Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e34382e302f32302d3332203d3e203532393330.roa
File:                     3137372e3138352e34382e302f32302d3332203d3e203532393330.roa (raw, json)
Hash identifier:          iPFnt56QV6x32pVa5VtgZVZVxYIlcpgXGmRKLpbumLk=
Subject key identifier:   B7:AA:C9:A0:F9:65:03:E5:6D:BA:42:75:FB:FD:C1:77:1A:18:59:05
Certificate issuer:       /CN=6736156E675A917970802E9BE2FD1DDCB869A61B
Certificate serial:       48D2AAF893B5640784945D3180141EE2FC8A78F3
Authority key identifier: 67:36:15:6E:67:5A:91:79:70:80:2E:9B:E2:FD:1D:DC:B8:69:A6:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6736156E675A917970802E9BE2FD1DDCB869A61B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e34382e302f32302d3332203d3e203532393330.roa
Signing time:             Sun 22 Sep 2024 19:43:29 +0000
ROA not before:           Sun 22 Sep 2024 19:38:29 +0000
ROA not after:            Sun 21 Sep 2025 19:43:29 +0000
asID:                     52930
IP address blocks:        177.185.48.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/6736156E675A917970802E9BE2FD1DDCB869A61B.crl
                          rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/6736156E675A917970802E9BE2FD1DDCB869A61B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6736156E675A917970802E9BE2FD1DDCB869A61B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:42:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d2:aa:f8:93:b5:64:07:84:94:5d:31:80:14:1e:e2:fc:8a:78:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6736156E675A917970802E9BE2FD1DDCB869A61B
        Validity
            Not Before: Sep 22 19:38:29 2024 GMT
            Not After : Sep 21 19:43:29 2025 GMT
        Subject: CN=B7AAC9A0F96503E56DBA4275FBFDC1771A185905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:56:8b:63:54:bc:7c:75:14:06:61:d8:5d:04:
                    09:89:54:43:e7:39:8f:16:2d:55:62:98:f7:8d:b2:
                    2e:5a:58:23:1e:92:40:2a:07:e4:8c:e7:c9:02:18:
                    81:bf:3a:08:5a:f5:eb:20:33:7a:4e:12:3a:a9:d1:
                    c0:cc:29:7a:26:eb:51:94:49:61:4b:fe:34:1d:42:
                    c5:ea:e8:c3:5d:0f:9a:8a:46:74:08:d7:ae:0c:36:
                    43:7d:9a:c2:9a:ef:f3:c1:2f:d9:7c:1f:80:f1:51:
                    2b:a5:d0:60:6d:80:d1:54:28:0f:ad:29:f5:53:82:
                    0f:8f:9c:5b:f1:f4:e5:69:88:d0:ad:88:6c:8e:4c:
                    06:74:48:44:93:8c:18:94:38:67:f9:a2:9e:10:b2:
                    0e:f5:d7:29:d0:91:62:3d:f7:ed:ef:1d:c0:26:fd:
                    65:28:ba:c6:d9:d2:0e:c3:bc:98:18:a9:34:9f:13:
                    84:ef:34:95:7b:eb:c7:19:81:0c:f0:ac:3c:60:f2:
                    c3:22:6b:ea:db:c5:05:66:38:e2:f5:f2:e7:2b:d4:
                    4d:47:c1:9c:0d:92:20:44:b9:a3:22:97:d2:89:b8:
                    75:d9:1f:ab:f1:6c:a6:cd:54:c2:83:76:7a:7a:41:
                    28:e8:93:e0:ce:58:07:d7:58:37:6b:5a:37:e1:60:
                    40:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:AA:C9:A0:F9:65:03:E5:6D:BA:42:75:FB:FD:C1:77:1A:18:59:05
            X509v3 Authority Key Identifier:
                keyid:67:36:15:6E:67:5A:91:79:70:80:2E:9B:E2:FD:1D:DC:B8:69:A6:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/6736156E675A917970802E9BE2FD1DDCB869A61B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6736156E675A917970802E9BE2FD1DDCB869A61B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3137372e3138352e34382e302f32302d3332203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         25:79:ed:99:33:54:49:2e:56:a8:50:48:18:1a:b1:b7:0e:6c:
         cb:71:0f:27:a9:63:c7:72:60:9a:6f:8c:3a:35:bf:33:73:1a:
         74:b2:10:cb:6e:76:9b:18:f6:21:86:d8:08:fd:20:01:3a:3f:
         d6:dd:1b:d3:c5:30:e4:39:07:2b:14:e2:fe:5c:e4:30:a3:53:
         10:eb:a4:12:25:81:ce:aa:07:be:5f:73:31:ff:53:87:1f:36:
         40:8b:8b:45:f0:aa:9d:24:9f:04:5c:7b:76:74:f1:2d:5b:60:
         11:dc:21:d7:59:dd:d6:c9:a8:c6:80:80:fa:ff:2f:d5:61:88:
         29:13:fb:1c:14:2c:54:86:c9:5b:61:4f:b5:89:a2:48:aa:1f:
         28:d3:f7:08:ba:a0:c0:60:b1:56:12:7c:3d:f8:34:72:61:ad:
         8e:9d:db:88:1a:06:01:db:09:4f:4e:1d:f0:4b:dc:23:41:a7:
         3c:c1:04:2a:71:22:6c:bf:aa:09:6c:02:a1:89:f8:09:8a:fe:
         b2:57:f3:19:e3:72:44:47:2f:40:a1:86:e1:d8:ec:29:c2:cf:
         e5:72:ed:8b:7d:56:9a:56:27:e7:f5:ab:39:ae:75:d5:fd:44:
         cf:48:de:de:6f:35:a3:00:9d:8b:ef:94:25:66:26:25:2b:af:
         ee:64:3d:2b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSNKq+JO1ZAeElF0xgBQe4vyKePMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjczNjE1NkU2NzVBOTE3OTcwODAyRTlCRTJGRDFERENC
ODY5QTYxQjAeFw0yNDA5MjIxOTM4MjlaFw0yNTA5MjExOTQzMjlaMDMxMTAvBgNV
BAMTKEI3QUFDOUEwRjk2NTAzRTU2REJBNDI3NUZCRkRDMTc3MUExODU5MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdVotjVLx8dRQGYdhdBAmJVEPn
OY8WLVVimPeNsi5aWCMekkAqB+SM58kCGIG/Ogha9esgM3pOEjqp0cDMKXom61GU
SWFL/jQdQsXq6MNdD5qKRnQI164MNkN9msKa7/PBL9l8H4DxUSul0GBtgNFUKA+t
KfVTgg+PnFvx9OVpiNCtiGyOTAZ0SESTjBiUOGf5op4Qsg711ynQkWI99+3vHcAm
/WUousbZ0g7DvJgYqTSfE4TvNJV768cZgQzwrDxg8sMia+rbxQVmOOL18ucr1E1H
wZwNkiBEuaMil9KJuHXZH6vxbKbNVMKDdnp6QSjok+DOWAfXWDdrWjfhYECjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUt6rJoPllA+VtukJ1+/3BdxoYWQUwHwYDVR0j
BBgwFoAUZzYVbmdakXlwgC6b4v0d3LhpphswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjdEYkU5OGRQWjlDVmkyVEhDMW9FVUVzck11NWpGNU1lZm5HMTluV1R6
anIvMC82NzM2MTU2RTY3NUE5MTc5NzA4MDJFOUJFMkZEMUREQ0I4NjlBNjFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3MzYxNTZFNjc1QTkxNzk3
MDgwMkU5QkUyRkQxRERDQjg2OUE2MUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o3RGJFOThkUFo5Q1ZpMlRIQzFvRVVFc3JNdTVqRjVNZWZuRzE5bldUempyLzAv
MzEzNzM3MmUzMTM4MzUyZTM0MzgyZTMwMmYzMjMwMmQzMzMyMjAzZDNlMjAzNTMy
MzkzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEsbkwMA0GCSqGSIb3DQEBCwUAA4IBAQAlee2ZM1RJ
LlaoUEgYGrG3DmzLcQ8nqWPHcmCab4w6Nb8zcxp0shDLbnabGPYhhtgI/SABOj/W
3RvTxTDkOQcrFOL+XOQwo1MQ66QSJYHOqge+X3Mx/1OHHzZAi4tF8KqdJJ8EXHt2
dPEtW2AR3CHXWd3WyajGgID6/y/VYYgpE/scFCxUhslbYU+1iaJIqh8o0/cIuqDA
YLFWEnw9+DRyYa2OnduIGgYB2wlPTh3wS9wjQac8wQQqcSJsv6oJbAKhifgJiv6y
V/MZ43JERy9AoYbh2Owpws/lcu2LfVaaVifn9as5rnXV/UTPSN7ebzWjAJ2L75Ql
ZiYlK6/uZD0r
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:14 2024 by rpki-client on console-fra.rpki-client.org