Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3137372e3135342e37322e302f32312d3234203d3e203238333439.roa
File:                     3137372e3135342e37322e302f32312d3234203d3e203238333439.roa (raw, json)
Hash identifier:          Tdw3PDJDUEZOKhTT3EuJexXTQ5aIOH9ciTyFHnJfsFg=
Subject key identifier:   78:B1:40:D8:BB:A5:13:91:9D:D2:B5:E5:DC:E5:FD:03:6E:FD:8D:C0
Certificate issuer:       /CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
Certificate serial:       0F7640ABC44EAE01970813042F0F11CA64CFEE1A
Authority key identifier: 0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3137372e3135342e37322e302f32312d3234203d3e203238333439.roa
Signing time:             Mon 08 Jul 2024 19:43:05 +0000
ROA not before:           Mon 08 Jul 2024 19:38:05 +0000
ROA not after:            Mon 07 Jul 2025 19:43:05 +0000
asID:                     28349
IP address blocks:        177.154.72.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 Nov 2024 03:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:76:40:ab:c4:4e:ae:01:97:08:13:04:2f:0f:11:ca:64:cf:ee:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
        Validity
            Not Before: Jul  8 19:38:05 2024 GMT
            Not After : Jul  7 19:43:05 2025 GMT
        Subject: CN=78B140D8BBA513919DD2B5E5DCE5FD036EFD8DC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:53:09:09:e7:04:9b:3f:47:19:b9:c4:65:33:
                    8a:7a:8f:4e:72:b1:76:f9:45:77:84:c1:91:b2:56:
                    0c:a3:89:4d:ab:26:d0:8d:d4:27:ee:d2:65:34:01:
                    1c:14:ab:e7:82:44:8e:2d:da:96:60:f3:a4:db:b8:
                    0c:2a:2a:ae:71:c3:00:6b:ed:42:88:57:31:7a:7a:
                    27:e6:17:eb:95:96:11:19:18:79:57:02:d9:e2:09:
                    a1:f0:e0:31:01:b3:61:a6:fc:b2:01:25:99:e7:50:
                    b4:4f:2b:78:73:e6:9e:57:e2:03:91:ac:b5:55:23:
                    cb:ad:bf:ac:a8:3f:7e:e9:7c:49:ad:c7:c0:f7:e0:
                    98:1a:1f:10:f1:ee:34:64:00:6c:ae:ea:2c:6d:3a:
                    0f:b1:b7:38:20:dd:c6:a3:18:ba:83:9c:61:ce:d1:
                    30:39:b2:68:17:b2:b6:d8:9c:52:c4:9c:0b:8a:d5:
                    e0:c3:22:06:f9:54:81:2f:e0:90:47:aa:64:0e:ee:
                    c9:23:32:7d:33:10:12:5c:83:b1:2b:d9:62:49:ed:
                    ec:d3:4d:59:a5:99:9d:9a:e9:b0:4b:09:34:8c:4c:
                    96:21:8b:eb:9e:4a:cb:81:71:16:dc:23:a9:61:1f:
                    69:79:59:27:26:80:db:51:94:3d:5b:b1:5b:f4:61:
                    e7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B1:40:D8:BB:A5:13:91:9D:D2:B5:E5:DC:E5:FD:03:6E:FD:8D:C0
            X509v3 Authority Key Identifier:
                keyid:0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3137372e3135342e37322e302f32312d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bf:00:76:c3:2a:a7:aa:fe:5b:f3:dd:21:04:e7:dd:1d:e2:9c:
