Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/3137372e38342e34302e302f32332d3233203d3e203532373038.roa
File:                     3137372e38342e34302e302f32332d3233203d3e203532373038.roa (raw, json)
Hash identifier:          3Tgcug6oGugX+pqvutPk6Z9Wa1BiyQMNKq5yc3n1BEk=
Subject key identifier:   98:C2:C0:6C:F3:82:99:9D:2D:B1:FE:FF:0A:FE:7E:11:9A:D3:54:AE
Certificate issuer:       /CN=06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB
Certificate serial:       4D97729505B0E228B1157D7E4C310154431BB5E9
Authority key identifier: 06:18:5E:1A:AA:BD:EA:E4:2E:58:12:9B:DE:A4:CF:EC:F0:C8:F7:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/3137372e38342e34302e302f32332d3233203d3e203532373038.roa
Signing time:             Wed 03 Apr 2024 18:32:52 +0000
ROA not before:           Wed 03 Apr 2024 18:27:52 +0000
ROA not after:            Wed 02 Apr 2025 18:32:52 +0000
asID:                     52708
IP address blocks:        177.84.40.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.crl
                          rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:97:72:95:05:b0:e2:28:b1:15:7d:7e:4c:31:01:54:43:1b:b5:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB
        Validity
            Not Before: Apr  3 18:27:52 2024 GMT
            Not After : Apr  2 18:32:52 2025 GMT
        Subject: CN=98C2C06CF382999D2DB1FEFF0AFE7E119AD354AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8d:68:e7:77:87:23:d5:51:6e:fa:b6:e5:b3:
                    4d:ca:ee:03:50:ff:57:43:c3:93:30:34:ee:09:11:
                    82:83:36:00:39:e0:8d:74:88:e5:e7:80:07:48:ba:
                    ba:8d:e3:55:4a:4b:0b:79:ef:e3:8c:3d:fe:ce:bb:
                    fd:83:a2:8d:c9:c6:26:48:3a:89:04:48:f4:ff:23:
                    e1:af:49:83:c6:3a:f9:32:57:5c:49:b8:85:78:48:
                    0b:11:7a:90:5e:cf:b1:f4:7f:52:7c:cb:b4:27:2d:
                    cb:4e:4c:0c:2e:58:8e:75:73:c4:3e:ab:44:0c:1c:
                    fe:52:ed:15:a9:88:ca:89:01:69:e5:c2:87:ce:f8:
                    e3:89:3f:5d:7f:6c:2e:47:ee:e6:9b:44:14:78:97:
                    fe:63:7a:1d:72:31:a0:58:d0:0c:2d:1e:81:16:18:
                    4b:54:58:8b:79:5c:be:5c:3f:00:36:ed:1e:10:72:
                    30:e6:c6:d4:fd:be:8c:9e:d9:8d:4d:5d:14:f5:db:
                    cc:ad:07:31:ae:59:65:dc:34:fb:89:e7:14:9b:2f:
                    5c:04:bb:00:75:0e:b2:58:ab:5a:73:d2:9b:b8:84:
                    8d:15:f5:07:78:ae:f8:c6:e6:0d:b7:4e:d4:3d:57:
                    0a:38:c9:1a:69:20:d5:24:1c:ac:f4:4c:1f:38:03:
                    8b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C2:C0:6C:F3:82:99:9D:2D:B1:FE:FF:0A:FE:7E:11:9A:D3:54:AE
            X509v3 Authority Key Identifier:
                keyid:06:18:5E:1A:AA:BD:EA:E4:2E:58:12:9B:DE:A4:CF:EC:F0:C8:F7:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06185E1AAABDEAE42E58129BDEA4CFECF0C8F7CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/1/3137372e38342e34302e302f32332d3233203d3e203532373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ce:be:6c:4b:63:aa:c6:bf:a4:ce:58:fb:6e:8a:4d:4a:36:67:
         47:86:85:c5:c7:5d:16:3b:f1:d1:37:43:0d:a7:09:25:f8:3c:
         ec:b8:03:00:6a:10:22:37:10:9d:ee:53:9b:08:f7:ab:9f:0e:
         99:d7:04:81:92:c0:d7:05:31:86:5e:bf:c2:3a:81:bc:7a:ec:
         f8:06:bb:cb:70:a3:86:70:bd:22:51:b1:17:04:dd:a8:04:4b:
         5e:e8:15:a3:df:bc:a7:cb:d0:d6:0d:50:90:df:ae:85:b3:1a:
         4f:af:84:24:6f:d4:b3:ea:7c:f1:6b:ef:04:3e:80:44:15:46:
         43:4e:87:4f:19:97:ae:47:8f:ee:bf:32:23:02:c2:17:09:3a:
         a2:c9:9a:95:a9:47:bb:49:ec:55:d1:37:03:03:46:e9:72:ae:
         d6:67:43:b3:f5:c6:d5:80:3c:9c:61:94:7e:b0:b0:49:a8:25:
         52:42:fd:7b:8b:8f:23:0c:76:33:8a:4d:29:49:87:7c:a9:62:
         ea:eb:58:ad:3c:75:49:eb:18:6c:c9:a8:7d:06:0e:11:01:77:
         ee:30:1f:01:da:71:07:dc:b6:a8:27:79:a4:22:03:b1:2d:aa:
         aa:f7:54:78:83:39:61:51:f5:2b:ef:f8:00:7c:02:ea:f9:ec:
         57:80:fb:3e
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUTZdylQWw4iixFX1+TDEBVEMbtekwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDYxODVFMUFBQUJERUFFNDJFNTgxMjlCREVBNENGRUNG
MEM4RjdDQjAeFw0yNDA0MDMxODI3NTJaFw0yNTA0MDIxODMyNTJaMDMxMTAvBgNV
BAMTKDk4QzJDMDZDRjM4Mjk5OUQyREIxRkVGRjBBRkU3RTExOUFEMzU0QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGjWjnd4cj1VFu+rbls03K7gNQ
/1dDw5MwNO4JEYKDNgA54I10iOXngAdIurqN41VKSwt57+OMPf7Ou/2Doo3JxiZI
OokESPT/I+GvSYPGOvkyV1xJuIV4SAsRepBez7H0f1J8y7QnLctOTAwuWI51c8Q+
q0QMHP5S7RWpiMqJAWnlwofO+OOJP11/bC5H7uabRBR4l/5jeh1yMaBY0AwtHoEW
GEtUWIt5XL5cPwA27R4QcjDmxtT9voye2Y1NXRT128ytBzGuWWXcNPuJ5xSbL1wE
uwB1DrJYq1pz0pu4hI0V9Qd4rvjG5g23TtQ9Vwo4yRppINUkHKz0TB84A4sLAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUmMLAbPOCmZ0tsf7/Cv5+EZrTVK4wHwYDVR0j
BBgwFoAUBhheGqq96uQuWBKb3qTP7PDI98swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXE2dUczYVdmQUJudEtibzh2NXBSckF0Zm9pTld5Z3dqZUxtbkVQdlhV
Z00vMS8wNjE4NUUxQUFBQkRFQUU0MkU1ODEyOUJERUE0Q0ZFQ0YwQzhGN0NCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2MTg1RTFBQUFCREVBRTQy
RTU4MTI5QkRFQTRDRkVDRjBDOEY3Q0IuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlxNnVHM2FXZkFCbnRLYm84djVwUnJBdGZvaU5XeWd3amVMbW5FUHZYVWdNLzEv
MzEzNzM3MmUzODM0MmUzNDMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzMjM3
MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAbFUKDANBgkqhkiG9w0BAQsFAAOCAQEAzr5sS2Oqxr+k
zlj7bopNSjZnR4aFxcddFjvx0TdDDacJJfg87LgDAGoQIjcQne5Tmwj3q58OmdcE
gZLA1wUxhl6/wjqBvHrs+Aa7y3CjhnC9IlGxFwTdqARLXugVo9+8p8vQ1g1QkN+u
hbMaT6+EJG/Us+p88WvvBD6ARBVGQ06HTxmXrkeP7r8yIwLCFwk6osmalalHu0ns
VdE3AwNG6XKu1mdDs/XG1YA8nGGUfrCwSaglUkL9e4uPIwx2M4pNKUmHfKli6utY
rTx1SesYbMmofQYOEQF37jAfAdpxB9y2qCd5pCIDsS2qqvdUeIM5YVH1K+/4AHwC
6vnsV4D7Pg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:55 2024 by rpki-client on console-fra.rpki-client.org