Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/1/3137372e3132362e3234302e302f32302d3234203d3e20323632333633.roa
File:                     3137372e3132362e3234302e302f32302d3234203d3e20323632333633.roa (raw, json)
Hash identifier:          cffRPNowtBinUEogW16TofYemEQrizwq/yXTY0xm/0A=
Subject key identifier:   ED:3B:A5:1D:B0:FB:CD:98:98:93:78:3E:DC:EA:16:DA:DE:D5:98:C1
Certificate issuer:       /CN=B9D1B1FF7CEF5F614BC7B3D382BC365BA8422054
Certificate serial:       CE6538532D8F662F4DB85C69C3A84A9DD53AC6
Authority key identifier: B9:D1:B1:FF:7C:EF:5F:61:4B:C7:B3:D3:82:BC:36:5B:A8:42:20:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9D1B1FF7CEF5F614BC7B3D382BC365BA8422054.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/1/3137372e3132362e3234302e302f32302d3234203d3e20323632333633.roa
Signing time:             Thu 09 May 2024 14:22:11 +0000
ROA not before:           Thu 09 May 2024 14:17:11 +0000
ROA not after:            Thu 08 May 2025 14:22:11 +0000
asID:                     262363
IP address blocks:        177.126.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/1/B9D1B1FF7CEF5F614BC7B3D382BC365BA8422054.crl
                          rsync://rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/1/B9D1B1FF7CEF5F614BC7B3D382BC365BA8422054.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9D1B1FF7CEF5F614BC7B3D382BC365BA8422054.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ce:65:38:53:2d:8f:66:2f:4d:b8:5c:69:c3:a8:4a:9d:d5:3a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9D1B1FF7CEF5F614BC7B3D382BC365BA8422054
        Validity
            Not Before: May  9 14:17:11 2024 GMT
            Not After : May  8 14:22:11 2025 GMT
        Subject: CN=ED3BA51DB0FBCD989893783EDCEA16DADED598C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b8:21:42:3b:78:ef:29:48:d9:f0:e4:bc:e1:
                    69:b7:5f:15:f3:51:6f:d1:1a:fb:00:72:ee:fb:84:
                    50:67:28:ef:4c:ab:52:0a:25:03:21:6e:d8:47:2f:
                    52:ec:0d:45:34:25:f6:48:b1:7c:d9:e3:49:36:d0:
                    4c:28:4f:89:4a:f9:18:43:3e:82:19:b7:3f:8d:f6:
                    7d:7b:a3:86:cc:00:87:01:ff:2f:f8:54:26:5b:6c:
                    17:97:b9:22:84:07:16:32:95:ea:74:e8:a0:aa:e9:
                    83:c1:cd:38:22:34:09:b5:1b:0a:d7:a9:bf:ef:3b:
                    f5:3a:6f:53:2f:4b:05:48:f2:ec:d5:30:a2:29:a3:
                    de:8c:82:55:9c:9c:1b:9a:f4:f7:e9:92:8f:9a:94:
                    c7:2c:92:62:82:cf:a1:c7:f0:9b:cd:8c:1f:5e:85:
                    d9:e3:ce:df:29:7e:f2:d5:11:c2:34:8f:2c:ec:ea:
                    9c:99:69:0a:ee:65:df:bf:33:69:14:ce:56:a3:ed:
                    55:37:ab:51:94:26:2d:83:07:fe:52:74:55:08:08:
                    40:f0:c3:d0:be:9e:3a:45:35:7e:1e:66:ed:7c:23:
                    e2:76:09:69:76:6f:9d:ea:e4:bc:a3:d5:b0:ab:7e:
                    05:88:91:7b:c5:4a:97:05:cb:1e:31:40:f3:47:ff:
                    40:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3B:A5:1D:B0:FB:CD:98:98:93:78:3E:DC:EA:16:DA:DE:D5:98:C1
            X509v3 Authority Key Identifier:
                keyid:B9:D1:B1:FF:7C:EF:5F:61:4B:C7:B3:D3:82:BC:36:5B:A8:42:20:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/1/B9D1B1FF7CEF5F614BC7B3D382BC365BA8422054.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9D1B1FF7CEF5F614BC7B3D382BC365BA8422054.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/uqCDAhnLfM36jksxY9aZ981FeRow6HXCxcKUWjEVfWB/1/3137372e3132362e3234302e302f32302d3234203d3e20323632333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4f:15:43:d9:12:5d:1c:f2:8a:ba:3c:05:a1:63:4b:61:12:ae:
         22:9c:f1:a1:cd:ea:6e:5c:f9:da:35:e9:14:2e:86:e9:0e:aa:
         0d:01:90:ff:94:a1:57:af:36:fb:94:2e:90:dc:e8:f6:06:f5:
         e6:7a:1f:17:69:64:38:6a:38:e4:fa:f9:1b:01:a2:77:d5:19:
         49:fd:ed:31:cc:35:f0:0c:6c:1c:52:29:7e:ba:80:96:cc:b9:
         f1:4c:a4:53:2f:1f:87:20:a6:13:2d:6f:0c:99:fe:49:da:54:
         65:3e:1f:13:77:90:9e:b7:38:28:66:1f:a8:9b:3d:92:21:b5:
         f6:d5:39:10:21:92:0e:75:1b:28:13:11:62:c6:49:b7:dd:65:
         1d:f9:11:ee:c8:c7:1f:00:01:ee:64:ae:d7:ac:41:45:4b:b2:
         f7:c5:f3:0f:57:f6:f3:10:04:e6:51:85:f2:9b:06:0d:b6:84:
         88:93:70:51:d0:93:7a:4b:ee:96:d4:99:09:5f:11:9c:f1:50:
         e2:c9:70:fd:c6:02:ac:9d:b4:f8:58:0b:52:00:38:8a:ea:1a:
         4b:85:06:b4:e8:b0:17:ee:5e:32:95:0b:09:05:fd:cb:3b:ff:
         4d:fb:6a:e6:9e:4b:06:66:58:23:9b:c0:91:6a:13:32:19:07:
         f8:20:44:a3
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUAM5lOFMtj2YvTbhcacOoSp3VOsYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlEMUIxRkY3Q0VGNUY2MTRCQzdCM0QzODJCQzM2NUJB
ODQyMjA1NDAeFw0yNDA1MDkxNDE3MTFaFw0yNTA1MDgxNDIyMTFaMDMxMTAvBgNV
BAMTKEVEM0JBNTFEQjBGQkNEOTg5ODkzNzgzRURDRUExNkRBREVENTk4QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmuCFCO3jvKUjZ8OS84Wm3XxXz
UW/RGvsAcu77hFBnKO9Mq1IKJQMhbthHL1LsDUU0JfZIsXzZ40k20EwoT4lK+RhD
PoIZtz+N9n17o4bMAIcB/y/4VCZbbBeXuSKEBxYylep06KCq6YPBzTgiNAm1GwrX
qb/vO/U6b1MvSwVI8uzVMKIpo96MglWcnBua9Pfpko+alMcskmKCz6HH8JvNjB9e
hdnjzt8pfvLVEcI0jyzs6pyZaQruZd+/M2kUzlaj7VU3q1GUJi2DB/5SdFUICEDw
w9C+njpFNX4eZu18I+J2CWl2b53q5Lyj1bCrfgWIkXvFSpcFyx4xQPNH/0CvAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU7TulHbD7zZiYk3g+3OoW2t7VmMEwHwYDVR0j
BBgwFoAUudGx/3zvX2FLx7PTgrw2W6hCIFQwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby91cUNEQWhuTGZNMzZqa3N4WTlhWjk4MUZlUm93NkhYQ3hjS1VXakVWZldC
LzEvQjlEMUIxRkY3Q0VGNUY2MTRCQzdCM0QzODJCQzM2NUJBODQyMjA1NC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9COUQxQjFGRjdDRUY1RjYxNEJD
N0IzRDM4MkJDMzY1QkE4NDIyMDU0LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby91
cUNEQWhuTGZNMzZqa3N4WTlhWjk4MUZlUm93NkhYQ3hjS1VXakVWZldCLzEvMzEz
NzM3MmUzMTMyMzYyZTMyMzQzMDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMyMzYz
MjMzMzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEBLF+8DANBgkqhkiG9w0BAQsFAAOCAQEATxVD2RJd
HPKKujwFoWNLYRKuIpzxoc3qblz52jXpFC6G6Q6qDQGQ/5ShV682+5QukNzo9gb1
5nofF2lkOGo45Pr5GwGid9UZSf3tMcw18AxsHFIpfrqAlsy58UykUy8fhyCmEy1v
DJn+SdpUZT4fE3eQnrc4KGYfqJs9kiG19tU5ECGSDnUbKBMRYsZJt91lHfkR7sjH
HwAB7mSu16xBRUuy98XzD1f28xAE5lGF8psGDbaEiJNwUdCTekvultSZCV8RnPFQ
4slw/cYCrJ20+FgLUgA4iuoaS4UGtOiwF+5eMpULCQX9yzv/Tftq5p5LBmZYI5vA
kWoTMhkH+CBEow==
-----END CERTIFICATE-----
Generated at Tue Nov 26 10:47:50 2024 by rpki-client on console-fra.rpki-client.org