Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/3137392e34382e38382e302f32332d3233203d3e20323731313137.roa
File:                     3137392e34382e38382e302f32332d3233203d3e20323731313137.roa (raw, json)
Hash identifier:          WsfuNASsLHAbGVHLw/E3E3OG7kFiDufx93gQPI5CgUA=
Subject key identifier:   43:86:F7:C8:B6:D9:F8:66:56:D6:8E:7D:03:31:08:93:5A:94:B4:82
Certificate issuer:       /CN=62D01A32125D7B1F626C38C25BC340B899793CFA
Certificate serial:       46400A660C24662E320E869E0851F1E31E4075C8
Authority key identifier: 62:D0:1A:32:12:5D:7B:1F:62:6C:38:C2:5B:C3:40:B8:99:79:3C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/3137392e34382e38382e302f32332d3233203d3e20323731313137.roa
Signing time:             Thu 04 Apr 2024 21:36:55 +0000
ROA not before:           Thu 04 Apr 2024 21:31:55 +0000
ROA not after:            Thu 03 Apr 2025 21:36:55 +0000
asID:                     271117
IP address blocks:        179.48.88.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.crl
                          rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:40:0a:66:0c:24:66:2e:32:0e:86:9e:08:51:f1:e3:1e:40:75:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62D01A32125D7B1F626C38C25BC340B899793CFA
        Validity
            Not Before: Apr  4 21:31:55 2024 GMT
            Not After : Apr  3 21:36:55 2025 GMT
        Subject: CN=4386F7C8B6D9F86656D68E7D033108935A94B482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d5:23:fa:10:17:05:76:f1:68:13:12:3e:5f:
                    35:5e:e9:d9:fe:34:44:55:cc:05:be:42:c7:44:31:
                    d3:ab:4f:9c:2b:85:54:a5:66:eb:dd:2d:3f:f7:69:
                    d3:c2:51:10:24:fd:15:af:c0:26:49:e9:33:66:b5:
                    b6:01:09:e2:40:c3:61:32:14:f5:84:23:70:ab:4a:
                    a1:f1:69:1d:11:41:f0:59:0d:f3:14:99:1f:50:56:
                    a1:e7:07:f3:30:98:03:16:81:94:a3:19:5f:ec:d8:
                    b4:81:64:ba:97:c7:05:59:bc:43:94:cb:ba:7e:13:
                    9d:a3:d7:90:e9:42:6f:74:29:05:c6:6c:64:79:87:
                    40:d4:f3:29:84:2a:f2:99:aa:d4:21:f9:a7:17:b3:
                    c5:16:5e:b8:68:8b:eb:7d:e2:ea:ab:cd:af:7e:69:
                    52:b7:94:22:84:1f:31:4b:38:be:6b:71:d1:35:9b:
                    51:4d:a1:43:fb:fd:39:0b:aa:7e:06:9d:1f:2e:98:
                    33:0d:14:02:13:f0:d6:30:7d:52:43:6d:6b:be:ab:
                    38:42:e0:8a:d7:02:2c:83:6d:1e:8e:82:16:5e:de:
                    14:85:6e:5e:a1:ae:80:10:6e:e7:44:a5:ce:35:f2:
                    dc:23:d7:3b:b2:4b:9f:ce:24:18:99:c7:d3:6f:09:
                    b0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:86:F7:C8:B6:D9:F8:66:56:D6:8E:7D:03:31:08:93:5A:94:B4:82
            X509v3 Authority Key Identifier:
                keyid:62:D0:1A:32:12:5D:7B:1F:62:6C:38:C2:5B:C3:40:B8:99:79:3C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/3137392e34382e38382e302f32332d3233203d3e20323731313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:c2:16:24:a3:b0:d7:c1:5c:63:8d:ef:3f:16:8b:b8:61:f5:
         3d:11:8b:55:a8:b8:ce:f8:9d:23:04:9c:9f:15:8b:3f:8d:80:
         c2:6f:8a:af:ad:d5:ac:b1:74:28:b0:b2:75:27:71:7d:f2:fd:
         e3:7b:68:4e:13:85:3f:94:1a:d6:30:24:e5:c0:16:f7:eb:02:
         de:2e:03:bc:94:02:db:70:9d:de:ed:7c:06:c4:b1:3b:71:7a:
         24:b8:4c:82:43:94:05:f2:65:b6:55:e9:2d:98:1f:f1:fc:83:
         12:d4:fd:91:dc:ad:61:65:d6:15:37:0d:96:71:af:b5:d1:b9:
         42:ce:64:52:86:e7:ff:61:d3:96:74:63:16:0b:bf:26:42:2f:
         95:bf:8c:8f:c9:ee:32:73:46:b7:90:7f:59:6a:1b:7a:8f:43:
         75:98:b4:7b:dc:b2:ee:85:74:f3:d3:75:b6:a3:96:e0:2c:1b:
         c3:e0:b4:d3:05:69:65:f6:f9:a9:f1:ee:59:a2:7f:b1:7f:78:
         08:3d:df:8f:45:17:f7:9d:f7:d3:5d:ae:5a:af:ae:94:e5:f1:
         5f:55:f9:d8:60:9f:4a:ef:24:40:8c:05:6b:d1:d8:2a:c5:3f:
         d9:6e:3c:a9:3b:f2:30:02:1f:7c:31:81:d0:fd:57:67:c1:19:
         3b:23:d8:4b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURkAKZgwkZi4yDoaeCFHx4x5AdcgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJEMDFBMzIxMjVEN0IxRjYyNkMzOEMyNUJDMzQwQjg5
OTc5M0NGQTAeFw0yNDA0MDQyMTMxNTVaFw0yNTA0MDMyMTM2NTVaMDMxMTAvBgNV
BAMTKDQzODZGN0M4QjZEOUY4NjY1NkQ2OEU3RDAzMzEwODkzNUE5NEI0ODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL1SP6EBcFdvFoExI+XzVe6dn+
NERVzAW+QsdEMdOrT5wrhVSlZuvdLT/3adPCURAk/RWvwCZJ6TNmtbYBCeJAw2Ey
FPWEI3CrSqHxaR0RQfBZDfMUmR9QVqHnB/MwmAMWgZSjGV/s2LSBZLqXxwVZvEOU
y7p+E52j15DpQm90KQXGbGR5h0DU8ymEKvKZqtQh+acXs8UWXrhoi+t94uqrza9+
aVK3lCKEHzFLOL5rcdE1m1FNoUP7/TkLqn4GnR8umDMNFAIT8NYwfVJDbWu+qzhC
4IrXAiyDbR6OghZe3hSFbl6hroAQbudEpc418twj1zuyS5/OJBiZx9NvCbABAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUQ4b3yLbZ+GZW1o59AzEIk1qUtIIwHwYDVR0j
BBgwFoAUYtAaMhJdex9ibDjCW8NAuJl5PPowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUhmYmpUMXFmZVQ4UHNoNXEyekZoMXkzeXZGU1hRYm1aVWJicnJabm9a
QjQvMS82MkQwMUEzMjEyNUQ3QjFGNjI2QzM4QzI1QkMzNDBCODk5NzkzQ0ZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyRDAxQTMyMTI1RDdCMUY2
MjZDMzhDMjVCQzM0MEI4OTk3OTNDRkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FIZmJqVDFxZmVUOFBzaDVxMnpGaDF5M3l2RlNYUWJtWlViYnJyWm5vWkI0LzEv
MzEzNzM5MmUzNDM4MmUzODM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNzMx
MzEzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBszBYMA0GCSqGSIb3DQEBCwUAA4IBAQBvwhYko7DX
wVxjje8/Fou4YfU9EYtVqLjO+J0jBJyfFYs/jYDCb4qvrdWssXQosLJ1J3F98v3j
e2hOE4U/lBrWMCTlwBb36wLeLgO8lALbcJ3e7XwGxLE7cXokuEyCQ5QF8mW2Vekt
mB/x/IMS1P2R3K1hZdYVNw2Wca+10blCzmRShuf/YdOWdGMWC78mQi+Vv4yPye4y
c0a3kH9Zaht6j0N1mLR73LLuhXTz03W2o5bgLBvD4LTTBWll9vmp8e5Zon+xf3gI
Pd+PRRf3nffTXa5ar66U5fFfVfnYYJ9K7yRAjAVr0dgqxT/ZbjypO/IwAh98MYHQ
/VdnwRk7I9hL
-----END CERTIFICATE-----
Generated at Sat Jun 29 07:19:17 2024 by rpki-client on console-ams.rpki-client.org