Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3137372e38352e3137362e302f32312d3231203d3e20323632363131.roa
File:                     3137372e38352e3137362e302f32312d3231203d3e20323632363131.roa (raw, json)
Hash identifier:          QPN4cSxIgiE01eD952npX0E5rjHTQdw08SIXGRAcuM0=
Subject key identifier:   78:8B:53:EA:73:1E:98:25:8A:33:0B:94:14:E1:5C:EC:98:4C:CE:0C
Certificate issuer:       /CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73
Certificate serial:       2843503A7505DA64FFADFFEA6CC4B8668C55F073
Authority key identifier: D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3137372e38352e3137362e302f32312d3231203d3e20323632363131.roa
Signing time:             Wed 17 Apr 2024 14:20:27 +0000
ROA not before:           Wed 17 Apr 2024 14:15:27 +0000
ROA not after:            Wed 16 Apr 2025 14:20:27 +0000
asID:                     262611
IP address blocks:        177.85.176.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl
                          rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:43:50:3a:75:05:da:64:ff:ad:ff:ea:6c:c4:b8:66:8c:55:f0:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73
        Validity
            Not Before: Apr 17 14:15:27 2024 GMT
            Not After : Apr 16 14:20:27 2025 GMT
        Subject: CN=788B53EA731E98258A330B9414E15CEC984CCE0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ac:18:83:ea:64:20:43:4b:00:91:09:73:c3:
                    58:3f:2c:d3:c6:78:2b:90:4a:68:68:22:3e:b3:fe:
                    6d:dd:b7:b6:51:1e:83:e9:b5:41:bf:73:2b:3c:66:
                    ce:53:4a:66:e6:47:68:cc:85:17:a0:20:c6:0d:0d:
                    1e:c0:fa:56:d7:1a:cf:78:43:50:f7:34:f1:80:c9:
                    34:19:b8:50:3c:a7:1c:35:bb:f1:01:d9:5e:9e:41:
                    dd:72:e2:74:e8:fc:8a:76:9f:ac:00:d6:5f:8e:17:
                    26:1d:20:7e:d3:2b:a2:92:e2:ce:64:42:ff:48:24:
                    78:84:0e:06:8d:73:2d:a2:82:59:f2:48:49:c5:dd:
                    c2:e6:6b:d9:78:8a:89:2f:09:75:b9:23:4d:e9:3d:
                    04:60:cd:94:0b:5b:a7:b5:26:40:8c:59:54:04:47:
                    f8:8f:51:0c:8c:01:9c:9c:ca:b7:33:94:f1:57:ca:
                    e3:14:ca:ad:70:18:92:d9:72:06:02:cf:5c:7a:b8:
                    58:8e:47:1e:4d:b2:eb:2c:63:a2:5f:b7:0f:bf:45:
                    32:1b:e1:1d:c4:1b:8e:8b:d7:20:48:02:8b:6e:94:
                    ef:0a:a4:02:2e:9e:67:ea:0c:ec:6f:df:e3:fc:de:
                    f8:b7:d9:a4:38:6b:4c:5b:2e:81:63:00:ea:6d:df:
                    e0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8B:53:EA:73:1E:98:25:8A:33:0B:94:14:E1:5C:EC:98:4C:CE:0C
            X509v3 Authority Key Identifier:
                keyid:D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3137372e38352e3137362e302f32312d3231203d3e20323632363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a4:44:77:97:27:4e:84:22:de:68:1a:98:df:26:52:dc:de:80:
