Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e35322e302f32332d3233203d3e20323633353030.roa
File:                     3137372e3232332e35322e302f32332d3233203d3e20323633353030.roa (raw, json)
Hash identifier:          w32u1Rg92u1G12xqxK18i8rIxirJ413cBEw5VpGzlzM=
Subject key identifier:   16:67:06:03:49:56:73:E9:52:3D:F7:5B:F9:D2:F7:E8:C6:B3:35:91
Certificate issuer:       /CN=688CFC6ED295D85CCEC2EEE0687D7F1077721DC1
Certificate serial:       21CB5CCC2A32D484AA55A4A4A2BC2ADE81135A81
Authority key identifier: 68:8C:FC:6E:D2:95:D8:5C:CE:C2:EE:E0:68:7D:7F:10:77:72:1D:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e35322e302f32332d3233203d3e20323633353030.roa
Signing time:             Thu 04 Apr 2024 10:58:33 +0000
ROA not before:           Thu 04 Apr 2024 10:53:33 +0000
ROA not after:            Thu 03 Apr 2025 10:58:33 +0000
asID:                     263500
IP address blocks:        177.223.52.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.crl
                          rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:46:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:cb:5c:cc:2a:32:d4:84:aa:55:a4:a4:a2:bc:2a:de:81:13:5a:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=688CFC6ED295D85CCEC2EEE0687D7F1077721DC1
        Validity
            Not Before: Apr  4 10:53:33 2024 GMT
            Not After : Apr  3 10:58:33 2025 GMT
        Subject: CN=16670603495673E9523DF75BF9D2F7E8C6B33591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ac:6b:a4:a9:a5:0f:97:ce:e6:fb:ce:11:80:
                    26:c0:8f:2c:08:d6:c4:64:58:3e:10:d1:80:8a:c2:
                    d3:dc:9c:d2:5f:ce:ed:13:77:3d:8e:86:b1:b5:81:
                    05:89:d0:2a:82:fc:00:c9:7e:36:e2:fe:97:6d:6b:
                    1a:7e:7f:27:9e:53:e5:28:c9:1d:4f:0d:a4:5b:b8:
                    33:78:50:96:c3:ed:5c:98:1b:a8:c7:fd:86:ca:15:
                    c6:09:90:23:a5:e8:ef:db:d1:7d:28:95:b4:81:17:
                    82:3e:25:9b:91:cf:d7:bb:16:fd:c7:fe:d3:58:81:
                    49:2a:c8:4d:4c:09:7c:51:1d:d0:ef:a4:29:88:6b:
                    c4:03:10:24:52:2b:fc:2c:24:d2:3a:d2:83:13:ee:
                    41:d0:4f:66:87:ea:b8:5c:1e:d0:bc:00:63:cc:26:
                    85:39:fa:52:96:ba:c5:f9:00:82:e6:3a:f8:6c:f7:
                    44:67:ba:91:cf:b8:68:c5:61:e5:28:88:26:fd:13:
                    a9:71:ab:d4:53:48:5f:38:f6:c0:08:3a:05:f3:3b:
                    3a:fd:b6:6d:e3:0d:49:94:9e:bd:bb:79:28:20:c7:
                    89:97:2d:37:4e:44:ef:ae:7f:ac:bc:ff:e7:4c:1f:
                    d0:2c:c2:c8:96:a8:bd:94:95:c4:e4:53:7f:a1:3e:
                    54:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:67:06:03:49:56:73:E9:52:3D:F7:5B:F9:D2:F7:E8:C6:B3:35:91
            X509v3 Authority Key Identifier:
                keyid:68:8C:FC:6E:D2:95:D8:5C:CE:C2:EE:E0:68:7D:7F:10:77:72:1D:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e35322e302f32332d3233203d3e20323633353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:b6:dc:82:81:d5:cb:d2:e9:fd:f1:11:d0:d2:2e:36:ad:0b:
         be:9f:98:dd:01:59:46:d6:b6:ba:34:f5:f6:75:42:2b:50:49:
         c4:ab:7f:0b:4f:f7:63:6e:b4:f9:6e:01:4c:f8:a2:8a:5e:ab:
         3e:9c:f7:a0:f8:a8:31:28:31:77:53:75:cc:43:cb:fc:6f:71:
         cc:ea:f4:be:7b:ca:67:2f:10:a3:fa:de:58:d9:fa:ef:ae:7b:
         ab:79:c6:ee:bb:b6:2a:da:80:ad:03:71:88:82:85:78:c0:d7:
         a1:22:2c:51:2d:b7:3d:57:9f:9e:3c:67:4a:f5:28:90:6b:65:
         70:99:ba:88:8a:23:f3:c5:92:14:5d:d7:b6:19:8b:44:c0:32:
         78:60:81:0e:28:9a:0c:03:aa:ee:b1:6a:f3:a0:6a:2c:5f:f1:
         27:16:dc:be:7b:fe:4c:32:50:56:4a:aa:68:1c:70:d1:43:f4:
         e1:25:30:9d:1b:25:0c:f1:aa:2c:b4:43:f7:f7:e6:a7:cd:64:
         55:68:ce:d9:34:44:b1:86:1c:49:bd:d3:86:7a:16:36:e4:dd:
         2c:4f:b3:61:2a:f4:36:14:e3:aa:d4:46:f9:e6:a4:72:45:8e:
         7a:ac:3c:d7:c6:33:43:21:e4:59:cf:33:8e:49:1c:d2:13:a5:
         ea:f7:81:f4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIctczCoy1ISqVaSkorwq3oETWoEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg4Q0ZDNkVEMjk1RDg1Q0NFQzJFRUUwNjg3RDdGMTA3
NzcyMURDMTAeFw0yNDA0MDQxMDUzMzNaFw0yNTA0MDMxMDU4MzNaMDMxMTAvBgNV
BAMTKDE2NjcwNjAzNDk1NjczRTk1MjNERjc1QkY5RDJGN0U4QzZCMzM1OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLrGukqaUPl87m+84RgCbAjywI
1sRkWD4Q0YCKwtPcnNJfzu0Tdz2OhrG1gQWJ0CqC/ADJfjbi/pdtaxp+fyeeU+Uo
yR1PDaRbuDN4UJbD7VyYG6jH/YbKFcYJkCOl6O/b0X0olbSBF4I+JZuRz9e7Fv3H
/tNYgUkqyE1MCXxRHdDvpCmIa8QDECRSK/wsJNI60oMT7kHQT2aH6rhcHtC8AGPM
JoU5+lKWusX5AILmOvhs90RnupHPuGjFYeUoiCb9E6lxq9RTSF849sAIOgXzOzr9
tm3jDUmUnr27eSggx4mXLTdORO+uf6y8/+dMH9AswsiWqL2UlcTkU3+hPlQ/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUFmcGA0lWc+lSPfdb+dL36MazNZEwHwYDVR0j
BBgwFoAUaIz8btKV2FzOwu7gaH1/EHdyHcEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmZnd1VEUXQ5b2RnUXptYUFiZE1TbkZXamVadzNLQ0JuWDhFZTlmMnBY
ZHQvMS82ODhDRkM2RUQyOTVEODVDQ0VDMkVFRTA2ODdEN0YxMDc3NzIxREMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4OENGQzZFRDI5NUQ4NUND
RUMyRUVFMDY4N0Q3RjEwNzc3MjFEQzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JmZ3dVRFF0OW9kZ1F6bWFBYmRNU25GV2plWnczS0NCblg4RWU5ZjJwWGR0LzEv
MzEzNzM3MmUzMjMyMzMyZTM1MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzMzNTMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGx3zQwDQYJKoZIhvcNAQELBQADggEBACG23IKB
1cvS6f3xEdDSLjatC76fmN0BWUbWtro09fZ1QitQScSrfwtP92NutPluAUz4oope
qz6c96D4qDEoMXdTdcxDy/xvcczq9L57ymcvEKP63ljZ+u+ue6t5xu67tiragK0D
cYiChXjA16EiLFEttz1Xn548Z0r1KJBrZXCZuoiKI/PFkhRd17YZi0TAMnhggQ4o
mgwDqu6xavOgaixf8ScW3L57/kwyUFZKqmgccNFD9OElMJ0bJQzxqiy0Q/f35qfN
ZFVoztk0RLGGHEm904Z6Fjbk3SxPs2Eq9DYU46rURvnmpHJFjnqsPNfGM0Mh5FnP
M45JHNITper3gfQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:43 2024 by rpki-client on console-ams.rpki-client.org