Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137372e31302e3132332e302f32342d3234203d3e203533323336.roa
File:                     3137372e31302e3132332e302f32342d3234203d3e203533323336.roa (raw, json)
Hash identifier:          OTkkKEMrX3SlTPCaQq2h8tGB1ttCU0zZuT+KnXrEYpY=
Subject key identifier:   07:07:E5:8B:72:BC:2E:F6:85:9A:2E:23:B0:82:20:92:E0:0E:36:81
Certificate issuer:       /CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
Certificate serial:       4276C08C88D70FD00BCD76795A3FCA0435FBAECC
Authority key identifier: 17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137372e31302e3132332e302f32342d3234203d3e203533323336.roa
Signing time:             Wed 03 Apr 2024 18:30:42 +0000
ROA not before:           Wed 03 Apr 2024 18:25:42 +0000
ROA not after:            Wed 02 Apr 2025 18:30:42 +0000
asID:                     53236
IP address blocks:        177.10.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl
                          rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:76:c0:8c:88:d7:0f:d0:0b:cd:76:79:5a:3f:ca:04:35:fb:ae:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
        Validity
            Not Before: Apr  3 18:25:42 2024 GMT
            Not After : Apr  2 18:30:42 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:29:ea:90:ea:a2:56:02:c3:0f:ca:f5:33:fa:
                    ba:6d:b7:4b:7c:fd:bc:5c:83:28:f1:45:45:f9:25:
                    d4:0d:27:ce:85:89:d1:ab:29:4c:03:07:a4:b2:ee:
                    32:e5:b7:f0:88:50:20:3d:a4:b8:2d:cf:37:2d:ae:
                    67:7d:71:f4:53:9b:ab:5e:a9:a7:f1:2c:6a:3e:93:
                    7e:bf:74:03:56:9b:d0:3f:ea:87:dc:b3:6d:79:f5:
                    f9:9a:96:e5:9c:2b:10:f8:07:18:10:4e:90:1c:d1:
                    51:b8:e8:ae:55:db:34:9c:26:20:be:25:b6:f8:66:
                    6e:4d:e3:83:f7:c8:25:27:39:ed:3f:2b:58:ba:94:
                    e4:97:28:6e:15:d1:ac:ab:7c:fc:a4:0e:3e:f2:c0:
                    ec:33:22:d1:92:85:ef:79:a6:e9:5c:b7:2b:23:ac:
                    55:29:4a:51:50:e9:3d:0c:a6:81:14:22:45:8b:83:
                    d3:99:c8:49:5f:9b:cc:91:3b:3c:ba:f3:7b:5f:41:
                    c8:cc:7a:91:5c:46:0e:88:4a:54:f8:a2:c3:4b:fc:
                    64:9d:f0:5a:c4:99:c4:23:88:e5:99:14:eb:b0:82:
                    42:91:c8:4f:2b:d4:fb:42:50:de:1b:ec:b2:d1:43:
                    57:95:4f:66:9e:07:53:ca:6a:58:d3:df:6d:2f:21:
                    61:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:07:E5:8B:72:BC:2E:F6:85:9A:2E:23:B0:82:20:92:E0:0E:36:81
            X509v3 Authority Key Identifier:
                keyid:17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137372e31302e3132332e302f32342d3234203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         da:8a:fc:a7:96:7c:c3:07:10:b4:cf:e5:69:54:a0:c9:b5:d6:
         f2:87:91:9a:89:07:b1:c2:67:e2:ff:6a:64:b4:b8:08:51:3b:
         46:ef:fe:8e:eb:62:ca:64:cb:bb:62:c5:a8:f5:37:c4:1e:9d:
         25:13:a1:1f:72:a7:2a:fc:c2:d0:5b:fd:83:eb:17:37:16:9d:
         d3:5f:5c:32:88:3b:90:56:04:de:d9:75:7f:65:3a:8f:cb:ac:
         74:65:70:c6:da:f1:d5:48:22:d6:27:b8:d1:63:2d:d5:29:0f:
         d9:04:a2:03:55:62:78:f8:6f:84:aa:91:33:2b:b8:dc:10:4b:
         b7:42:8f:65:44:10:71:5d:b0:5d:87:fe:3c:fb:1c:7b:07:98:
         2c:cd:8b:54:c5:e1:96:ee:ff:ba:f3:63:f7:e1:5b:38:8b:20:
         27:aa:4c:01:fc:46:94:90:d1:13:27:fd:63:5b:e4:c8:29:e1:
         1d:7e:c3:e8:76:c8:03:82:17:fc:37:bf:ba:74:cc:1e:65:a2:
         c4:bd:20:30:9c:5f:5b:8a:7e:66:11:04:c5:e6:ef:48:a1:44:
         97:49:fc:e1:d0:7e:ab:54:25:28:29:6b:6f:ac:6c:c7:ae:3d:
         f7:30:1c:cd:3b:cc:5c:c9:2f:0f:39:aa:e2:9a:24:0a:45:4c:
         37:f0:9c:ed
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUQnbAjIjXD9ALzXZ5Wj/KBDX7rswwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTc0QzQwQkQyRDFERUYyRUQ4QkZDMURFMUJFQUJCRjUy
NzE4NEEwRjAeFw0yNDA0MDMxODI1NDJaFw0yNTA0MDIxODMwNDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTQyOUVBOTBFQUEyNTYwMkMz
MEZDQUY1MzNGQUJBNkRCNzRCN0NGREJDNUM4MzI4RjE0NTQ1RjkyNUQ0MEQyN0NF
ODU4OUQxQUIyOTRDMDMwN0E0QjJFRTMyRTVCN0YwODg1MDIwM0RBNEI4MkRDRjM3
MkRBRTY3N0Q3MUY0NTM5QkFCNUVBOUE3RjEyQzZBM0U5MzdFQkY3NDAzNTY5QkQw
M0ZFQTg3RENCMzZENzlGNUY5OUE5NkU1OUMyQjEwRjgwNzE4MTA0RTkwMUNEMTUx
QjhFOEFFNTVEQjM0OUMyNjIwQkUyNUI2Rjg2NjZFNERFMzgzRjdDODI1MjczOUVE
M0YyQjU4QkE5NEU0OTcyODZFMTVEMUFDQUI3Q0ZDQTQwRTNFRjJDMEVDMzMyMkQx
OTI4NUVGNzlBNkU5NUNCNzJCMjNBQzU1Mjk0QTUxNTBFOTNEMENBNjgxMTQyMjQ1
OEI4M0QzOTlDODQ5NUY5QkNDOTEzQjNDQkFGMzdCNUY0MUM4Q0M3QTkxNUM0NjBF
ODg0QTU0RjhBMkMzNEJGQzY0OURGMDVBQzQ5OUM0MjM4OEU1OTkxNEVCQjA4MjQy
OTFDODRGMkJENEZCNDI1MERFMUJFQ0IyRDE0MzU3OTU0RjY2OUUwNzUzQ0E2QTU4
RDNERjZEMkYyMTYxNUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5CnqkOqiVgLDD8r1M/q6bbdLfP28XIMo8UVF+SXUDSfOhYnRqylM
Aweksu4y5bfwiFAgPaS4Lc83La5nfXH0U5urXqmn8SxqPpN+v3QDVpvQP+qH3LNt
efX5mpblnCsQ+AcYEE6QHNFRuOiuVds0nCYgviW2+GZuTeOD98glJzntPytYupTk
lyhuFdGsq3z8pA4+8sDsMyLRkoXveabpXLcrI6xVKUpRUOk9DKaBFCJFi4PTmchJ
X5vMkTs8uvN7X0HIzHqRXEYOiEpU+KLDS/xknfBaxJnEI4jlmRTrsIJCkchPK9T7
QlDeG+yy0UNXlU9mngdTympY099tLyFhXwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FAcH5YtyvC72hZouI7CCIJLgDjaBMB8GA1UdIwQYMBaAFBdMQL0tHe8u2L/B3hvq
u/UnGEoPMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JUV2VDRU1xVm83aXRX
dHppNWs4OG52UUFMa0pncFB2RU50RHdnaTFveG9kLzEvMTc0QzQwQkQyRDFERUYy
RUQ4QkZDMURFMUJFQUJCRjUyNzE4NEEwRi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNzRDNDBCRDJEMURFRjJFRDhCRkMxREUxQkVBQkJGNTI3MTg0
QTBGLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CVFdlQ0VNcVZvN2l0V3R6aTVr
ODhudlFBTGtKZ3BQdkVOdER3Z2kxb3hvZC8xLzMxMzczNzJlMzEzMDJlMzEzMjMz
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMzMyMzMzNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALEK
ezANBgkqhkiG9w0BAQsFAAOCAQEA2or8p5Z8wwcQtM/laVSgybXW8oeRmokHscJn
4v9qZLS4CFE7Ru/+jutiymTLu2LFqPU3xB6dJROhH3KnKvzC0Fv9g+sXNxad019c
Mog7kFYE3tl1f2U6j8usdGVwxtrx1Ugi1ie40WMt1SkP2QSiA1ViePhvhKqRMyu4
3BBLt0KPZUQQcV2wXYf+PPsceweYLM2LVMXhlu7/uvNj9+FbOIsgJ6pMAfxGlJDR
Eyf9Y1vkyCnhHX7D6HbIA4IX/De/unTMHmWixL0gMJxfW4p+ZhEExebvSKFEl0n8
4dB+q1QlKClrb6xsx6499zAczTvMXMkvDzmq4pokCkVMN/Cc7Q==
-----END CERTIFICATE-----
Generated at Fri Sep 20 20:56:45 2024 by rpki-client on console-ams.rpki-client.org