         88:c1:d0:55:8d:0c:6c:ba:1d:94:6a:d2:75:3c:2d:8a:93:40:
         47:fb:c0:b2:8e:fd:c8:e6:b7:63:32:44:bb:ae:4b:c2:1d:d8:
         4a:bb:6d:61:fd:71:aa:77:ff:4b:06:a0:66:04:82:61:01:f0:
         07:67:6e:00:a5:a1:84:0b:7a:fb:87:6c:00:ef:f5:4b:ad:38:
         cd:14:b8:da:d9:e6:84:a4:f4:72:eb:a3:ac:a9:b6:59:c3:80:
         54:f8:0d:d1:50:76:6c:32:d2:86:e3:27:b1:4a:f8:58:d3:92:
         27:60:5a:48:f8:ca:63:51:cb:95:37:55:8b:8e:26:f1:82:c0:
         3b:42:c0:fe:d7:47:99:0c:b5:8e:89:48:4f:32:ad:06:07:ed:
         47:a4:47:d1:e6:4d:c6:3e:e9:74:9a:be:e0:7c:7c:a1:ab:d9:
         d6:2c:fa:ab:2e:11:d5:0f:5a:97:cb:23:8b:c0:4b:11:c1:14:
         e3:a0:08:47:9a:fe:73:ed:57:8e:24:5a:78:0c:b4:6e:ba:e3:
         72:39:1c:37:10:d0:fe:32:66:2a:85:fd:6f:d8:be:9b:67:67:
         10:d8:25:5b:bc:c9:1e:c7:dd:05:7b:85:88:28:f0:be:9d:b3:
         5c:30:41:f3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKENQOnUF2mT/rf/qbMS4ZoxV8HMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJCMjQ2NzNBRjk0RjZFOEE3MTcxODg3QjYwQkY0RUJF
OUQxNUU3MzAeFw0yNDA0MTcxNDE1MjdaFw0yNTA0MTYxNDIwMjdaMDMxMTAvBgNV
BAMTKDc4OEI1M0VBNzMxRTk4MjU4QTMzMEI5NDE0RTE1Q0VDOTg0Q0NFMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFrBiD6mQgQ0sAkQlzw1g/LNPG
eCuQSmhoIj6z/m3dt7ZRHoPptUG/cys8Zs5TSmbmR2jMhRegIMYNDR7A+lbXGs94
Q1D3NPGAyTQZuFA8pxw1u/EB2V6eQd1y4nTo/Ip2n6wA1l+OFyYdIH7TK6KS4s5k
Qv9IJHiEDgaNcy2iglnySEnF3cLma9l4iokvCXW5I03pPQRgzZQLW6e1JkCMWVQE
R/iPUQyMAZycyrczlPFXyuMUyq1wGJLZcgYCz1x6uFiORx5NsussY6Jftw+/RTIb
4R3EG46L1yBIAotulO8KpAIunmfqDOxv3+P83vi32aQ4a0xbLoFjAOpt3+DHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUeItT6nMemCWKMwuUFOFc7JhMzgwwHwYDVR0j
BBgwFoAU0rJGc6+U9uinFxiHtgv06+nRXnMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXJUOHZyRGpxeTRiV2FNQ3RGUDI0Q0ZVNWhNeldoSFJranZneFp5UUJR
a3AvMC9EMkIyNDY3M0FGOTRGNkU4QTcxNzE4ODdCNjBCRjRFQkU5RDE1RTczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyQjI0NjczQUY5NEY2RThB
NzE3MTg4N0I2MEJGNEVCRTlEMTVFNzMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FyVDh2ckRqcXk0YldhTUN0RlAyNENGVTVoTXpXaEhSa2p2Z3haeVFCUWtwLzAv
MzEzNzM3MmUzODM1MmUzMTM3MzYyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM2
MzIzNjMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOxVbAwDQYJKoZIhvcNAQELBQADggEBAKREd5cn
ToQi3mgamN8mUtzegIjB0FWNDGy6HZRq0nU8LYqTQEf7wLKO/cjmt2MyRLuuS8Id
2Eq7bWH9cap3/0sGoGYEgmEB8AdnbgCloYQLevuHbADv9UutOM0UuNrZ5oSk9HLr
o6yptlnDgFT4DdFQdmwy0objJ7FK+FjTkidgWkj4ymNRy5U3VYuOJvGCwDtCwP7X
R5kMtY6JSE8yrQYH7UekR9HmTcY+6XSavuB8fKGr2dYs+qsuEdUPWpfLI4vASxHB
FOOgCEea/nPtV44kWngMtG6643I5HDcQ0P4yZiqF/W/YvptnZxDYJVu8yR7H3QV7
hYgo8L6ds1wwQfM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:56 2024 by rpki-client on console-fra.rpki-client.org