Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/3137372e38372e3136382e302f32312d3332203d3e203532353833.roa
File:                     3137372e38372e3136382e302f32312d3332203d3e203532353833.roa (raw, json)
Hash identifier:          P6rq914T1HddAurTapmwA7u0tmDUTmzlx0JuZrhiSvo=
Subject key identifier:   88:AC:76:36:10:CF:D9:D5:60:D6:7A:73:B5:AC:F9:C7:1E:E5:24:8A
Certificate issuer:       /CN=E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9
Certificate serial:       6377AE4803AF1CEEC7942D1BC3FCA7F7FBA36178
Authority key identifier: E1:97:0E:01:B5:16:F8:93:C6:1C:B2:5B:64:A1:FB:0E:8C:F7:DC:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/3137372e38372e3136382e302f32312d3332203d3e203532353833.roa
Signing time:             Mon 15 Jul 2024 13:28:51 +0000
ROA not before:           Mon 15 Jul 2024 13:23:51 +0000
ROA not after:            Mon 14 Jul 2025 13:28:51 +0000
asID:                     52583
IP address blocks:        177.87.168.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.crl
                          rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 16:40:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:77:ae:48:03:af:1c:ee:c7:94:2d:1b:c3:fc:a7:f7:fb:a3:61:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9
        Validity
            Not Before: Jul 15 13:23:51 2024 GMT
            Not After : Jul 14 13:28:51 2025 GMT
        Subject: CN=88AC763610CFD9D560D67A73B5ACF9C71EE5248A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a2:7f:2d:8f:42:12:2e:52:f0:84:b1:f7:31:
                    15:a4:28:51:de:8a:9b:4b:42:09:60:c3:5b:ca:fd:
                    bc:4c:d1:ee:7a:c9:db:f0:16:37:27:ce:1b:9a:e6:
                    0a:a6:68:dd:92:a4:ad:57:14:b0:20:56:7d:18:ef:
                    39:19:4b:af:ff:45:78:13:83:c7:0a:cc:f0:6c:43:
                    cd:d8:2c:29:1a:f9:9d:f6:5f:b3:55:a0:54:1f:dd:
                    d6:8e:07:1e:d0:51:ed:bd:a9:55:21:7f:7c:6e:0b:
                    cc:5b:fb:05:57:3b:a9:e1:57:c5:ab:69:bd:ed:42:
                    cc:88:8f:6e:b3:de:2b:9c:ad:b3:b0:e7:1b:10:62:
                    71:af:68:1b:a2:e1:ef:a3:4b:7b:62:db:42:00:cb:
                    1b:0c:6d:ee:69:32:fb:d1:13:d0:da:37:ae:b2:69:
                    85:50:e8:98:18:32:fa:a3:24:ab:e5:f6:89:0d:a9:
                    1d:92:3b:2d:e7:25:0c:69:cc:13:9a:a5:25:70:66:
                    e8:49:55:ca:aa:cf:1d:34:80:34:2f:94:c9:18:4d:
                    df:2f:76:b2:1a:d9:3b:0f:67:c0:5c:1f:7d:d3:ef:
                    ab:bc:87:4a:40:eb:de:f5:74:ce:08:f5:8a:3a:ed:
                    44:c2:58:47:0f:53:e9:72:65:4b:ef:e7:07:6c:55:
                    3b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:AC:76:36:10:CF:D9:D5:60:D6:7A:73:B5:AC:F9:C7:1E:E5:24:8A
            X509v3 Authority Key Identifier:
