Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/3137372e38342e3133322e302f32322d3332203d3e203532393938.roa
File:                     3137372e38342e3133322e302f32322d3332203d3e203532393938.roa (raw, json)
Hash identifier:          5nuzcMKKZcxWi3TIUhd4uszgAfXfgpk0gnveYJZ2OCE=
Subject key identifier:   65:D5:CB:5F:4E:15:D4:C2:45:33:56:09:D5:F3:DD:5A:5D:19:62:20
Certificate issuer:       /CN=2E3906019F53CEC4441CD3D21CFF37C136BF24EC
Certificate serial:       120E1685318B8221FEBF765177E57964C6D576C9
Authority key identifier: 2E:39:06:01:9F:53:CE:C4:44:1C:D3:D2:1C:FF:37:C1:36:BF:24:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/3137372e38342e3133322e302f32322d3332203d3e203532393938.roa
Signing time:             Thu 04 Apr 2024 13:15:32 +0000
ROA not before:           Thu 04 Apr 2024 13:10:32 +0000
ROA not after:            Thu 03 Apr 2025 13:15:32 +0000
asID:                     52998
IP address blocks:        177.84.132.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.crl
                          rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:20:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:0e:16:85:31:8b:82:21:fe:bf:76:51:77:e5:79:64:c6:d5:76:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E3906019F53CEC4441CD3D21CFF37C136BF24EC
        Validity
            Not Before: Apr  4 13:10:32 2024 GMT
            Not After : Apr  3 13:15:32 2025 GMT
        Subject: CN=65D5CB5F4E15D4C245335609D5F3DD5A5D196220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:02:da:9d:22:4e:76:d7:cf:56:8d:72:da:f8:
                    cd:21:2c:b8:0e:ab:b8:b8:d3:06:b4:ff:d9:1a:07:
                    63:00:12:d3:32:cf:de:c4:bf:a5:1d:b7:13:1a:ab:
                    5c:2e:42:fc:2b:18:27:8f:92:e2:ab:c3:4f:27:e3:
                    06:d3:5c:ad:bd:98:5c:e1:6f:f4:26:69:f3:62:03:
                    4a:6d:b4:b8:3c:5b:0e:15:cb:72:2a:89:ad:a1:00:
                    1d:95:fd:c2:ce:90:76:96:37:8c:f9:26:91:d4:5d:
                    d8:cc:4d:de:db:4f:d0:e2:54:71:78:fa:b6:86:39:
                    79:ce:fa:b7:ed:d3:f2:85:7a:10:b5:d2:06:34:e5:
                    56:3d:fe:ad:85:3e:c1:b8:bb:c4:48:1e:2d:0e:21:
                    93:7a:ab:b7:5c:87:97:72:4d:eb:cd:10:d5:e9:9d:
                    57:73:ec:82:fa:cc:40:f2:03:fb:5a:21:a2:b2:9b:
                    8a:b5:aa:07:f4:51:dd:92:a8:15:1d:05:35:76:a1:
                    39:e9:8f:6f:2f:51:49:a8:56:f2:a6:5a:ea:26:f9:
                    9c:01:09:98:0d:07:46:ee:78:0b:42:77:43:7d:09:
                    86:b1:ae:f8:81:11:88:a1:1e:7e:bb:b5:eb:5d:95:
                    b2:7b:18:04:15:3e:c3:12:4c:49:29:53:aa:fb:10:
                    46:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D5:CB:5F:4E:15:D4:C2:45:33:56:09:D5:F3:DD:5A:5D:19:62:20
            X509v3 Authority Key Identifier:
