Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e34312e302f32342d3234203d3e20323632383839.roa
File:                     3137372e35342e34312e302f32342d3234203d3e20323632383839.roa (raw, json)
Hash identifier:          xADGVHKOnvvRvzpKuHVauadFFezcbCZjFfKr131GEGk=
Subject key identifier:   D7:39:E2:15:A1:9D:31:CF:DD:64:8C:59:6C:8D:AA:F6:67:DE:DA:42
Certificate issuer:       /CN=4FE6AF58040381D7FE22C26DEE4E74D736F409DD
Certificate serial:       2052D9F406CA0CE4B0387660E4F6FA992C0A9330
Authority key identifier: 4F:E6:AF:58:04:03:81:D7:FE:22:C2:6D:EE:4E:74:D7:36:F4:09:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e34312e302f32342d3234203d3e20323632383839.roa
Signing time:             Thu 04 Apr 2024 01:55:19 +0000
ROA not before:           Thu 04 Apr 2024 01:50:19 +0000
ROA not after:            Thu 03 Apr 2025 01:55:19 +0000
asID:                     262889
IP address blocks:        177.54.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.crl
                          rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:52:d9:f4:06:ca:0c:e4:b0:38:76:60:e4:f6:fa:99:2c:0a:93:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FE6AF58040381D7FE22C26DEE4E74D736F409DD
        Validity
            Not Before: Apr  4 01:50:19 2024 GMT
            Not After : Apr  3 01:55:19 2025 GMT
        Subject: CN=D739E215A19D31CFDD648C596C8DAAF667DEDA42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e0:7d:c9:55:d2:7a:53:75:df:c8:10:32:55:
                    b9:42:3a:24:1b:82:ff:ed:23:7c:8d:33:14:ae:43:
                    e6:42:46:c4:a9:71:3f:e5:22:33:10:6c:49:e8:91:
                    24:38:b7:80:e5:f1:d0:c7:91:29:e0:8d:00:9b:02:
                    9d:5b:72:98:e5:ab:c9:d2:61:1d:c2:e0:48:d0:ca:
                    f0:29:74:4b:82:85:c0:6c:52:6b:10:c9:68:b8:1a:
                    ca:45:42:79:58:8e:0d:2a:99:97:bd:a0:68:40:10:
                    b6:f6:ed:cc:23:98:14:b1:db:f3:bb:80:60:ca:be:
                    a1:16:ec:da:75:08:97:38:a3:42:b6:01:53:9f:30:
                    49:f9:fc:0d:6d:42:f0:c3:f7:38:98:4c:93:3e:20:
                    c2:90:51:c1:54:89:ed:1d:3d:c7:68:86:85:e8:88:
                    46:d8:9b:5f:9b:85:0a:ae:7a:26:07:6b:55:dd:13:
                    b1:81:9e:a6:e8:c4:e8:07:e7:f2:75:a9:d8:fd:7f:
                    55:31:e8:d1:9e:b9:cc:f2:f9:b9:85:07:fd:d4:1f:
                    54:08:03:26:15:9a:e8:42:2f:02:4f:9b:5e:45:6d:
                    4e:82:5a:8e:2e:43:4c:e9:31:59:04:9a:a6:fa:24:
                    3e:48:49:6e:6b:4b:25:35:d4:dd:58:03:32:fe:f0:
                    43:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:39:E2:15:A1:9D:31:CF:DD:64:8C:59:6C:8D:AA:F6:67:DE:DA:42
            X509v3 Authority Key Identifier:
                keyid:4F:E6:AF:58:04:03:81:D7:FE:22:C2:6D:EE:4E:74:D7:36:F4:09:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e34312e302f32342d3234203d3e20323632383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:7c:27:96:cb:e8:79:01:dc:fa:48:11:57:39:2f:7e:53:4b:
         8b:8a:bb:31:a6:65:5a:ed:1b:e0:2b:26:36:16:3b:a3:7e:68:
         04:22:a7:bf:be:74:9a:c3:27:eb:01:1f:81:74:db:18:92:e0:
         1c:c5:f8:48:b8:92:79:9c:18:cf:b7:93:fd:12:73:8b:18:b1:
         88:ab:e5:54:5f:27:be:18:4e:4d:03:92:8e:ca:92:a9:73:44:
         82:60:0f:83:da:e4:f7:c3:47:9a:9a:85:75:c9:da:7b:c4:27:
         3c:6e:22:f2:cc:49:29:2a:df:98:4e:03:ac:5b:3d:bb:36:91:
         19:ef:06:5c:66:e9:0e:71:ff:93:76:14:11:6a:8e:b0:0e:72:
         8f:c2:cc:e2:60:00:f6:0b:8f:cf:93:64:ed:f9:80:ac:0e:cb:
         4e:3a:b9:f9:0a:10:c3:d4:c2:76:55:1a:85:1c:8d:98:85:ec:
         38:92:36:23:73:4b:48:b5:28:1e:66:8a:c3:84:17:92:57:18:
         43:a1:cd:1c:39:0e:e2:2a:4f:ed:65:3e:0b:31:da:07:f9:a9:
         68:4c:87:67:65:02:6c:ac:a1:6c:da:ce:ff:5a:45:54:f7:14:
         b9:9c:72:57:d7:14:39:99:ba:7f:d9:96:ed:6a:4d:55:7f:db:
         3f:4d:38:11
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIFLZ9AbKDOSwOHZg5Pb6mSwKkzAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEZFNkFGNTgwNDAzODFEN0ZFMjJDMjZERUU0RTc0RDcz
NkY0MDlERDAeFw0yNDA0MDQwMTUwMTlaFw0yNTA0MDMwMTU1MTlaMDMxMTAvBgNV
BAMTKEQ3MzlFMjE1QTE5RDMxQ0ZERDY0OEM1OTZDOERBQUY2NjdERURBNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb4H3JVdJ6U3XfyBAyVblCOiQb
gv/tI3yNMxSuQ+ZCRsSpcT/lIjMQbEnokSQ4t4Dl8dDHkSngjQCbAp1bcpjlq8nS
YR3C4EjQyvApdEuChcBsUmsQyWi4GspFQnlYjg0qmZe9oGhAELb27cwjmBSx2/O7
gGDKvqEW7Np1CJc4o0K2AVOfMEn5/A1tQvDD9ziYTJM+IMKQUcFUie0dPcdohoXo
iEbYm1+bhQqueiYHa1XdE7GBnqboxOgH5/J1qdj9f1Ux6NGeuczy+bmFB/3UH1QI
AyYVmuhCLwJPm15FbU6CWo4uQ0zpMVkEmqb6JD5ISW5rSyU11N1YAzL+8EP3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU1zniFaGdMc/dZIxZbI2q9mfe2kIwHwYDVR0j
BBgwFoAUT+avWAQDgdf+IsJt7k501zb0Cd0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREVMejdNRFlvQ3pkaVQ1ZGVHQXBtam9kQURBMTlNclN2M0JSM3k5YUN6
Y0svMS80RkU2QUY1ODA0MDM4MUQ3RkUyMkMyNkRFRTRFNzRENzM2RjQwOURELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGRTZBRjU4MDQwMzgxRDdG
RTIyQzI2REVFNEU3NEQ3MzZGNDA5REQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RFTHo3TURZb0N6ZGlUNWRlR0FwbWpvZEFEQTE5TXJTdjNCUjN5OWFDemNLLzEv
MzEzNzM3MmUzNTM0MmUzNDMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzgzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsTYpMA0GCSqGSIb3DQEBCwUAA4IBAQBYfCeWy+h5
Adz6SBFXOS9+U0uLirsxpmVa7RvgKyY2FjujfmgEIqe/vnSawyfrAR+BdNsYkuAc
xfhIuJJ5nBjPt5P9EnOLGLGIq+VUXye+GE5NA5KOypKpc0SCYA+D2uT3w0eamoV1
ydp7xCc8biLyzEkpKt+YTgOsWz27NpEZ7wZcZukOcf+TdhQRao6wDnKPwsziYAD2
C4/Pk2Tt+YCsDstOOrn5ChDD1MJ2VRqFHI2Yhew4kjYjc0tItSgeZorDhBeSVxhD
oc0cOQ7iKk/tZT4LMdoH+aloTIdnZQJsrKFs2s7/WkVU9xS5nHJX1xQ5mbp/2Zbt
ak1Vf9s/TTgR
-----END CERTIFICATE-----
Generated at Sat Jun 29 00:11:02 2024 by rpki-client on console-fra.rpki-client.org