Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3137372e38352e3233342e302f32332d3233203d3e20323632363137.roa
File:                     3137372e38352e3233342e302f32332d3233203d3e20323632363137.roa (raw, json)
Hash identifier:          w1HjZYu6uNMv5vgN84L4uebsaFzFx5lW8BNrZIxGkgs=
Subject key identifier:   03:C0:CE:A9:FF:4D:FF:70:9F:68:6D:E1:F6:48:36:97:5C:69:BA:4F
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       3EF615CB5E9D67EF3D1FCC95D192B58DEA666073
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3137372e38352e3233342e302f32332d3233203d3e20323632363137.roa
Signing time:             Wed 03 Apr 2024 19:48:32 +0000
ROA not before:           Wed 03 Apr 2024 19:43:32 +0000
ROA not after:            Wed 02 Apr 2025 19:48:32 +0000
asID:                     262617
IP address blocks:        177.85.234.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl
                          rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f6:15:cb:5e:9d:67:ef:3d:1f:cc:95:d1:92:b5:8d:ea:66:60:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Apr  3 19:43:32 2024 GMT
            Not After : Apr  2 19:48:32 2025 GMT
        Subject: CN=03C0CEA9FF4DFF709F686DE1F64836975C69BA4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fa:be:9b:ee:70:ca:fa:17:7a:46:37:f3:db:
                    7f:e5:ec:09:ae:94:b4:b9:c2:b0:10:20:b0:7a:18:
                    d3:42:4a:55:77:95:1e:a6:2c:1f:65:cc:35:75:26:
                    1e:40:8f:a7:8f:a9:4c:d1:6b:09:61:2a:c7:9a:82:
                    24:62:c0:b5:a4:c5:d4:64:ef:1b:e8:9e:fd:f7:23:
                    2e:88:a2:83:13:cd:21:b0:17:c0:60:75:64:6f:05:
                    60:ee:0b:d1:53:31:a6:46:04:ba:17:c9:62:31:6c:
                    2f:0e:9c:26:63:23:72:c9:38:bd:09:11:0a:28:28:
                    ff:4b:5a:7a:0b:3f:73:bb:3e:83:c3:6c:a6:86:31:
                    22:54:b0:b8:27:20:1f:c7:94:62:78:78:c9:5a:af:
                    47:d7:b3:c7:7c:46:ad:c4:cf:df:fb:79:78:40:f3:
                    f0:0d:59:47:46:26:38:17:52:1b:75:f2:f9:a2:60:
                    8a:7d:4a:96:68:a5:aa:7f:b8:bd:35:2e:d9:46:2b:
                    07:2a:aa:56:3f:96:3c:8d:70:bd:22:4d:b6:77:9c:
                    00:df:0c:5e:7d:70:23:85:c7:13:e7:1c:ec:6b:8d:
                    dc:a3:91:8c:81:f9:d6:ca:f6:7f:99:01:1c:1f:af:
                    12:7e:4b:21:4b:34:34:41:d9:11:ef:5b:8d:0b:9a:
                    d0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C0:CE:A9:FF:4D:FF:70:9F:68:6D:E1:F6:48:36:97:5C:69:BA:4F
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/3137372e38352e3233342e302f32332d3233203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:4e:a1:fe:89:2e:2f:3e:1e:b7:8a:33:e6:69:a8:cb:5b:ee:
         48:e5:45:66:3d:3c:3e:c4:de:f6:8f:55:6b:37:56:89:09:37:
         a7:72:32:ac:df:7b:1d:68:4c:56:95:3b:28:9c:1d:7d:6b:b1:
         ce:f8:2e:84:cb:8f:e2:29:64:b2:18:28:e0:3b:ac:24:dd:30:
         f2:0e:51:5d:ad:89:11:c0:7b:26:fa:bc:ea:26:36:2e:3f:69:
         e7:8d:01:0b:25:6c:2e:38:73:cc:d7:41:0b:2a:7e:6e:4b:64:
         bb:af:a4:e2:d5:a0:f1:21:99:ce:3e:c3:63:e0:d3:88:ce:48:
         3d:ba:70:74:f6:58:ef:bc:5b:40:b0:70:f6:d8:b8:8d:4c:77:
         f4:2d:ab:fd:d0:be:b4:96:8c:ee:1b:99:16:30:ad:65:5b:59:
         cd:c7:36:e8:f4:fa:3a:9d:2f:77:4f:92:b7:ef:97:1d:aa:88:
         30:8c:2e:50:22:16:1e:2e:0d:34:b7:0b:21:6b:11:2f:eb:88:
         bb:de:0b:da:77:06:78:c1:3a:55:9f:22:4f:06:10:71:88:75:
         46:2e:46:16:4f:46:2a:47:a5:7b:0d:23:9f:6b:fa:aa:b2:7c:
         3a:76:c6:3d:dc:89:62:c6:db:82:6e:ce:10:fc:43:9f:92:6b:
         9e:39:0e:21
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPvYVy16dZ+89H8yV0ZK1jepmYHMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDAwNzhEMkI1Nzg5ODI2NjNFRkU5MUZDNEI1Mzk3QzQ4
NDAzRTJFNDAeFw0yNDA0MDMxOTQzMzJaFw0yNTA0MDIxOTQ4MzJaMDMxMTAvBgNV
BAMTKDAzQzBDRUE5RkY0REZGNzA5RjY4NkRFMUY2NDgzNjk3NUM2OUJBNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh+r6b7nDK+hd6Rjfz23/l7Amu
lLS5wrAQILB6GNNCSlV3lR6mLB9lzDV1Jh5Aj6ePqUzRawlhKseagiRiwLWkxdRk
7xvonv33Iy6IooMTzSGwF8BgdWRvBWDuC9FTMaZGBLoXyWIxbC8OnCZjI3LJOL0J
EQooKP9LWnoLP3O7PoPDbKaGMSJUsLgnIB/HlGJ4eMlar0fXs8d8Rq3Ez9/7eXhA
8/ANWUdGJjgXUht18vmiYIp9SpZopap/uL01LtlGKwcqqlY/ljyNcL0iTbZ3nADf
DF59cCOFxxPnHOxrjdyjkYyB+dbK9n+ZARwfrxJ+SyFLNDRB2RHvW40LmtAxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUA8DOqf9N/3CfaG3h9kg2l1xpuk8wHwYDVR0j
BBgwFoAUAAeNK1eJgmY+/pH8S1OXxIQD4uQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGtRRXQ3OHc0dldEUFpXQkp0WXFKdzZ3NGJTWFA0ekM4S2lnZDFwb2NI
azUvMS8wMDA3OEQyQjU3ODk4MjY2M0VGRTkxRkM0QjUzOTdDNDg0MDNFMkU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwMDc4RDJCNTc4OTgyNjYz
RUZFOTFGQzRCNTM5N0M0ODQwM0UyRTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RrUUV0Nzh3NHZXRFBaV0JKdFlxSnc2dzRiU1hQNHpDOEtpZ2QxcG9jSGs1LzEv
MzEzNzM3MmUzODM1MmUzMjMzMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzNjMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxVeowDQYJKoZIhvcNAQELBQADggEBAJROof6J
Li8+HreKM+ZpqMtb7kjlRWY9PD7E3vaPVWs3VokJN6dyMqzfex1oTFaVOyicHX1r
sc74LoTLj+IpZLIYKOA7rCTdMPIOUV2tiRHAeyb6vOomNi4/aeeNAQslbC44c8zX
QQsqfm5LZLuvpOLVoPEhmc4+w2Pg04jOSD26cHT2WO+8W0CwcPbYuI1Md/Qtq/3Q
vrSWjO4bmRYwrWVbWc3HNuj0+jqdL3dPkrfvlx2qiDCMLlAiFh4uDTS3CyFrES/r
iLveC9p3BnjBOlWfIk8GEHGIdUYuRhZPRipHpXsNI59r+qqyfDp2xj3ciWLG24Ju
zhD8Q5+Sa545DiE=
-----END CERTIFICATE-----
Generated at Sat Sep 28 07:56:08 2024 by rpki-client on console-fra.rpki-client.org