Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137372e38372e3230322e302f32342d3234203d3e203532353837.roa
File:                     3137372e38372e3230322e302f32342d3234203d3e203532353837.roa (raw, json)
Hash identifier:          AKapPnU6mmO++efUndo5QfXsW6Rd83rV6Mk2l4uADw0=
Subject key identifier:   31:C7:B3:C1:58:78:97:DB:46:9D:C6:BE:00:82:AF:7A:AC:5C:51:61
Certificate issuer:       /CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
Certificate serial:       372466FE9FDA2E2743F113D04C31E33552CA0615
Authority key identifier: 0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137372e38372e3230322e302f32342d3234203d3e203532353837.roa
Signing time:             Tue 02 Jul 2024 20:42:37 +0000
ROA not before:           Tue 02 Jul 2024 20:37:37 +0000
ROA not after:            Tue 01 Jul 2025 20:42:37 +0000
asID:                     52587
IP address blocks:        177.87.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl
                          rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:24:66:fe:9f:da:2e:27:43:f1:13:d0:4c:31:e3:35:52:ca:06:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96
        Validity
            Not Before: Jul  2 20:37:37 2024 GMT
            Not After : Jul  1 20:42:37 2025 GMT
        Subject: CN=31C7B3C1587897DB469DC6BE0082AF7AAC5C5161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b3:fa:c3:ed:e1:fd:d5:46:19:3c:ba:82:4e:
                    23:10:cb:17:b4:a0:17:02:66:b5:e0:c3:81:5b:e1:
                    ca:2a:46:e7:91:ba:da:73:2b:1b:5b:93:f2:32:9e:
                    9a:32:86:ad:b6:a9:98:be:f6:68:4a:ef:54:79:85:
                    9f:e6:5b:60:1d:a7:e2:6a:0c:9b:1d:c6:ca:4a:74:
                    97:12:6c:b5:35:12:bb:0a:5d:88:f0:1c:51:1a:80:
                    19:c5:05:03:fb:da:bc:29:76:49:64:54:5a:69:e1:
                    b3:df:1a:18:ae:c0:87:61:58:ea:72:98:7f:85:19:
                    ef:40:87:66:15:16:52:0a:54:1f:ce:b5:6f:61:5c:
                    ab:f0:ae:22:15:1f:ce:33:75:74:36:2d:79:dc:4e:
                    84:18:f6:06:a7:79:98:b0:0c:e5:11:a5:a7:d4:07:
                    ce:85:c7:8c:e7:49:7e:96:3e:db:d0:81:ab:cc:d3:
                    7b:b9:1c:2a:13:3e:e2:60:b3:14:fe:1e:7c:74:1c:
                    71:56:98:6a:3c:79:14:2e:b7:25:ab:29:93:23:9f:
                    56:4a:b3:68:21:a8:b0:49:2a:e6:3b:df:90:25:69:
                    62:67:c2:da:83:62:3e:26:82:38:2a:45:1a:04:cf:
                    5c:3d:3b:4a:bb:3e:3c:46:c7:b7:0a:ca:3d:4f:24:
                    e1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C7:B3:C1:58:78:97:DB:46:9D:C6:BE:00:82:AF:7A:AC:5C:51:61
            X509v3 Authority Key Identifier:
                keyid:0C:F3:DA:DB:F6:F4:1D:DB:FB:22:10:7D:68:2B:AB:48:59:EB:EF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CF3DADBF6F41DDBFB22107D682BAB4859EBEF96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/1/3137372e38372e3230322e302f32342d3234203d3e203532353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e1:2b:52:7f:90:ee:18:6c:1c:6b:b0:93:a0:6e:3b:84:fe:18:
