Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e34342e3139302e302f32342d3234203d3e203533313733.roa
File:                     3137372e34342e3139302e302f32342d3234203d3e203533313733.roa (raw, json)
Hash identifier:          cMNg07wyQIEZ2uWSKOQ5aJays6eqpN4z5BtIqXpKmTk=
Subject key identifier:   56:B8:64:F4:00:BB:29:B5:9D:C7:77:FB:81:3A:37:82:C7:CE:BC:C4
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       31CC5F84AAAD6F38FA6DD4DEED1387A4118D94A5
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e34342e3139302e302f32342d3234203d3e203533313733.roa
Signing time:             Thu 04 Apr 2024 02:26:05 +0000
ROA not before:           Thu 04 Apr 2024 02:21:05 +0000
ROA not after:            Thu 03 Apr 2025 02:26:05 +0000
asID:                     53173
IP address blocks:        177.44.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:cc:5f:84:aa:ad:6f:38:fa:6d:d4:de:ed:13:87:a4:11:8d:94:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Apr  4 02:21:05 2024 GMT
            Not After : Apr  3 02:26:05 2025 GMT
        Subject: CN=56B864F400BB29B59DC777FB813A3782C7CEBCC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:95:44:9f:5c:b5:c0:ea:d2:1d:a7:08:2d:3f:
                    81:9b:6f:5d:52:07:87:ed:85:1a:35:d3:35:4e:a0:
                    ce:f6:d0:2f:42:00:3e:b9:6f:2c:f1:5f:38:d0:ef:
                    f7:04:6e:7e:e6:92:f9:89:9f:6d:ff:40:d1:0c:b8:
                    39:db:de:fc:e1:70:92:14:5d:ff:fb:3a:46:15:f5:
                    0d:1f:f0:1f:04:e4:1b:ab:65:f5:3a:62:08:1f:ae:
                    f6:50:d1:f1:3e:c5:16:26:85:25:d1:db:86:d5:bb:
                    30:ff:11:10:f1:51:b4:fb:af:7b:7d:61:eb:b9:b8:
                    71:f1:b6:f6:70:3e:20:7a:0f:65:c1:f9:97:17:4f:
                    a5:ff:01:92:88:2d:27:78:f6:62:ad:21:20:a5:cc:
                    67:d9:98:ea:3e:d4:78:ce:21:43:91:bb:64:fc:21:
                    96:17:5f:f3:19:ba:6a:db:a7:25:a2:6b:6c:ee:2f:
                    98:07:ba:17:f3:1c:af:97:7f:0b:9d:22:92:81:13:
                    51:e9:d6:f3:f1:9c:0d:c0:9f:a1:03:95:c3:6c:34:
                    26:4a:61:7b:26:05:2c:18:b4:9e:16:31:6e:e3:73:
                    14:41:b9:c4:75:d7:bf:ad:57:f7:bb:47:92:24:2a:
                    d2:78:30:52:d7:5a:c4:3a:53:21:5f:de:23:94:05:
                    9a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B8:64:F4:00:BB:29:B5:9D:C7:77:FB:81:3A:37:82:C7:CE:BC:C4
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/3137372e34342e3139302e302f32342d3234203d3e203533313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:e6:56:6e:d4:04:41:56:09:2c:d1:89:8e:19:37:fd:95:f1:
         7c:88:b5:90:40:d9:c7:d7:7f:28:06:9c:e5:5c:64:5b:4e:9c:
