Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/1/3137372e37312e3130312e302f32342d3234203d3e20323731333336.roa
File:                     3137372e37312e3130312e302f32342d3234203d3e20323731333336.roa (raw, json)
Hash identifier:          rZBX1RpDLJ/fl8mu8ULU8+r8eXKPtaN9xY3ZsBNuv3E=
Subject key identifier:   D4:0E:7A:7D:75:21:0F:FE:CD:64:50:D5:0A:23:6C:F7:2F:5B:1B:EA
Certificate issuer:       /CN=49C6E5DC726A9743636DCFEAE81069B5EC97DEFC
Certificate serial:       7B1D596DA5BF6944F8F963E36C4AA46874532F18
Authority key identifier: 49:C6:E5:DC:72:6A:97:43:63:6D:CF:EA:E8:10:69:B5:EC:97:DE:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C6E5DC726A9743636DCFEAE81069B5EC97DEFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/1/3137372e37312e3130312e302f32342d3234203d3e20323731333336.roa
Signing time:             Thu 04 Apr 2024 01:17:31 +0000
ROA not before:           Thu 04 Apr 2024 01:12:31 +0000
ROA not after:            Thu 03 Apr 2025 01:17:31 +0000
asID:                     271336
IP address blocks:        177.71.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/1/49C6E5DC726A9743636DCFEAE81069B5EC97DEFC.crl
                          rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/1/49C6E5DC726A9743636DCFEAE81069B5EC97DEFC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C6E5DC726A9743636DCFEAE81069B5EC97DEFC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 09:53:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:1d:59:6d:a5:bf:69:44:f8:f9:63:e3:6c:4a:a4:68:74:53:2f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49C6E5DC726A9743636DCFEAE81069B5EC97DEFC
        Validity
            Not Before: Apr  4 01:12:31 2024 GMT
            Not After : Apr  3 01:17:31 2025 GMT
        Subject: CN=D40E7A7D75210FFECD6450D50A236CF72F5B1BEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:39:93:e3:b0:3f:5b:03:12:15:51:06:45:cb:
                    5f:33:97:3e:11:9d:08:2b:55:88:10:1d:ae:ff:aa:
                    82:aa:15:ce:ca:a3:b5:fd:47:bc:78:25:82:d0:ae:
                    96:94:38:b1:bc:69:b4:4d:a5:9d:1e:a6:37:b4:d6:
                    52:37:43:ed:7c:77:36:ca:c6:a8:4a:0b:23:b2:b3:
                    b8:9b:66:c4:50:fd:b1:f4:f6:03:12:72:7e:97:6c:
                    b4:28:24:4a:38:0d:40:a3:6f:6e:d4:f8:c2:34:5e:
                    76:2d:e3:1d:bb:dc:ad:46:5c:b3:b4:84:18:ed:12:
                    37:1a:2d:92:38:b1:c0:57:c9:fe:ec:77:bb:82:d1:
                    9a:32:c1:f6:58:06:1f:06:7e:c0:94:f0:1b:1d:f0:
                    79:0b:00:bc:95:b9:59:24:72:1c:85:42:87:53:7e:
                    7b:f4:3c:a0:82:cb:f5:70:06:a2:30:4a:82:76:d8:
                    5d:61:45:c6:05:76:b7:e0:d7:57:4b:67:aa:27:a4:
                    3d:4a:1a:99:73:20:c0:db:d5:a7:9a:d7:4f:c4:59:
                    8f:40:f2:4b:45:bd:bf:c3:6e:ff:67:f7:08:40:50:
                    ee:32:23:66:9a:09:8a:52:d4:89:18:8e:0a:ec:a6:
                    c0:33:7a:fe:9f:d8:41:c4:af:c0:d7:ed:8b:a9:2e:
                    c7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0E:7A:7D:75:21:0F:FE:CD:64:50:D5:0A:23:6C:F7:2F:5B:1B:EA
            X509v3 Authority Key Identifier:
                keyid:49:C6:E5:DC:72:6A:97:43:63:6D:CF:EA:E8:10:69:B5:EC:97:DE:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/1/49C6E5DC726A9743636DCFEAE81069B5EC97DEFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C6E5DC726A9743636DCFEAE81069B5EC97DEFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dm7iwbcRRyP9jnZXZ9kQisicLEp5xGDa9W5FsHjsGnKa/1/3137372e37312e3130312e302f32342d3234203d3e20323731333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:90:1b:ee:13:2a:28:53:1a:97:dc:1d:72:f2:1e:6c:9e:ad:
         21:31:f7:52:85:34:b1:f5:2f:3d:af:d7:f2:bb:32:a8:f7:c0:
         22:fc:33:34:40:39:c2:ee:a7:3e:24:54:20:a7:b4:c8:aa:65:
         8a:af:aa:e8:cc:1f:8d:a3:cf:39:b9:18:0a:82:7b:82:eb:14:
         21:8f:fb:25:fa:6c:34:70:31:e7:67:30:ce:03:2e:76:43:f6:
         97:f8:1c:56:98:ab:b1:d4:43:15:b5:16:ee:eb:1f:6a:d3:8d:
         53:0a:97:c3:2f:fe:bf:fe:24:be:a1:fa:01:61:11:e4:19:d3:
         11:cc:7a:e4:22:d2:91:92:37:b8:3c:08:d3:85:95:84:22:50:
         6d:a1:ea:05:8a:e2:db:66:38:70:b6:28:33:7c:ac:a3:b6:6f:
         89:eb:81:09:f8:36:1e:9f:af:00:be:6f:03:f2:34:2e:21:48:
         8a:33:68:0e:2c:1c:0f:9e:65:72:3e:c8:67:6a:c8:67:5d:81:
         c4:b1:e2:af:3c:ca:5c:27:41:35:6f:8c:87:ab:bd:88:52:64:
         f0:08:bd:20:9d:10:b8:8e:6f:ef:3f:c7:0a:ab:57:2e:37:68:
         05:28:60:85:0e:23:1a:2d:c0:ec:3e:15:9b:d3:84:aa:28:81:
         6c:77:d8:d8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUex1ZbaW/aUT4+WPjbEqkaHRTLxgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlDNkU1REM3MjZBOTc0MzYzNkRDRkVBRTgxMDY5QjVF
Qzk3REVGQzAeFw0yNDA0MDQwMTEyMzFaFw0yNTA0MDMwMTE3MzFaMDMxMTAvBgNV
BAMTKEQ0MEU3QTdENzUyMTBGRkVDRDY0NTBENTBBMjM2Q0Y3MkY1QjFCRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeOZPjsD9bAxIVUQZFy18zlz4R
nQgrVYgQHa7/qoKqFc7Ko7X9R7x4JYLQrpaUOLG8abRNpZ0epje01lI3Q+18dzbK
xqhKCyOys7ibZsRQ/bH09gMScn6XbLQoJEo4DUCjb27U+MI0XnYt4x273K1GXLO0
hBjtEjcaLZI4scBXyf7sd7uC0ZoywfZYBh8GfsCU8Bsd8HkLALyVuVkkchyFQodT
fnv0PKCCy/VwBqIwSoJ22F1hRcYFdrfg11dLZ6onpD1KGplzIMDb1aea10/EWY9A
8ktFvb/Dbv9n9whAUO4yI2aaCYpS1IkYjgrspsAzev6f2EHEr8DX7YupLsdvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU1A56fXUhD/7NZFDVCiNs9y9bG+owHwYDVR0j
BBgwFoAUScbl3HJql0Njbc/q6BBpteyX3vwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG03aXdiY1JSeVA5am5aWFo5a1Fpc2ljTEVwNXhHRGE5VzVGc0hqc0du
S2EvMS80OUM2RTVEQzcyNkE5NzQzNjM2RENGRUFFODEwNjlCNUVDOTdERUZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ5QzZFNURDNzI2QTk3NDM2
MzZEQ0ZFQUU4MTA2OUI1RUM5N0RFRkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RtN2l3YmNSUnlQOWpuWlhaOWtRaXNpY0xFcDV4R0RhOVc1RnNIanNHbkthLzEv
MzEzNzM3MmUzNzMxMmUzMTMwMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzMzMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxR2UwDQYJKoZIhvcNAQELBQADggEBAB+QG+4T
KihTGpfcHXLyHmyerSEx91KFNLH1Lz2v1/K7Mqj3wCL8MzRAOcLupz4kVCCntMiq
ZYqvqujMH42jzzm5GAqCe4LrFCGP+yX6bDRwMednMM4DLnZD9pf4HFaYq7HUQxW1
Fu7rH2rTjVMKl8Mv/r/+JL6h+gFhEeQZ0xHMeuQi0pGSN7g8CNOFlYQiUG2h6gWK
4ttmOHC2KDN8rKO2b4nrgQn4Nh6frwC+bwPyNC4hSIozaA4sHA+eZXI+yGdqyGdd
gcSx4q88ylwnQTVvjIervYhSZPAIvSCdELiOb+8/xwqrVy43aAUoYIUOIxotwOw+
FZvThKoogWx32Ng=
-----END CERTIFICATE-----
Generated at Fri Jun 28 13:25:17 2024 by rpki-client on console-ams.rpki-client.org