         1a:ca:e2:96:eb:d5:1c:ca:41:ac:5a:ef:ef:ae:02:d1:94:55:
         f1:eb:2c:d9:e8:13:32:12:ef:6b:6c:07:d9:1e:c7:79:0a:e2:
         04:47:f9:c7:16:7e:1b:2b:0a:76:d4:c8:23:0d:75:ed:26:d2:
         76:0c:78:f1:c8:f1:4f:6f:e3:12:d3:cb:32:0e:f5:07:fb:ce:
         bf:d3:20:e0:3b:cb:bd:1d:b7:62:b0:0e:fa:b2:8b:94:00:cf:
         40:ad:16:e8:3b:0d:fd:9e:98:c4:f9:f3:2c:81:54:2f:bc:00:
         72:96:e4:e9:59:99:09:aa:cc:41:4b:41:b2:60:44:72:06:f9:
         e4:bb:cf:36:f8:3c:89:13:40:59:08:de:5b:a4:ec:28:75:52:
         f7:b0:39:64:1c:a4:2e:32:9e:1f:d0:03:b8:7d:47:d7:28:2d:
         01:b8:21:03:78:3a:6a:b8:4c:22:45:cd:6d:93:98:3e:b9:52:
         33:b2:3b:05:d2:7b:19:c9:3a:33:c0:e8:dc:de:fe:a4:51:79:
         3e:74:24:51:72:c8:42:39:54:9e:29:12:21:52:c5:3d:60:2b:
         0e:fd:75:81:90:5a:a3:24:c4:37:f6:d2:6a:b7:46:83:b9:67:
         ae:5c:d4:d9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNyRm/p/aLidD8RPQTDHjNVLKBhUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMENGM0RBREJGNkY0MUREQkZCMjIxMDdENjgyQkFCNDg1
OUVCRUY5NjAeFw0yNDA3MDIyMDM3MzdaFw0yNTA3MDEyMDQyMzdaMDMxMTAvBgNV
BAMTKDMxQzdCM0MxNTg3ODk3REI0NjlEQzZCRTAwODJBRjdBQUM1QzUxNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDas/rD7eH91UYZPLqCTiMQyxe0
oBcCZrXgw4Fb4coqRueRutpzKxtbk/Iynpoyhq22qZi+9mhK71R5hZ/mW2Adp+Jq
DJsdxspKdJcSbLU1ErsKXYjwHFEagBnFBQP72rwpdklkVFpp4bPfGhiuwIdhWOpy
mH+FGe9Ah2YVFlIKVB/OtW9hXKvwriIVH84zdXQ2LXncToQY9ganeZiwDOURpafU
B86Fx4znSX6WPtvQgavM03u5HCoTPuJgsxT+Hnx0HHFWmGo8eRQutyWrKZMjn1ZK
s2ghqLBJKuY735AlaWJnwtqDYj4mgjgqRRoEz1w9O0q7PjxGx7cKyj1PJOExAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUMcezwVh4l9tGnca+AIKveqxcUWEwHwYDVR0j
BBgwFoAUDPPa2/b0Hdv7IhB9aCurSFnr75YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXJBeXRxWkgxdGlFVFdhbWo4WTgxVk1uUjlDVXB5V3M3U1o1c0Zad2dT
a00vMS8wQ0YzREFEQkY2RjQxRERCRkIyMjEwN0Q2ODJCQUI0ODU5RUJFRjk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBDRjNEQURCRjZGNDFEREJG
QjIyMTA3RDY4MkJBQjQ4NTlFQkVGOTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlyQXl0cVpIMXRpRVRXYW1qOFk4MVZNblI5Q1VweVdzN1NaNXNGWndnU2tNLzEv
MzEzNzM3MmUzODM3MmUzMjMwMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzUzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsVfKMA0GCSqGSIb3DQEBCwUAA4IBAQDhK1J/kO4Y
bBxrsJOgbjuE/hgayuKW69UcykGsWu/vrgLRlFXx6yzZ6BMyEu9rbAfZHsd5CuIE
R/nHFn4bKwp21MgjDXXtJtJ2DHjxyPFPb+MS08syDvUH+86/0yDgO8u9HbdisA76
souUAM9ArRboOw39npjE+fMsgVQvvAByluTpWZkJqsxBS0GyYERyBvnku882+DyJ
E0BZCN5bpOwodVL3sDlkHKQuMp4f0AO4fUfXKC0BuCEDeDpquEwiRc1tk5g+uVIz
sjsF0nsZyTozwOjc3v6kUXk+dCRRcshCOVSeKRIhUsU9YCsO/XWBkFqjJMQ39tJq
t0aDuWeuXNTZ
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:39 2024 by rpki-client on console-ams.rpki-client.org