Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/1/3137372e3133372e3234302e302f32312d3234203d3e203238313731.roa
File:                     3137372e3133372e3234302e302f32312d3234203d3e203238313731.roa (raw, json)
Hash identifier:          2Y7K8f7Lrt9ZJtpPcxLXfKjjxWDBOtCenJgEuG3KAJc=
Subject key identifier:   77:73:CE:97:7D:9D:15:97:23:91:BB:B0:67:9E:BF:06:12:D0:D7:AA
Certificate issuer:       /CN=8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0
Certificate serial:       3BB2C04E62C5FFBB91185FF4B8AE86A1122A490E
Authority key identifier: 8B:A6:99:C4:70:16:69:EC:E8:E7:D3:F4:A8:60:C4:F6:D5:C7:64:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/1/3137372e3133372e3234302e302f32312d3234203d3e203238313731.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     28171
IP address blocks:        177.137.240.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/1/8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0.crl
                          rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/1/8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:b2:c0:4e:62:c5:ff:bb:91:18:5f:f4:b8:ae:86:a1:12:2a:49:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:85:1d:9b:06:79:64:09:d4:d5:fd:20:51:bb:
                    08:1e:39:f2:95:41:0f:f9:4f:32:42:96:0e:0b:b9:
                    92:34:bf:03:27:2a:26:fc:56:2d:71:8e:a5:a1:87:
                    0d:26:34:bc:cd:3f:90:2c:eb:39:64:ce:b2:3d:b8:
                    1a:63:2a:85:38:b0:3d:fe:96:a2:d9:06:90:b4:f1:
                    8f:6c:af:fb:a4:87:43:cd:4c:db:38:ad:11:0e:ec:
                    28:92:a3:a0:58:fd:57:6c:fc:1b:9e:e7:29:6a:15:
                    19:8f:e9:69:9b:fe:00:3f:3a:99:19:8c:d4:9b:d6:
                    31:78:83:a3:9e:89:f9:3a:cf:fa:ca:f6:77:1a:d6:
                    4d:e9:b2:e6:34:12:69:d2:12:95:4c:da:ae:24:0d:
                    6f:e1:41:65:ae:77:92:51:28:10:85:a3:67:b8:0a:
                    1d:e6:18:a0:ba:01:07:e8:e2:30:fe:ee:88:2a:d8:
                    46:62:4c:b0:84:fc:0c:9d:62:e2:96:7e:5a:96:57:
                    af:47:40:cd:84:c6:82:e2:a3:c7:12:e2:42:61:f5:
                    7d:b8:5e:a2:97:a9:2d:42:76:ca:ce:bb:bc:8a:b0:
                    f8:63:39:ce:f8:89:20:94:eb:b8:f3:4f:ac:87:9a:
                    e9:4b:f6:37:12:ae:39:5b:d3:13:38:f0:a2:83:77:
                    91:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:73:CE:97:7D:9D:15:97:23:91:BB:B0:67:9E:BF:06:12:D0:D7:AA
            X509v3 Authority Key Identifier:
                keyid:8B:A6:99:C4:70:16:69:EC:E8:E7:D3:F4:A8:60:C4:F6:D5:C7:64:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/1/8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/1/3137372e3133372e3234302e302f32312d3234203d3e203238313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         12:de:e4:1e:1b:af:5a:65:fd:69:94:4f:45:05:5a:e2:03:75:
         d2:59:ce:b1:be:7b:1b:a3:e6:7f:b0:b4:c8:28:f4:3d:4b:02:
         94:8d:ac:09:fc:c4:51:de:9d:29:a4:17:c9:f7:77:40:a4:b8:
         bc:7a:36:96:55:ad:80:7c:23:06:b0:8d:85:12:88:bb:9c:af:
         1f:59:fc:ce:57:90:bf:7b:0c:ae:a5:47:ff:f7:eb:67:ee:50:
         0c:02:fc:bf:d9:6f:e4:98:61:a1:bd:a1:1d:2e:b0:3b:7e:7c:
         bb:ed:43:f4:e5:af:c2:8f:20:90:26:f4:f4:ae:47:ca:91:fe:
         b4:09:64:6f:d7:15:1e:6d:b9:27:58:6d:70:ee:83:5c:40:c0:
         71:c8:20:63:d8:1c:b7:ba:38:6b:b2:48:d3:dd:af:fb:4d:db:
         b2:a1:1e:38:16:f4:a4:90:64:5f:f8:65:aa:15:4f:af:d1:30:
         09:c3:f5:80:5a:fd:f4:bd:68:9e:9f:60:e6:d5:ac:03:a9:43:
         f6:ea:97:7e:50:88:d0:c2:c9:d2:82:c9:09:71:bd:54:24:f8:
         7c:ac:7d:ba:98:5c:56:a6:d9:cf:a5:16:b3:d6:ce:e2:21:d5:
         3f:56:f1:5f:e3:f8:3e:9f:b3:7a:c8:92:7a:ac:93:26:61:90:
         93:f0:79:29
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUO7LATmLF/7uRGF/0uK6GoRIqSQ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEJBNjk5QzQ3MDE2NjlFQ0U4RTdEM0Y0QTg2MEM0RjZE
NUM3NjREMDAeFw0yNDA0MDMxODU1MDBaFw0yNTA0MDMxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOTc4NTFEOUIwNjc5NjQwOUQ0
RDVGRDIwNTFCQjA4MUUzOUYyOTU0MTBGRjk0RjMyNDI5NjBFMEJCOTkyMzRCRjAz
MjcyQTI2RkM1NjJENzE4RUE1QTE4NzBEMjYzNEJDQ0QzRjkwMkNFQjM5NjRDRUIy
M0RCODFBNjMyQTg1MzhCMDNERkU5NkEyRDkwNjkwQjRGMThGNkNBRkZCQTQ4NzQz
Q0Q0Q0RCMzhBRDExMEVFQzI4OTJBM0EwNThGRDU3NkNGQzFCOUVFNzI5NkExNTE5
OEZFOTY5OUJGRTAwM0YzQTk5MTk4Q0Q0OUJENjMxNzg4M0EzOUU4OUY5M0FDRkZB
Q0FGNjc3MUFENjRERTlCMkU2MzQxMjY5RDIxMjk1NENEQUFFMjQwRDZGRTE0MTY1
QUU3NzkyNTEyODEwODVBMzY3QjgwQTFERTYxOEEwQkEwMTA3RThFMjMwRkVFRTg4
MkFEODQ2NjI0Q0IwODRGQzBDOUQ2MkUyOTY3RTVBOTY1N0FGNDc0MENEODRDNjgy
RTJBM0M3MTJFMjQyNjFGNTdEQjg1RUEyOTdBOTJENDI3NkNBQ0VCQkJDOEFCMEY4
NjMzOUNFRjg4OTIwOTRFQkI4RjM0RkFDODc5QUU5NEJGNjM3MTJBRTM5NUJEMzEz
MzhGMEEyODM3NzkxODMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAl4UdmwZ5ZAnU1f0gUbsIHjnylUEP+U8yQpYOC7mSNL8DJyom/FYt
cY6loYcNJjS8zT+QLOs5ZM6yPbgaYyqFOLA9/pai2QaQtPGPbK/7pIdDzUzbOK0R
DuwokqOgWP1XbPwbnucpahUZj+lpm/4APzqZGYzUm9YxeIOjnon5Os/6yvZ3GtZN
6bLmNBJp0hKVTNquJA1v4UFlrneSUSgQhaNnuAod5higugEH6OIw/u6IKthGYkyw
hPwMnWLiln5allevR0DNhMaC4qPHEuJCYfV9uF6il6ktQnbKzru8irD4YznO+Ikg
lOu480+sh5rpS/Y3Eq45W9MTOPCig3eRgwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FHdzzpd9nRWXI5G7sGeevwYS0NeqMB8GA1UdIwQYMBaAFIummcRwFmns6OfT9Khg
xPbVx2TQMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NKaEc2WDlqZFBHQXRk
UFJ6NjZ5dHMyY2hFYmhaQWhiZ3BUWUZDZU1CdVlqLzEvOEJBNjk5QzQ3MDE2NjlF
Q0U4RTdEM0Y0QTg2MEM0RjZENUM3NjREMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS84QkE2OTlDNDcwMTY2OUVDRThFN0QzRjRBODYwQzRGNkQ1Qzc2
NEQwLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DSmhHNlg5amRQR0F0ZFBSejY2
eXRzMmNoRWJoWkFoYmdwVFlGQ2VNQnVZai8xLzMxMzczNzJlMzEzMzM3MmUzMjM0
MzAyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM4MzEzNzMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD
sYnwMA0GCSqGSIb3DQEBCwUAA4IBAQAS3uQeG69aZf1plE9FBVriA3XSWc6xvnsb
o+Z/sLTIKPQ9SwKUjawJ/MRR3p0ppBfJ93dApLi8ejaWVa2AfCMGsI2FEoi7nK8f
WfzOV5C/ewyupUf/9+tn7lAMAvy/2W/kmGGhvaEdLrA7fny77UP05a/CjyCQJvT0
rkfKkf60CWRv1xUebbknWG1w7oNcQMBxyCBj2By3ujhrskjT3a/7TduyoR44FvSk
kGRf+GWqFU+v0TAJw/WAWv30vWien2Dm1awDqUP26pd+UIjQwsnSgskJcb1UJPh8
rH26mFxWptnPpRaz1s7iIdU/VvFf4/g+n7N6yJJ6rJMmYZCT8Hkp
-----END CERTIFICATE-----
Generated at Fri Sep 27 18:43:43 2024 by rpki-client on console-fra.rpki-client.org