Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e37392e302f32342d3234203d3e20323632333338.roa
File:                     3137372e3132362e37392e302f32342d3234203d3e20323632333338.roa (raw, json)
Hash identifier:          CxZ9PXa5KDkTNY0WtvXBdo7TyrPiqrBcM2ZGJYjcCoc=
Subject key identifier:   64:6F:B1:2F:31:04:C4:19:D8:48:92:5A:C0:29:7B:2E:C3:52:29:48
Certificate issuer:       /CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
Certificate serial:       0BDBB5DBE2E7A8544CDB2F68BD583F0EEC17CC28
Authority key identifier: 5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e37392e302f32342d3234203d3e20323632333338.roa
Signing time:             Wed 24 Apr 2024 12:46:17 +0000
ROA not before:           Wed 24 Apr 2024 12:41:17 +0000
ROA not after:            Wed 23 Apr 2025 12:46:17 +0000
asID:                     262338
IP address blocks:        177.126.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl
                          rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 23:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:db:b5:db:e2:e7:a8:54:4c:db:2f:68:bd:58:3f:0e:ec:17:cc:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
        Validity
            Not Before: Apr 24 12:41:17 2024 GMT
            Not After : Apr 23 12:46:17 2025 GMT
        Subject: CN=646FB12F3104C419D848925AC0297B2EC3522948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c0:d5:a5:a4:ff:28:e2:77:c6:3e:67:3d:89:
                    82:36:9d:f9:56:8a:4c:cc:1d:dc:c0:3d:a8:44:cf:
                    8e:97:14:40:14:65:aa:b5:07:9b:be:9b:9e:09:74:
                    d4:b1:3f:90:39:47:ad:04:7f:bc:2b:cd:8a:84:b4:
                    04:cc:80:36:91:3d:a0:62:3b:6b:e6:05:df:fe:28:
                    56:26:e8:de:cb:27:da:d8:ac:19:2b:09:3b:9b:92:
                    66:f0:16:35:0f:78:b7:1d:fe:a0:ee:03:0f:fa:bd:
                    09:32:48:85:2a:46:c3:e7:68:16:75:c7:b0:37:44:
                    bd:8c:8f:0d:5c:fa:34:a4:13:2a:56:5a:12:b5:d8:
                    10:aa:31:7b:5f:06:5b:7c:dc:e4:b9:76:88:61:db:
                    5f:d1:29:e4:89:c8:75:2f:e1:4e:9a:fa:5e:1f:35:
                    21:41:a6:9c:18:b6:b3:36:60:9b:b7:76:8f:ac:b0:
                    81:b9:fd:eb:d7:f1:06:ae:e2:06:da:07:a6:b4:77:
                    40:95:64:18:65:db:1b:36:29:5c:be:86:86:38:1a:
                    15:54:dc:bc:d9:3c:ba:92:64:4f:cb:90:50:04:94:
                    a6:75:55:47:f3:ab:d0:cc:db:30:72:63:7a:fa:3e:
                    a5:13:bc:e7:c1:36:b6:c1:89:63:13:9b:62:17:1a:
                    a0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:6F:B1:2F:31:04:C4:19:D8:48:92:5A:C0:29:7B:2E:C3:52:29:48
            X509v3 Authority Key Identifier:
                keyid:5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e37392e302f32342d3234203d3e20323632333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:08:21:ca:33:d2:19:d3:db:99:3f:54:7c:0f:69:3e:2c:53:
