Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3137392e35312e3137322e302f32322d3234203d3e203238323737.roa
File:                     3137392e35312e3137322e302f32322d3234203d3e203238323737.roa (raw, json)
Hash identifier:          bSsfPomxxkh+ecc9pZWKOh8Y/0ITd9oaQVBrvNXB6lM=
Subject key identifier:   C6:B4:80:90:20:7E:6A:F8:01:1B:7A:53:8B:0F:22:F7:13:F8:45:46
Certificate issuer:       /CN=A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8
Certificate serial:       36E4BE9E7F058849A9176275FB31A5944B74BB62
Authority key identifier: A8:6F:29:09:A8:CF:8A:80:C2:23:9E:5F:95:3F:F1:B4:AB:9D:73:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3137392e35312e3137322e302f32322d3234203d3e203238323737.roa
Signing time:             Tue 07 May 2024 19:55:42 +0000
ROA not before:           Tue 07 May 2024 19:50:42 +0000
ROA not after:            Tue 06 May 2025 19:55:42 +0000
asID:                     28277
IP address blocks:        179.51.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl
                          rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 21:04:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:e4:be:9e:7f:05:88:49:a9:17:62:75:fb:31:a5:94:4b:74:bb:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8
        Validity
            Not Before: May  7 19:50:42 2024 GMT
            Not After : May  6 19:55:42 2025 GMT
        Subject: CN=C6B48090207E6AF8011B7A538B0F22F713F84546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4a:08:28:bb:39:ce:8e:d8:0d:d2:54:b1:bd:
                    c4:fe:a5:03:8c:4c:2e:98:32:d2:77:d0:ab:5e:57:
                    39:cc:17:bb:02:c7:d2:4a:b0:1c:80:f0:d3:f4:5b:
                    39:38:cd:a4:13:e8:c7:bb:28:d2:70:dd:1f:de:f7:
                    9d:64:df:e1:d7:2f:c7:a9:e2:1c:db:e3:96:f6:1e:
                    c6:e7:b1:65:e0:90:61:f1:67:fc:44:02:69:32:cf:
                    94:d8:b0:af:b0:0e:ea:a8:36:5d:b4:06:55:05:30:
                    78:6f:51:5f:54:7e:ba:fa:ca:1c:d1:50:a9:32:30:
                    d4:91:5d:d1:81:37:70:e0:3e:72:11:0e:45:49:f0:
                    15:37:bf:12:fa:71:16:13:24:f0:34:bb:8b:bd:41:
                    e6:b0:69:fa:d3:67:9b:cb:28:dd:91:82:0b:5b:5a:
                    98:dc:eb:97:77:48:fc:12:79:83:20:2e:30:56:84:
                    ed:60:0a:40:dc:6a:15:d2:1b:c5:77:46:ab:55:34:
                    e3:4a:b8:b8:50:f1:e6:74:71:76:ab:35:18:7c:4c:
                    21:be:4f:ae:41:19:f2:74:a6:0a:9a:4c:c5:26:39:
                    2a:b9:12:b2:bc:39:41:75:8a:fc:40:01:bb:1b:cb:
                    4e:a1:c9:ac:17:cb:b0:ca:0a:55:e7:a4:68:02:ac:
                    43:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:B4:80:90:20:7E:6A:F8:01:1B:7A:53:8B:0F:22:F7:13:F8:45:46
            X509v3 Authority Key Identifier:
                keyid:A8:6F:29:09:A8:CF:8A:80:C2:23:9E:5F:95:3F:F1:B4:AB:9D:73:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3137392e35312e3137322e302f32322d3234203d3e203238323737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:64:6c:73:1c:7c:3e:65:c5:3d:b8:19:16:ba:93:27:3b:93:
         6d:9b:e0:a9:21:dc:46:c3:6f:a5:20:66:eb:eb:79:e2:02:77:
         84:00:26:7d:28:02:cc:3e:e9:09:96:1c:b0:39:8c:39:35:97:
         59:b0:b3:bf:6e:37:e8:23:e5:e9:1e:46:b7:9a:b7:65:85:2a:
         7f:0a:1f:ed:69:6b:37:2f:03:f9:97:0b:ea:61:bf:01:ad:da:
         cb:c4:8f:df:b6:3e:39:ac:3b:a1:b0:42:34:57:93:92:f0:cf:
         54:f2:29:51:d6:43:dc:2d:45:6d:1b:03:b9:2b:fc:e0:26:fe:
         54:cf:aa:bf:0b:fa:44:c4:fe:0c:a5:d2:29:e9:a1:e5:a3:eb:
         52:e7:94:28:b0:0e:a9:b0:4c:c8:a7:33:4e:c0:19:11:ff:b7:
         d3:be:3b:be:6b:25:e3:0e:65:cf:75:f2:c6:c4:9b:c0:c3:a3:
         d8:37:ef:12:ef:7e:aa:8e:db:9e:a5:92:16:28:3d:ba:86:bc:
         75:0d:d3:ca:00:6c:32:f6:45:87:f3:00:ec:3c:a7:4c:46:8b:
         de:a4:a5:83:69:65:52:c1:72:eb:00:cf:a3:2c:fa:b1:76:44:
         6e:27:1b:a1:59:f8:f5:1a:d0:b6:f5:7d:70:5d:a7:e0:83:5d:
         73:98:e5:98
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNuS+nn8FiEmpF2J1+zGllEt0u2IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTg2RjI5MDlBOENGOEE4MEMyMjM5RTVGOTUzRkYxQjRB
QjlENzNDODAeFw0yNDA1MDcxOTUwNDJaFw0yNTA1MDYxOTU1NDJaMDMxMTAvBgNV
BAMTKEM2QjQ4MDkwMjA3RTZBRjgwMTFCN0E1MzhCMEYyMkY3MTNGODQ1NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOSggouznOjtgN0lSxvcT+pQOM
TC6YMtJ30KteVznMF7sCx9JKsByA8NP0Wzk4zaQT6Me7KNJw3R/e951k3+HXL8ep
4hzb45b2HsbnsWXgkGHxZ/xEAmkyz5TYsK+wDuqoNl20BlUFMHhvUV9Ufrr6yhzR
UKkyMNSRXdGBN3DgPnIRDkVJ8BU3vxL6cRYTJPA0u4u9QeawafrTZ5vLKN2Rggtb
Wpjc65d3SPwSeYMgLjBWhO1gCkDcahXSG8V3RqtVNONKuLhQ8eZ0cXarNRh8TCG+
T65BGfJ0pgqaTMUmOSq5ErK8OUF1ivxAAbsby06hyawXy7DKClXnpGgCrENvAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUxrSAkCB+avgBG3pTiw8i9xP4RUYwHwYDVR0j
BBgwFoAUqG8pCajPioDCI55flT/xtKudc8gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDd0dnBGSEYzQmtaUGM1SlpTaVVMS3RqR212UGU0ZkFqeGlVMkRKWnFQ
RzEvMC9BODZGMjkwOUE4Q0Y4QTgwQzIyMzlFNUY5NTNGRjFCNEFCOUQ3M0M4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4NkYyOTA5QThDRjhBODBD
MjIzOUU1Rjk1M0ZGMUI0QUI5RDczQzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g3dHZwRkhGM0JrWlBjNUpaU2lVTEt0akdtdlBlNGZBanhpVTJESlpxUEcxLzAv
MzEzNzM5MmUzNTMxMmUzMTM3MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4
MzIzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCszOsMA0GCSqGSIb3DQEBCwUAA4IBAQAxZGxzHHw+
ZcU9uBkWupMnO5Ntm+CpIdxGw2+lIGbr63niAneEACZ9KALMPukJlhywOYw5NZdZ
sLO/bjfoI+XpHka3mrdlhSp/Ch/taWs3LwP5lwvqYb8BrdrLxI/ftj45rDuhsEI0
V5OS8M9U8ilR1kPcLUVtGwO5K/zgJv5Uz6q/C/pExP4MpdIp6aHlo+tS55QosA6p
sEzIpzNOwBkR/7fTvju+ayXjDmXPdfLGxJvAw6PYN+8S736qjtuepZIWKD26hrx1
DdPKAGwy9kWH8wDsPKdMRovepKWDaWVSwXLrAM+jLPqxdkRuJxuhWfj1GtC29X1w
Xafgg11zmOWY
-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:52 2024 by rpki-client on console-ams.rpki-client.org