                keyid:2E:39:06:01:9F:53:CE:C4:44:1C:D3:D2:1C:FF:37:C1:36:BF:24:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/3137372e38342e3133322e302f32322d3332203d3e203532393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:81:e7:66:fa:2b:c0:eb:83:fb:09:5a:b2:c4:b2:99:42:81:
         ea:13:0b:58:c2:50:a3:e7:15:47:b2:c2:91:b3:95:42:3c:b0:
         24:a2:04:0b:1f:3f:00:26:97:4d:f8:6a:2e:18:92:a4:65:b0:
         db:73:2f:58:7e:0c:b5:37:18:6e:df:9b:78:71:87:fb:f0:a4:
         3b:7f:04:d2:d5:5f:d3:91:51:62:8e:51:56:07:b6:5a:1a:df:
         2b:64:87:f5:aa:d9:47:34:7d:14:f3:2c:c0:4e:1e:73:39:2d:
         a3:74:a4:d5:cb:ef:b9:cd:f9:9e:0e:0f:e3:2f:53:62:38:d6:
         75:bf:d1:47:14:e4:39:62:2f:c7:b8:b0:05:37:6b:c8:ec:ab:
         e3:df:23:78:a0:83:44:d6:c3:85:1f:a3:23:b9:c2:9c:69:9c:
         c1:1a:c6:8b:7a:a7:8c:d8:ea:97:f1:7f:e7:42:ba:57:94:17:
         a4:30:35:84:52:a9:78:22:e7:7d:cd:a1:d8:9a:e5:77:76:df:
         5e:dd:11:7b:46:21:0b:ee:73:05:6a:de:34:b3:d8:51:e5:37:
         f9:97:74:1c:22:84:0c:a9:59:1d:31:de:90:c1:54:0b:de:32:
         e3:f1:ba:69:cd:69:a6:7d:87:48:ea:a0:1c:05:e2:b4:d1:86:
         29:a0:89:6e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEg4WhTGLgiH+v3ZRd+V5ZMbVdskwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkUzOTA2MDE5RjUzQ0VDNDQ0MUNEM0QyMUNGRjM3QzEz
NkJGMjRFQzAeFw0yNDA0MDQxMzEwMzJaFw0yNTA0MDMxMzE1MzJaMDMxMTAvBgNV
BAMTKDY1RDVDQjVGNEUxNUQ0QzI0NTMzNTYwOUQ1RjNERDVBNUQxOTYyMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFAtqdIk52189WjXLa+M0hLLgO
q7i40wa0/9kaB2MAEtMyz97Ev6UdtxMaq1wuQvwrGCePkuKrw08n4wbTXK29mFzh
b/QmafNiA0pttLg8Ww4Vy3Iqia2hAB2V/cLOkHaWN4z5JpHUXdjMTd7bT9DiVHF4
+raGOXnO+rft0/KFehC10gY05VY9/q2FPsG4u8RIHi0OIZN6q7dch5dyTevNENXp
nVdz7IL6zEDyA/taIaKym4q1qgf0Ud2SqBUdBTV2oTnpj28vUUmoVvKmWuom+ZwB
CZgNB0bueAtCd0N9CYaxrviBEYihHn67tetdlbJ7GAQVPsMSTEkpU6r7EEZ7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUZdXLX04V1MJFM1YJ1fPdWl0ZYiAwHwYDVR0j
BBgwFoAULjkGAZ9TzsREHNPSHP83wTa/JOwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXdZN2pXZXJOWHdEdWdxRWlBS1lqWldWb1pDbzdQam5pYW1YTG9YMUJ6
dVYvMS8yRTM5MDYwMTlGNTNDRUM0NDQxQ0QzRDIxQ0ZGMzdDMTM2QkYyNEVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFMzkwNjAxOUY1M0NFQzQ0
NDFDRDNEMjFDRkYzN0MxMzZCRjI0RUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F3WTdqV2VyTlh3RHVncUVpQUtZalpXVm9aQ283UGpuaWFtWExvWDFCenVWLzEv
MzEzNzM3MmUzODM0MmUzMTMzMzIyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzNTMy
MzkzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsVSEMA0GCSqGSIb3DQEBCwUAA4IBAQAugedm+ivA
64P7CVqyxLKZQoHqEwtYwlCj5xVHssKRs5VCPLAkogQLHz8AJpdN+GouGJKkZbDb
cy9Yfgy1Nxhu35t4cYf78KQ7fwTS1V/TkVFijlFWB7ZaGt8rZIf1qtlHNH0U8yzA
Th5zOS2jdKTVy++5zfmeDg/jL1NiONZ1v9FHFOQ5Yi/HuLAFN2vI7Kvj3yN4oINE
1sOFH6MjucKcaZzBGsaLeqeM2OqX8X/nQrpXlBekMDWEUql4Iud9zaHYmuV3dt9e
3RF7RiEL7nMFat40s9hR5Tf5l3QcIoQMqVkdMd6QwVQL3jLj8bppzWmmfYdI6qAc
BeK00YYpoIlu
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:42 2024 by rpki-client on console-ams.rpki-client.org