Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38322e302f32332d3233203d3e203238333638.roa
File:                     3137372e3230302e38322e302f32332d3233203d3e203238333638.roa (raw, json)
Hash identifier:          WKmUxn0owwEkuzXaLek0c/HSp2c37Xps3ji105/mHUM=
Subject key identifier:   7E:43:10:0E:A9:E8:50:DD:FC:F4:B1:E7:4B:AD:5E:F5:49:A2:FC:B0
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       2EC7523C17E782D3E388BCD6F7FF0A09AE73BAE1
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38322e302f32332d3233203d3e203238333638.roa
Signing time:             Thu 04 Apr 2024 02:26:06 +0000
ROA not before:           Thu 04 Apr 2024 02:21:06 +0000
ROA not after:            Thu 03 Apr 2025 02:26:06 +0000
asID:                     28368
IP address blocks:        177.200.82.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c7:52:3c:17:e7:82:d3:e3:88:bc:d6:f7:ff:0a:09:ae:73:ba:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:06 2024 GMT
            Not After : Apr  3 02:26:06 2025 GMT
        Subject: CN=7E43100EA9E850DDFCF4B1E74BAD5EF549A2FCB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:02:5e:aa:48:e2:7e:d9:af:bd:73:d3:12:c2:
                    f0:5d:dd:6a:2a:86:91:4f:26:8f:59:06:88:04:5b:
                    c2:af:4c:74:f1:44:d5:c1:7d:6e:e5:4b:c0:f4:cd:
                    09:3e:29:b9:4c:ca:91:57:fc:f8:9d:a4:d9:7f:58:
                    16:3e:57:2c:9a:1f:eb:74:83:ab:23:84:c8:9e:da:
                    9a:d7:ce:c0:26:67:6d:b8:36:f3:68:e7:5a:b0:c9:
                    1b:b6:df:f9:ee:68:62:d4:c0:a8:b4:96:84:e2:e8:
                    68:be:da:8a:2b:77:4d:25:b4:ab:75:f1:32:c2:99:
                    5d:b6:dd:7d:50:a3:ec:40:b4:29:90:7c:b9:af:86:
                    33:ae:51:20:90:82:67:0a:82:d8:3c:06:52:1a:36:
                    ca:9c:ad:e3:78:ac:63:9c:b8:63:f3:fb:3c:e0:23:
                    de:75:3c:48:3b:4b:5d:fd:df:eb:4f:70:a7:d2:91:
                    c3:5f:a2:c9:75:78:78:b9:15:7c:e4:e1:20:e1:af:
                    ab:e4:9b:a3:f3:28:ea:b6:66:1f:c7:39:77:03:ea:
                    6c:ba:7e:d0:e3:1b:46:dd:68:b4:74:65:a1:ea:24:
                    7f:74:6b:80:d1:46:da:af:2e:5d:54:17:3f:2b:8c:
                    4f:a7:62:34:37:65:47:d7:fe:50:08:1d:e1:e3:f9:
                    9e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:43:10:0E:A9:E8:50:DD:FC:F4:B1:E7:4B:AD:5E:F5:49:A2:FC:B0
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e3230302e38322e302f32332d3233203d3e203238333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:d4:17:98:88:9e:3d:51:e1:d3:e0:bc:b7:d9:50:f5:7d:d5:
         06:cd:08:e9:ab:eb:cc:18:7d:db:fc:1d:38:70:c7:15:0b:57:
         84:16:98:0a:64:bf:a0:ba:19:1e:cf:d4:d9:8c:b0:8e:bd:2e:
         a4:ac:7c:5f:bc:e1:c4:0b:c9:ee:43:28:03:54:30:12:c7:20:
         1a:60:00:75:d7:a6:3e:32:12:ff:b6:56:d9:ad:e3:d1:04:f4:
         2d:fc:75:92:bb:6a:69:5b:0e:8c:9e:e8:35:4c:bc:67:21:0f:
         df:d3:cf:66:07:42:77:e7:38:60:dd:ff:d0:de:66:46:d7:6e:
         e1:c4:e5:49:fd:d3:21:1a:c0:0b:4a:be:75:b6:84:9b:b3:3b:
         56:f5:22:8a:74:9d:4f:ca:5e:5b:39:23:83:1a:9b:ab:02:b2:
         a1:12:0c:b6:94:3c:6c:b7:67:42:8e:7c:e0:3b:73:39:62:8c:
         da:5e:96:67:2d:76:ab:c1:d3:d5:0b:a1:f5:bc:9b:9c:98:8f:
         01:b6:82:0c:98:a0:e2:13:21:cc:c8:b2:5d:6f:a0:9f:5b:1e:
         65:e4:16:46:77:7b:64:5e:44:8c:c4:c0:15:72:07:b2:11:3d:
         9c:16:4c:9c:90:5b:a2:35:3f:3a:0c:f7:27:5c:54:d2:fd:40:
         3f:c9:11:fa
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULsdSPBfngtPjiLzW9/8KCa5zuuEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM5MDBEOEI2MTgzRDMxOTQzODE3ODRCNjhDQTlDOUQ3
NUNDQUY3NjAeFw0yNDA0MDQwMjIxMDZaFw0yNTA0MDMwMjI2MDZaMDMxMTAvBgNV
BAMTKDdFNDMxMDBFQTlFODUwRERGQ0Y0QjFFNzRCQUQ1RUY1NDlBMkZDQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChAl6qSOJ+2a+9c9MSwvBd3Woq
hpFPJo9ZBogEW8KvTHTxRNXBfW7lS8D0zQk+KblMypFX/PidpNl/WBY+VyyaH+t0
g6sjhMie2prXzsAmZ224NvNo51qwyRu23/nuaGLUwKi0loTi6Gi+2oord00ltKt1
8TLCmV223X1Qo+xAtCmQfLmvhjOuUSCQgmcKgtg8BlIaNsqcreN4rGOcuGPz+zzg
I951PEg7S1393+tPcKfSkcNfosl1eHi5FXzk4SDhr6vkm6PzKOq2Zh/HOXcD6my6
ftDjG0bdaLR0ZaHqJH90a4DRRtqvLl1UFz8rjE+nYjQ3ZUfX/lAIHeHj+Z41AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUfkMQDqnoUN389LHnS61e9Umi/LAwHwYDVR0j
BBgwFoAUrJANi2GD0xlDgXhLaMqcnXXMr3YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXM2bVRjWUYydEtKQjdDYXRjSHpqTEthNzdvTW1lRExUMVBQVHNXRmtU
UzYvMS9BQzkwMEQ4QjYxODNEMzE5NDM4MTc4NEI2OENBOUM5RDc1Q0NBRjc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDOTAwRDhCNjE4M0QzMTk0
MzgxNzg0QjY4Q0E5QzlENzVDQ0FGNzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FzNm1UY1lGMnRLSkI3Q2F0Y0h6akxLYTc3b01tZURMVDFQUFRzV0ZrVFM2LzEv
MzEzNzM3MmUzMjMwMzAyZTM4MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM4
MzMzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBschSMA0GCSqGSIb3DQEBCwUAA4IBAQC/1BeYiJ49
UeHT4Ly32VD1fdUGzQjpq+vMGH3b/B04cMcVC1eEFpgKZL+guhkez9TZjLCOvS6k
rHxfvOHEC8nuQygDVDASxyAaYAB116Y+MhL/tlbZrePRBPQt/HWSu2ppWw6Mnug1
TLxnIQ/f089mB0J35zhg3f/Q3mZG127hxOVJ/dMhGsALSr51toSbsztW9SKKdJ1P
yl5bOSODGpurArKhEgy2lDxst2dCjnzgO3M5YozaXpZnLXarwdPVC6H1vJucmI8B
toIMmKDiEyHMyLJdb6CfWx5l5BZGd3tkXkSMxMAVcgeyET2cFkyckFuiNT86DPcn
XFTS/UA/yRH6
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:42 2024 by rpki-client on console-ams.rpki-client.org