Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e37332e3131322e302f32312d3332203d3e20323632373733.roa
File:                     3137372e37332e3131322e302f32312d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          fH3ZADT4dcuSxKlrO4vSN3Pw1KyauQ+4RN53AysqA5U=
Subject key identifier:   59:53:EA:35:87:25:42:AB:19:7A:FF:CE:F4:CC:97:B4:72:03:AE:07
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       76438901C3A0A35DFA912D019FAA09C42FCC8E15
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e37332e3131322e302f32312d3332203d3e20323632373733.roa
Signing time:             Sun 17 Nov 2024 16:29:50 +0000
ROA not before:           Sun 17 Nov 2024 16:24:50 +0000
ROA not after:            Sun 16 Nov 2025 16:29:50 +0000
asID:                     262773
IP address blocks:        177.73.112.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:43:89:01:c3:a0:a3:5d:fa:91:2d:01:9f:aa:09:c4:2f:cc:8e:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Nov 17 16:24:50 2024 GMT
            Not After : Nov 16 16:29:50 2025 GMT
        Subject: CN=5953EA35872542AB197AFFCEF4CC97B47203AE07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f2:67:c7:96:cf:a0:32:e0:7f:79:83:8e:db:
                    f8:b3:8b:fd:e3:86:8d:2d:e9:1f:85:a8:95:98:29:
                    c8:77:14:62:2a:80:b8:93:8d:08:84:8e:9e:be:8e:
                    ae:34:77:e1:97:3e:b3:50:da:d1:b6:42:39:13:d7:
                    35:84:0c:bf:43:62:d5:dd:d3:56:92:f2:4f:c1:7f:
                    3d:8e:e2:a0:f8:f1:06:11:75:74:3a:aa:ac:22:2b:
                    49:39:d4:ff:53:9a:c3:12:35:bc:15:ec:c9:b1:48:
                    8e:2c:30:9f:86:83:bd:62:0a:ec:7c:58:a0:a8:73:
                    ed:06:df:c1:40:e8:dc:5d:27:e3:b9:66:5b:93:4a:
                    78:58:a3:43:8c:14:1b:74:4b:07:b6:1f:58:cc:e7:
                    51:f4:39:0f:d7:0b:39:5c:25:0c:02:50:e1:c5:39:
                    8f:eb:04:45:e8:35:05:2a:ea:5f:81:23:5b:1a:ce:
                    01:36:93:0f:36:b5:34:8b:85:44:be:b6:32:db:6c:
                    28:81:13:10:79:c2:42:c3:d2:4a:91:79:9d:17:71:
                    a1:00:bf:3a:99:f8:5f:0a:b2:1c:eb:11:a6:7e:78:
                    c5:35:6d:ed:29:be:52:5a:c7:05:b7:d2:88:00:f6:
                    52:72:aa:84:2e:44:99:53:9e:38:45:37:02:3c:6c:
                    a9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:53:EA:35:87:25:42:AB:19:7A:FF:CE:F4:CC:97:B4:72:03:AE:07
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e37332e3131322e302f32312d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         18:77:5c:20:09:f6:61:1b:00:74:0f:3d:22:f2:85:39:cf:b9:
