Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3137372e3230302e36342e302f32302d3332203d3e203532373833.roa
File:                     3137372e3230302e36342e302f32302d3332203d3e203532373833.roa (raw, json)
Hash identifier:          apkAkl2OFpIvs7Cd/q7p792y9Zwv6QEFlQd1HS4i76Y=
Subject key identifier:   C6:23:57:B6:6E:69:89:85:6C:A7:5C:FD:61:F5:3B:AC:C2:9F:1E:CD
Certificate issuer:       /CN=3DDE2C96A736983C4145E6A74FA601EF275DE118
Certificate serial:       307912C1CE461F72682474E2C95AD6D6864CB79C
Authority key identifier: 3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3137372e3230302e36342e302f32302d3332203d3e203532373833.roa
Signing time:             Thu 04 Apr 2024 22:41:15 +0000
ROA not before:           Thu 04 Apr 2024 22:36:15 +0000
ROA not after:            Thu 03 Apr 2025 22:41:15 +0000
asID:                     52783
IP address blocks:        177.200.64.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.crl
                          rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:48:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:79:12:c1:ce:46:1f:72:68:24:74:e2:c9:5a:d6:d6:86:4c:b7:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DDE2C96A736983C4145E6A74FA601EF275DE118
        Validity
            Not Before: Apr  4 22:36:15 2024 GMT
            Not After : Apr  3 22:41:15 2025 GMT
        Subject: CN=C62357B66E6989856CA75CFD61F53BACC29F1ECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:26:27:c5:43:59:8e:a0:fd:11:fa:52:28:1f:
                    30:da:2b:13:17:c8:a0:6c:b9:84:43:65:12:fc:dd:
                    ed:1f:59:bf:c7:61:69:3c:7f:29:2d:bf:5b:3f:81:
                    08:88:4b:91:dd:3c:db:4b:24:3b:7b:e0:3d:51:f6:
                    11:d8:34:17:65:79:33:92:85:14:8e:12:6d:e4:de:
                    ff:75:77:a2:8e:33:bb:7c:bd:da:92:5f:eb:bc:da:
                    43:c1:85:db:ba:23:06:14:24:0a:26:9d:a1:8a:ad:
                    4f:fe:24:4f:59:83:10:dd:4f:a2:64:66:6e:c3:c1:
                    02:ea:f7:31:d4:8f:ce:c2:55:7c:34:69:7b:4f:9c:
                    c5:8c:25:05:f8:5d:e9:91:bf:93:d3:5d:2d:57:6d:
                    01:81:a0:47:bb:9c:db:d1:eb:84:0c:da:d7:9e:66:
                    bd:a5:36:c9:7d:39:72:bc:1d:de:d2:af:02:95:d4:
                    67:50:15:c0:a9:5f:ec:bc:89:4e:15:b7:3c:75:14:
                    42:ab:70:97:18:57:ab:3f:b3:51:b8:68:63:5e:a0:
                    07:03:5a:6d:91:77:53:63:e0:2e:15:0a:4d:bc:3b:
                    da:31:b9:07:3b:cf:2a:6c:b5:54:46:17:d9:45:ef:
                    d3:ed:dd:9f:b6:86:22:4a:0c:3a:13:8d:f5:54:4f:
                    6f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:23:57:B6:6E:69:89:85:6C:A7:5C:FD:61:F5:3B:AC:C2:9F:1E:CD
            X509v3 Authority Key Identifier:
