Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/3137372e31302e32342e302f32322d3234203d3e20323632383431.roa
File:                     3137372e31302e32342e302f32322d3234203d3e20323632383431.roa (raw, json)
Hash identifier:          rNw4RAYbFY3zMtQ3aFKfnasuSsBxNXnVlStz1bsn3K0=
Subject key identifier:   85:32:DC:C8:75:8E:3F:32:BD:1E:10:68:CA:3B:F3:33:F4:30:2C:43
Certificate issuer:       /CN=9E1D7C478D880E093C83DCBE1DE40DE88EF8546F
Certificate serial:       764C6E4EB187725C3990683B4BFE7EBC58599B08
Authority key identifier: 9E:1D:7C:47:8D:88:0E:09:3C:83:DC:BE:1D:E4:0D:E8:8E:F8:54:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/3137372e31302e32342e302f32322d3234203d3e20323632383431.roa
Signing time:             Thu 04 Apr 2024 15:15:28 +0000
ROA not before:           Thu 04 Apr 2024 15:10:28 +0000
ROA not after:            Thu 03 Apr 2025 15:15:28 +0000
asID:                     262841
IP address blocks:        177.10.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.crl
                          rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:52:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:4c:6e:4e:b1:87:72:5c:39:90:68:3b:4b:fe:7e:bc:58:59:9b:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E1D7C478D880E093C83DCBE1DE40DE88EF8546F
        Validity
            Not Before: Apr  4 15:10:28 2024 GMT
            Not After : Apr  3 15:15:28 2025 GMT
        Subject: CN=8532DCC8758E3F32BD1E1068CA3BF333F4302C43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:41:b4:8a:87:47:30:ce:1c:85:78:c9:b5:f5:
                    1e:2f:46:ba:e3:c9:c5:f6:f9:81:32:70:bc:59:ed:
                    91:73:4a:db:31:78:40:4c:e1:e4:34:3e:cb:a9:22:
                    45:9a:62:e6:c6:af:5b:36:e7:3a:26:15:b4:c1:75:
                    d8:73:00:08:c0:7e:ef:7c:ce:97:5d:4a:b0:09:3f:
                    64:b4:47:3c:c4:35:2d:16:25:4e:92:29:5d:34:99:
                    c8:6f:83:6f:47:0a:96:96:e3:e5:d9:81:af:b6:89:
                    4f:5a:08:62:5f:35:b8:38:03:4b:43:89:40:6a:66:
                    8e:c8:a8:68:82:68:92:1b:ed:ea:9e:6e:b9:f9:cd:
                    0a:3d:35:97:89:c4:be:cb:91:a3:5a:22:9c:af:9e:
                    8f:32:c5:44:a3:8e:32:96:b4:e7:63:da:f6:0c:36:
                    20:98:78:82:69:17:c5:88:e8:bc:ac:ca:55:97:86:
                    cc:d9:0a:5e:76:57:4e:e3:a9:3c:1a:c7:e0:f8:47:
                    53:83:0f:16:63:05:87:ff:e2:f2:16:cd:69:0c:80:
                    8a:c2:07:67:df:6a:61:06:cc:e6:98:b7:17:95:39:
                    0d:24:8c:9b:64:dc:35:03:20:ef:a6:a6:be:bc:5c:
                    0a:b8:1a:66:7a:81:84:77:2f:1a:9c:ee:0f:5c:79:
                    40:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:32:DC:C8:75:8E:3F:32:BD:1E:10:68:CA:3B:F3:33:F4:30:2C:43
            X509v3 Authority Key Identifier:
                keyid:9E:1D:7C:47:8D:88:0E:09:3C:83:DC:BE:1D:E4:0D:E8:8E:F8:54:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E1D7C478D880E093C83DCBE1DE40DE88EF8546F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/1/3137372e31302e32342e302f32322d3234203d3e20323632383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:c4:19:e7:7f:1b:8c:0e:fa:9a:85:a8:bc:22:ca:7e:5b:44:
         33:aa:67:e3:55:7d:79:93:0e:a8:c4:3f:97:9f:39:e4:a0:ce:
         b7:a6:60:65:d4:26:ad:15:9c:d4:1a:d5:6a:73:28:54:a3:12:
         c9:9a:65:2e:36:06:7f:8b:75:79:75:7d:87:79:df:78:a6:d3:
         65:57:0f:ec:a5:ec:1a:7c:65:03:ca:cb:5b:ba:00:04:f2:9f:
         5e:3c:11:f8:da:5e:99:ef:12:15:ad:06:ca:f7:2f:b2:af:ab:
         b1:c8:92:9b:3e:e0:85:8d:47:37:2f:80:0f:34:35:a7:ef:9c:
         3d:64:5c:b8:35:05:0a:74:00:46:74:8d:d9:74:1e:65:b7:24:
         65:99:74:ea:48:a9:1a:7a:f2:a2:b5:07:35:f8:fb:20:e9:d9:
         a2:03:93:23:04:bc:02:27:42:56:a1:de:5e:e8:d3:11:62:ad:
         e3:9b:b7:0c:e0:07:61:72:ad:02:1b:60:90:97:44:56:b3:df:
         8a:c3:37:33:44:0d:6d:2d:68:68:1b:43:61:1c:91:21:ec:09:
         ac:4f:b0:77:1d:f6:05:36:13:a2:16:cf:1a:fd:32:04:fa:1c:
         23:b2:0c:7c:0f:72:1d:dd:eb:64:15:f5:92:9c:68:3d:af:0d:
         af:ef:0f:4d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdkxuTrGHclw5kGg7S/5+vFhZmwgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUUxRDdDNDc4RDg4MEUwOTNDODNEQ0JFMURFNDBERTg4
RUY4NTQ2RjAeFw0yNDA0MDQxNTEwMjhaFw0yNTA0MDMxNTE1MjhaMDMxMTAvBgNV
BAMTKDg1MzJEQ0M4NzU4RTNGMzJCRDFFMTA2OENBM0JGMzMzRjQzMDJDNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8QbSKh0cwzhyFeMm19R4vRrrj
ycX2+YEycLxZ7ZFzStsxeEBM4eQ0PsupIkWaYubGr1s25zomFbTBddhzAAjAfu98
zpddSrAJP2S0RzzENS0WJU6SKV00mchvg29HCpaW4+XZga+2iU9aCGJfNbg4A0tD
iUBqZo7IqGiCaJIb7eqebrn5zQo9NZeJxL7LkaNaIpyvno8yxUSjjjKWtOdj2vYM
NiCYeIJpF8WI6LysylWXhszZCl52V07jqTwax+D4R1ODDxZjBYf/4vIWzWkMgIrC
B2ffamEGzOaYtxeVOQ0kjJtk3DUDIO+mpr68XAq4GmZ6gYR3Lxqc7g9ceUB3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUhTLcyHWOPzK9HhBoyjvzM/QwLEMwHwYDVR0j
BBgwFoAUnh18R42IDgk8g9y+HeQN6I74VG8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSE1MVXZuOXRnV2NTalZGc3VHMldac3BpZEFIamRpaThnelByd1JGUEYy
UG4vMS85RTFEN0M0NzhEODgwRTA5M0M4M0RDQkUxREU0MERFODhFRjg1NDZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlFMUQ3QzQ3OEQ4ODBFMDkz
QzgzRENCRTFERTQwREU4OEVGODU0NkYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hNTFV2bjl0Z1djU2pWRnN1RzJXWnNwaWRBSGpkaWk4Z3pQcndSRlBGMlBuLzEv
MzEzNzM3MmUzMTMwMmUzMjM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMy
MzgzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsQoYMA0GCSqGSIb3DQEBCwUAA4IBAQClxBnnfxuM
Dvqahai8Isp+W0QzqmfjVX15kw6oxD+XnznkoM63pmBl1CatFZzUGtVqcyhUoxLJ
mmUuNgZ/i3V5dX2Hed94ptNlVw/spewafGUDystbugAE8p9ePBH42l6Z7xIVrQbK
9y+yr6uxyJKbPuCFjUc3L4APNDWn75w9ZFy4NQUKdABGdI3ZdB5ltyRlmXTqSKka
evKitQc1+Psg6dmiA5MjBLwCJ0JWod5e6NMRYq3jm7cM4Adhcq0CG2CQl0RWs9+K
wzczRA1tLWhoG0NhHJEh7AmsT7B3HfYFNhOiFs8a/TIE+hwjsgx8D3Id3etkFfWS
nGg9rw2v7w9N
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:20 2024 by rpki-client on console-ams.rpki-client.org