         f6:f5:57:6f:f4:d7:ec:4b:56:d0:61:d6:91:58:81:0f:8d:98:
         ff:cd:45:18:8e:fe:0e:a3:f8:c8:60:fe:0f:3a:61:18:3d:2d:
         b8:f4:f7:aa:18:4d:48:5c:bf:bd:a7:6d:b3:c9:89:9f:c0:73:
         c5:cb:63:65:e8:39:83:8e:ec:3c:fe:29:a1:3a:4d:e1:9e:99:
         d5:ff:8d:ce:61:df:9f:d1:98:b4:bc:ff:14:67:0e:1b:90:1c:
         e8:9a:ef:73:04:99:71:d4:5d:c2:16:72:f0:1d:cb:08:9f:79:
         c3:dd:b9:ed:fd:41:84:4b:a9:bd:80:ee:75:bb:f4:06:4a:f2:
         fb:9b:f6:71:a7:f3:18:7f:c3:76:d0:5b:6d:cc:d0:7e:3d:9e:
         2f:97:80:c9:7f:7f:b7:bb:73:84:09:db:ff:3f:c6:8e:9e:e9:
         2d:74:ba:25:bc:44:42:27:5f:9d:96:2b:c4:02:8d:36:2e:05:
         92:30:3a:c2:a3:5a:e0:7a:70:d9:93:78:6d:4e:b6:f8:b7:63:
         4f:d2:61:bd:61:cb:5b:91:f2:f1:97:72:a0:7e:7a:1a:5c:2e:
         0a:f6:80:17:d9:63:24:0f:a7:74:ae:f9:d4:d1:ab:3c:68:c8:
         b0:49:27:93
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdkOJAcOgo136kS0Bn6oJxC/MjhUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJGOUFDNTAwQzU4OTk3MEI5RThBNkM2RTZGODgyREM2
RjI0NDg4NTAeFw0yNDExMTcxNjI0NTBaFw0yNTExMTYxNjI5NTBaMDMxMTAvBgNV
BAMTKDU5NTNFQTM1ODcyNTQyQUIxOTdBRkZDRUY0Q0M5N0I0NzIwM0FFMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY8mfHls+gMuB/eYOO2/izi/3j
ho0t6R+FqJWYKch3FGIqgLiTjQiEjp6+jq40d+GXPrNQ2tG2QjkT1zWEDL9DYtXd
01aS8k/Bfz2O4qD48QYRdXQ6qqwiK0k51P9TmsMSNbwV7MmxSI4sMJ+Gg71iCux8
WKCoc+0G38FA6NxdJ+O5ZluTSnhYo0OMFBt0Swe2H1jM51H0OQ/XCzlcJQwCUOHF
OY/rBEXoNQUq6l+BI1sazgE2kw82tTSLhUS+tjLbbCiBExB5wkLD0kqReZ0XcaEA
vzqZ+F8KshzrEaZ+eMU1be0pvlJaxwW30ogA9lJyqoQuRJlTnjhFNwI8bKlDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUWVPqNYclQqsZev/O9MyXtHIDrgcwHwYDVR0j
BBgwFoAU+/msUAxYmXC56KbG5viC3G8kSIUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2
MzkvMS9GQkY5QUM1MDBDNTg5OTcwQjlFOEE2QzZFNkY4ODJEQzZGMjQ0ODg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCRjlBQzUwMEM1ODk5NzBC
OUU4QTZDNkU2Rjg4MkRDNkYyNDQ4ODUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzEv
MzEzNzM3MmUzNzMzMmUzMTMxMzIyZTMwMmYzMjMxMmQzMzMyMjAzZDNlMjAzMjM2
MzIzNzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOxSXAwDQYJKoZIhvcNAQELBQADggEBABh3XCAJ
9mEbAHQPPSLyhTnPufb1V2/01+xLVtBh1pFYgQ+NmP/NRRiO/g6j+Mhg/g86YRg9
Lbj096oYTUhcv72nbbPJiZ/Ac8XLY2XoOYOO7Dz+KaE6TeGemdX/jc5h35/RmLS8
/xRnDhuQHOia73MEmXHUXcIWcvAdywifecPdue39QYRLqb2A7nW79AZK8vub9nGn
8xh/w3bQW23M0H49ni+XgMl/f7e7c4QJ2/8/xo6e6S10uiW8REInX52WK8QCjTYu
BZIwOsKjWuB6cNmTeG1Otvi3Y0/SYb1hy1uR8vGXcqB+ehpcLgr2gBfZYyQPp3Su
+dTRqzxoyLBJJ5M=
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:41 2024 by rpki-client on console-ams.rpki-client.org