Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/3137372e38352e3136342e302f32322d3232203d3e203532373433.roa
File:                     3137372e38352e3136342e302f32322d3232203d3e203532373433.roa (raw, json)
Hash identifier:          BMSHskA7eGlgmNW1dmHOa8yr5u/ceVTURo4WIEkrUgw=
Subject key identifier:   62:D0:8A:6D:2C:D5:BA:30:EB:89:8C:55:7D:28:FA:62:B9:E6:8E:4D
Certificate issuer:       /CN=B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66
Certificate serial:       615CDDCAEB9FA8BDB0FC4217CBE058A50A571339
Authority key identifier: B8:5D:CA:CB:96:F5:5E:6D:2A:D1:68:6E:1E:DE:7B:55:55:4C:FE:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/3137372e38352e3136342e302f32322d3232203d3e203532373433.roa
Signing time:             Thu 04 Apr 2024 13:55:17 +0000
ROA not before:           Thu 04 Apr 2024 13:50:17 +0000
ROA not after:            Thu 03 Apr 2025 13:55:17 +0000
asID:                     52743
IP address blocks:        177.85.164.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl
                          rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:5c:dd:ca:eb:9f:a8:bd:b0:fc:42:17:cb:e0:58:a5:0a:57:13:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66
        Validity
            Not Before: Apr  4 13:50:17 2024 GMT
            Not After : Apr  3 13:55:17 2025 GMT
        Subject: CN=62D08A6D2CD5BA30EB898C557D28FA62B9E68E4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7b:7e:b1:84:c0:5e:d2:cd:f6:9a:9e:b6:fc:
                    8c:fa:83:12:2a:73:5a:2c:7f:c9:24:28:49:8c:ea:
                    a9:60:0a:dc:c1:c6:40:e6:3a:5a:b8:df:94:9a:a1:
                    ce:9f:b4:7b:50:a9:14:db:ff:1a:cd:e5:d8:96:44:
                    cc:2e:18:17:29:c5:1a:98:9b:87:fc:e2:7f:19:7a:
                    6a:7a:9c:aa:8e:2a:70:28:20:cd:91:55:42:3f:69:
                    42:d3:96:b8:ac:df:77:9e:53:2f:c2:2c:b6:4a:43:
                    2b:98:69:2d:41:e1:7c:f1:fc:47:5f:0e:b6:8c:7c:
                    0d:e2:39:af:90:5b:be:83:a2:59:49:b4:ad:49:59:
                    0d:b1:0c:a7:c6:39:70:1c:f4:4a:a9:b4:93:9b:34:
                    3d:a4:2b:5e:da:a7:11:20:db:de:a9:cd:53:23:a3:
                    34:3c:6c:f5:7c:12:eb:ff:83:71:16:f3:f3:ff:7f:
                    e3:ad:24:9f:dd:70:d9:a9:d9:b5:3d:0c:0d:68:6c:
                    77:38:02:2b:94:57:32:54:12:5f:45:5f:aa:93:9a:
                    e4:11:11:b2:e5:a8:dc:39:0e:5f:8b:83:23:87:ad:
                    09:33:9c:e9:da:87:7b:6b:8c:97:ac:16:e4:21:6b:
                    69:4a:17:0c:e8:2c:97:53:9b:1b:a7:63:9a:e0:26:
                    40:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D0:8A:6D:2C:D5:BA:30:EB:89:8C:55:7D:28:FA:62:B9:E6:8E:4D
            X509v3 Authority Key Identifier:
                keyid:B8:5D:CA:CB:96:F5:5E:6D:2A:D1:68:6E:1E:DE:7B:55:55:4C:FE:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/3137372e38352e3136342e302f32322d3232203d3e203532373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:b9:71:12:38:53:b7:ac:96:57:25:e0:63:04:76:ad:b9:61:
         dc:70:b2:6d:69:56:fe:7c:c9:46:bd:43:9d:44:23:4f:2a:4f:
         3d:b7:c3:d9:bb:dd:5c:32:3b:54:ab:3d:cc:e1:a2:39:b6:23:
         7c:6a:12:72:9b:d4:31:ef:30:fb:55:06:4e:1f:96:0e:d4:7d:
         02:b8:8e:d3:30:99:9a:0a:2b:71:59:f8:af:b0:3b:c3:e2:c7:
         c3:e5:62:d1:25:c9:52:85:4f:c1:dc:24:02:8b:cd:11:b9:56:
         2d:69:4c:a0:65:66:59:58:02:70:6e:a5:2e:e4:90:48:ab:83:
         a2:12:6b:d9:5e:1e:17:93:4f:62:13:16:44:c6:86:96:00:f0:
         3d:8f:5e:f8:98:32:23:df:d1:4e:e1:26:03:82:26:cf:1e:2b:
         1a:71:71:55:41:92:64:c1:e8:9c:e8:89:55:0a:86:45:7b:e7:
         58:74:f2:bb:db:bb:bf:6a:13:3a:98:ed:9a:69:9f:a1:86:22:
         42:09:c3:ae:1e:b0:af:8a:e1:51:a8:4c:26:47:9e:1c:72:b3:
         63:57:04:f2:d8:20:1e:eb:ea:6b:c7:b9:e6:02:3e:65:fd:a6:
         8b:b9:70:67:01:06:fb:19:a7:ba:a1:3b:07:87:ad:c8:d5:dd:
         c2:3a:9b:f6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYVzdyuufqL2w/EIXy+BYpQpXEzkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg1RENBQ0I5NkY1NUU2RDJBRDE2ODZFMUVERTdCNTU1
NTRDRkU2NjAeFw0yNDA0MDQxMzUwMTdaFw0yNTA0MDMxMzU1MTdaMDMxMTAvBgNV
BAMTKDYyRDA4QTZEMkNENUJBMzBFQjg5OEM1NTdEMjhGQTYyQjlFNjhFNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9e36xhMBe0s32mp62/Iz6gxIq
c1osf8kkKEmM6qlgCtzBxkDmOlq435Saoc6ftHtQqRTb/xrN5diWRMwuGBcpxRqY
m4f84n8Zemp6nKqOKnAoIM2RVUI/aULTlris33eeUy/CLLZKQyuYaS1B4Xzx/Edf
DraMfA3iOa+QW76DollJtK1JWQ2xDKfGOXAc9EqptJObND2kK17apxEg296pzVMj
ozQ8bPV8Euv/g3EW8/P/f+OtJJ/dcNmp2bU9DA1obHc4AiuUVzJUEl9FX6qTmuQR
EbLlqNw5Dl+LgyOHrQkznOnah3trjJesFuQha2lKFwzoLJdTmxunY5rgJkCbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUYtCKbSzVujDriYxVfSj6Yrnmjk0wHwYDVR0j
BBgwFoAUuF3Ky5b1Xm0q0WhuHt57VVVM/mYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2R3Q2lUVUdXeW9vSlBNUzFrRUVOWENBM2FCYVI2N0M4Z2NzdkNkNUhG
VTEvMS9CODVEQ0FDQjk2RjU1RTZEMkFEMTY4NkUxRURFN0I1NTU1NENGRTY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4NURDQUNCOTZGNTVFNkQy
QUQxNjg2RTFFREU3QjU1NTU0Q0ZFNjYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Nkd0NpVFVHV3lvb0pQTVMxa0VFTlhDQTNhQmFSNjdDOGdjc3ZDZDVIRlUxLzEv
MzEzNzM3MmUzODM1MmUzMTM2MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTMy
MzczNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsVWkMA0GCSqGSIb3DQEBCwUAA4IBAQCEuXESOFO3
rJZXJeBjBHatuWHccLJtaVb+fMlGvUOdRCNPKk89t8PZu91cMjtUqz3M4aI5tiN8
ahJym9Qx7zD7VQZOH5YO1H0CuI7TMJmaCitxWfivsDvD4sfD5WLRJclShU/B3CQC
i80RuVYtaUygZWZZWAJwbqUu5JBIq4OiEmvZXh4Xk09iExZExoaWAPA9j174mDIj
39FO4SYDgibPHisacXFVQZJkweic6IlVCoZFe+dYdPK727u/ahM6mO2aaZ+hhiJC
CcOuHrCviuFRqEwmR54ccrNjVwTy2CAe6+prx7nmAj5l/aaLuXBnAQb7Gae6oTsH
h63I1d3COpv2
-----END CERTIFICATE-----
Generated at Sat Sep 28 11:59:57 2024 by rpki-client on console-fra.rpki-client.org