Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e38362e39302e302f32332d3233203d3e20323632373733.roa
File:                     3137372e38362e39302e302f32332d3233203d3e20323632373733.roa (raw, json)
Hash identifier:          pxDk5ZZlgLJUDnk2IsNfSYVAPc4jR1sTypm9MnxlDNA=
Subject key identifier:   23:89:FA:30:39:9B:9B:54:42:25:39:C5:CE:B9:61:22:7E:39:C3:2E
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       14C31DF65EB6B2959BBE82678F5D99DD34472319
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e38362e39302e302f32332d3233203d3e20323632373733.roa
Signing time:             Thu 04 Apr 2024 06:12:46 +0000
ROA not before:           Thu 04 Apr 2024 06:07:46 +0000
ROA not after:            Thu 03 Apr 2025 06:12:46 +0000
asID:                     262773
IP address blocks:        177.86.90.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 17:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:c3:1d:f6:5e:b6:b2:95:9b:be:82:67:8f:5d:99:dd:34:47:23:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Apr  4 06:07:46 2024 GMT
            Not After : Apr  3 06:12:46 2025 GMT
        Subject: CN=2389FA30399B9B54422539C5CEB961227E39C32E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fb:57:b5:af:63:d4:64:59:32:22:87:ab:00:
                    c8:90:20:0b:b9:f0:79:8a:0f:98:f6:06:a0:a0:ed:
                    99:cf:f8:68:1f:5e:b5:23:a1:9b:9a:95:7a:83:4c:
                    b8:a6:9e:02:31:56:d5:17:e6:7e:7b:06:b1:49:4c:
                    e7:69:fb:22:b3:d3:68:51:49:1e:3c:7c:c8:08:82:
                    d7:7c:23:49:39:2a:25:03:0a:45:46:65:02:c3:30:
                    6b:8b:7d:da:af:3c:05:b7:25:6c:9c:40:b9:f3:64:
                    44:83:5a:c2:23:d5:e7:1f:6e:0e:cc:42:2a:7f:15:
                    e2:e2:0d:b4:c2:3e:30:af:28:e7:85:d6:c7:8c:b2:
                    4e:3b:9a:4b:d1:51:a2:6f:d1:09:51:78:d1:60:3d:
                    38:6d:cb:56:eb:30:cd:85:5c:9e:43:13:f5:46:86:
                    30:7e:57:5b:56:da:5c:16:0b:8a:92:e1:aa:02:65:
                    e6:0a:20:98:6a:1c:b4:18:33:c7:36:10:51:10:16:
                    21:90:10:c4:29:24:f8:a9:29:5c:87:e5:98:75:a8:
                    86:40:0a:78:30:a6:df:c3:51:6e:e4:e0:9f:c1:94:
                    37:8c:2f:e1:85:68:d4:bf:d4:3f:15:88:91:45:56:
                    cc:27:ac:ed:eb:9a:62:f1:14:a1:97:d5:e6:96:37:
                    59:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:89:FA:30:39:9B:9B:54:42:25:39:C5:CE:B9:61:22:7E:39:C3:2E
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e38362e39302e302f32332d3233203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:27:34:aa:f3:c4:5b:48:7d:f2:dc:4a:54:59:b4:30:ff:41:
         34:b5:6c:3e:54:02:c1:b0:79:f1:5f:0c:32:ee:ae:46:9b:00:
         cb:dc:66:1a:69:56:bb:ad:09:70:97:68:47:ba:70:4f:c8:02:
         44:9f:22:e7:52:ce:1e:a1:d7:83:bd:53:16:ca:33:25:d5:fb:
         9a:61:84:3f:b4:77:84:7c:c5:f2:bd:9a:73:97:c8:8b:bb:17:
         10:b8:27:30:c5:b3:ae:c7:dd:b8:ee:09:e7:15:fd:8e:e5:56:
         79:62:5e:9a:70:08:58:fb:c0:6a:39:4e:1d:8c:12:42:02:d9:
         f0:a3:da:77:37:58:b8:95:9c:c2:29:97:80:0e:9a:a9:b5:52:
         c7:91:7c:80:5a:65:6b:30:2f:47:5c:75:4d:f8:18:52:6e:09:
         ed:26:85:f8:8a:0a:ea:26:f7:6a:55:60:9f:4a:d5:a1:af:4f:
         d6:15:30:1b:b3:92:c3:9b:ca:20:d0:a6:43:b4:79:e9:6e:17:
         8f:3a:b1:8e:1b:cf:9d:6d:cc:8c:ff:2c:83:9e:67:38:27:07:
         ae:e3:d0:65:ed:4d:c0:b6:60:0c:fd:65:23:73:98:47:34:0f:
         89:43:64:a0:2d:9f:ab:7e:bb:2b:7a:ce:cb:c7:c2:ea:78:5a:
         1a:9a:bc:53
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFMMd9l62spWbvoJnj12Z3TRHIxkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJGOUFDNTAwQzU4OTk3MEI5RThBNkM2RTZGODgyREM2
RjI0NDg4NTAeFw0yNDA0MDQwNjA3NDZaFw0yNTA0MDMwNjEyNDZaMDMxMTAvBgNV
BAMTKDIzODlGQTMwMzk5QjlCNTQ0MjI1MzlDNUNFQjk2MTIyN0UzOUMzMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI+1e1r2PUZFkyIoerAMiQIAu5
8HmKD5j2BqCg7ZnP+GgfXrUjoZualXqDTLimngIxVtUX5n57BrFJTOdp+yKz02hR
SR48fMgIgtd8I0k5KiUDCkVGZQLDMGuLfdqvPAW3JWycQLnzZESDWsIj1ecfbg7M
Qip/FeLiDbTCPjCvKOeF1seMsk47mkvRUaJv0QlReNFgPThty1brMM2FXJ5DE/VG
hjB+V1tW2lwWC4qS4aoCZeYKIJhqHLQYM8c2EFEQFiGQEMQpJPipKVyH5Zh1qIZA
Cngwpt/DUW7k4J/BlDeML+GFaNS/1D8ViJFFVswnrO3rmmLxFKGX1eaWN1npAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUI4n6MDmbm1RCJTnFzrlhIn45wy4wHwYDVR0j
BBgwFoAU+/msUAxYmXC56KbG5viC3G8kSIUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2
MzkvMS9GQkY5QUM1MDBDNTg5OTcwQjlFOEE2QzZFNkY4ODJEQzZGMjQ0ODg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCRjlBQzUwMEM1ODk5NzBC
OUU4QTZDNkU2Rjg4MkRDNkYyNDQ4ODUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzEv
MzEzNzM3MmUzODM2MmUzOTMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMy
MzczNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsVZaMA0GCSqGSIb3DQEBCwUAA4IBAQA3JzSq88Rb
SH3y3EpUWbQw/0E0tWw+VALBsHnxXwwy7q5GmwDL3GYaaVa7rQlwl2hHunBPyAJE
nyLnUs4eodeDvVMWyjMl1fuaYYQ/tHeEfMXyvZpzl8iLuxcQuCcwxbOux9247gnn
Ff2O5VZ5Yl6acAhY+8BqOU4djBJCAtnwo9p3N1i4lZzCKZeADpqptVLHkXyAWmVr
MC9HXHVN+BhSbgntJoX4igrqJvdqVWCfStWhr0/WFTAbs5LDm8og0KZDtHnpbheP
OrGOG8+dbcyM/yyDnmc4Jweu49Bl7U3AtmAM/WUjc5hHNA+JQ2SgLZ+rfrsres7L
x8LqeFoamrxT
-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:12 2024 by rpki-client on console-fra.rpki-client.org