Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3137372e38352e3138302e302f32332d3233203d3e20323632363131.roa
File:                     3137372e38352e3138302e302f32332d3233203d3e20323632363131.roa (raw, json)
Hash identifier:          rXOUK+fDhI8NpFATqpYMrctUJyaKsCvxweSKzWl7eMI=
Subject key identifier:   FF:37:B6:C1:79:45:7A:3C:B2:7B:29:E8:81:5D:4D:F8:97:44:74:92
Certificate issuer:       /CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73
Certificate serial:       425B4530D6C5F12995BB897558B694714EDC2338
Authority key identifier: D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3137372e38352e3138302e302f32332d3233203d3e20323632363131.roa
Signing time:             Wed 17 Apr 2024 14:20:25 +0000
ROA not before:           Wed 17 Apr 2024 14:15:25 +0000
ROA not after:            Wed 16 Apr 2025 14:20:25 +0000
asID:                     262611
IP address blocks:        177.85.180.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl
                          rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 13:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:5b:45:30:d6:c5:f1:29:95:bb:89:75:58:b6:94:71:4e:dc:23:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73
        Validity
            Not Before: Apr 17 14:15:25 2024 GMT
            Not After : Apr 16 14:20:25 2025 GMT
        Subject: CN=FF37B6C179457A3CB27B29E8815D4DF897447492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ff:a6:03:4e:c2:88:c7:d7:90:dd:7e:81:f1:
                    c3:1c:45:e1:fc:a1:2e:6b:76:83:49:0c:ff:2b:6f:
                    f6:74:41:95:8d:c4:bd:ef:d2:80:f5:c4:76:08:cf:
                    1a:ff:f9:72:1d:5e:35:72:f8:86:05:67:8d:c0:ca:
                    b6:61:cd:cf:c4:86:2e:81:e4:0f:0e:f9:37:f9:6a:
                    0e:b8:8e:29:13:52:28:e7:90:c6:2d:4e:0b:ff:d1:
                    6f:4f:53:6c:04:1f:2b:a2:27:ee:d4:c2:33:57:ca:
                    bd:c4:54:38:9d:fa:76:c7:fd:5c:b2:1c:3c:74:1d:
                    a2:f2:ee:72:31:30:84:d2:c4:5b:35:8f:6a:b9:38:
                    16:c4:f8:3e:5c:34:92:5e:bd:b3:30:aa:a3:0e:7e:
                    06:4f:32:df:82:73:97:aa:36:0f:a9:e0:a9:ee:d3:
                    ca:4b:02:29:ef:12:ce:96:fb:2f:9d:e1:f2:7a:84:
                    1e:f9:48:3f:44:90:cd:cd:b8:da:52:a2:76:62:cb:
                    3e:0d:c0:9b:dd:2e:07:5f:5a:e7:6d:60:b4:6f:cc:
                    33:3d:ed:19:cd:2e:59:a4:b6:eb:5c:e8:f7:47:ec:
                    35:6a:78:c1:58:5c:6b:e9:60:ff:97:8c:a9:27:89:
                    f1:d8:21:10:01:05:dd:e0:06:80:a3:10:1c:3a:9e:
                    04:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:37:B6:C1:79:45:7A:3C:B2:7B:29:E8:81:5D:4D:F8:97:44:74:92
            X509v3 Authority Key Identifier:
                keyid:D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/3137372e38352e3138302e302f32332d3233203d3e20323632363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:8d:43:fe:87:70:e3:5a:12:6e:c6:66:2b:de:17:af:6f:2a:
         59:a7:db:8e:79:91:0a:68:a4:11:86:4e:a7:75:75:fa:b7:19:
         7a:85:44:fa:e8:14:4e:3b:4b:b9:8a:20:00:ef:3a:8e:59:6a:
         a5:b6:ed:b6:47:24:e6:84:b8:e9:5e:27:a3:33:59:21:f9:b9:
         6b:21:19:85:70:86:65:9e:49:de:be:79:5c:71:17:c8:49:2b:
         ec:ca:b5:68:ca:88:a3:8b:3a:a1:1c:78:a4:b5:d6:4e:e5:25:
         ab:46:03:22:32:76:74:3c:35:36:f4:af:02:05:51:56:c6:4e:
         27:cf:ba:ff:45:c5:cd:d6:6c:5a:aa:e7:9a:1e:f3:87:28:bc:
         2b:64:84:b6:57:40:ee:91:93:a7:cf:ad:8f:06:90:45:15:10:
         4c:46:0e:8e:3e:4d:7e:e1:a2:a3:76:18:c7:0f:c7:a7:b7:11:
         38:05:79:f4:15:76:02:1b:f4:c1:ba:ce:c9:37:87:6d:f3:72:
         b9:98:73:4a:33:81:20:0d:c5:89:54:ae:b4:3a:04:6a:7d:59:
         5c:fc:cb:19:65:6d:0d:db:71:42:3e:c0:ec:2e:b4:5e:54:f1:
         3c:53:d1:cb:b9:fb:3e:0d:e5:4e:ac:89:fc:59:63:51:39:4d:
         33:4f:f2:29
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQltFMNbF8SmVu4l1WLaUcU7cIzgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJCMjQ2NzNBRjk0RjZFOEE3MTcxODg3QjYwQkY0RUJF
OUQxNUU3MzAeFw0yNDA0MTcxNDE1MjVaFw0yNTA0MTYxNDIwMjVaMDMxMTAvBgNV
BAMTKEZGMzdCNkMxNzk0NTdBM0NCMjdCMjlFODgxNUQ0REY4OTc0NDc0OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe/6YDTsKIx9eQ3X6B8cMcReH8
oS5rdoNJDP8rb/Z0QZWNxL3v0oD1xHYIzxr/+XIdXjVy+IYFZ43AyrZhzc/Ehi6B
5A8O+Tf5ag64jikTUijnkMYtTgv/0W9PU2wEHyuiJ+7UwjNXyr3EVDid+nbH/Vyy
HDx0HaLy7nIxMITSxFs1j2q5OBbE+D5cNJJevbMwqqMOfgZPMt+Cc5eqNg+p4Knu
08pLAinvEs6W+y+d4fJ6hB75SD9EkM3NuNpSonZiyz4NwJvdLgdfWudtYLRvzDM9
7RnNLlmktutc6PdH7DVqeMFYXGvpYP+XjKknifHYIRABBd3gBoCjEBw6ngSxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/ze2wXlFejyyeynogV1N+JdEdJIwHwYDVR0j
BBgwFoAU0rJGc6+U9uinFxiHtgv06+nRXnMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXJUOHZyRGpxeTRiV2FNQ3RGUDI0Q0ZVNWhNeldoSFJranZneFp5UUJR
a3AvMC9EMkIyNDY3M0FGOTRGNkU4QTcxNzE4ODdCNjBCRjRFQkU5RDE1RTczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyQjI0NjczQUY5NEY2RThB
NzE3MTg4N0I2MEJGNEVCRTlEMTVFNzMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FyVDh2ckRqcXk0YldhTUN0RlAyNENGVTVoTXpXaEhSa2p2Z3haeVFCUWtwLzAv
MzEzNzM3MmUzODM1MmUzMTM4MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzNjMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxVbQwDQYJKoZIhvcNAQELBQADggEBAEiNQ/6H
cONaEm7GZiveF69vKlmn2455kQpopBGGTqd1dfq3GXqFRProFE47S7mKIADvOo5Z
aqW27bZHJOaEuOleJ6MzWSH5uWshGYVwhmWeSd6+eVxxF8hJK+zKtWjKiKOLOqEc
eKS11k7lJatGAyIydnQ8NTb0rwIFUVbGTifPuv9Fxc3WbFqq55oe84covCtkhLZX
QO6Rk6fPrY8GkEUVEExGDo4+TX7hoqN2GMcPx6e3ETgFefQVdgIb9MG6zsk3h23z
crmYc0ozgSANxYlUrrQ6BGp9WVz8yxllbQ3bcUI+wOwutF5U8TxT0cu5+z4N5U6s
ifxZY1E5TTNP8ik=
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:53:22 2024 by rpki-client on console-ams.rpki-client.org