Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e38362e38382e302f32312d3332203d3e20323632373733.roa
File:                     3137372e38362e38382e302f32312d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          pw0duXeAzm9wfwslKNAN3fnB1KfbF0vqd5QDuCgK0xg=
Subject key identifier:   7C:08:C2:FE:6A:22:FC:66:D7:E7:9D:39:16:8A:7E:B9:8E:3F:45:D3
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       619B931B5F8F9AC4E5BF13FBB2F0636496A3C274
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e38362e38382e302f32312d3332203d3e20323632373733.roa
Signing time:             Mon 09 Sep 2024 15:00:22 +0000
ROA not before:           Mon 09 Sep 2024 14:55:22 +0000
ROA not after:            Mon 08 Sep 2025 15:00:22 +0000
asID:                     262773
IP address blocks:        177.86.88.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:9b:93:1b:5f:8f:9a:c4:e5:bf:13:fb:b2:f0:63:64:96:a3:c2:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Sep  9 14:55:22 2024 GMT
            Not After : Sep  8 15:00:22 2025 GMT
        Subject: CN=7C08C2FE6A22FC66D7E79D39168A7EB98E3F45D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c9:6a:e6:83:59:5d:0d:3c:6a:c0:5c:74:34:
                    eb:b3:19:51:23:1b:9b:01:33:8c:29:39:95:7b:f1:
                    51:56:63:91:ec:de:3e:7d:45:a0:f6:fe:11:34:86:
                    e1:f6:58:8d:50:ab:f7:41:30:0e:45:26:d7:7a:6d:
                    47:eb:4f:bc:f0:12:f7:7a:53:f2:cf:e5:d1:3c:a5:
                    82:a8:86:eb:48:c1:4e:9f:02:e6:d0:c7:f6:16:b8:
                    ef:ab:0a:18:bd:bd:83:95:f8:1c:f8:be:6c:bf:20:
                    96:43:ed:3e:81:3c:71:7b:77:3a:2c:95:e5:93:bf:
                    12:ac:72:3c:31:24:35:8a:96:fa:22:d1:3d:ab:a8:
                    45:9a:c9:21:3a:2a:02:5a:e4:36:a3:f9:91:0e:bd:
                    47:0a:67:b2:41:89:be:ef:8e:03:b1:ce:71:48:61:
                    17:ed:07:17:03:21:9c:46:3d:99:35:9b:85:60:08:
                    57:b5:87:6d:88:5f:19:c8:5a:dd:7e:6e:c7:ef:44:
                    d3:e4:ab:fc:7d:09:6c:40:db:5c:7a:15:cf:3b:41:
                    2f:0e:0b:f4:92:ec:38:f0:eb:5f:8a:d6:77:57:6a:
                    5d:7c:70:f0:08:db:84:b1:a7:35:82:39:61:11:cf:
                    8a:2f:d2:9e:9c:40:08:07:ac:b1:40:25:26:83:d2:
                    2f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:08:C2:FE:6A:22:FC:66:D7:E7:9D:39:16:8A:7E:B9:8E:3F:45:D3
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e38362e38382e302f32312d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         59:f6:39:d9:82:81:17:b4:67:41:68:75:0d:65:a0:00:d2:1b:
         93:e0:1d:07:c8:05:27:2a:95:a7:54:70:06:bb:e8:2e:42:5a:
         85:37:c9:0b:a7:4d:3a:c9:05:00:e7:2f:23:e1:9f:33:6c:80:
         0c:f8:ff:07:5e:03:89:54:9c:b9:fe:e8:ea:f6:68:2b:eb:c7:
         14:ca:15:a5:6f:a1:f6:97:ad:0e:2e:66:e3:f0:f5:ca:71:ab:
         16:1a:f7:b2:ea:2e:25:b1:09:c4:4b:8c:20:3c:27:69:50:66:
         1d:7d:ad:d1:15:7e:3d:25:6c:05:d4:41:d2:f6:12:a0:ff:6e:
         6d:0a:5a:37:f2:eb:a8:c0:7a:0a:a5:bf:a4:fc:7c:18:19:22:
         f2:52:e7:a1:d8:8b:c3:f6:86:f9:a2:37:20:9f:3f:cb:5c:9b:
         18:64:81:a1:33:8d:a4:42:0a:17:0a:39:ae:2a:85:ca:c1:49:
         ec:6e:46:c7:46:25:5f:04:42:e1:e5:00:02:5d:4c:dd:f3:57:
         e3:50:1f:16:2f:e3:eb:8c:36:c5:45:be:c2:2c:a2:52:04:30:
         30:5b:bc:b2:09:55:e1:f6:b4:de:89:b5:c9:40:14:1f:99:ef:
         6c:d3:aa:16:fb:b2:c6:b6:3c:93:05:a7:7e:34:6c:fc:fb:ba:
         24:93:27:43
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYZuTG1+PmsTlvxP7svBjZJajwnQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJGOUFDNTAwQzU4OTk3MEI5RThBNkM2RTZGODgyREM2
RjI0NDg4NTAeFw0yNDA5MDkxNDU1MjJaFw0yNTA5MDgxNTAwMjJaMDMxMTAvBgNV
BAMTKDdDMDhDMkZFNkEyMkZDNjZEN0U3OUQzOTE2OEE3RUI5OEUzRjQ1RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOyWrmg1ldDTxqwFx0NOuzGVEj
G5sBM4wpOZV78VFWY5Hs3j59RaD2/hE0huH2WI1Qq/dBMA5FJtd6bUfrT7zwEvd6
U/LP5dE8pYKohutIwU6fAubQx/YWuO+rChi9vYOV+Bz4vmy/IJZD7T6BPHF7dzos
leWTvxKscjwxJDWKlvoi0T2rqEWaySE6KgJa5Daj+ZEOvUcKZ7JBib7vjgOxznFI
YRftBxcDIZxGPZk1m4VgCFe1h22IXxnIWt1+bsfvRNPkq/x9CWxA21x6Fc87QS8O
C/SS7Djw61+K1ndXal18cPAI24SxpzWCOWERz4ov0p6cQAgHrLFAJSaD0i8dAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUfAjC/moi/GbX5505Fop+uY4/RdMwHwYDVR0j
BBgwFoAU+/msUAxYmXC56KbG5viC3G8kSIUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2
MzkvMS9GQkY5QUM1MDBDNTg5OTcwQjlFOEE2QzZFNkY4ODJEQzZGMjQ0ODg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCRjlBQzUwMEM1ODk5NzBC
OUU4QTZDNkU2Rjg4MkRDNkYyNDQ4ODUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzEv
MzEzNzM3MmUzODM2MmUzODM4MmUzMDJmMzIzMTJkMzMzMjIwM2QzZTIwMzIzNjMy
MzczNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsVZYMA0GCSqGSIb3DQEBCwUAA4IBAQBZ9jnZgoEX
tGdBaHUNZaAA0huT4B0HyAUnKpWnVHAGu+guQlqFN8kLp006yQUA5y8j4Z8zbIAM
+P8HXgOJVJy5/ujq9mgr68cUyhWlb6H2l60OLmbj8PXKcasWGvey6i4lsQnES4wg
PCdpUGYdfa3RFX49JWwF1EHS9hKg/25tClo38uuowHoKpb+k/HwYGSLyUueh2IvD
9ob5ojcgnz/LXJsYZIGhM42kQgoXCjmuKoXKwUnsbkbHRiVfBELh5QACXUzd81fj
UB8WL+PrjDbFRb7CLKJSBDAwW7yyCVXh9rTeibXJQBQfme9s06oW+7LGtjyTBad+
NGz8+7okkydD
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:20 2024 by rpki-client on console-fra.rpki-client.org