Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/3137372e3138342e3232342e302f32302d3234203d3e203532393234.roa
File:                     3137372e3138342e3232342e302f32302d3234203d3e203532393234.roa (raw, json)
Hash identifier:          Mr67RHLLVxdbhE6HefvX1WMp743b3lTpnUlhAwP7T7A=
Subject key identifier:   37:B5:72:C4:2A:9A:0F:4A:EC:A3:4E:FF:B2:AF:DD:AC:3A:AE:C7:FA
Certificate issuer:       /CN=88F45CA9F42577057740B3862841E292FEE58105
Certificate serial:       7FB0FF8C1A6E21946C7F9F565BDA1340197DF38F
Authority key identifier: 88:F4:5C:A9:F4:25:77:05:77:40:B3:86:28:41:E2:92:FE:E5:81:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88F45CA9F42577057740B3862841E292FEE58105.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/3137372e3138342e3232342e302f32302d3234203d3e203532393234.roa
Signing time:             Sat 09 Nov 2024 13:44:18 +0000
ROA not before:           Sat 09 Nov 2024 13:39:18 +0000
ROA not after:            Sat 08 Nov 2025 13:44:18 +0000
asID:                     52924
IP address blocks:        177.184.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/88F45CA9F42577057740B3862841E292FEE58105.crl
                          rsync://rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/88F45CA9F42577057740B3862841E292FEE58105.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88F45CA9F42577057740B3862841E292FEE58105.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:08:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:b0:ff:8c:1a:6e:21:94:6c:7f:9f:56:5b:da:13:40:19:7d:f3:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88F45CA9F42577057740B3862841E292FEE58105
        Validity
            Not Before: Nov  9 13:39:18 2024 GMT
            Not After : Nov  8 13:44:18 2025 GMT
        Subject: CN=37B572C42A9A0F4AECA34EFFB2AFDDAC3AAEC7FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:be:ff:6c:97:33:76:a0:20:50:54:12:6d:70:
                    83:4a:1e:a6:3d:c9:b0:d5:97:e9:a2:fa:95:71:40:
                    f0:92:0d:d2:d6:97:f1:43:23:33:59:16:b6:19:7f:
                    ba:7d:93:3e:fa:15:48:f4:6a:57:90:31:04:66:0f:
                    47:9d:db:62:dc:b4:eb:6b:e7:38:7b:e7:9e:ff:7e:
                    50:13:d1:7c:59:15:a8:04:f4:7a:43:ed:5e:f2:4e:
                    6a:5f:74:95:fb:1a:48:ec:0e:f2:94:7d:98:df:1e:
                    39:4d:72:ed:92:1c:cd:e4:89:bd:e2:da:ef:8a:3a:
                    c6:71:fe:bb:26:66:4e:ce:56:61:86:85:65:ab:f8:
                    c1:7e:c2:ad:92:81:50:0e:8f:21:64:73:fe:19:3f:
                    35:8b:22:55:bd:4f:b4:99:c8:59:b9:21:12:24:54:
                    b3:16:56:bb:8a:be:35:da:f2:91:ab:4f:5c:16:bf:
                    7d:56:ae:fd:50:46:6a:b2:d9:ad:65:22:bf:a8:4c:
                    42:09:6a:db:ee:8d:6b:93:52:fa:6f:57:0c:ad:42:
                    fe:fe:16:b4:7d:bf:74:f0:2c:0f:a2:19:5d:db:c8:
                    86:7c:1c:fc:02:68:f4:f8:51:1b:31:1a:05:42:66:
                    02:fd:e1:af:c7:52:7b:1c:8e:d1:45:5e:43:03:88:
                    d2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B5:72:C4:2A:9A:0F:4A:EC:A3:4E:FF:B2:AF:DD:AC:3A:AE:C7:FA
            X509v3 Authority Key Identifier:
                keyid:88:F4:5C:A9:F4:25:77:05:77:40:B3:86:28:41:E2:92:FE:E5:81:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/88F45CA9F42577057740B3862841E292FEE58105.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88F45CA9F42577057740B3862841E292FEE58105.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/3137372e3138342e3232342e302f32302d3234203d3e203532393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         aa:12:60:13:10:29:e7:0d:2d:66:ee:4d:bc:05:18:14:fa:ca:
         7a:e1:7e:13:5b:8a:b8:23:08:1a:f8:6b:8d:42:37:61:a1:0f:
         03:e8:3a:00:ac:7d:b4:0c:fc:cc:ec:d6:e9:3e:11:9d:f3:41:
         cc:b7:aa:07:13:b7:bf:68:af:25:84:50:f4:71:41:60:ac:7e:
         c7:5d:29:91:a6:1f:d6:6a:e7:02:de:24:f3:05:8f:a3:cd:97:
         dd:86:95:3f:26:c6:fa:6c:5b:80:e2:30:ac:98:e6:32:86:0d:
         db:75:cd:42:e6:2b:cf:1f:6c:79:50:a5:7d:8d:ef:8e:a1:c9:
         01:76:4c:59:77:28:dd:2a:e7:3e:e1:5f:94:e1:5d:a9:42:1d:
         51:43:88:04:2c:38:40:cd:6d:6d:3e:1b:fe:86:e1:6d:67:23:
         4a:91:e4:e1:80:d2:78:28:28:18:46:a4:d0:47:33:cb:13:1f:
         03:77:e3:3f:8a:cf:d5:93:95:e8:58:41:fc:7b:bd:ce:d6:e5:
         26:26:2c:b6:85:54:f2:cf:aa:0e:e6:bf:30:6e:d9:e6:e1:c8:
         93:b8:b4:f2:8f:a9:1b:e0:87:88:34:0c:94:db:80:60:b3:0f:
         7c:80:b8:c5:6c:20:0f:d1:30:92:c5:25:e1:6d:49:29:2d:63:
         a2:4e:88:12
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUf7D/jBpuIZRsf59WW9oTQBl9848wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhGNDVDQTlGNDI1NzcwNTc3NDBCMzg2Mjg0MUUyOTJG
RUU1ODEwNTAeFw0yNDExMDkxMzM5MThaFw0yNTExMDgxMzQ0MThaMDMxMTAvBgNV
BAMTKDM3QjU3MkM0MkE5QTBGNEFFQ0EzNEVGRkIyQUZEREFDM0FBRUM3RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCevv9slzN2oCBQVBJtcINKHqY9
ybDVl+mi+pVxQPCSDdLWl/FDIzNZFrYZf7p9kz76FUj0aleQMQRmD0ed22LctOtr
5zh7557/flAT0XxZFagE9HpD7V7yTmpfdJX7GkjsDvKUfZjfHjlNcu2SHM3kib3i
2u+KOsZx/rsmZk7OVmGGhWWr+MF+wq2SgVAOjyFkc/4ZPzWLIlW9T7SZyFm5IRIk
VLMWVruKvjXa8pGrT1wWv31Wrv1QRmqy2a1lIr+oTEIJatvujWuTUvpvVwytQv7+
FrR9v3TwLA+iGV3byIZ8HPwCaPT4URsxGgVCZgL94a/HUnscjtFFXkMDiNJZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUN7VyxCqaD0rso07/sq/drDqux/owHwYDVR0j
BBgwFoAUiPRcqfQldwV3QLOGKEHikv7lgQUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDJzcmNyU0piVm5odUxoWWhCczNycFJUQ3E3bVp5dXJYRm1IV25pbkJH
TUYvMC84OEY0NUNBOUY0MjU3NzA1Nzc0MEIzODYyODQxRTI5MkZFRTU4MTA1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4RjQ1Q0E5RjQyNTc3MDU3
NzQwQjM4NjI4NDFFMjkyRkVFNTgxMDUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Qyc3JjclNKYlZuaHVMaFloQnMzcnBSVENxN21aeXVyWEZtSFduaW5CR01GLzAv
MzEzNzM3MmUzMTM4MzQyZTMyMzIzNDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDM1
MzIzOTMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASxuOAwDQYJKoZIhvcNAQELBQADggEBAKoSYBMQ
KecNLWbuTbwFGBT6ynrhfhNbirgjCBr4a41CN2GhDwPoOgCsfbQM/Mzs1uk+EZ3z
Qcy3qgcTt79oryWEUPRxQWCsfsddKZGmH9Zq5wLeJPMFj6PNl92GlT8mxvpsW4Di
MKyY5jKGDdt1zULmK88fbHlQpX2N746hyQF2TFl3KN0q5z7hX5ThXalCHVFDiAQs
OEDNbW0+G/6G4W1nI0qR5OGA0ngoKBhGpNBHM8sTHwN34z+Kz9WTlehYQfx7vc7W
5SYmLLaFVPLPqg7mvzBu2ebhyJO4tPKPqRvgh4g0DJTbgGCzD3yAuMVsIA/RMJLF
JeFtSSktY6JOiBI=
-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:38 2024 by rpki-client on console-ams.rpki-client.org