Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/3137372e3232302e302e302f31372d3138203d3e203533313837.roa
File:                     3137372e3232302e302e302f31372d3138203d3e203533313837.roa (raw, json)
Hash identifier:          70QmT0mpkw/Ib6fBtRh83QYvBKeaIkSbthIvLJYqPh0=
Subject key identifier:   CA:B0:05:91:8B:F8:9C:A7:C1:E4:6E:04:0A:F8:6B:69:05:B6:E0:CB
Certificate issuer:       /CN=F0ADD6FFCDFB09210157372271C0B492767D7001
Certificate serial:       648B5CE301B20158F9545545435DEF6E3B1238C9
Authority key identifier: F0:AD:D6:FF:CD:FB:09:21:01:57:37:22:71:C0:B4:92:76:7D:70:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0ADD6FFCDFB09210157372271C0B492767D7001.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/3137372e3232302e302e302f31372d3138203d3e203533313837.roa
Signing time:             Thu 04 Apr 2024 18:44:39 +0000
ROA not before:           Thu 04 Apr 2024 18:39:39 +0000
ROA not after:            Thu 03 Apr 2025 18:44:39 +0000
asID:                     53187
IP address blocks:        177.220.0.0/17 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/F0ADD6FFCDFB09210157372271C0B492767D7001.crl
                          rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/F0ADD6FFCDFB09210157372271C0B492767D7001.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0ADD6FFCDFB09210157372271C0B492767D7001.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:20:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:8b:5c:e3:01:b2:01:58:f9:54:55:45:43:5d:ef:6e:3b:12:38:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0ADD6FFCDFB09210157372271C0B492767D7001
        Validity
            Not Before: Apr  4 18:39:39 2024 GMT
            Not After : Apr  3 18:44:39 2025 GMT
        Subject: CN=CAB005918BF89CA7C1E46E040AF86B6905B6E0CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6b:a2:2b:ba:bc:4b:12:c1:07:41:75:bc:1c:
                    4a:24:f8:b4:40:ad:55:d8:28:57:d9:23:93:0e:5b:
                    ab:1c:1a:26:60:a9:2d:e5:ef:98:f1:33:7c:9f:b7:
                    3b:4e:9c:42:cd:b2:8d:c8:e5:f5:8c:4a:e6:7b:7c:
                    3e:41:2e:6e:b6:75:0a:8e:40:ab:18:ab:60:3e:b8:
                    00:69:19:e2:2a:75:eb:f2:88:a2:34:e1:3d:e1:d6:
                    51:0d:1e:bd:79:e3:d7:b4:a7:0b:5b:30:bf:4b:ad:
                    56:28:71:a3:23:07:d5:e9:13:ef:fe:76:cb:84:20:
                    08:b0:65:4d:50:8c:0f:95:84:c9:d2:30:b1:c8:dd:
                    dd:cd:de:99:3d:83:3a:5e:53:5b:ce:28:7d:7f:4a:
                    67:c8:96:4c:a9:81:60:dc:e4:e7:ca:24:67:cb:38:
                    e7:a6:95:ff:2a:8e:f0:a2:9b:21:bd:8b:4b:22:a0:
                    d1:4b:08:d1:d0:95:c7:62:56:db:2e:18:22:8d:b7:
                    27:55:6a:f2:98:f6:ff:57:51:9d:30:6e:f5:58:40:
                    8c:cd:0d:c1:72:35:4a:e0:d1:3b:e9:b1:c7:42:56:
                    6d:22:b6:2f:11:86:2c:24:71:82:19:2a:16:8d:94:
                    af:f3:2c:8d:43:b0:dd:30:d3:43:a6:e7:57:7c:a6:
                    6b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B0:05:91:8B:F8:9C:A7:C1:E4:6E:04:0A:F8:6B:69:05:B6:E0:CB
            X509v3 Authority Key Identifier:
                keyid:F0:AD:D6:FF:CD:FB:09:21:01:57:37:22:71:C0:B4:92:76:7D:70:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/F0ADD6FFCDFB09210157372271C0B492767D7001.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0ADD6FFCDFB09210157372271C0B492767D7001.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/1/3137372e3232302e302e302f31372d3138203d3e203533313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.220.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         73:47:3d:39:f7:32:aa:82:49:af:d9:b7:16:5a:39:4d:ad:f6:
         93:26:eb:a8:e2:56:0b:97:38:d9:1a:66:4c:56:d5:7c:3f:09:
         52:e9:e2:08:ee:7f:1c:2b:ca:77:90:ee:69:81:29:25:24:c3:
         0b:4a:99:d5:e9:6e:ef:fe:f7:1d:92:d0:e6:7e:30:95:ec:12:
         da:12:f5:cd:82:3a:ae:6c:44:46:9e:d4:16:8b:92:f1:ed:86:
         2a:e5:86:42:15:82:64:c5:27:e7:ba:cc:3a:15:53:a8:e6:75:
         35:96:d0:73:9b:cb:99:ec:50:9f:d0:31:47:a4:99:c7:bc:bd:
         6f:4e:b4:13:69:8e:2a:c5:e4:23:99:cb:44:aa:6a:36:a9:ec:
         a2:44:71:f9:cc:44:73:ef:37:18:ae:2e:7e:70:3b:3e:a7:98:
         83:49:b4:f5:9b:bd:2d:f2:00:71:fd:04:e5:dc:67:b2:72:53:
         6d:31:a2:30:5d:37:31:2c:f7:23:27:5f:58:05:a4:5e:d1:13:
         52:c3:df:61:ed:83:aa:42:ed:dd:85:dd:75:07:9b:0b:b7:68:
         79:49:d5:8f:54:64:ee:dd:c8:93:be:15:dd:fc:63:6d:62:12:
         ae:65:ca:96:46:6d:69:b8:d0:3e:3e:32:e6:0b:ae:53:42:84:
         a7:66:48:78
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUZItc4wGyAVj5VFVFQ13vbjsSOMkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjBBREQ2RkZDREZCMDkyMTAxNTczNzIyNzFDMEI0OTI3
NjdENzAwMTAeFw0yNDA0MDQxODM5MzlaFw0yNTA0MDMxODQ0MzlaMDMxMTAvBgNV
BAMTKENBQjAwNTkxOEJGODlDQTdDMUU0NkUwNDBBRjg2QjY5MDVCNkUwQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDja6IrurxLEsEHQXW8HEok+LRA
rVXYKFfZI5MOW6scGiZgqS3l75jxM3yftztOnELNso3I5fWMSuZ7fD5BLm62dQqO
QKsYq2A+uABpGeIqdevyiKI04T3h1lENHr1549e0pwtbML9LrVYocaMjB9XpE+/+
dsuEIAiwZU1QjA+VhMnSMLHI3d3N3pk9gzpeU1vOKH1/SmfIlkypgWDc5OfKJGfL
OOemlf8qjvCimyG9i0sioNFLCNHQlcdiVtsuGCKNtydVavKY9v9XUZ0wbvVYQIzN
DcFyNUrg0TvpscdCVm0iti8RhiwkcYIZKhaNlK/zLI1DsN0w00Om51d8pmtzAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUyrAFkYv4nKfB5G4ECvhraQW24MswHwYDVR0j
BBgwFoAU8K3W/837CSEBVzciccC0knZ9cAEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQU5KWWladVFWQTZCNnlUaExWOExtazVZMnZjZGh6bWROUHhHcDk2Ulox
N0svMS9GMEFERDZGRkNERkIwOTIxMDE1NzM3MjI3MUMwQjQ5Mjc2N0Q3MDAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YwQURENkZGQ0RGQjA5MjEw
MTU3MzcyMjcxQzBCNDkyNzY3RDcwMDEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FOSllpWnVRVkE2QjZ5VGhMVjhMbWs1WTJ2Y2Roem1kTlB4R3A5NlJaMTdLLzEv
MzEzNzM3MmUzMjMyMzAyZTMwMmUzMDJmMzEzNzJkMzEzODIwM2QzZTIwMzUzMzMx
MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEB7HcADANBgkqhkiG9w0BAQsFAAOCAQEAc0c9OfcyqoJJ
r9m3Flo5Ta32kybrqOJWC5c42RpmTFbVfD8JUuniCO5/HCvKd5DuaYEpJSTDC0qZ
1elu7/73HZLQ5n4wlewS2hL1zYI6rmxERp7UFouS8e2GKuWGQhWCZMUn57rMOhVT
qOZ1NZbQc5vLmexQn9AxR6SZx7y9b060E2mOKsXkI5nLRKpqNqnsokRx+cxEc+83
GK4ufnA7PqeYg0m09Zu9LfIAcf0E5dxnsnJTbTGiMF03MSz3IydfWAWkXtETUsPf
Ye2DqkLt3YXddQebC7doeUnVj1Rk7t3Ik74V3fxjbWISrmXKlkZtabjQPj4y5guu
U0KEp2ZIeA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:39 2024 by rpki-client on console-ams.rpki-client.org