Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e36302e302f32342d3234203d3e20323633353030.roa
File:                     3137372e3232332e36302e302f32342d3234203d3e20323633353030.roa (raw, json)
Hash identifier:          hf/XXRFmc2m8U4Gig266i3u+bn9D2hZ604MLQpJru5c=
Subject key identifier:   14:EF:FC:0D:24:B7:1C:97:67:5C:EA:6A:AF:FF:58:AD:38:BB:96:0D
Certificate issuer:       /CN=688CFC6ED295D85CCEC2EEE0687D7F1077721DC1
Certificate serial:       1BDAE0773B9C121D8A71CAD2B06ECB0283C9E01C
Authority key identifier: 68:8C:FC:6E:D2:95:D8:5C:CE:C2:EE:E0:68:7D:7F:10:77:72:1D:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e36302e302f32342d3234203d3e20323633353030.roa
Signing time:             Thu 04 Apr 2024 10:58:33 +0000
ROA not before:           Thu 04 Apr 2024 10:53:33 +0000
ROA not after:            Thu 03 Apr 2025 10:58:33 +0000
asID:                     263500
IP address blocks:        177.223.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.crl
                          rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:46:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:da:e0:77:3b:9c:12:1d:8a:71:ca:d2:b0:6e:cb:02:83:c9:e0:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=688CFC6ED295D85CCEC2EEE0687D7F1077721DC1
        Validity
            Not Before: Apr  4 10:53:33 2024 GMT
            Not After : Apr  3 10:58:33 2025 GMT
        Subject: CN=14EFFC0D24B71C97675CEA6AAFFF58AD38BB960D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:af:2d:c5:96:c0:28:24:19:80:7d:02:b9:8b:
                    71:76:74:e8:88:1b:6f:93:b9:75:e8:57:a4:61:60:
                    9e:9d:eb:b3:f7:7b:95:77:93:ac:11:86:3b:11:59:
                    00:d9:fc:ce:50:e1:3e:88:98:ec:20:a4:ad:a7:e2:
                    03:cb:50:4d:33:05:a1:de:cd:92:01:f9:16:b4:47:
                    6f:c5:23:2a:41:bb:32:4b:ea:9c:2d:8a:98:16:15:
                    ef:4d:5f:49:60:f3:a8:60:ba:75:9a:8f:ab:89:e9:
                    9a:3e:46:cd:f8:6a:41:8d:3c:ba:a6:16:f4:66:12:
                    60:fd:6a:a6:2a:16:36:cd:e8:62:d3:24:ce:3a:d4:
                    9c:c0:4d:47:31:7f:47:c3:9f:35:fe:1c:42:f0:8c:
                    2b:c7:77:42:6f:50:f7:ed:dc:3e:0d:47:d4:1d:2e:
                    b7:96:b4:f4:7a:f9:a3:bf:f5:f8:1a:a6:c0:72:28:
                    f2:2c:98:d8:86:3b:37:2d:71:42:e2:dc:89:d1:46:
                    06:d8:9d:f5:22:46:a3:3c:f8:e3:8b:60:7a:8f:a3:
                    7a:e9:c5:6e:da:35:88:39:5d:ca:26:cb:13:3d:89:
                    cb:75:84:90:76:4c:63:17:e5:be:10:f3:83:d2:75:
                    22:af:70:59:46:ae:ca:60:66:86:00:eb:a0:47:e6:
                    83:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EF:FC:0D:24:B7:1C:97:67:5C:EA:6A:AF:FF:58:AD:38:BB:96:0D
            X509v3 Authority Key Identifier:
                keyid:68:8C:FC:6E:D2:95:D8:5C:CE:C2:EE:E0:68:7D:7F:10:77:72:1D:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e36302e302f32342d3234203d3e20323633353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:f1:26:13:09:13:44:12:c2:21:4b:61:32:65:dd:6d:10:0f:
         50:e2:ef:15:3d:f2:60:c3:36:aa:68:38:62:f8:cd:bc:bb:ce:
         8c:8b:b3:80:fa:b2:b3:3c:88:26:06:c9:db:3b:c9:2c:96:51:
         da:d5:cc:b3:6c:80:c5:8d:f8:66:88:fb:01:1c:0e:b4:7f:9c:
         04:e8:19:57:3e:dc:51:7f:e7:65:36:a7:b8:fd:3f:8c:19:a3:
         ad:85:c1:b3:ac:fe:c5:61:e1:d9:2a:17:ae:33:2c:92:c6:cd:
         41:64:ff:5f:97:15:da:c9:3d:ef:bd:fa:e0:99:79:67:04:8e:
         ce:3a:13:34:40:6a:ff:3f:88:77:ba:a9:c9:74:ce:e7:bf:e4:
         e7:07:36:d8:cf:e9:7a:6f:d8:0c:af:34:bc:0a:a3:05:14:fb:
         56:ce:ff:0a:e6:27:e9:ec:2d:2e:91:4f:0d:8b:16:93:5c:4d:
         2a:29:d9:4e:8c:ea:96:65:19:5f:21:13:c0:49:a7:0f:d5:d8:
         64:cf:df:20:de:d4:32:56:1d:9e:93:18:ef:b5:b8:77:24:5b:
         b6:06:e7:e6:2e:36:5b:07:7f:6c:41:58:0f:00:89:bf:d4:53:
         75:8b:47:80:ef:f9:94:b3:ce:2d:7c:37:06:40:b2:af:a9:fe:
         c5:c1:93:ca
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUG9rgdzucEh2KccrSsG7LAoPJ4BwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg4Q0ZDNkVEMjk1RDg1Q0NFQzJFRUUwNjg3RDdGMTA3
NzcyMURDMTAeFw0yNDA0MDQxMDUzMzNaFw0yNTA0MDMxMDU4MzNaMDMxMTAvBgNV
BAMTKDE0RUZGQzBEMjRCNzFDOTc2NzVDRUE2QUFGRkY1OEFEMzhCQjk2MEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ry3FlsAoJBmAfQK5i3F2dOiI
G2+TuXXoV6RhYJ6d67P3e5V3k6wRhjsRWQDZ/M5Q4T6ImOwgpK2n4gPLUE0zBaHe
zZIB+Ra0R2/FIypBuzJL6pwtipgWFe9NX0lg86hgunWaj6uJ6Zo+Rs34akGNPLqm
FvRmEmD9aqYqFjbN6GLTJM461JzATUcxf0fDnzX+HELwjCvHd0JvUPft3D4NR9Qd
LreWtPR6+aO/9fgapsByKPIsmNiGOzctcULi3InRRgbYnfUiRqM8+OOLYHqPo3rp
xW7aNYg5XcomyxM9ict1hJB2TGMX5b4Q84PSdSKvcFlGrspgZoYA66BH5oN5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUFO/8DSS3HJdnXOpqr/9YrTi7lg0wHwYDVR0j
BBgwFoAUaIz8btKV2FzOwu7gaH1/EHdyHcEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmZnd1VEUXQ5b2RnUXptYUFiZE1TbkZXamVadzNLQ0JuWDhFZTlmMnBY
ZHQvMS82ODhDRkM2RUQyOTVEODVDQ0VDMkVFRTA2ODdEN0YxMDc3NzIxREMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4OENGQzZFRDI5NUQ4NUND
RUMyRUVFMDY4N0Q3RjEwNzc3MjFEQzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JmZ3dVRFF0OW9kZ1F6bWFBYmRNU25GV2plWnczS0NCblg4RWU5ZjJwWGR0LzEv
MzEzNzM3MmUzMjMyMzMyZTM2MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzNTMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACx3zwwDQYJKoZIhvcNAQELBQADggEBAJPxJhMJ
E0QSwiFLYTJl3W0QD1Di7xU98mDDNqpoOGL4zby7zoyLs4D6srM8iCYGyds7ySyW
UdrVzLNsgMWN+GaI+wEcDrR/nAToGVc+3FF/52U2p7j9P4wZo62FwbOs/sVh4dkq
F64zLJLGzUFk/1+XFdrJPe+9+uCZeWcEjs46EzRAav8/iHe6qcl0zue/5OcHNtjP
6Xpv2AyvNLwKowUU+1bO/wrmJ+nsLS6RTw2LFpNcTSop2U6M6pZlGV8hE8BJpw/V
2GTP3yDe1DJWHZ6TGO+1uHckW7YG5+YuNlsHf2xBWA8Aib/UU3WLR4Dv+ZSzzi18
NwZAsq+p/sXBk8o=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:58 2024 by rpki-client on console-fra.rpki-client.org