                keyid:E1:97:0E:01:B5:16:F8:93:C6:1C:B2:5B:64:A1:FB:0E:8C:F7:DC:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1970E01B516F893C61CB25B64A1FB0E8CF7DCF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/3137372e38372e3136382e302f32312d3332203d3e203532353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         02:c7:6e:72:5d:4a:b7:2d:b9:af:3d:1b:5b:d8:8e:e5:b9:1b:
         1a:12:a1:7e:f4:57:0c:2a:58:51:b1:cf:b2:ec:49:a0:78:f3:
         6b:37:15:3d:c7:d8:c7:e5:fc:75:41:d7:2c:cd:0b:8f:b6:ff:
         1e:66:d4:df:df:7a:bb:07:d0:5d:4a:ec:a2:db:30:f2:f5:ba:
         10:9b:15:e7:83:80:4a:87:d8:38:5b:a8:05:a8:79:29:ae:62:
         be:62:14:36:87:8a:01:83:c0:7b:94:99:e2:ee:91:ee:fc:93:
         26:97:d1:56:48:71:11:5b:55:2b:1d:41:1b:9d:07:c1:3d:90:
         3e:ca:c1:38:67:38:ab:4e:03:4b:a4:56:a5:51:5c:3d:dd:ae:
         af:f6:f2:7d:7c:1d:3d:3e:6d:95:af:8b:25:a6:0e:5d:91:56:
         35:23:b5:06:ca:c7:39:c3:ce:41:e8:51:67:24:20:ce:50:3b:
         4d:df:c5:2f:11:3e:5d:cd:2a:3c:19:b2:4f:8c:96:98:07:19:
         cd:e1:9f:a2:0c:c5:38:d6:db:83:f5:92:09:73:69:5b:96:16:
         f4:c5:f8:12:b8:2a:9b:0a:46:36:a7:50:f0:b3:2b:01:4c:62:
         a1:05:47:2b:ee:02:a8:56:00:80:b6:aa:c0:7b:45:11:0e:10:
         91:52:c5:ef
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUY3euSAOvHO7HlC0bw/yn9/ujYXgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTE5NzBFMDFCNTE2Rjg5M0M2MUNCMjVCNjRBMUZCMEU4
Q0Y3RENGOTAeFw0yNDA3MTUxMzIzNTFaFw0yNTA3MTQxMzI4NTFaMDMxMTAvBgNV
BAMTKDg4QUM3NjM2MTBDRkQ5RDU2MEQ2N0E3M0I1QUNGOUM3MUVFNTI0OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTon8tj0ISLlLwhLH3MRWkKFHe
iptLQglgw1vK/bxM0e56ydvwFjcnzhua5gqmaN2SpK1XFLAgVn0Y7zkZS6//RXgT
g8cKzPBsQ83YLCka+Z32X7NVoFQf3daOBx7QUe29qVUhf3xuC8xb+wVXO6nhV8Wr
ab3tQsyIj26z3iucrbOw5xsQYnGvaBui4e+jS3ti20IAyxsMbe5pMvvRE9DaN66y
aYVQ6JgYMvqjJKvl9okNqR2SOy3nJQxpzBOapSVwZuhJVcqqzx00gDQvlMkYTd8v
drIa2TsPZ8BcH33T76u8h0pA6971dM4I9Yo67UTCWEcPU+lyZUvv5wdsVTsFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUiKx2NhDP2dVg1npztaz5xx7lJIowHwYDVR0j
BBgwFoAU4ZcOAbUW+JPGHLJbZKH7Doz33PkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG14NHlqcnNuTHRBM2FuZEZSNVpWY0hRblRFdXBGOW9XVHFvdkdvN21I
a1MvMC9FMTk3MEUwMUI1MTZGODkzQzYxQ0IyNUI2NEExRkIwRThDRjdEQ0Y5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxOTcwRTAxQjUxNkY4OTND
NjFDQjI1QjY0QTFGQjBFOENGN0RDRjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hteDR5anJzbkx0QTNhbmRGUjVaVmNIUW5URXVwRjlvV1Rxb3ZHbzdtSGtTLzAv
MzEzNzM3MmUzODM3MmUzMTM2MzgyZTMwMmYzMjMxMmQzMzMyMjAzZDNlMjAzNTMy
MzUzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsVeoMA0GCSqGSIb3DQEBCwUAA4IBAQACx25yXUq3
LbmvPRtb2I7luRsaEqF+9FcMKlhRsc+y7EmgePNrNxU9x9jH5fx1QdcszQuPtv8e
ZtTf33q7B9BdSuyi2zDy9boQmxXng4BKh9g4W6gFqHkprmK+YhQ2h4oBg8B7lJni
7pHu/JMml9FWSHERW1UrHUEbnQfBPZA+ysE4ZzirTgNLpFalUVw93a6v9vJ9fB09
Pm2Vr4slpg5dkVY1I7UGysc5w85B6FFnJCDOUDtN38UvET5dzSo8GbJPjJaYBxnN
4Z+iDMU41tuD9ZIJc2lblhb0xfgSuCqbCkY2p1DwsysBTGKhBUcr7gKoVgCAtqrA
e0URDhCRUsXv
-----END CERTIFICATE-----
Generated at Fri Nov 29 15:30:23 2024 by rpki-client on console-ams.rpki-client.org