Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/3137372e3139302e3135362e302f32342d3234203d3e20323633343537.roa
File:                     3137372e3139302e3135362e302f32342d3234203d3e20323633343537.roa (raw, json)
Hash identifier:          UcY/DrbtLFoIu7HqqAMZnhIFMZKCdwsiAb7wL2DYCvI=
Subject key identifier:   97:B7:02:97:9A:05:E9:26:C5:6B:E6:7F:CB:AD:89:95:6C:E8:36:84
Certificate issuer:       /CN=D9B8C8035F469EEFCD42A52D48966057264B95C4
Certificate serial:       513E1EDD9943A3521B3526C805CED61E3922E3B2
Authority key identifier: D9:B8:C8:03:5F:46:9E:EF:CD:42:A5:2D:48:96:60:57:26:4B:95:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/3137372e3139302e3135362e302f32342d3234203d3e20323633343537.roa
Signing time:             Thu 04 Apr 2024 07:47:22 +0000
ROA not before:           Thu 04 Apr 2024 07:42:22 +0000
ROA not after:            Thu 03 Apr 2025 07:47:22 +0000
asID:                     263457
IP address blocks:        177.190.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.crl
                          rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:34:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:3e:1e:dd:99:43:a3:52:1b:35:26:c8:05:ce:d6:1e:39:22:e3:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9B8C8035F469EEFCD42A52D48966057264B95C4
        Validity
            Not Before: Apr  4 07:42:22 2024 GMT
            Not After : Apr  3 07:47:22 2025 GMT
        Subject: CN=97B702979A05E926C56BE67FCBAD89956CE83684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d8:20:43:ed:09:9b:59:e1:46:97:3d:ff:3a:
                    11:e7:b2:3d:d5:ad:18:cb:40:02:c4:4e:e7:fd:ec:
                    d0:fc:c3:7e:8a:1c:2b:9e:a9:13:8a:76:a4:41:62:
                    e6:88:d1:3f:9c:ea:be:56:17:43:ce:64:1f:ae:a5:
                    ed:ff:ed:9c:fc:ae:61:e7:eb:52:12:e6:a9:4e:9e:
                    8b:63:1c:5c:1a:5e:91:33:51:05:f4:4e:f7:d5:da:
                    ae:01:5c:ac:33:a4:e9:1b:8b:11:f1:f6:78:da:6e:
                    83:97:bb:ff:a8:82:db:9c:08:96:cd:91:55:1f:5e:
                    02:2b:6a:b9:e6:12:24:f6:31:4f:b8:43:c0:34:94:
                    7c:90:d8:99:42:89:d6:ac:84:d5:bd:7e:05:29:10:
                    b7:54:f1:bc:fc:6b:96:6c:2a:0c:28:bc:2d:39:d0:
                    6c:c5:53:41:16:54:25:6d:b5:74:40:d7:cd:06:6a:
                    95:24:80:68:d7:b9:1b:30:fb:76:39:17:d1:1a:e3:
                    e3:65:a5:9e:35:4f:cd:45:3f:8d:ae:f9:a1:44:22:
                    38:95:49:60:db:92:b9:c5:2b:4b:e0:ad:ba:6f:52:
                    fd:3d:af:16:03:96:9d:fd:65:f6:42:59:a2:d8:49:
                    21:57:7b:c1:4d:10:7b:a1:60:ec:a7:e7:e6:7d:bb:
                    76:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B7:02:97:9A:05:E9:26:C5:6B:E6:7F:CB:AD:89:95:6C:E8:36:84
            X509v3 Authority Key Identifier:
                keyid:D9:B8:C8:03:5F:46:9E:EF:CD:42:A5:2D:48:96:60:57:26:4B:95:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/3137372e3139302e3135362e302f32342d3234203d3e20323633343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:80:46:d0:e7:a5:f5:39:3f:c6:7f:af:27:69:98:5b:f3:c9:
         11:86:54:1a:4f:fa:8f:ab:c2:55:97:a4:5b:91:43:67:06:3e:
         8b:5b:c0:c3:f8:fa:2f:0d:e5:6a:f0:b8:a2:21:2b:53:53:d7:
         04:fa:c1:f8:d8:5a:d1:aa:b5:88:8b:8f:45:c3:9c:c7:17:c2:
         d6:eb:98:6f:3f:8a:f1:91:9c:bc:f2:b0:ef:60:d0:ba:80:28:
         d4:1c:20:3a:a9:b4:f1:ad:5a:22:5b:f6:c1:f1:37:ec:e9:f0:
         c2:41:7b:66:a9:fb:dd:86:e7:0e:2d:ee:17:c7:2d:20:8e:8e:
         67:25:39:9d:d0:f9:d0:6d:da:83:3c:71:37:c5:be:23:25:4a:
         2a:0e:71:c4:1d:98:2e:14:69:6e:b1:1e:b6:f3:c7:1b:f9:cc:
         0f:1f:e7:81:be:78:a9:34:f7:dd:6b:c1:a5:04:7b:63:4d:d5:
         80:a4:40:63:aa:10:06:a7:3a:0c:3b:34:ac:db:d6:d3:e6:5f:
         54:ad:85:8b:aa:10:e2:8b:f3:33:18:c3:64:9d:34:86:84:2a:
         6e:52:39:30:ed:67:dc:fe:3f:d1:ff:ce:07:19:c5:28:71:a8:
         a0:c0:ca:ba:f6:3c:8b:f7:b7:c2:ed:ab:2e:4d:48:e6:7f:0a:
         5a:66:5e:15
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUUT4e3ZlDo1IbNSbIBc7WHjki47IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDlCOEM4MDM1RjQ2OUVFRkNENDJBNTJENDg5NjYwNTcy
NjRCOTVDNDAeFw0yNDA0MDQwNzQyMjJaFw0yNTA0MDMwNzQ3MjJaMDMxMTAvBgNV
BAMTKDk3QjcwMjk3OUEwNUU5MjZDNTZCRTY3RkNCQUQ4OTk1NkNFODM2ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc2CBD7QmbWeFGlz3/OhHnsj3V
rRjLQALETuf97ND8w36KHCueqROKdqRBYuaI0T+c6r5WF0POZB+upe3/7Zz8rmHn
61IS5qlOnotjHFwaXpEzUQX0TvfV2q4BXKwzpOkbixHx9njaboOXu/+ogtucCJbN
kVUfXgIrarnmEiT2MU+4Q8A0lHyQ2JlCidashNW9fgUpELdU8bz8a5ZsKgwovC05
0GzFU0EWVCVttXRA180GapUkgGjXuRsw+3Y5F9Ea4+NlpZ41T81FP42u+aFEIjiV
SWDbkrnFK0vgrbpvUv09rxYDlp39ZfZCWaLYSSFXe8FNEHuhYOyn5+Z9u3YPAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUl7cCl5oF6SbFa+Z/y62JlWzoNoQwHwYDVR0j
BBgwFoAU2bjIA19Gnu/NQqUtSJZgVyZLlcQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTVBU0dzZ3ZHbVdMOGFyYndZZm9wRVUySnlOYWVOU2I5OU1kbjRhOGVx
bVgvMS9EOUI4QzgwMzVGNDY5RUVGQ0Q0MkE1MkQ0ODk2NjA1NzI2NEI5NUM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5QjhDODAzNUY0NjlFRUZD
RDQyQTUyRDQ4OTY2MDU3MjY0Qjk1QzQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U1QVNHc2d2R21XTDhhcmJ3WWZvcEVVMkp5TmFlTlNiOTlNZG40YThlcW1YLzEv
MzEzNzM3MmUzMTM5MzAyZTMxMzUzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM0MzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALG+nDANBgkqhkiG9w0BAQsFAAOCAQEAbIBG
0Oel9Tk/xn+vJ2mYW/PJEYZUGk/6j6vCVZekW5FDZwY+i1vAw/j6Lw3lavC4oiEr
U1PXBPrB+Nha0aq1iIuPRcOcxxfC1uuYbz+K8ZGcvPKw72DQuoAo1BwgOqm08a1a
Ilv2wfE37OnwwkF7Zqn73YbnDi3uF8ctII6OZyU5ndD50G3agzxxN8W+IyVKKg5x
xB2YLhRpbrEetvPHG/nMDx/ngb54qTT33WvBpQR7Y03VgKRAY6oQBqc6DDs0rNvW
0+ZfVK2Fi6oQ4ovzMxjDZJ00hoQqblI5MO1n3P4/0f/OBxnFKHGooMDKuvY8i/e3
wu2rLk1I5n8KWmZeFQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:36 2024 by rpki-client on console-fra.rpki-client.org