Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApE4saDhXZKsctXbwTzFRNAmKAVxx2PnP62vymXoymim/1/3137372e37332e3232342e302f32322d3234203d3e20323632353734.roa
File:                     3137372e37332e3232342e302f32322d3234203d3e20323632353734.roa (raw, json)
Hash identifier:          bl/R+fD8ntD9Esbh/JvdxdWTOfOXmsVgVTPW8Bc1TII=
Subject key identifier:   18:93:2A:C5:AD:CC:CF:B3:29:44:2C:69:A1:12:10:9A:5C:FD:7A:F4
Certificate issuer:       /CN=748787010CE9A73A6FC8B212C63184EE1F098B46
Certificate serial:       4631667E44620FE8303149D2E3EFCCDB412EAE81
Authority key identifier: 74:87:87:01:0C:E9:A7:3A:6F:C8:B2:12:C6:31:84:EE:1F:09:8B:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/748787010CE9A73A6FC8B212C63184EE1F098B46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApE4saDhXZKsctXbwTzFRNAmKAVxx2PnP62vymXoymim/1/3137372e37332e3232342e302f32322d3234203d3e20323632353734.roa
Signing time:             Thu 04 Apr 2024 21:51:12 +0000
ROA not before:           Thu 04 Apr 2024 21:46:12 +0000
ROA not after:            Thu 03 Apr 2025 21:51:12 +0000
asID:                     262574
IP address blocks:        177.73.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApE4saDhXZKsctXbwTzFRNAmKAVxx2PnP62vymXoymim/1/748787010CE9A73A6FC8B212C63184EE1F098B46.crl
                          rsync://rpki-repo.registro.br/repo/ApE4saDhXZKsctXbwTzFRNAmKAVxx2PnP62vymXoymim/1/748787010CE9A73A6FC8B212C63184EE1F098B46.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/748787010CE9A73A6FC8B212C63184EE1F098B46.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:52:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:31:66:7e:44:62:0f:e8:30:31:49:d2:e3:ef:cc:db:41:2e:ae:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=748787010CE9A73A6FC8B212C63184EE1F098B46
        Validity
            Not Before: Apr  4 21:46:12 2024 GMT
            Not After : Apr  3 21:51:12 2025 GMT
        Subject: CN=18932AC5ADCCCFB329442C69A112109A5CFD7AF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:83:99:6a:06:4c:0e:52:5f:f4:aa:a2:f3:e3:
                    b7:e8:06:db:4e:56:69:0e:7f:3d:39:58:e4:cc:55:
                    2d:cd:39:f5:5e:be:3a:38:ef:b0:74:fe:73:99:64:
                    91:44:d7:16:4b:a3:92:c5:08:90:83:37:3b:17:ed:
                    4a:46:44:d9:66:46:6f:a2:66:9a:1e:68:a5:a7:1b:
                    67:7d:08:83:33:7e:af:70:e8:6f:37:23:ff:42:a3:
                    87:c7:89:9b:80:67:20:f2:9c:50:bf:01:6f:0d:02:
                    40:7e:3a:42:ed:48:b5:44:a7:cb:7d:6f:5c:ad:c1:
                    eb:0d:d5:79:25:58:42:a9:26:e7:ca:a9:b6:77:3c:
                    21:ee:95:43:ae:72:0e:c7:db:b9:5d:1e:c3:6c:54:
                    e6:01:f9:9f:23:dd:d6:83:08:fe:d4:83:48:69:ff:
                    d9:63:ad:55:47:f2:c5:5c:33:66:a2:b5:5d:53:1d:
                    12:6e:0b:2a:65:b5:a4:20:82:f9:2f:35:0b:8b:13:
                    e4:50:67:5c:ee:a6:f5:d5:61:b9:f8:28:00:56:04:
                    3a:35:77:69:c6:83:3a:74:80:03:0e:4a:3a:ea:95:
                    16:73:21:ad:0e:59:e0:36:78:7a:f9:ec:d8:61:fb:
                    43:91:9f:6d:7c:92:24:d1:22:4b:80:a4:4f:a2:2b:
                    8e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:93:2A:C5:AD:CC:CF:B3:29:44:2C:69:A1:12:10:9A:5C:FD:7A:F4
            X509v3 Authority Key Identifier:
                keyid:74:87:87:01:0C:E9:A7:3A:6F:C8:B2:12:C6:31:84:EE:1F:09:8B:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApE4saDhXZKsctXbwTzFRNAmKAVxx2PnP62vymXoymim/1/748787010CE9A73A6FC8B212C63184EE1F098B46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/748787010CE9A73A6FC8B212C63184EE1F098B46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApE4saDhXZKsctXbwTzFRNAmKAVxx2PnP62vymXoymim/1/3137372e37332e3232342e302f32322d3234203d3e20323632353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:9f:e1:48:5b:87:90:80:29:94:89:ee:f2:35:91:00:32:5d:
         3d:4a:ee:f2:69:40:ff:48:d8:4c:75:06:2e:a6:3c:ca:8f:33:
         20:6c:6a:ce:e2:af:9d:7b:dd:e5:b2:1c:aa:36:85:25:62:fd:
         75:38:c7:d2:87:18:e1:03:62:89:9b:aa:94:32:b1:20:00:d9:
         17:b5:e1:e9:8b:a4:0e:e4:01:88:97:4e:db:e8:0c:1c:f4:46:
         0a:fb:46:1e:36:0a:d8:22:6d:29:c7:88:f8:dd:2e:c5:bc:45:
         15:eb:b1:74:75:2a:a5:7e:5b:f3:a6:46:95:0a:5d:c5:60:cf:
         80:af:f7:8d:6f:08:4d:57:2e:86:a2:ed:d4:92:e4:90:2d:5f:
         9c:35:09:13:6d:51:ed:84:73:94:30:bd:3b:e2:0a:a9:8e:18:
         81:15:10:48:c5:9f:89:3e:9f:d7:97:df:21:96:23:35:94:f3:
         8c:1e:6e:64:ea:7f:ef:27:c1:34:99:76:08:22:f9:99:d2:08:
         87:0e:65:08:9c:f2:8f:40:66:d9:2d:f9:2d:b5:b1:ab:fd:75:
         9f:c4:2d:f6:44:89:77:a8:3b:48:42:d6:1a:8b:33:ba:b7:24:
         df:2c:61:17:58:5d:81:b5:0d:d3:ce:9d:76:8b:ba:0b:d0:4e:
         fd:36:2b:b9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURjFmfkRiD+gwMUnS4+/M20EuroEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ4Nzg3MDEwQ0U5QTczQTZGQzhCMjEyQzYzMTg0RUUx
RjA5OEI0NjAeFw0yNDA0MDQyMTQ2MTJaFw0yNTA0MDMyMTUxMTJaMDMxMTAvBgNV
BAMTKDE4OTMyQUM1QURDQ0NGQjMyOTQ0MkM2OUExMTIxMDlBNUNGRDdBRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDng5lqBkwOUl/0qqLz47foBttO
VmkOfz05WOTMVS3NOfVevjo477B0/nOZZJFE1xZLo5LFCJCDNzsX7UpGRNlmRm+i
ZpoeaKWnG2d9CIMzfq9w6G83I/9Co4fHiZuAZyDynFC/AW8NAkB+OkLtSLVEp8t9
b1ytwesN1XklWEKpJufKqbZ3PCHulUOucg7H27ldHsNsVOYB+Z8j3daDCP7Ug0hp
/9ljrVVH8sVcM2aitV1THRJuCypltaQggvkvNQuLE+RQZ1zupvXVYbn4KABWBDo1
d2nGgzp0gAMOSjrqlRZzIa0OWeA2eHr57Nhh+0ORn218kiTRIkuApE+iK44BAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGJMqxa3Mz7MpRCxpoRIQmlz9evQwHwYDVR0j
BBgwFoAUdIeHAQzppzpvyLISxjGE7h8Ji0YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXBFNHNhRGhYWktzY3RYYndUekZSTkFtS0FWeHgyUG5QNjJ2eW1Yb3lt
aW0vMS83NDg3ODcwMTBDRTlBNzNBNkZDOEIyMTJDNjMxODRFRTFGMDk4QjQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc0ODc4NzAxMENFOUE3M0E2
RkM4QjIxMkM2MzE4NEVFMUYwOThCNDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FwRTRzYURoWFpLc2N0WGJ3VHpGUk5BbUtBVnh4MlBuUDYydnltWG95bWltLzEv
MzEzNzM3MmUzNzMzMmUzMjMyMzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNTM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxSeAwDQYJKoZIhvcNAQELBQADggEBACmf4Uhb
h5CAKZSJ7vI1kQAyXT1K7vJpQP9I2Ex1Bi6mPMqPMyBsas7ir5173eWyHKo2hSVi
/XU4x9KHGOEDYombqpQysSAA2Re14emLpA7kAYiXTtvoDBz0Rgr7Rh42CtgibSnH
iPjdLsW8RRXrsXR1KqV+W/OmRpUKXcVgz4Cv941vCE1XLoai7dSS5JAtX5w1CRNt
Ue2Ec5QwvTviCqmOGIEVEEjFn4k+n9eX3yGWIzWU84webmTqf+8nwTSZdggi+ZnS
CIcOZQic8o9AZtkt+S21sav9dZ/ELfZEiXeoO0hC1hqLM7q3JN8sYRdYXYG1DdPO
nXaLugvQTv02K7k=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:06 2024 by rpki-client on console-ams.rpki-client.org