Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/3137372e3139302e3137332e302f32342d3234203d3e20323633343539.roa
File:                     3137372e3139302e3137332e302f32342d3234203d3e20323633343539.roa (raw, json)
Hash identifier:          kU/0buuDB72DqrHjg1kkWgn3iHECiEupH6hogELqLAg=
Subject key identifier:   12:2F:70:95:72:DB:16:73:B1:7A:62:53:85:57:2A:B7:11:48:8D:15
Certificate issuer:       /CN=1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E
Certificate serial:       79612D02F7C50985CAA378B8318994D142DDFB1C
Authority key identifier: 1F:0D:02:1C:F2:5E:5F:3E:38:DA:B4:5D:EE:DD:26:D6:61:CF:E7:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/3137372e3139302e3137332e302f32342d3234203d3e20323633343539.roa
Signing time:             Fri 06 Sep 2024 12:52:47 +0000
ROA not before:           Fri 06 Sep 2024 12:47:47 +0000
ROA not after:            Fri 05 Sep 2025 12:52:47 +0000
asID:                     263459
IP address blocks:        177.190.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E.crl
                          rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:21:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:61:2d:02:f7:c5:09:85:ca:a3:78:b8:31:89:94:d1:42:dd:fb:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E
        Validity
            Not Before: Sep  6 12:47:47 2024 GMT
            Not After : Sep  5 12:52:47 2025 GMT
        Subject: CN=122F709572DB1673B17A625385572AB711488D15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c4:3c:cf:1f:71:97:82:a0:b2:08:b2:31:55:
                    27:3c:83:2e:3e:d9:86:dc:2f:e6:56:bd:c3:96:bf:
                    46:14:56:74:26:c6:d4:1f:1e:62:16:57:57:4f:ec:
                    6d:09:e1:5f:9e:67:55:e2:d9:e7:9b:af:73:13:43:
                    28:da:de:17:a9:d5:4e:c0:de:42:9d:b9:86:1d:c1:
                    e8:43:48:c8:00:83:d2:1d:42:8b:82:6f:cd:46:c1:
                    ed:d7:52:e7:e8:54:c4:1c:54:66:a7:1f:e9:b0:2d:
                    ff:84:1c:a6:78:0e:25:c7:51:75:67:08:8f:3f:22:
                    8d:3f:a5:56:2b:0a:01:24:27:73:cb:cc:0b:1a:2d:
                    46:15:e5:ff:1e:b8:ee:1d:0e:28:98:6e:3f:12:b1:
                    e6:a4:68:38:d8:48:0a:1b:e5:11:e7:b5:c8:cb:26:
                    e1:e1:a1:12:74:b7:56:5d:50:0a:0c:ee:bd:7b:3f:
                    76:84:fe:b3:5a:29:bb:cf:03:5e:cd:23:a6:d9:8c:
                    3f:ad:42:df:31:97:93:8b:7d:d2:e9:a8:b3:ad:af:
                    13:7d:38:3b:ea:bc:90:7b:4c:5e:40:bf:0d:93:49:
                    e0:e7:37:15:10:8c:5f:f4:42:0e:2c:90:0e:b2:b7:
                    d9:64:a9:ba:79:2c:fa:0e:05:c8:dc:2a:eb:cc:40:
                    d5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2F:70:95:72:DB:16:73:B1:7A:62:53:85:57:2A:B7:11:48:8D:15
            X509v3 Authority Key Identifier:
                keyid:1F:0D:02:1C:F2:5E:5F:3E:38:DA:B4:5D:EE:DD:26:D6:61:CF:E7:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/3137372e3139302e3137332e302f32342d3234203d3e20323633343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:08:8a:74:32:6a:3e:e0:3a:be:61:db:0d:18:01:f9:1d:c0:
         cd:30:2e:d3:ea:b1:1d:f2:88:f6:af:b0:c0:f2:67:b2:99:a9:
         b6:ae:25:d8:98:ba:79:a4:23:6c:aa:07:a4:e6:89:75:56:74:
         ee:30:77:53:39:55:f8:a8:3a:19:aa:b6:d5:23:82:b6:91:c1:
         d2:51:13:88:75:4c:26:55:dc:5a:19:d5:d9:bc:61:16:66:07:
         d9:19:db:9d:44:7e:15:1d:26:e8:04:33:6f:7b:d6:0f:5b:a3:
         0a:e8:bc:6b:e9:4a:bc:08:1b:47:2d:2e:93:9b:cd:5e:7d:2a:
         75:77:45:73:77:a8:59:40:d5:c7:24:51:58:bb:01:f0:86:04:
         78:bb:fd:f0:0d:1b:e4:bc:57:94:57:42:86:5b:0f:8d:5a:0a:
         26:0f:57:45:23:1e:30:d7:2e:0a:68:55:f5:bb:ea:8a:81:93:
         f0:5b:f3:97:10:8b:af:f1:3d:99:a5:9a:f6:76:75:3d:f4:a1:
         7f:52:da:11:0d:59:88:1d:a1:43:01:97:5d:82:00:00:3e:d7:
         4d:82:63:07:04:74:1e:3b:e1:c5:30:fd:f9:b7:67:c1:d0:14:
         51:b5:e4:3e:2d:07:04:17:d0:83:55:c2:69:4d:40:bc:c7:ea:
         06:d5:18:b0
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUeWEtAvfFCYXKo3i4MYmU0ULd+xwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUYwRDAyMUNGMjVFNUYzRTM4REFCNDVERUVERDI2RDY2
MUNGRTc4RTAeFw0yNDA5MDYxMjQ3NDdaFw0yNTA5MDUxMjUyNDdaMDMxMTAvBgNV
BAMTKDEyMkY3MDk1NzJEQjE2NzNCMTdBNjI1Mzg1NTcyQUI3MTE0ODhEMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyxDzPH3GXgqCyCLIxVSc8gy4+
2YbcL+ZWvcOWv0YUVnQmxtQfHmIWV1dP7G0J4V+eZ1Xi2eebr3MTQyja3hep1U7A
3kKduYYdwehDSMgAg9IdQouCb81Gwe3XUufoVMQcVGanH+mwLf+EHKZ4DiXHUXVn
CI8/Io0/pVYrCgEkJ3PLzAsaLUYV5f8euO4dDiiYbj8SseakaDjYSAob5RHntcjL
JuHhoRJ0t1ZdUAoM7r17P3aE/rNaKbvPA17NI6bZjD+tQt8xl5OLfdLpqLOtrxN9
ODvqvJB7TF5Avw2TSeDnNxUQjF/0Qg4skA6yt9lkqbp5LPoOBcjcKuvMQNU9AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUEi9wlXLbFnOxemJThVcqtxFIjRUwHwYDVR0j
BBgwFoAUHw0CHPJeXz442rRd7t0m1mHP544wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRURybUNpaW9Kb0xzdVozTFE3dno3VDF0bTdCOEJ0VVpCTUtTU3JnaGt3
S1QvMC8xRjBEMDIxQ0YyNUU1RjNFMzhEQUI0NURFRUREMjZENjYxQ0ZFNzhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGMEQwMjFDRjI1RTVGM0Uz
OERBQjQ1REVFREQyNkQ2NjFDRkU3OEUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VEcm1DaWlvSm9Mc3VaM0xRN3Z6N1QxdG03QjhCdFVaQk1LU1NyZ2hrd0tULzAv
MzEzNzM3MmUzMTM5MzAyZTMxMzczMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM0MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALG+rTANBgkqhkiG9w0BAQsFAAOCAQEACQiK
dDJqPuA6vmHbDRgB+R3AzTAu0+qxHfKI9q+wwPJnspmptq4l2Ji6eaQjbKoHpOaJ
dVZ07jB3UzlV+Kg6Gaq21SOCtpHB0lETiHVMJlXcWhnV2bxhFmYH2RnbnUR+FR0m
6AQzb3vWD1ujCui8a+lKvAgbRy0uk5vNXn0qdXdFc3eoWUDVxyRRWLsB8IYEeLv9
8A0b5LxXlFdChlsPjVoKJg9XRSMeMNcuCmhV9bvqioGT8FvzlxCLr/E9maWa9nZ1
PfShf1LaEQ1ZiB2hQwGXXYIAAD7XTYJjBwR0HjvhxTD9+bdnwdAUUbXkPi0HBBfQ
g1XCaU1AvMfqBtUYsA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:43 2024 by rpki-client on console-fra.rpki-client.org