         cc:20:3f:44:50:a7:70:1a:ce:9b:d6:18:ff:8f:9d:69:3e:04:
         18:fb:f0:cc:1d:d0:11:b4:06:d2:e5:7f:02:9f:bf:ee:a3:14:
         68:d1:4f:20:f0:32:b2:33:f5:85:5e:53:09:48:d3:4c:db:52:
         81:ec:24:85:33:8d:c4:2a:8e:5c:77:a4:e6:11:77:c0:77:9a:
         0e:66:48:99:2c:14:55:e1:ba:ef:17:ab:1e:1b:43:7b:a5:29:
         08:79:fa:40:78:de:27:70:fe:30:3e:12:7c:af:5a:be:5f:9c:
         f5:cc:fb:b1:a0:a0:2b:1a:60:0a:3f:d9:e7:85:1c:ee:f3:dc:
         57:8a:1c:eb:ae:6b:a9:8d:79:14:01:84:eb:40:f7:01:2a:d5:
         39:9a:fb:c7:9b:68:20:63:46:9f:8d:99:5e:ad:1b:3a:6a:3b:
         3d:d2:6c:e2:1b:80:4c:69:4b:d8:13:da:c7:43:88:fc:5f:2a:
         b7:d7:04:ef:d2:e5:ea:42:99:0c:31:94:3d:d2:8a:f7:92:bd:
         f3:d2:7e:63:07:31:22:be:ae:6f:4f:42:7d:68:99:79:3a:ef:
         73:48:0b:25
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMcxfhKqtbzj6bdTe7ROHpBGNlKUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM5MDBEOEI2MTgzRDMxOTQzODE3ODRCNjhDQTlDOUQ3
NUNDQUY3NjAeFw0yNDA0MDQwMjIxMDVaFw0yNTA0MDMwMjI2MDVaMDMxMTAvBgNV
BAMTKDU2Qjg2NEY0MDBCQjI5QjU5REM3NzdGQjgxM0EzNzgyQzdDRUJDQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHlUSfXLXA6tIdpwgtP4Gbb11S
B4fthRo10zVOoM720C9CAD65byzxXzjQ7/cEbn7mkvmJn23/QNEMuDnb3vzhcJIU
Xf/7OkYV9Q0f8B8E5BurZfU6YggfrvZQ0fE+xRYmhSXR24bVuzD/ERDxUbT7r3t9
Yeu5uHHxtvZwPiB6D2XB+ZcXT6X/AZKILSd49mKtISClzGfZmOo+1HjOIUORu2T8
IZYXX/MZumrbpyWia2zuL5gHuhfzHK+XfwudIpKBE1Hp1vPxnA3An6EDlcNsNCZK
YXsmBSwYtJ4WMW7jcxRBucR117+tV/e7R5IkKtJ4MFLXWsQ6UyFf3iOUBZphAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUVrhk9AC7KbWdx3f7gTo3gsfOvMQwHwYDVR0j
BBgwFoAUrJANi2GD0xlDgXhLaMqcnXXMr3YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXM2bVRjWUYydEtKQjdDYXRjSHpqTEthNzdvTW1lRExUMVBQVHNXRmtU
UzYvMS9BQzkwMEQ4QjYxODNEMzE5NDM4MTc4NEI2OENBOUM5RDc1Q0NBRjc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDOTAwRDhCNjE4M0QzMTk0
MzgxNzg0QjY4Q0E5QzlENzVDQ0FGNzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FzNm1UY1lGMnRLSkI3Q2F0Y0h6akxLYTc3b01tZURMVDFQUFRzV0ZrVFM2LzEv
MzEzNzM3MmUzNDM0MmUzMTM5MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMz
MzEzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsSy+MA0GCSqGSIb3DQEBCwUAA4IBAQAS5lZu1ARB
Vgks0YmOGTf9lfF8iLWQQNnH138oBpzlXGRbTpzMID9EUKdwGs6b1hj/j51pPgQY
+/DMHdARtAbS5X8Cn7/uoxRo0U8g8DKyM/WFXlMJSNNM21KB7CSFM43EKo5cd6Tm
EXfAd5oOZkiZLBRV4brvF6seG0N7pSkIefpAeN4ncP4wPhJ8r1q+X5z1zPuxoKAr
GmAKP9nnhRzu89xXihzrrmupjXkUAYTrQPcBKtU5mvvHm2ggY0afjZlerRs6ajs9
0mziG4BMaUvYE9rHQ4j8Xyq31wTv0uXqQpkMMZQ90or3kr3z0n5jBzEivq5vT0J9
aJl5Ou9zSAsl
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:56 2024 by rpki-client on console-fra.rpki-client.org