0:cc:
                    15:9f:8a:cd:dc:80:c0:a7:b2:e9:9a:0f:dd:05:c8:
                    b5:78:ca:4c:ae:11:0e:6e:8a:89:94:e2:8c:af:d5:
                    24:9a:8c:ea:65:fd:4d:0f:ec:05:86:02:f1:1e:fe:
                    55:4e:3b:d7:1c:b0:9f:89:c5:a6:35:4c:c9:4d:37:
                    64:7c:54:9a:3f:d0:ed:39:7b:a4:c3:fa:4d:ba:9f:
                    22:67:71:a5:b9:d8:ed:1f:e1:76:f7:35:4a:34:c3:
                    47:f0:e1:11:81:d9:a1:6d:5f:e9:22:c7:ce:cf:4d:
                    a8:bd:13:ee:3a:87:be:75:8c:a3:b2:59:9d:74:8f:
                    ee:2c:36:44:fc:39:c5:6c:ca:ac:36:98:80:97:c9:
                    76:b0:68:f5:b8:18:1b:7d:39:53:49:f4:1c:bd:92:
                    67:ac:ca:7f:cb:3a:17:f8:7e:ad:53:5b:4e:bc:ce:
                    61:ba:e8:85:fd:a3:4f:14:45:71:22:c0:04:70:39:
                    db:97:35:cf:9c:24:53:ee:f2:4b:2e:e1:9b:d9:0c:
                    40:5a:b5:c0:b9:bd:a0:08:3f:1c:fd:63:12:dc:f8:
                    f8:20:dd:6c:3a:04:5b:4c:cc:46:e2:04:5f:fc:39:
                    bd:fb:ef:91:0f:91:04:ad:89:bd:c6:03:ed:15:7c:
                    be:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C1:2E:DC:40:35:BE:BE:59:82:6B:07:F6:15:D8:D1:97:B8:7D:86
            X509v3 Authority Key Identifier:
                keyid:DF:84:A5:5A:DD:2A:34:BB:22:92:16:06:6E:15:AB:AB:B0:D7:FF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF84A55ADD2A34BB229216066E15ABABB0D7FF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/1/3137372e3132392e3136362e302f32342d3234203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:4e:72:9b:29:c2:74:d8:99:07:77:4a:11:04:63:f7:66:f6:
         c9:58:f8:f5:89:f5:f1:81:07:f7:ba:c2:d8:ac:c2:57:8d:c2:
         20:00:17:a4:04:b5:97:51:a6:ac:d1:c7:5c:ca:6b:cc:82:91:
         b4:0a:d3:f7:e0:78:c4:83:29:18:d6:bc:87:8b:46:23:70:70:
         51:ab:20:05:c4:19:24:d6:08:af:75:e2:a7:f6:c6:c3:b0:1d:
         1d:05:d6:e9:56:3f:be:b4:e2:ca:ac:93:12:73:8e:1d:aa:1b:
         bd:e5:45:f2:1e:2a:92:85:10:fc:99:a4:01:cf:41:ae:c7:fa:
         e4:01:7a:c8:b1:a9:a6:92:f6:22:aa:ab:ce:c4:57:ad:35:80:
         ec:11:e9:0b:02:b9:f3:04:a5:b4:4a:ec:2d:77:68:02:64:34:
         c2:70:44:c6:d6:8d:d4:c7:69:e0:64:a4:48:4d:52:53:83:a5:
         17:cb:eb:3e:0e:2e:1f:87:94:98:b4:14:99:cf:2d:ab:04:56:
         35:07:e8:07:77:84:7b:43:1b:db:62:45:bf:85:61:b2:0d:e7:
         94:89:a1:ec:1f:76:40:06:11:43:60:5d:03:5a:48:3a:86:74:
         b9:68:66:e0:fe:5f:53:62:fa:bf:39:1d:be:99:bb:fd:ec:9a:
         f5:b3:f3:f2
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIURXZUobW+JkrRl/iWubY/sIncIVQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREY4NEE1NUFERDJBMzRCQjIyOTIxNjA2NkUxNUFCQUJC
MEQ3RkY4QTAeFw0yNDA0MDMyMzAzMDRaFw0yNTA0MDIyMzA4MDRaMDMxMTAvBgNV
BAMTKDA2QzEyRURDNDAzNUJFQkU1OTgyNkIwN0Y2MTVEOEQxOTdCODdEODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCykqiXhOOief+Vs5DgzBWfis3c
gMCnsumaD90FyLV4ykyuEQ5uiomU4oyv1SSajOpl/U0P7AWGAvEe/lVOO9ccsJ+J
xaY1TMlNN2R8VJo/0O05e6TD+k26nyJncaW52O0f4Xb3NUo0w0fw4RGB2aFtX+ki
x87PTai9E+46h751jKOyWZ10j+4sNkT8OcVsyqw2mICXyXawaPW4GBt9OVNJ9By9
kmesyn/LOhf4fq1TW068zmG66IX9o08URXEiwARwOduXNc+cJFPu8ksu4ZvZDEBa
tcC5vaAIPxz9YxLc+Pgg3Ww6BFtMzEbiBF/8Ob3775EPkQStib3GA+0VfL4pAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUBsEu3EA1vr5ZgmsH9hXY0Ze4fYYwHwYDVR0j
BBgwFoAU34SlWt0qNLsikhYGbhWrq7DX/4owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVJFVHN1bWl0VHpKblRGd2NNRHZCYUdNWXRiTDRUMkhYVDJnam1tV2Vv
OG0vMS9ERjg0QTU1QUREMkEzNEJCMjI5MjE2MDY2RTE1QUJBQkIwRDdGRjhBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGODRBNTVBREQyQTM0QkIy
MjkyMTYwNjZFMTVBQkFCQjBEN0ZGOEEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlSRVRzdW1pdFR6Sm5URndjTUR2QmFHTVl0Ykw0VDJIWFQyZ2ptbVdlbzhtLzEv
MzEzNzM3MmUzMTMyMzkyZTMxMzYzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM3MzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALGBpjANBgkqhkiG9w0BAQsFAAOCAQEAhk5y
mynCdNiZB3dKEQRj92b2yVj49Yn18YEH97rC2KzCV43CIAAXpAS1l1GmrNHHXMpr
zIKRtArT9+B4xIMpGNa8h4tGI3BwUasgBcQZJNYIr3Xip/bGw7AdHQXW6VY/vrTi
yqyTEnOOHaobveVF8h4qkoUQ/JmkAc9Brsf65AF6yLGpppL2IqqrzsRXrTWA7BHp
CwK58wSltErsLXdoAmQ0wnBExtaN1Mdp4GSkSE1SU4OlF8vrPg4uH4eUmLQUmc8t
qwRWNQfoB3eEe0Mb22JFv4Vhsg3nlImh7B92QAYRQ2BdA1pIOoZ0uWhm4P5fU2L6
vzkdvpm7/eya9bPz8g==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:00 2024 by rpki-client on console-ams.rpki-client.org