         09:ee:f4:e3:65:04:87:b5:88:33:3d:35:e6:9b:78:48:cc:dd:
         0d:ab:a4:ad:0f:ef:03:c5:e2:59:0a:cf:dd:b2:65:6e:2a:a0:
         e3:f8:d5:92:d1:50:07:38:7a:7b:03:ef:cd:64:5d:48:e7:f2:
         8a:f8:f7:62:83:39:3b:d9:51:68:fb:09:2e:31:a0:77:2c:fb:
         2f:14:c3:cd:03:06:60:fc:c8:e3:e8:ef:00:1b:39:b1:6a:3a:
         0a:74:ac:ff:51:68:20:77:50:89:63:4b:9e:58:5b:a0:ec:ea:
         66:89:6e:b8:33:a2:46:4a:09:5d:1a:47:57:0e:bd:fb:71:0a:
         ef:1b:fe:06:3d:32:c9:2e:f1:43:88:f3:5a:c2:87:9d:c7:c5:
         a9:85:e1:ab:b5:5f:1a:d6:dc:0d:1a:63:45:95:b0:1b:71:2f:
         40:24:19:fe:92:d1:0f:51:76:be:17:47:ff:90:2b:15:07:b8:
         1c:a2:cb:66:68:46:f7:07:3c:92:0d:ec:7e:21:99:39:00:a8:
         72:06:34:34:f1:33:90:f8:d1:96:49:e8:53:6a:ae:d1:4c:d8:
         b7:19:59:dc:a1:75:e2:2c:df:b4:cb:ff:f6:f6:3b:37:24:5d:
         08:3a:c4:a3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUC9u12+LnqFRM2y9ovVg/DuwXzCgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQxQTEyMEQ3MjgxMjVGNjBGRjREQ0JGMUVDN0RBNTRG
MERCRUQwMzAeFw0yNDA0MjQxMjQxMTdaFw0yNTA0MjMxMjQ2MTdaMDMxMTAvBgNV
BAMTKDY0NkZCMTJGMzEwNEM0MTlEODQ4OTI1QUMwMjk3QjJFQzM1MjI5NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/wNWlpP8o4nfGPmc9iYI2nflW
ikzMHdzAPahEz46XFEAUZaq1B5u+m54JdNSxP5A5R60Ef7wrzYqEtATMgDaRPaBi
O2vmBd/+KFYm6N7LJ9rYrBkrCTubkmbwFjUPeLcd/qDuAw/6vQkySIUqRsPnaBZ1
x7A3RL2Mjw1c+jSkEypWWhK12BCqMXtfBlt83OS5dohh21/RKeSJyHUv4U6a+l4f
NSFBppwYtrM2YJu3do+ssIG5/evX8Qau4gbaB6a0d0CVZBhl2xs2KVy+hoY4GhVU
3LzZPLqSZE/LkFAElKZ1VUfzq9DM2zByY3r6PqUTvOfBNrbBiWMTm2IXGqAZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZG+xLzEExBnYSJJawCl7LsNSKUgwHwYDVR0j
BBgwFoAUXRoSDXKBJfYP9Ny/HsfaVPDb7QMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOW9rc2Yzc0x4bmJxZ3hQZUNQaENNYXM5dDdqUkFrVjgydm44VGtMUnhH
c3YvMC81RDFBMTIwRDcyODEyNUY2MEZGNERDQkYxRUM3REE1NEYwREJFRDAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVEMUExMjBENzI4MTI1RjYw
RkY0RENCRjFFQzdEQTU0RjBEQkVEMDMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzlva3NmM3NMeG5icWd4UGVDUGhDTWFzOXQ3alJBa1Y4MnZuOFRrTFJ4R3N2LzAv
MzEzNzM3MmUzMTMyMzYyZTM3MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzMzMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxfk8wDQYJKoZIhvcNAQELBQADggEBAKYIIcoz
0hnT25k/VHwPaT4sUwnu9ONlBIe1iDM9NeabeEjM3Q2rpK0P7wPF4lkKz92yZW4q
oOP41ZLRUAc4ensD781kXUjn8or492KDOTvZUWj7CS4xoHcs+y8Uw80DBmD8yOPo
7wAbObFqOgp0rP9RaCB3UIljS55YW6Ds6maJbrgzokZKCV0aR1cOvftxCu8b/gY9
Msku8UOI81rCh53HxamF4au1XxrW3A0aY0WVsBtxL0AkGf6S0Q9Rdr4XR/+QKxUH
uByiy2ZoRvcHPJIN7H4hmTkAqHIGNDTxM5D40ZZJ6FNqrtFM2LcZWdyhdeIs37TL
//b2OzckXQg6xKM=
-----END CERTIFICATE-----
Generated at Sun Jun 2 00:22:06 2024 by rpki-client on console-fra.rpki-client.org