Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/5/3137372e39332e3130342e302f32312d3234203d3e203533313037.roa
File:                     3137372e39332e3130342e302f32312d3234203d3e203533313037.roa (raw, json)
Hash identifier:          J3nNkGnaVbRC2iC7enNJy8xGnNWFJ/Y2ursvQrVok9Y=
Subject key identifier:   D0:A3:FE:C0:2A:DB:3F:A0:FB:D8:43:A8:4C:9B:01:21:DD:84:78:41
Certificate issuer:       /CN=817F49231FF07F454E790AAA133485546F995822
Certificate serial:       7571E91B0AB8B4919C95386350D624C7A5FFFD35
Authority key identifier: 81:7F:49:23:1F:F0:7F:45:4E:79:0A:AA:13:34:85:54:6F:99:58:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F49231FF07F454E790AAA133485546F995822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/5/3137372e39332e3130342e302f32312d3234203d3e203533313037.roa
Signing time:             Thu 04 Apr 2024 10:14:02 +0000
ROA not before:           Thu 04 Apr 2024 10:09:02 +0000
ROA not after:            Thu 03 Apr 2025 10:14:02 +0000
asID:                     53107
IP address blocks:        177.93.104.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/5/817F49231FF07F454E790AAA133485546F995822.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/5/817F49231FF07F454E790AAA133485546F995822.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F49231FF07F454E790AAA133485546F995822.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 23:34:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:71:e9:1b:0a:b8:b4:91:9c:95:38:63:50:d6:24:c7:a5:ff:fd:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=817F49231FF07F454E790AAA133485546F995822
        Validity
            Not Before: Apr  4 10:09:02 2024 GMT
            Not After : Apr  3 10:14:02 2025 GMT
        Subject: CN=D0A3FEC02ADB3FA0FBD843A84C9B0121DD847841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e0:46:7d:ce:61:dd:b8:f4:bd:35:f5:63:d2:
                    ce:46:87:5b:d8:ab:ed:fd:c8:14:b3:9f:7f:cb:70:
                    03:69:0d:6e:2b:44:86:77:0e:fc:ad:63:a9:8b:0a:
                    0a:44:67:83:e0:bf:a4:ca:e9:d8:61:08:99:40:9e:
                    6d:5d:62:3e:32:41:24:40:fa:58:fc:1c:5e:d4:a1:
                    b1:9b:57:ae:05:35:c4:e6:90:40:05:0f:d1:ad:db:
                    e5:13:29:53:d2:6b:fe:37:89:08:b3:8a:13:58:bd:
                    eb:50:7c:a6:0a:75:e4:f7:19:ef:60:96:b9:14:8a:
                    b6:e2:ee:18:ae:ff:db:7f:fa:7f:d5:db:98:cb:08:
                    6d:00:b8:ec:00:20:78:6f:9f:ed:50:0a:1b:7f:69:
                    f1:53:54:e2:c4:30:5e:c1:98:d8:58:73:56:f5:78:
                    50:9f:a0:2f:2e:85:c0:1c:68:aa:a6:0b:13:f0:27:
                    cb:4b:c9:d2:94:b6:2d:8f:6d:9e:90:62:63:28:59:
                    55:5b:c6:a4:bf:61:01:6c:a9:52:57:9c:10:6e:80:
                    00:a2:cd:7e:d1:80:b6:49:4a:55:dd:7a:3e:63:9c:
                    14:53:92:d4:ad:1f:6a:90:06:9f:86:7f:88:40:bd:
                    4f:71:58:f9:fa:6d:8a:85:60:05:41:71:c4:6c:3f:
                    3b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A3:FE:C0:2A:DB:3F:A0:FB:D8:43:A8:4C:9B:01:21:DD:84:78:41
            X509v3 Authority Key Identifier:
                keyid:81:7F:49:23:1F:F0:7F:45:4E:79:0A:AA:13:34:85:54:6F:99:58:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/5/817F49231FF07F454E790AAA133485546F995822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F49231FF07F454E790AAA133485546F995822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/5/3137372e39332e3130342e302f32312d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         be:5a:6d:8d:b6:88:98:08:ba:40:61:a1:5d:7a:71:32:28:57:
         7a:80:f0:e1:47:a3:2d:67:fe:af:d2:b7:f9:40:58:7d:a5:a0:
         b7:b1:16:91:e1:e5:6c:27:b4:5f:7b:5d:fc:df:d8:29:de:1c:
         89:4e:65:ef:6f:55:c4:c0:27:b9:fb:9e:eb:8f:ee:8b:4e:63:
         41:67:52:3e:6e:9b:d3:bb:d3:9e:1e:eb:9f:bb:63:7e:88:14:
         0f:89:d4:28:b1:4e:bb:a9:83:46:b3:b3:57:6b:e4:1a:a5:db:
         65:dc:d4:17:af:b4:d1:57:ce:61:cb:9b:26:5d:ac:39:c7:d3:
         f8:8b:c1:06:15:c5:52:0c:82:9b:0d:12:95:d3:38:66:e0:a1:
         ea:75:84:79:d4:5c:30:84:61:6c:f0:a6:df:3b:7a:8f:cb:3d:
         3b:d1:2f:cf:f3:ee:cf:14:6b:12:2d:89:53:0f:7b:b9:ab:50:
         64:e9:9b:92:af:52:66:6b:34:dc:8d:db:b2:91:93:b0:88:15:
         9c:4c:45:2c:dd:7f:16:ae:8c:32:b1:3f:0c:a0:b2:22:96:3c:
         f8:f7:97:ca:16:d5:9f:53:22:f6:7a:84:96:d3:55:31:cc:fb:
         9b:e6:20:49:12:0a:94:cb:0e:f9:9d:1f:d1:5e:08:05:57:59:
         4b:d9:a8:bd
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdXHpGwq4tJGclThjUNYkx6X//TUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE3RjQ5MjMxRkYwN0Y0NTRFNzkwQUFBMTMzNDg1NTQ2
Rjk5NTgyMjAeFw0yNDA0MDQxMDA5MDJaFw0yNTA0MDMxMDE0MDJaMDMxMTAvBgNV
BAMTKEQwQTNGRUMwMkFEQjNGQTBGQkQ4NDNBODRDOUIwMTIxREQ4NDc4NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCK4EZ9zmHduPS9NfVj0s5Gh1vY
q+39yBSzn3/LcANpDW4rRIZ3DvytY6mLCgpEZ4Pgv6TK6dhhCJlAnm1dYj4yQSRA
+lj8HF7UobGbV64FNcTmkEAFD9Gt2+UTKVPSa/43iQizihNYvetQfKYKdeT3Ge9g
lrkUirbi7hiu/9t/+n/V25jLCG0AuOwAIHhvn+1QCht/afFTVOLEMF7BmNhYc1b1
eFCfoC8uhcAcaKqmCxPwJ8tLydKUti2PbZ6QYmMoWVVbxqS/YQFsqVJXnBBugACi
zX7RgLZJSlXdej5jnBRTktStH2qQBp+Gf4hAvU9xWPn6bYqFYAVBccRsPzvfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU0KP+wCrbP6D72EOoTJsBId2EeEEwHwYDVR0j
BBgwFoAUgX9JIx/wf0VOeQqqEzSFVG+ZWCIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDZTQ3VQNHNiNjR4c3JzQnU0d29BZXFWM21GNFhrdHdKUlBaRVQ2UDU0
TXUvNS84MTdGNDkyMzFGRjA3RjQ1NEU3OTBBQUExMzM0ODU1NDZGOTk1ODIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgxN0Y0OTIzMUZGMDdGNDU0
RTc5MEFBQTEzMzQ4NTU0NkY5OTU4MjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g2U0N1UDRzYjY0eHNyc0J1NHdvQWVxVjNtRjRYa3R3SlJQWkVUNlA1NE11LzUv
MzEzNzM3MmUzOTMzMmUzMTMwMzQyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNTMz
MzEzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsV1oMA0GCSqGSIb3DQEBCwUAA4IBAQC+Wm2NtoiY
CLpAYaFdenEyKFd6gPDhR6MtZ/6v0rf5QFh9paC3sRaR4eVsJ7Rfe13839gp3hyJ
TmXvb1XEwCe5+57rj+6LTmNBZ1I+bpvTu9OeHuufu2N+iBQPidQosU67qYNGs7NX
a+Qapdtl3NQXr7TRV85hy5smXaw5x9P4i8EGFcVSDIKbDRKV0zhm4KHqdYR51Fww
hGFs8KbfO3qPyz070S/P8+7PFGsSLYlTD3u5q1Bk6ZuSr1JmazTcjduykZOwiBWc
TEUs3X8WrowysT8MoLIiljz495fKFtWfUyL2eoSW01UxzPub5iBJEgqUyw75nR/R
XggFV1lL2ai9
-----END CERTIFICATE-----
Generated at Sun Jun 2 23:05:01 2024 by rpki-client on console-fra.rpki-client.org