Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/1/3137372e38362e3135362e302f32322d3234203d3e20323633333234.roa
File:                     3137372e38362e3135362e302f32322d3234203d3e20323633333234.roa (raw, json)
Hash identifier:          b99uFXxhE1TEAPTmrOPwm1TfFMEe/Y+O9zlbfUWVN78=
Subject key identifier:   3C:3B:EE:F1:88:4F:2C:BB:F8:7C:AE:CD:C4:E6:B0:DA:5F:75:72:EA
Certificate issuer:       /CN=01364C396932D6F9D37D4E65B53FF5F1EF6CB2E2
Certificate serial:       535AB8FEFFE0932DDECCD0CD20C3C1F37F66388C
Authority key identifier: 01:36:4C:39:69:32:D6:F9:D3:7D:4E:65:B5:3F:F5:F1:EF:6C:B2:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01364C396932D6F9D37D4E65B53FF5F1EF6CB2E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/1/3137372e38362e3135362e302f32322d3234203d3e20323633333234.roa
Signing time:             Thu 04 Apr 2024 03:14:53 +0000
ROA not before:           Thu 04 Apr 2024 03:09:53 +0000
ROA not after:            Thu 03 Apr 2025 03:14:53 +0000
asID:                     263324
IP address blocks:        177.86.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/1/01364C396932D6F9D37D4E65B53FF5F1EF6CB2E2.crl
                          rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/1/01364C396932D6F9D37D4E65B53FF5F1EF6CB2E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01364C396932D6F9D37D4E65B53FF5F1EF6CB2E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:20:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:5a:b8:fe:ff:e0:93:2d:de:cc:d0:cd:20:c3:c1:f3:7f:66:38:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01364C396932D6F9D37D4E65B53FF5F1EF6CB2E2
        Validity
            Not Before: Apr  4 03:09:53 2024 GMT
            Not After : Apr  3 03:14:53 2025 GMT
        Subject: CN=3C3BEEF1884F2CBBF87CAECDC4E6B0DA5F7572EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c7:d0:27:fa:cf:57:c4:4b:63:8b:b1:2f:b7:
                    66:ef:73:03:a9:37:25:82:eb:5d:41:71:e0:04:c5:
                    9c:a1:eb:b6:fe:b6:25:1d:60:ea:1a:30:c8:e5:3e:
                    f6:9c:99:05:0d:0b:db:21:80:2b:57:41:b8:80:64:
                    28:62:df:cd:fc:45:65:60:e7:d6:62:b4:74:62:ea:
                    6c:bd:c8:a6:74:c4:d1:ee:0c:d9:cb:b5:4b:17:9e:
                    b6:a3:2d:bd:8b:ee:06:f0:43:a0:e9:e1:c9:17:ba:
                    dd:52:86:4e:45:1d:88:c8:e5:3a:70:e0:13:0d:8b:
                    4b:4c:e5:a4:07:09:bd:45:2e:c8:a3:fb:02:67:50:
                    e3:2b:a6:25:8a:8c:59:1a:16:6a:9f:db:be:21:4b:
                    bb:b9:dd:92:21:11:a0:5c:93:47:96:68:79:fa:b6:
                    85:04:6d:a8:64:99:29:4a:bc:9f:bf:91:fd:48:17:
                    c2:c9:64:72:c4:79:09:77:84:7a:ea:b6:f4:a8:68:
                    f6:4d:35:80:f7:b0:a4:80:91:1d:7c:8b:2c:98:53:
                    94:48:86:58:7a:0e:37:aa:6f:68:e0:93:00:bf:b5:
                    88:26:14:ac:e4:5a:ce:d4:e9:c9:cf:17:6d:95:f2:
                    cd:90:4f:c9:4f:e1:80:d2:81:47:b5:6d:88:e5:10:
                    80:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3B:EE:F1:88:4F:2C:BB:F8:7C:AE:CD:C4:E6:B0:DA:5F:75:72:EA
            X509v3 Authority Key Identifier:
                keyid:01:36:4C:39:69:32:D6:F9:D3:7D:4E:65:B5:3F:F5:F1:EF:6C:B2:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/1/01364C396932D6F9D37D4E65B53FF5F1EF6CB2E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01364C396932D6F9D37D4E65B53FF5F1EF6CB2E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/1/3137372e38362e3135362e302f32322d3234203d3e20323633333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:25:eb:bb:0a:31:5a:ac:40:a1:3a:0f:7b:12:56:02:89:60:
         74:07:68:ec:42:5a:1a:5b:0d:d0:5b:77:cb:62:32:57:c7:5e:
         2d:62:c0:c2:75:72:f0:2a:5b:26:2f:e0:20:90:43:42:ac:36:
         de:6b:ab:10:d2:90:7c:38:b7:d4:87:37:94:e7:0a:43:b8:e4:
         0b:75:b1:56:1a:ae:9b:89:2b:e7:8a:72:2d:b5:8e:2a:17:ea:
         0b:8f:a5:8e:01:c1:b6:aa:c9:f2:a0:6b:96:53:c0:75:13:b5:
         37:67:40:96:cc:41:d8:99:18:ab:7d:67:9f:51:3d:77:64:2a:
         bb:39:da:03:68:0b:ca:aa:65:93:96:d2:21:29:4e:6f:cb:98:
         79:a9:f0:4a:fa:d9:6b:c8:cc:83:99:d6:87:1e:0f:6d:fa:5f:
         07:c0:c6:6e:ed:7f:fc:7e:ed:63:d3:86:21:27:71:09:10:dd:
         fa:24:1e:fb:33:41:7d:aa:56:2e:28:7d:3b:b0:bf:72:0c:8a:
         6e:50:f8:86:7b:27:9f:43:fc:ba:32:86:ad:fe:f6:cd:e6:60:
         cb:2f:df:3d:4c:0a:cf:a9:96:ec:e8:31:5a:5e:a1:95:90:55:
         ad:e5:bd:e0:21:0d:78:1c:64:cd:12:39:67:4c:f6:d8:73:34:
         3e:4e:92:d2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUU1q4/v/gky3ezNDNIMPB839mOIwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDEzNjRDMzk2OTMyRDZGOUQzN0Q0RTY1QjUzRkY1RjFF
RjZDQjJFMjAeFw0yNDA0MDQwMzA5NTNaFw0yNTA0MDMwMzE0NTNaMDMxMTAvBgNV
BAMTKDNDM0JFRUYxODg0RjJDQkJGODdDQUVDREM0RTZCMERBNUY3NTcyRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjx9An+s9XxEtji7Evt2bvcwOp
NyWC611BceAExZyh67b+tiUdYOoaMMjlPvacmQUNC9shgCtXQbiAZChi3838RWVg
59ZitHRi6my9yKZ0xNHuDNnLtUsXnrajLb2L7gbwQ6Dp4ckXut1Shk5FHYjI5Tpw
4BMNi0tM5aQHCb1FLsij+wJnUOMrpiWKjFkaFmqf274hS7u53ZIhEaBck0eWaHn6
toUEbahkmSlKvJ+/kf1IF8LJZHLEeQl3hHrqtvSoaPZNNYD3sKSAkR18iyyYU5RI
hlh6Djeqb2jgkwC/tYgmFKzkWs7U6cnPF22V8s2QT8lP4YDSgUe1bYjlEICxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPDvu8YhPLLv4fK7NxOaw2l91cuowHwYDVR0j
BBgwFoAUATZMOWky1vnTfU5ltT/18e9ssuIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3VqalRScm83cWRWRjZ5Vjd0aWhBUXphc2Q3Rlg3eHdrMjRZc2V1R1NK
clkvMS8wMTM2NEMzOTY5MzJENkY5RDM3RDRFNjVCNTNGRjVGMUVGNkNCMkUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxMzY0QzM5NjkzMkQ2RjlE
MzdENEU2NUI1M0ZGNUYxRUY2Q0IyRTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d1ampUUnJvN3FkVkY2eVY3dGloQVF6YXNkN0ZYN3h3azI0WXNldUdTSnJZLzEv
MzEzNzM3MmUzODM2MmUzMTM1MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzMzMzMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxVpwwDQYJKoZIhvcNAQELBQADggEBADUl67sK
MVqsQKE6D3sSVgKJYHQHaOxCWhpbDdBbd8tiMlfHXi1iwMJ1cvAqWyYv4CCQQ0Ks
Nt5rqxDSkHw4t9SHN5TnCkO45At1sVYarpuJK+eKci21jioX6guPpY4BwbaqyfKg
a5ZTwHUTtTdnQJbMQdiZGKt9Z59RPXdkKrs52gNoC8qqZZOW0iEpTm/LmHmp8Er6
2WvIzIOZ1oceD236XwfAxm7tf/x+7WPThiEncQkQ3fokHvszQX2qVi4ofTuwv3IM
im5Q+IZ7J59D/Loyhq3+9s3mYMsv3z1MCs+pluzoMVpeoZWQVa3lveAhDXgcZM0S
OWdM9thzND5OktI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:10 2024 by rpki-client on console-ams.rpki-client.org