Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/1/3137372e36362e3137322e302f32322d3234203d3e203532363539.roa
File:                     3137372e36362e3137322e302f32322d3234203d3e203532363539.roa (raw, json)
Hash identifier:          zcPQRfkIIXd1gkg1M2q8ULajKMU9Yb3CDzsqS5/EJL4=
Subject key identifier:   88:55:EB:EA:DB:91:53:36:03:33:6E:03:76:FD:5C:D5:3A:C5:08:EC
Certificate issuer:       /CN=F587850376B78E012ED02AD104B6287373707975
Certificate serial:       0DB0AEB50FF7664AF885D5149FAA30E87AE66415
Authority key identifier: F5:87:85:03:76:B7:8E:01:2E:D0:2A:D1:04:B6:28:73:73:70:79:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F587850376B78E012ED02AD104B6287373707975.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/1/3137372e36362e3137322e302f32322d3234203d3e203532363539.roa
Signing time:             Thu 04 Apr 2024 23:33:11 +0000
ROA not before:           Thu 04 Apr 2024 23:28:11 +0000
ROA not after:            Thu 03 Apr 2025 23:33:11 +0000
asID:                     52659
IP address blocks:        177.66.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/1/F587850376B78E012ED02AD104B6287373707975.crl
                          rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/1/F587850376B78E012ED02AD104B6287373707975.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F587850376B78E012ED02AD104B6287373707975.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:11:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b0:ae:b5:0f:f7:66:4a:f8:85:d5:14:9f:aa:30:e8:7a:e6:64:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F587850376B78E012ED02AD104B6287373707975
        Validity
            Not Before: Apr  4 23:28:11 2024 GMT
            Not After : Apr  3 23:33:11 2025 GMT
        Subject: CN=8855EBEADB91533603336E0376FD5CD53AC508EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:50:78:f0:93:b5:5c:de:a1:b6:ef:f4:02:59:
                    44:ad:fb:56:df:2d:11:77:18:94:f2:f9:ca:53:47:
                    8a:74:16:32:e6:55:96:05:5d:67:fa:72:a3:45:01:
                    7d:1d:ec:81:20:79:13:a6:8c:9c:ed:64:10:40:1f:
                    0a:09:76:4c:2c:df:ee:8d:e5:c5:94:e5:bb:60:92:
                    f3:6d:8c:85:15:85:d4:01:be:f6:5e:c2:40:08:29:
                    37:ba:ff:38:73:fa:69:c0:e4:83:a2:9f:ec:32:ed:
                    6b:44:70:5c:0c:e3:09:c7:89:4d:e3:6b:e6:a1:3b:
                    ad:72:ae:20:9b:f5:6c:f0:1a:2c:4f:ec:2f:68:f7:
                    33:85:47:7e:1d:54:42:2f:80:29:6e:56:1a:a2:bb:
                    e7:1c:13:7b:60:b7:e0:31:2c:0a:7c:d8:3d:94:6d:
                    d4:a4:3d:46:6f:d5:e3:fb:65:ff:50:97:0b:08:9b:
                    f0:9d:ca:ec:04:b1:5f:47:0c:33:df:81:e2:a6:7d:
                    db:0d:6e:31:8f:3f:6e:5e:cb:a3:e9:b0:c9:3b:5f:
                    e7:3e:a5:a4:d0:2f:04:da:5b:59:d6:ef:c4:33:63:
                    a7:81:2f:9e:84:bd:65:8a:60:d9:2f:28:de:27:f4:
                    ec:c8:b3:e8:f7:42:37:40:ba:13:64:44:d6:2d:43:
                    e2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:55:EB:EA:DB:91:53:36:03:33:6E:03:76:FD:5C:D5:3A:C5:08:EC
            X509v3 Authority Key Identifier:
                keyid:F5:87:85:03:76:B7:8E:01:2E:D0:2A:D1:04:B6:28:73:73:70:79:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/1/F587850376B78E012ED02AD104B6287373707975.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F587850376B78E012ED02AD104B6287373707975.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/1/3137372e36362e3137322e302f32322d3234203d3e203532363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:8c:49:5b:9d:ff:d0:05:21:27:d5:42:16:90:f0:15:23:51:
         e6:55:e1:5d:37:7d:ae:62:96:08:e2:f0:0f:b2:24:8a:5a:6d:
         0c:c8:78:de:4b:23:6e:d5:59:95:76:a0:03:d5:de:3b:2a:1b:
         49:df:cb:ef:eb:05:b6:51:0c:b2:9a:13:2d:12:8c:4c:c7:96:
         8f:88:ec:cf:6f:b3:72:c5:96:bb:26:6b:9e:2b:8b:e3:5f:a1:
         0c:92:2d:d0:55:d3:02:c6:62:a1:52:e1:fa:e6:0f:16:e5:d1:
         92:7c:a5:f7:b0:a8:9f:39:e1:2d:aa:57:38:fd:43:fb:4b:b3:
         da:70:41:46:e2:b9:42:08:70:f4:7b:a1:50:d3:2d:d8:fb:2a:
         3e:e6:7b:92:63:73:93:ea:74:41:71:70:a7:c8:5a:1b:5d:5f:
         62:28:3f:ce:8c:db:44:3a:cc:55:ec:d9:5b:5d:a9:8a:69:7d:
         24:f2:28:1d:c8:e5:dd:69:38:38:a0:6a:b9:14:e2:b6:2e:e0:
         3a:ce:d9:43:d1:d1:b7:51:a6:ce:8a:40:8d:c0:1d:11:13:33:
         87:c4:a4:df:f2:dc:4b:68:38:41:c7:1e:89:5b:20:f6:59:e7:
         48:38:6c:a4:08:dc:25:14:93:2d:f8:9e:c6:90:21:78:d6:2f:
         ba:24:f9:78
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUDbCutQ/3Zkr4hdUUn6ow6HrmZBUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjU4Nzg1MDM3NkI3OEUwMTJFRDAyQUQxMDRCNjI4NzM3
MzcwNzk3NTAeFw0yNDA0MDQyMzI4MTFaFw0yNTA0MDMyMzMzMTFaMDMxMTAvBgNV
BAMTKDg4NTVFQkVBREI5MTUzMzYwMzMzNkUwMzc2RkQ1Q0Q1M0FDNTA4RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClUHjwk7Vc3qG27/QCWUSt+1bf
LRF3GJTy+cpTR4p0FjLmVZYFXWf6cqNFAX0d7IEgeROmjJztZBBAHwoJdkws3+6N
5cWU5btgkvNtjIUVhdQBvvZewkAIKTe6/zhz+mnA5IOin+wy7WtEcFwM4wnHiU3j
a+ahO61yriCb9WzwGixP7C9o9zOFR34dVEIvgCluVhqiu+ccE3tgt+AxLAp82D2U
bdSkPUZv1eP7Zf9QlwsIm/CdyuwEsV9HDDPfgeKmfdsNbjGPP25ey6PpsMk7X+c+
paTQLwTaW1nW78QzY6eBL56EvWWKYNkvKN4n9OzIs+j3QjdAuhNkRNYtQ+IpAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUiFXr6tuRUzYDM24Ddv1c1TrFCOwwHwYDVR0j
BBgwFoAU9YeFA3a3jgEu0CrRBLYoc3NweXUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVZxU3k5aDduQ3pqTXZLZnJDbkw2Z3E3UHpES3VvRkdRQW0zd2tnTURO
Z2UvMS9GNTg3ODUwMzc2Qjc4RTAxMkVEMDJBRDEwNEI2Mjg3MzczNzA3OTc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y1ODc4NTAzNzZCNzhFMDEy
RUQwMkFEMTA0QjYyODczNzM3MDc5NzUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FWcVN5OWg3bkN6ak12S2ZyQ25MNmdxN1B6REt1b0ZHUUFtM3drZ01ETmdlLzEv
MzEzNzM3MmUzNjM2MmUzMTM3MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMy
MzYzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsUKsMA0GCSqGSIb3DQEBCwUAA4IBAQCLjElbnf/Q
BSEn1UIWkPAVI1HmVeFdN32uYpYI4vAPsiSKWm0MyHjeSyNu1VmVdqAD1d47KhtJ
38vv6wW2UQyymhMtEoxMx5aPiOzPb7NyxZa7JmueK4vjX6EMki3QVdMCxmKhUuH6
5g8W5dGSfKX3sKifOeEtqlc4/UP7S7PacEFG4rlCCHD0e6FQ0y3Y+yo+5nuSY3OT
6nRBcXCnyFobXV9iKD/OjNtEOsxV7NlbXamKaX0k8igdyOXdaTg4oGq5FOK2LuA6
ztlD0dG3UabOikCNwB0REzOHxKTf8txLaDhBxx6JWyD2WedIOGykCNwlFJMt+J7G
kCF41i+6JPl4
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:22 2024 by rpki-client on console-ams.rpki-client.org