Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137372e3133362e39392e302f32342d3234203d3e20323633363038.roa
File:                     3137372e3133362e39392e302f32342d3234203d3e20323633363038.roa (raw, json)
Hash identifier:          aHzN0ePCansDaeYJg6IDFVodR5tDDk0crQ6EMd2dYro=
Subject key identifier:   1A:C9:06:14:43:7A:13:F3:18:8E:3B:1D:13:E6:EA:CF:F8:14:0C:80
Certificate issuer:       /CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
Certificate serial:       7BE394B16DA0A8772183ECD038A2668ED4A4A055
Authority key identifier: F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137372e3133362e39392e302f32342d3234203d3e20323633363038.roa
Signing time:             Mon 23 Dec 2024 13:19:11 +0000
ROA not before:           Mon 23 Dec 2024 13:14:11 +0000
ROA not after:            Mon 22 Dec 2025 13:19:11 +0000
asID:                     263608
IP address blocks:        177.136.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.crl
                          rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 13:46:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e3:94:b1:6d:a0:a8:77:21:83:ec:d0:38:a2:66:8e:d4:a4:a0:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F19D655ABFCCFC8CB566935B71AA7D94D2905E48
        Validity
            Not Before: Dec 23 13:14:11 2024 GMT
            Not After : Dec 22 13:19:11 2025 GMT
        Subject: CN=1AC90614437A13F3188E3B1D13E6EACFF8140C80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f1:3b:c9:86:6a:1d:2b:f0:c3:2e:d7:36:0d:
                    82:0b:9e:ea:26:15:89:bf:73:f3:03:4a:f3:33:29:
                    aa:e4:ed:56:3a:79:2e:4c:9d:52:88:7c:db:b3:2d:
                    95:55:63:5f:37:2a:4d:cc:06:49:82:7d:e6:6c:4a:
                    98:93:d7:8c:e6:4d:a0:a3:ce:60:d2:66:85:68:76:
                    31:96:d0:d1:e7:a3:86:e3:54:df:09:a9:d7:5c:76:
                    fe:96:cd:20:b7:a9:08:2c:82:fd:c3:59:40:aa:d4:
                    35:26:05:e4:6c:0b:ad:80:f5:9f:29:0c:25:4b:4f:
                    12:a8:76:33:75:4a:02:d9:62:79:54:3c:ff:41:a4:
                    2b:9c:b9:89:e3:c2:f1:e0:e8:55:fa:da:00:d7:00:
                    98:e0:a7:18:f9:c7:87:4f:94:73:5e:8e:bc:66:75:
                    a5:ed:c1:bb:13:f7:42:53:a2:90:58:74:ba:4a:34:
                    b2:c5:e4:c3:b7:42:a7:bb:65:a2:e1:7b:4c:6a:40:
                    eb:57:5d:89:fe:53:d0:49:6a:4e:23:ab:f0:d9:b1:
                    b2:1e:0b:71:6d:8c:67:a9:ac:3d:4a:6c:6f:b7:70:
                    e0:ec:94:97:87:23:09:bd:8a:fc:5d:b4:8a:31:54:
                    e3:7c:19:8b:95:04:44:8f:2f:c6:75:51:56:a3:ce:
                    09:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C9:06:14:43:7A:13:F3:18:8E:3B:1D:13:E6:EA:CF:F8:14:0C:80
            X509v3 Authority Key Identifier:
                keyid:F1:9D:65:5A:BF:CC:FC:8C:B5:66:93:5B:71:AA:7D:94:D2:90:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F19D655ABFCCFC8CB566935B71AA7D94D2905E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bLGAbFywNFJ56BSECDGY1Dcs8pL6S6nyRRnAvKmJVLf/0/3137372e3133362e39392e302f32342d3234203d3e20323633363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:5d:0d:95:e3:2e:77:35:25:1b:d5:58:95:63:95:13:2b:85:
         c5:98:e7:e6:ad:47:91:16:00:98:6e:36:ec:b5:dc:6a:36:10:
         b8:3a:53:ee:b1:09:88:54:cb:95:7e:0b:8c:a0:2a:09:b6:ed:
         10:8e:df:11:a9:c7:71:4b:20:de:b7:ed:40:f3:7e:a1:32:71:
         fa:4b:47:dc:a3:dd:4d:a0:b0:26:90:c0:77:95:0e:5f:a3:cb:
         0f:c2:c7:ec:84:5e:e9:cf:8e:b4:13:cc:82:6f:3b:8e:8d:87:
         3e:fa:a3:2c:c5:89:dc:17:2f:0b:a9:4d:b4:f3:57:ee:b5:0e:
         46:97:b6:65:36:6b:f3:5c:3c:a8:f8:1a:8e:eb:ef:29:b8:97:
         05:ca:c1:1a:20:54:bd:5a:09:ab:9a:07:93:fb:da:93:90:25:
         a2:db:36:fe:3a:05:2b:ea:04:34:92:7d:57:84:03:39:7e:9a:
         25:73:cb:48:1c:8b:c7:ea:ca:cc:ea:b9:44:94:b0:b3:5a:6d:
         4f:1d:e2:7e:77:01:66:c9:d3:a4:4c:c8:01:13:ae:70:42:3a:
         15:1b:61:60:13:8f:5a:6c:02:0e:9d:f8:e0:0b:2c:8c:5c:ca:
         c8:e8:d0:e6:7c:ba:93:9b:bc:66:0e:8a:39:27:14:dc:52:88:
         39:07:c5:79
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUe+OUsW2gqHchg+zQOKJmjtSkoFUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjE5RDY1NUFCRkNDRkM4Q0I1NjY5MzVCNzFBQTdEOTRE
MjkwNUU0ODAeFw0yNDEyMjMxMzE0MTFaFw0yNTEyMjIxMzE5MTFaMDMxMTAvBgNV
BAMTKDFBQzkwNjE0NDM3QTEzRjMxODhFM0IxRDEzRTZFQUNGRjgxNDBDODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo8TvJhmodK/DDLtc2DYILnuom
FYm/c/MDSvMzKark7VY6eS5MnVKIfNuzLZVVY183Kk3MBkmCfeZsSpiT14zmTaCj
zmDSZoVodjGW0NHno4bjVN8Jqddcdv6WzSC3qQgsgv3DWUCq1DUmBeRsC62A9Z8p
DCVLTxKodjN1SgLZYnlUPP9BpCucuYnjwvHg6FX62gDXAJjgpxj5x4dPlHNejrxm
daXtwbsT90JTopBYdLpKNLLF5MO3Qqe7ZaLhe0xqQOtXXYn+U9BJak4jq/DZsbIe
C3FtjGeprD1KbG+3cODslJeHIwm9ivxdtIoxVON8GYuVBESPL8Z1UVajzgkrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGskGFEN6E/MYjjsdE+bqz/gUDIAwHwYDVR0j
BBgwFoAU8Z1lWr/M/Iy1ZpNbcap9lNKQXkgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWJMR0FiRnl3TkZKNTZCU0VDREdZMURjczhwTDZTNm55UlJuQXZLbUpW
TGYvMC9GMTlENjU1QUJGQ0NGQzhDQjU2NjkzNUI3MUFBN0Q5NEQyOTA1RTQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YxOUQ2NTVBQkZDQ0ZDOENC
NTY2OTM1QjcxQUE3RDk0RDI5MDVFNDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzliTEdBYkZ5d05GSjU2QlNFQ0RHWTFEY3M4cEw2UzZueVJSbkF2S21KVkxmLzAv
MzEzNzM3MmUzMTMzMzYyZTM5MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzNjMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxiGMwDQYJKoZIhvcNAQELBQADggEBANBdDZXj
Lnc1JRvVWJVjlRMrhcWY5+atR5EWAJhuNuy13Go2ELg6U+6xCYhUy5V+C4ygKgm2
7RCO3xGpx3FLIN637UDzfqEycfpLR9yj3U2gsCaQwHeVDl+jyw/Cx+yEXunPjrQT
zIJvO46Nhz76oyzFidwXLwupTbTzV+61DkaXtmU2a/NcPKj4Go7r7ym4lwXKwRog
VL1aCauaB5P72pOQJaLbNv46BSvqBDSSfVeEAzl+miVzy0gci8fqyszquUSUsLNa
bU8d4n53AWbJ06RMyAETrnBCOhUbYWATj1psAg6d+OALLIxcysjo0OZ8upObvGYO
ijknFNxSiDkHxXk=
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:35:29 2025 by rpki-client