Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137372e3132352e3137322e302f32332d3233203d3e203532363133.roa
File:                     3137372e3132352e3137322e302f32332d3233203d3e203532363133.roa (raw, json)
Hash identifier:          41DAKhcP86/9djtRqhPyyLrUt/L20jhuB60Bds1OCH0=
Subject key identifier:   EA:51:84:A8:E5:78:FA:5B:91:BA:9E:B5:FC:B6:0F:E8:C0:8F:14:64
Certificate issuer:       /CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
Certificate serial:       09EBF4255EA4AD0E9E719219269F4BE9683FA21E
Authority key identifier: 90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137372e3132352e3137322e302f32332d3233203d3e203532363133.roa
Signing time:             Thu 04 Apr 2024 09:18:18 +0000
ROA not before:           Thu 04 Apr 2024 09:13:18 +0000
ROA not after:            Thu 03 Apr 2025 09:18:18 +0000
asID:                     52613
IP address blocks:        177.125.172.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl
                          rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:12:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:eb:f4:25:5e:a4:ad:0e:9e:71:92:19:26:9f:4b:e9:68:3f:a2:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
        Validity
            Not Before: Apr  4 09:13:18 2024 GMT
            Not After : Apr  3 09:18:18 2025 GMT
        Subject: CN=EA5184A8E578FA5B91BA9EB5FCB60FE8C08F1464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3a:fa:df:ec:db:64:98:74:78:12:c8:f9:16:
                    9b:37:84:45:06:1f:37:c3:e2:08:57:cd:f4:f2:59:
                    49:01:d7:be:7b:4f:8b:cd:71:c3:a9:dd:19:87:ae:
                    1d:6d:6d:ca:75:9d:04:0c:46:c5:e1:92:51:a1:57:
                    75:b0:be:41:f2:ba:be:62:09:ef:e9:db:bf:62:93:
                    75:29:bb:fe:53:53:52:35:e8:1a:9a:83:99:f2:19:
                    7e:40:1c:a4:f7:42:dd:39:62:a3:ab:de:6c:75:53:
                    ae:8a:2f:3f:f1:db:ba:ea:67:4b:1e:af:ee:ee:92:
                    4c:94:c1:e6:c3:56:07:8f:62:14:39:9b:5b:56:48:
                    bc:ef:1b:0a:d1:aa:7b:30:39:40:43:3c:d0:dc:08:
                    92:e8:ca:82:b9:c7:ae:f5:ce:93:74:ca:6c:78:7c:
                    90:b6:67:e8:81:0d:01:57:f9:34:8d:43:18:3f:8e:
                    6b:2d:aa:f4:8b:a3:ef:9e:79:e2:15:af:a8:7d:73:
                    a1:46:59:4e:03:91:ae:6c:8b:dd:9c:a5:f8:01:9e:
                    ef:36:80:a2:fe:81:c4:6e:07:f1:f4:69:ce:27:93:
                    29:cc:57:05:2c:bb:ba:68:2a:ea:7d:b6:dc:3d:1a:
                    e0:09:fc:22:be:23:37:fb:0c:b5:96:78:e6:58:17:
                    86:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:51:84:A8:E5:78:FA:5B:91:BA:9E:B5:FC:B6:0F:E8:C0:8F:14:64
            X509v3 Authority Key Identifier:
                keyid:90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137372e3132352e3137322e302f32332d3233203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:49:46:fa:3e:0a:a1:0a:37:b6:4a:c7:2a:8c:76:97:a7:cf:
         37:f3:bc:46:a1:14:e1:5e:f2:95:de:68:32:fb:d0:35:90:a5:
         9a:63:c5:4e:29:ef:78:11:cf:f8:5d:70:e7:bb:b8:9a:ff:41:
         e0:33:5c:16:8e:74:fd:67:12:9f:5e:5e:57:a2:0c:2f:8e:1b:
         39:d9:ae:d2:ec:c7:39:a1:3c:dd:e6:3b:9f:05:6f:bb:1f:f2:
         17:47:1c:df:d5:a2:95:3c:60:e4:47:78:5f:01:ef:88:21:d9:
         3a:e7:b1:97:2b:3c:21:42:81:0f:b6:80:8e:2f:e5:cc:8b:fb:
         ce:ea:1b:dd:ab:f9:1f:4c:16:53:97:c4:b6:83:7e:62:6f:22:
         b3:67:b4:6b:5f:5a:0e:5e:91:cb:0c:8c:b1:40:04:48:e8:14:
         3f:d1:86:e1:c4:f7:11:35:27:9c:91:1b:6b:2c:c9:e3:a0:c2:
         20:13:4a:09:b5:6b:21:fb:cb:22:7e:0d:3c:ed:22:8e:d9:16:
         6a:2f:9b:7b:31:cc:e6:04:87:9c:5c:19:79:7c:00:69:f5:26:
         da:12:2c:6c:8b:20:b2:65:08:43:12:1e:2a:27:58:3e:c6:d0:
         4c:c3:59:c0:fc:d6:70:c8:b9:ed:b9:e8:0f:9d:ff:53:14:65:
         c7:6f:55:61
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCev0JV6krQ6ecZIZJp9L6Wg/oh4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBEQzVBMzVCOTQ3MDdENEVCNzEwNkY2QkE5RTlDRjg3
NkJBRTQ1NjAeFw0yNDA0MDQwOTEzMThaFw0yNTA0MDMwOTE4MThaMDMxMTAvBgNV
BAMTKEVBNTE4NEE4RTU3OEZBNUI5MUJBOUVCNUZDQjYwRkU4QzA4RjE0NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQOvrf7NtkmHR4Esj5Fps3hEUG
HzfD4ghXzfTyWUkB1757T4vNccOp3RmHrh1tbcp1nQQMRsXhklGhV3WwvkHyur5i
Ce/p279ik3Upu/5TU1I16Bqag5nyGX5AHKT3Qt05YqOr3mx1U66KLz/x27rqZ0se
r+7ukkyUwebDVgePYhQ5m1tWSLzvGwrRqnswOUBDPNDcCJLoyoK5x671zpN0ymx4
fJC2Z+iBDQFX+TSNQxg/jmstqvSLo++eeeIVr6h9c6FGWU4Dka5si92cpfgBnu82
gKL+gcRuB/H0ac4nkynMVwUsu7poKup9ttw9GuAJ/CK+Izf7DLWWeOZYF4bPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6lGEqOV4+luRup61/LYP6MCPFGQwHwYDVR0j
BBgwFoAUkNxaNblHB9TrcQb2up6c+Ha65FYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3VTNlF5M2lqejdMSktjblRHZzZOVEc0WXBFY0RDTGZ6aFAyYm5FemtQ
TWkvMS85MERDNUEzNUI5NDcwN0Q0RUI3MTA2RjZCQTlFOUNGODc2QkFFNDU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkwREM1QTM1Qjk0NzA3RDRF
QjcxMDZGNkJBOUU5Q0Y4NzZCQUU0NTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N1UzZReTNpano3TEpLY25UR2c2TlRHNFlwRWNEQ0xmemhQMmJuRXprUE1pLzEv
MzEzNzM3MmUzMTMyMzUyZTMxMzczMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM1
MzIzNjMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxfawwDQYJKoZIhvcNAQELBQADggEBAJdJRvo+
CqEKN7ZKxyqMdpenzzfzvEahFOFe8pXeaDL70DWQpZpjxU4p73gRz/hdcOe7uJr/
QeAzXBaOdP1nEp9eXleiDC+OGznZrtLsxzmhPN3mO58Fb7sf8hdHHN/VopU8YORH
eF8B74gh2TrnsZcrPCFCgQ+2gI4v5cyL+87qG92r+R9MFlOXxLaDfmJvIrNntGtf
Wg5ekcsMjLFABEjoFD/RhuHE9xE1J5yRG2ssyeOgwiATSgm1ayH7yyJ+DTztIo7Z
Fmovm3sxzOYEh5xcGXl8AGn1JtoSLGyLILJlCEMSHionWD7G0EzDWcD81nDIue25
6A+d/1MUZcdvVWE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:08 2024 by rpki-client on console-ams.rpki-client.org