Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3137372e3233342e3134342e302f32302d3234203d3e203533303535.roa
File:                     3137372e3233342e3134342e302f32302d3234203d3e203533303535.roa (raw, json)
Hash identifier:          slEce58ssMvOAGUOAMN1g7VMDPXpxbG3zQubwFyAJaQ=
Subject key identifier:   70:48:B6:81:CF:75:87:D3:B2:7C:E5:51:27:97:07:A5:B8:0C:91:2E
Certificate issuer:       /CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
Certificate serial:       741521D10D48C7F2446F65DFE15CC7D213895BDD
Authority key identifier: A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3137372e3233342e3134342e302f32302d3234203d3e203533303535.roa
Signing time:             Wed 03 Apr 2024 20:20:28 +0000
ROA not before:           Wed 03 Apr 2024 20:15:28 +0000
ROA not after:            Wed 02 Apr 2025 20:20:28 +0000
asID:                     53055
IP address blocks:        177.234.144.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl
                          rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:15:21:d1:0d:48:c7:f2:44:6f:65:df:e1:5c:c7:d2:13:89:5b:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7ACFB4517623B0EA29CFE21AED99E020EC43239
        Validity
            Not Before: Apr  3 20:15:28 2024 GMT
            Not After : Apr  2 20:20:28 2025 GMT
        Subject: CN=7048B681CF7587D3B27CE551279707A5B80C912E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:15:03:7d:03:99:e0:27:b9:df:69:46:e3:76:
                    19:96:58:c9:ef:64:5c:29:7a:a0:da:49:b6:8e:f9:
                    fb:8f:d2:dc:27:a7:88:f5:c1:ba:ac:1e:6a:d0:fc:
                    a2:68:f1:79:dd:18:c6:67:83:12:1d:20:dc:b9:b2:
                    6c:02:0c:1d:0e:42:7d:4b:24:ff:5f:eb:78:ca:fa:
                    8e:8f:e6:63:08:c4:b1:e9:0b:54:2a:e6:f3:87:25:
                    37:a4:92:d9:21:75:91:8a:56:45:18:e5:8c:08:05:
                    29:82:ae:f6:b6:0c:48:c9:57:38:07:01:1e:17:a2:
                    c4:3b:1e:04:92:99:52:a5:0a:7f:7a:dd:91:d5:c9:
                    26:10:19:7d:e5:48:6a:74:c7:cb:a8:c6:1a:5e:f5:
                    bb:c7:ca:1b:7b:f5:ec:75:ea:ab:79:c4:e8:cc:60:
                    73:82:07:32:7d:9e:d8:cd:61:a7:0c:04:9f:f8:dd:
                    87:08:42:38:cd:05:80:97:08:d9:c3:29:b3:72:23:
                    eb:7a:4e:a0:c9:e5:ef:a7:75:f9:50:0c:3e:17:5e:
                    82:31:f5:34:1d:7c:a6:8e:21:a9:58:86:06:d7:db:
                    27:e4:06:62:65:92:c4:86:5c:a4:71:2c:f8:6d:55:
                    80:f7:cc:06:bf:00:b3:e9:45:7a:e2:7b:46:2c:9e:
                    f0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:48:B6:81:CF:75:87:D3:B2:7C:E5:51:27:97:07:A5:B8:0C:91:2E
            X509v3 Authority Key Identifier:
                keyid:A7:AC:FB:45:17:62:3B:0E:A2:9C:FE:21:AE:D9:9E:02:0E:C4:32:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/A7ACFB4517623B0EA29CFE21AED99E020EC43239.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7ACFB4517623B0EA29CFE21AED99E020EC43239.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/2/3137372e3233342e3134342e302f32302d3234203d3e203533303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.234.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c7:1b:8c:99:a7:61:6d:0a:4b:da:47:62:4b:52:70:f5:fb:22:
         b6:2a:17:69:cc:67:5b:47:1b:db:64:17:ac:91:cb:25:ef:3c:
         67:10:f9:5e:c9:66:43:bb:d1:05:ee:38:e5:da:5e:10:a4:1e:
         ff:0e:8a:b6:c4:78:4a:4b:4d:1b:3f:e0:70:80:3d:40:25:68:
         ef:e4:0b:06:3e:db:4e:a8:ba:e8:87:ba:cf:31:40:ff:86:13:
         7f:3c:c4:db:dc:da:bc:63:12:8a:20:07:5e:54:f5:1a:8a:55:
         c7:38:3b:70:1c:11:77:4d:81:73:6e:c0:d2:85:dd:33:2e:9f:
         77:9b:29:81:fd:d9:b1:c8:50:bf:81:16:2d:32:1f:6f:ac:61:
         5c:85:e2:f8:af:f0:75:04:a9:d3:0c:0c:90:e7:9b:71:72:76:
         85:70:60:31:13:d6:31:00:d1:73:bb:a5:69:21:a0:c4:ce:44:
         78:72:08:f5:0f:24:9a:87:c6:cc:7e:f8:62:64:c4:56:4e:41:
         18:da:1e:30:3b:01:b6:f9:3b:2d:57:d7:a5:5e:2b:21:46:9d:
         8f:f9:8e:c1:bd:33:f9:6c:61:1d:b1:6b:da:ce:6c:7f:a3:74:
         bc:7d:05:ba:9d:58:8d:81:a0:a0:9e:13:4e:9e:a6:00:fc:bd:
         71:8b:1b:c4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdBUh0Q1Ix/JEb2Xf4VzH0hOJW90wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTdBQ0ZCNDUxNzYyM0IwRUEyOUNGRTIxQUVEOTlFMDIw
RUM0MzIzOTAeFw0yNDA0MDMyMDE1MjhaFw0yNTA0MDIyMDIwMjhaMDMxMTAvBgNV
BAMTKDcwNDhCNjgxQ0Y3NTg3RDNCMjdDRTU1MTI3OTcwN0E1QjgwQzkxMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMFQN9A5ngJ7nfaUbjdhmWWMnv
ZFwpeqDaSbaO+fuP0twnp4j1wbqsHmrQ/KJo8XndGMZngxIdINy5smwCDB0OQn1L
JP9f63jK+o6P5mMIxLHpC1Qq5vOHJTekktkhdZGKVkUY5YwIBSmCrva2DEjJVzgH
AR4XosQ7HgSSmVKlCn963ZHVySYQGX3lSGp0x8uoxhpe9bvHyht79ex16qt5xOjM
YHOCBzJ9ntjNYacMBJ/43YcIQjjNBYCXCNnDKbNyI+t6TqDJ5e+ndflQDD4XXoIx
9TQdfKaOIalYhgbX2yfkBmJlksSGXKRxLPhtVYD3zAa/ALPpRXrie0YsnvANAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcEi2gc91h9OyfOVRJ5cHpbgMkS4wHwYDVR0j
BBgwFoAUp6z7RRdiOw6inP4hrtmeAg7EMjkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR21WOGNDcWt6NDllQWhHaEVnUEJhYXZ4Q1cyWkRnRWlFWnpmWm11SlBD
V0wvMi9BN0FDRkI0NTE3NjIzQjBFQTI5Q0ZFMjFBRUQ5OUUwMjBFQzQzMjM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E3QUNGQjQ1MTc2MjNCMEVB
MjlDRkUyMUFFRDk5RTAyMEVDNDMyMzkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dtVjhjQ3FrejQ5ZUFoR2hFZ1BCYWF2eENXMlpEZ0VpRVp6ZlptdUpQQ1dMLzIv
MzEzNzM3MmUzMjMzMzQyZTMxMzQzNDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDM1
MzMzMDM1MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASx6pAwDQYJKoZIhvcNAQELBQADggEBAMcbjJmn
YW0KS9pHYktScPX7IrYqF2nMZ1tHG9tkF6yRyyXvPGcQ+V7JZkO70QXuOOXaXhCk
Hv8OirbEeEpLTRs/4HCAPUAlaO/kCwY+206ouuiHus8xQP+GE388xNvc2rxjEoog
B15U9RqKVcc4O3AcEXdNgXNuwNKF3TMun3ebKYH92bHIUL+BFi0yH2+sYVyF4viv
8HUEqdMMDJDnm3FydoVwYDET1jEA0XO7pWkhoMTORHhyCPUPJJqHxsx++GJkxFZO
QRjaHjA7Abb5Oy1X16VeKyFGnY/5jsG9M/lsYR2xa9rObH+jdLx9BbqdWI2BoKCe
E06epgD8vXGLG8Q=
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:12 2024 by rpki-client on console-ams.rpki-client.org