Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135362e302f32322d3232203d3e203532373732.roa
File:                     3137372e33392e3135362e302f32322d3232203d3e203532373732.roa (raw, json)
Hash identifier:          C4A0yZBa+99Czm16NJn9Krt01+JJt7h0fZmMCo9lLws=
Subject key identifier:   D0:16:2D:44:F2:9B:C9:33:13:BD:30:36:4B:FE:B5:8E:8C:63:D4:1C
Certificate issuer:       /CN=E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64
Certificate serial:       7069B11BAD65E0B47F8FEB12EF70FE380374A753
Authority key identifier: E7:99:2D:D1:B2:52:5C:1F:90:08:B6:33:9B:9D:B3:ED:A6:E6:2E:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135362e302f32322d3232203d3e203532373732.roa
Signing time:             Sat 31 Aug 2024 14:13:08 +0000
ROA not before:           Sat 31 Aug 2024 14:08:08 +0000
ROA not after:            Sat 30 Aug 2025 14:13:08 +0000
asID:                     52772
IP address blocks:        177.39.156.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.crl
                          rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:14:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:69:b1:1b:ad:65:e0:b4:7f:8f:eb:12:ef:70:fe:38:03:74:a7:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64
        Validity
            Not Before: Aug 31 14:08:08 2024 GMT
            Not After : Aug 30 14:13:08 2025 GMT
        Subject: CN=D0162D44F29BC93313BD30364BFEB58E8C63D41C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:95:70:48:69:b7:c4:39:df:2e:fe:71:ca:ed:
                    8c:2b:e2:99:57:d5:66:f5:ca:8f:4a:8b:89:ee:1d:
                    36:68:f4:07:cb:81:66:35:9d:9b:d9:ab:37:6e:95:
                    0a:2f:35:a7:38:41:a4:46:24:88:89:a5:df:0c:6a:
                    a6:3a:9f:6c:b6:e3:70:c7:d1:e0:ef:4d:1f:de:24:
                    fe:15:12:25:57:51:f6:0d:01:2e:64:aa:2c:87:67:
                    30:15:5d:27:49:ce:bd:11:61:20:b1:15:2c:c7:81:
                    ac:63:8c:5d:ac:0a:4d:b5:64:9d:38:fe:aa:5b:b3:
                    e8:f5:2d:78:0e:4d:7d:1c:2e:ed:51:3f:ca:f4:50:
                    2f:00:ce:27:9b:eb:75:5f:78:73:55:93:08:9d:15:
                    55:a5:06:dd:f5:bc:d2:92:14:fd:39:08:b9:2a:15:
                    84:ad:09:6d:8a:a9:61:06:68:5b:c7:22:8d:36:fb:
                    fe:de:a6:c4:1e:99:91:0d:0b:43:e9:2b:34:af:8e:
                    38:da:3a:90:04:61:2c:37:0a:09:6d:ac:23:95:18:
                    a9:5a:9d:c0:1e:90:6a:5a:23:61:48:5c:7c:9a:92:
                    ed:c5:bb:9e:b0:1e:df:12:14:97:27:95:a7:fb:f2:
                    2e:d7:65:02:a4:89:f0:86:0f:68:ba:c1:91:6d:a4:
                    4e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:16:2D:44:F2:9B:C9:33:13:BD:30:36:4B:FE:B5:8E:8C:63:D4:1C
            X509v3 Authority Key Identifier:
                keyid:E7:99:2D:D1:B2:52:5C:1F:90:08:B6:33:9B:9D:B3:ED:A6:E6:2E:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135362e302f32322d3232203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:69:e9:b5:3f:f3:6b:b4:6c:d9:5c:c5:ed:6a:8a:36:4a:5e:
         18:05:55:30:96:e0:52:9e:56:09:da:1c:5f:2c:37:7c:29:6c:
         79:26:1c:c9:0d:20:b0:db:fc:5f:d6:5d:4d:84:ac:87:33:40:
         18:15:c1:b8:87:7f:b2:55:a8:15:b3:d6:3b:50:20:0e:8a:c3:
         73:3e:93:0f:9c:e1:78:5a:e4:da:8b:09:d5:3d:61:5f:03:b4:
         a5:b9:44:06:bd:cf:66:55:9e:59:73:df:65:50:07:1b:03:dc:
         74:ff:10:a5:f9:ea:98:92:84:b7:2e:57:af:f4:e9:7b:bf:eb:
         80:ed:ce:10:59:9f:f3:30:2d:df:de:52:ba:c8:f2:0f:8a:da:
         24:c4:c5:6d:7d:61:df:d4:42:89:db:8a:11:f4:83:67:e1:e6:
         eb:8f:bd:5c:f9:98:6f:14:8c:56:b1:7e:8a:8e:7e:15:53:78:
         5d:eb:92:31:52:7c:31:63:95:86:d1:a8:6b:41:f3:84:6b:72:
         39:fe:19:8d:a5:10:a4:32:4e:64:b7:85:a2:ab:19:e4:06:4e:
         26:c5:44:b8:ba:3b:6d:4e:40:9e:e6:12:64:0f:49:cd:00:6e:
         bf:24:9c:4b:ce:55:44:bd:d9:16:ea:a5:ea:50:f2:1c:0b:d4:
         7f:0c:7e:b8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcGmxG61l4LR/j+sS73D+OAN0p1MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc5OTJERDFCMjUyNUMxRjkwMDhCNjMzOUI5REIzRURB
NkU2MkU2NDAeFw0yNDA4MzExNDA4MDhaFw0yNTA4MzAxNDEzMDhaMDMxMTAvBgNV
BAMTKEQwMTYyRDQ0RjI5QkM5MzMxM0JEMzAzNjRCRkVCNThFOEM2M0Q0MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMlXBIabfEOd8u/nHK7Ywr4plX
1Wb1yo9Ki4nuHTZo9AfLgWY1nZvZqzdulQovNac4QaRGJIiJpd8MaqY6n2y243DH
0eDvTR/eJP4VEiVXUfYNAS5kqiyHZzAVXSdJzr0RYSCxFSzHgaxjjF2sCk21ZJ04
/qpbs+j1LXgOTX0cLu1RP8r0UC8Azieb63VfeHNVkwidFVWlBt31vNKSFP05CLkq
FYStCW2KqWEGaFvHIo02+/7epsQemZENC0PpKzSvjjjaOpAEYSw3CgltrCOVGKla
ncAekGpaI2FIXHyaku3Fu56wHt8SFJcnlaf78i7XZQKkifCGD2i6wZFtpE7PAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU0BYtRPKbyTMTvTA2S/61joxj1BwwHwYDVR0j
BBgwFoAU55kt0bJSXB+QCLYzm52z7abmLmQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDN4NHB3cmprSHY4Mm0xZ3hUS25wdjhKNXg0U0NKZk1iVUt5TldpUGR4
VGYvMC9FNzk5MkREMUIyNTI1QzFGOTAwOEI2MzM5QjlEQjNFREE2RTYyRTY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3OTkyREQxQjI1MjVDMUY5
MDA4QjYzMzlCOURCM0VEQTZFNjJFNjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QzeDRwd3Jqa0h2ODJtMWd4VEtucHY4SjV4NFNDSmZNYlVLeU5XaVBkeFRmLzAv
MzEzNzM3MmUzMzM5MmUzMTM1MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTMy
MzczNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsSecMA0GCSqGSIb3DQEBCwUAA4IBAQBqaem1P/Nr
tGzZXMXtaoo2Sl4YBVUwluBSnlYJ2hxfLDd8KWx5JhzJDSCw2/xf1l1NhKyHM0AY
FcG4h3+yVagVs9Y7UCAOisNzPpMPnOF4WuTaiwnVPWFfA7SluUQGvc9mVZ5Zc99l
UAcbA9x0/xCl+eqYkoS3Llev9Ol7v+uA7c4QWZ/zMC3f3lK6yPIPitokxMVtfWHf
1EKJ24oR9INn4ebrj71c+ZhvFIxWsX6Kjn4VU3hd65IxUnwxY5WG0ahrQfOEa3I5
/hmNpRCkMk5kt4WiqxnkBk4mxUS4ujttTkCe5hJkD0nNAG6/JJxLzlVEvdkW6qXq
UPIcC9R/DH64
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:50 2024 by rpki-client on console-fra.rpki-client.org