Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/3137372e38342e3136302e302f32312d3234203d3e20323632353839.roa
File:                     3137372e38342e3136302e302f32312d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          1+13WIEC2e8wBL28CDCCGecVTTZOYMZowhM9MR3SfgU=
Subject key identifier:   5A:CF:20:21:E6:E5:C6:84:7D:E0:63:E4:E9:63:03:2B:E3:06:90:6A
Certificate issuer:       /CN=BACB501EDCAB377D2343D4379062CDF97EA26F66
Certificate serial:       66D088E18710031AFFAF974C36B0159D30B82A36
Authority key identifier: BA:CB:50:1E:DC:AB:37:7D:23:43:D4:37:90:62:CD:F9:7E:A2:6F:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/3137372e38342e3136302e302f32312d3234203d3e20323632353839.roa
Signing time:             Fri 05 Apr 2024 03:32:32 +0000
ROA not before:           Fri 05 Apr 2024 03:27:32 +0000
ROA not after:            Fri 04 Apr 2025 03:32:32 +0000
asID:                     262589
IP address blocks:        177.84.160.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:d0:88:e1:87:10:03:1a:ff:af:97:4c:36:b0:15:9d:30:b8:2a:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BACB501EDCAB377D2343D4379062CDF97EA26F66
        Validity
            Not Before: Apr  5 03:27:32 2024 GMT
            Not After : Apr  4 03:32:32 2025 GMT
        Subject: CN=5ACF2021E6E5C6847DE063E4E963032BE306906A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f1:13:32:cd:79:e9:e9:43:bd:db:55:98:6e:
                    fd:f5:19:64:11:5a:d1:f0:03:2f:1e:76:f4:c6:a0:
                    56:8c:7a:25:09:4e:69:88:41:83:b0:3d:b3:1d:c5:
                    ac:ea:8f:fa:24:55:c8:a2:55:1b:78:5d:c2:8e:39:
                    66:0f:b2:07:90:cd:29:eb:ef:05:c0:e9:5f:3b:6a:
                    d5:43:a3:7f:82:8b:46:66:80:2b:09:8d:a3:f9:f6:
                    87:44:c1:9d:29:7c:95:43:66:52:d4:55:8a:85:cb:
                    af:05:51:65:c0:c3:33:48:10:2a:62:fc:5c:55:5f:
                    9c:3d:d4:b8:64:3b:9e:a7:f2:35:f0:dd:37:16:4f:
                    03:3b:4a:9d:e4:71:46:74:07:a3:47:5a:af:51:ea:
                    ea:d9:be:67:df:cc:21:ca:ee:13:9a:3c:de:21:e9:
                    50:7e:30:c9:1d:3c:6c:8e:b4:00:4f:54:b1:ec:3b:
                    39:84:d8:a6:2f:ca:62:13:16:a3:ef:92:dd:67:39:
                    ee:a7:93:cc:99:94:39:83:26:a8:05:60:3d:39:52:
                    ae:e4:b3:27:37:4b:bc:96:86:82:d4:72:03:4b:90:
                    61:8f:25:58:b7:35:0d:41:c3:d8:72:e9:fe:ba:d4:
                    ba:03:a6:b7:db:45:e9:1a:da:86:9b:b5:3a:30:89:
                    3b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:CF:20:21:E6:E5:C6:84:7D:E0:63:E4:E9:63:03:2B:E3:06:90:6A
            X509v3 Authority Key Identifier:
                keyid:BA:CB:50:1E:DC:AB:37:7D:23:43:D4:37:90:62:CD:F9:7E:A2:6F:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BACB501EDCAB377D2343D4379062CDF97EA26F66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/1/3137372e38342e3136302e302f32312d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         06:e3:f7:d2:78:c6:35:a2:1d:0f:d1:7d:16:57:91:d7:a1:dc:
         e3:46:51:25:cd:ae:82:b1:6d:20:44:51:87:59:fe:76:a3:44:
         b7:39:1c:e4:ea:60:50:0b:75:10:93:95:fb:eb:fa:e8:ff:ca:
         f3:5f:8f:a5:54:18:c3:2d:5e:30:c3:23:a0:c5:7c:f1:87:2a:
         90:ae:76:8e:6b:97:0d:59:11:d8:ec:55:a0:1e:9a:e2:af:12:
         e4:f6:7c:c8:5c:e2:65:54:6a:6b:75:1e:a4:6d:e9:45:96:a0:
         b7:ba:2d:84:51:8f:ea:78:57:fc:17:dd:ca:78:f9:5f:21:b8:
         c1:7f:4d:e7:3a:07:d8:fa:09:86:71:3c:de:63:b6:c8:d2:f2:
         c9:4b:27:99:04:c1:8f:f0:cd:9d:8b:9f:cc:53:8c:a7:81:28:
         60:c3:16:cc:42:e1:e6:c0:56:56:4e:0a:ef:b7:be:98:24:67:
         6e:80:92:31:f5:06:18:7a:4a:ea:e2:81:14:2f:1b:23:49:c9:
         79:52:e7:f2:be:eb:2c:9a:37:20:8e:9e:fa:37:a1:f6:38:29:
         dd:ce:94:86:c4:d2:86:32:90:13:97:a8:61:6f:3c:f8:21:4d:
         69:5d:a0:31:f4:54:19:c7:ad:c2:f9:6e:90:23:93:70:7d:31:
         51:5d:77:9c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZtCI4YcQAxr/r5dMNrAVnTC4KjYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFDQjUwMUVEQ0FCMzc3RDIzNDNENDM3OTA2MkNERjk3
RUEyNkY2NjAeFw0yNDA0MDUwMzI3MzJaFw0yNTA0MDQwMzMyMzJaMDMxMTAvBgNV
BAMTKDVBQ0YyMDIxRTZFNUM2ODQ3REUwNjNFNEU5NjMwMzJCRTMwNjkwNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE8RMyzXnp6UO921WYbv31GWQR
WtHwAy8edvTGoFaMeiUJTmmIQYOwPbMdxazqj/okVciiVRt4XcKOOWYPsgeQzSnr
7wXA6V87atVDo3+Ci0ZmgCsJjaP59odEwZ0pfJVDZlLUVYqFy68FUWXAwzNIECpi
/FxVX5w91LhkO56n8jXw3TcWTwM7Sp3kcUZ0B6NHWq9R6urZvmffzCHK7hOaPN4h
6VB+MMkdPGyOtABPVLHsOzmE2KYvymITFqPvkt1nOe6nk8yZlDmDJqgFYD05Uq7k
syc3S7yWhoLUcgNLkGGPJVi3NQ1Bw9hy6f661LoDprfbReka2oabtTowiTt5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUWs8gIeblxoR94GPk6WMDK+MGkGowHwYDVR0j
BBgwFoAUustQHtyrN30jQ9Q3kGLN+X6ib2YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTJOdXNSMmlqdzZHM1lOaU1FRjMzM01Sa29EVERiV2dneDdZS2ZWcmZV
bXcvMS9CQUNCNTAxRURDQUIzNzdEMjM0M0Q0Mzc5MDYyQ0RGOTdFQTI2RjY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBQ0I1MDFFRENBQjM3N0Qy
MzQzRDQzNzkwNjJDREY5N0VBMjZGNjYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0UyTnVzUjJpanc2RzNZTmlNRUYzMzNNUmtvRFREYldnZ3g3WUtmVnJmVW13LzEv
MzEzNzM3MmUzODM0MmUzMTM2MzAyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNTM4Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOxVKAwDQYJKoZIhvcNAQELBQADggEBAAbj99J4
xjWiHQ/RfRZXkdeh3ONGUSXNroKxbSBEUYdZ/najRLc5HOTqYFALdRCTlfvr+uj/
yvNfj6VUGMMtXjDDI6DFfPGHKpCudo5rlw1ZEdjsVaAemuKvEuT2fMhc4mVUamt1
HqRt6UWWoLe6LYRRj+p4V/wX3cp4+V8huMF/Tec6B9j6CYZxPN5jtsjS8slLJ5kE
wY/wzZ2Ln8xTjKeBKGDDFsxC4ebAVlZOCu+3vpgkZ26AkjH1Bhh6SurigRQvGyNJ
yXlS5/K+6yyaNyCOnvo3ofY4Kd3OlIbE0oYykBOXqGFvPPghTWldoDH0VBnHrcL5
bpAjk3B9MVFdd5w=
-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:26 2024 by rpki-client on console-ams.rpki-client.org