         33:7c:5e:ed:98:78:dc:11:06:42:78:32:2c:cc:1a:37:13:b9:
         bc:67:2a:d7:be:aa:1f:14:5d:9b:ca:07:6b:b2:8c:1d:3e:ec:
         4c:1c:b6:71:4f:82:c9:a8:00:27:a9:d8:4a:09:63:4e:1e:31:
         b2:40:f7:ef:56:1f:ab:da:71:85:f3:0a:03:e6:c3:60:1d:2e:
         7e:3b:35:2a:5b:05:13:fd:9b:3d:07:6b:9d:77:38:b7:be:da:
         95:57:df:05:70:bf:cb:93:cf:9f:b9:dc:8a:e8:6d:6b:2b:d8:
         d3:8b:db:91:e4:9c:dc:2a:b3:34:46:67:07:25:8e:c0:ba:fe:
         48:92:95:98:75:ff:aa:1e:f6:d9:a8:d5:8f:8f:05:0e:db:c7:
         1c:97:25:0f:9f:c5:7a:13:6e:c8:0d:bb:ee:d3:03:d6:f4:a8:
         8c:35:00:7a:59:9a:10:d4:01:6e:6e:b5:a9:dc:91:d7:a5:d6:
         88:87:79:3d:e1:df:da:7f:08:0f:e9:83:fc:34:84:4e:dc:db:
         49:a7:74:59:f3:51:58:54:1d:23:d9:b3:e9:1f:e4:f0:e3:8e:
         30:c0:39:60:a9:9a:f1:33:2c:6f:15:0c:40:1f:30:37:de:44:
         bd:c3:02:03
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUD3ZAq8ROrgGXCBMELw8RymTP7howDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMERFQjkyRjMzMDdCMEU5NENDNzBEOUIyMUI1MEY2RkUy
MTM1Q0Q5ODAeFw0yNDA3MDgxOTM4MDVaFw0yNTA3MDcxOTQzMDVaMDMxMTAvBgNV
BAMTKDc4QjE0MEQ4QkJBNTEzOTE5REQyQjVFNURDRTVGRDAzNkVGRDhEQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5UwkJ5wSbP0cZucRlM4p6j05y
sXb5RXeEwZGyVgyjiU2rJtCN1Cfu0mU0ARwUq+eCRI4t2pZg86TbuAwqKq5xwwBr
7UKIVzF6eifmF+uVlhEZGHlXAtniCaHw4DEBs2Gm/LIBJZnnULRPK3hz5p5X4gOR
rLVVI8utv6yoP37pfEmtx8D34JgaHxDx7jRkAGyu6ixtOg+xtzgg3cajGLqDnGHO
0TA5smgXsrbYnFLEnAuK1eDDIgb5VIEv4JBHqmQO7skjMn0zEBJcg7Er2WJJ7ezT
TVmlmZ2a6bBLCTSMTJYhi+ueSsuBcRbcI6lhH2l5WScmgNtRlD1bsVv0YefLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUeLFA2LulE5Gd0rXl3OX9A279jcAwHwYDVR0j
BBgwFoAUDeuS8zB7DpTMcNmyG1D2/iE1zZgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWk1dVl4UzY3MTdONTdWZUZ4aFk3V0hSd1M1TmhmTDZMTDh0eTRNVFpw
NUovMi8wREVCOTJGMzMwN0IwRTk0Q0M3MEQ5QjIxQjUwRjZGRTIxMzVDRDk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBERUI5MkYzMzA3QjBFOTRD
QzcwRDlCMjFCNTBGNkZFMjEzNUNEOTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FpNXVZeFM2NzE3TjU3VmVGeGhZN1dIUndTNU5oZkw2TEw4dHk0TVRacDVKLzIv
MzEzNzM3MmUzMTM1MzQyZTM3MzIyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM4
MzMzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsZpIMA0GCSqGSIb3DQEBCwUAA4IBAQC/AHbDKqeq
/lvz3SEE590d4pwzfF7tmHjcEQZCeDIszBo3E7m8ZyrXvqofFF2bygdrsowdPuxM
HLZxT4LJqAAnqdhKCWNOHjGyQPfvVh+r2nGF8woD5sNgHS5+OzUqWwUT/Zs9B2ud
dzi3vtqVV98FcL/Lk8+fudyK6G1rK9jTi9uR5JzcKrM0RmcHJY7Auv5IkpWYdf+q
HvbZqNWPjwUO28cclyUPn8V6E27IDbvu0wPW9KiMNQB6WZoQ1AFubrWp3JHXpdaI
h3k94d/afwgP6YP8NIRO3NtJp3RZ81FYVB0j2bPpH+Tw444wwDlgqZrxMyxvFQxA
HzA33kS9wwID
-----END CERTIFICATE-----
Generated at Sat Nov 16 04:16:30 2024 by rpki-client on console-fra.rpki-client.org