                keyid:3D:DE:2C:96:A7:36:98:3C:41:45:E6:A7:4F:A6:01:EF:27:5D:E1:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDE2C96A736983C4145E6A74FA601EF275DE118.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4Mwe8dxpufKurSf2BxnSKvYe3h8Rssiv557xB9N9XYA/1/3137372e3230302e36342e302f32302d3332203d3e203532373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0f:27:0e:25:f8:15:51:bd:01:84:fd:07:d8:55:d9:aa:a0:6e:
         4c:86:8b:14:05:87:ca:09:4e:f8:8f:ff:d8:32:57:07:d5:ad:
         20:11:cf:a6:fa:8a:cc:bf:de:79:79:f7:e4:9d:9d:17:1c:69:
         c7:ec:a4:f1:1a:78:21:f8:76:ab:49:f8:15:66:a7:5d:cb:2e:
         e1:24:ad:a6:41:ff:ac:45:93:57:6f:f3:03:31:d7:84:07:b3:
         f3:0c:46:ca:ad:72:dc:b9:2c:e1:ec:95:81:2e:6e:0c:5f:de:
         27:d7:4c:f5:ba:5b:ca:71:f5:f8:62:5c:cd:75:60:1a:27:8e:
         69:c2:a2:56:96:2b:04:0e:3d:1f:cc:f1:b5:fa:26:72:d0:8f:
         c6:9b:eb:e2:72:00:90:10:51:61:56:a8:c8:51:de:44:97:5a:
         ad:1d:87:03:f0:ec:a9:99:16:53:ec:d9:2a:b9:96:ab:26:e0:
         1c:4d:27:3c:6a:bb:d6:b8:c5:c2:3c:cf:73:ff:88:1e:03:07:
         28:8e:5c:03:94:b6:6c:c3:72:82:38:fb:ee:d8:1c:dc:2b:33:
         62:46:11:49:25:91:ce:5b:03:a2:82:b7:cd:0b:71:0f:a7:82:
         57:34:62:62:69:00:2a:86:10:fc:26:e2:3b:51:05:8e:ca:c3:
         ac:4f:25:a1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMHkSwc5GH3JoJHTiyVrW1oZMt5wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0RERTJDOTZBNzM2OTgzQzQxNDVFNkE3NEZBNjAxRUYy
NzVERTExODAeFw0yNDA0MDQyMjM2MTVaFw0yNTA0MDMyMjQxMTVaMDMxMTAvBgNV
BAMTKEM2MjM1N0I2NkU2OTg5ODU2Q0E3NUNGRDYxRjUzQkFDQzI5RjFFQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmJifFQ1mOoP0R+lIoHzDaKxMX
yKBsuYRDZRL83e0fWb/HYWk8fyktv1s/gQiIS5HdPNtLJDt74D1R9hHYNBdleTOS
hRSOEm3k3v91d6KOM7t8vdqSX+u82kPBhdu6IwYUJAomnaGKrU/+JE9ZgxDdT6Jk
Zm7DwQLq9zHUj87CVXw0aXtPnMWMJQX4XemRv5PTXS1XbQGBoEe7nNvR64QM2tee
Zr2lNsl9OXK8Hd7SrwKV1GdQFcCpX+y8iU4Vtzx1FEKrcJcYV6s/s1G4aGNeoAcD
Wm2Rd1Nj4C4VCk28O9oxuQc7zypstVRGF9lF79Pt3Z+2hiJKDDoTjfVUT2/9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUxiNXtm5piYVsp1z9YfU7rMKfHs0wHwYDVR0j
BBgwFoAUPd4slqc2mDxBReanT6YB7ydd4RgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjRNd2U4ZHhwdWZLdXJTZjJCeG5TS3ZZZTNoOFJzc2l2NTU3eEI5TjlY
WUEvMS8zRERFMkM5NkE3MzY5ODNDNDE0NUU2QTc0RkE2MDFFRjI3NURFMTE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNEREUyQzk2QTczNjk4M0M0
MTQ1RTZBNzRGQTYwMUVGMjc1REUxMTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I0TXdlOGR4cHVmS3VyU2YyQnhuU0t2WWUzaDhSc3NpdjU1N3hCOU45WFlBLzEv
MzEzNzM3MmUzMjMwMzAyZTM2MzQyZTMwMmYzMjMwMmQzMzMyMjAzZDNlMjAzNTMy
MzczODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEschAMA0GCSqGSIb3DQEBCwUAA4IBAQAPJw4l+BVR
vQGE/QfYVdmqoG5MhosUBYfKCU74j//YMlcH1a0gEc+m+orMv955effknZ0XHGnH
7KTxGngh+HarSfgVZqddyy7hJK2mQf+sRZNXb/MDMdeEB7PzDEbKrXLcuSzh7JWB
Lm4MX94n10z1ulvKcfX4YlzNdWAaJ45pwqJWlisEDj0fzPG1+iZy0I/Gm+vicgCQ
EFFhVqjIUd5El1qtHYcD8OypmRZT7NkquZarJuAcTSc8arvWuMXCPM9z/4geAwco
jlwDlLZsw3KCOPvu2BzcKzNiRhFJJZHOWwOigrfNC3EPp4JXNGJiaQAqhhD8JuI7
UQWOysOsTyWh
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:42 2024 by rpki-client on console-ams.rpki-client.org