Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234302e302f32342d3234203d3e20323632383636.roa
File:                     3137372e31322e3234302e302f32342d3234203d3e20323632383636.roa (raw, json)
Hash identifier:          376VrwNIMCtOiNUqzmsvL3i3so8FcjhVzl3z7uLfopw=
Subject key identifier:   B3:6A:54:6E:A7:17:45:9D:0C:1D:51:8C:D9:63:76:B1:B6:7A:7E:1B
Certificate issuer:       /CN=732B1140085142A7D7474788EEF465DEABBE5080
Certificate serial:       15181B41C97D2E002B52E833DC1DC8654ABA3810
Authority key identifier: 73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234302e302f32342d3234203d3e20323632383636.roa
Signing time:             Thu 04 Apr 2024 00:56:08 +0000
ROA not before:           Thu 04 Apr 2024 00:51:08 +0000
ROA not after:            Thu 03 Apr 2025 00:56:08 +0000
asID:                     262866
IP address blocks:        177.12.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl
                          rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 12:47:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:18:1b:41:c9:7d:2e:00:2b:52:e8:33:dc:1d:c8:65:4a:ba:38:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732B1140085142A7D7474788EEF465DEABBE5080
        Validity
            Not Before: Apr  4 00:51:08 2024 GMT
            Not After : Apr  3 00:56:08 2025 GMT
        Subject: CN=B36A546EA717459D0C1D518CD96376B1B67A7E1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:08:36:b5:69:cf:e3:9f:c7:6a:98:15:ae:06:
                    9f:87:19:db:cc:68:e6:b2:b1:e5:93:98:8d:b2:29:
                    08:c6:3b:75:14:44:6f:d7:f3:80:6d:ae:7b:cd:cb:
                    f0:31:b5:90:8f:60:38:15:5e:4f:2b:08:23:66:4a:
                    25:c0:fe:95:92:db:ed:a6:df:5b:20:ed:9b:54:db:
                    61:4c:05:ec:82:52:46:b9:da:b8:ff:1f:0b:82:e4:
                    a6:a5:7b:69:5c:58:b9:15:56:42:a1:85:64:23:06:
                    ee:f1:07:a0:ba:07:d0:be:b2:bd:16:cd:3b:84:ff:
                    e3:08:53:e8:27:c9:3d:a3:96:ee:78:a9:cd:df:0a:
                    48:2d:0b:e9:8a:ab:08:57:e3:3e:79:df:a9:02:ac:
                    7c:f0:82:f5:f7:c2:f3:85:84:d8:cd:3c:eb:2b:17:
                    b4:10:b1:db:8b:7d:ac:07:70:7a:6e:89:19:87:06:
                    fd:d4:df:5a:73:4c:02:2e:12:ce:cb:4f:d5:65:cc:
                    37:7c:7c:12:6f:76:62:ba:6a:2d:1f:ce:62:cf:18:
                    57:c9:4f:f6:41:7d:d1:e5:4a:aa:b7:ab:06:59:be:
                    e5:8f:48:ac:69:b3:1a:fc:0d:26:86:ea:ff:83:b1:
                    bc:2d:d3:67:92:97:69:35:92:34:ef:c1:f4:e2:45:
                    5b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:6A:54:6E:A7:17:45:9D:0C:1D:51:8C:D9:63:76:B1:B6:7A:7E:1B
            X509v3 Authority Key Identifier:
                keyid:73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234302e302f32342d3234203d3e20323632383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:55:b2:db:41:30:77:99:56:4f:ff:c1:17:53:6e:ec:66:eb:
         2c:87:e2:83:1b:f3:c6:7d:ee:7a:33:d3:0e:a3:bc:09:bf:24:
         fe:fa:92:df:5e:72:b6:32:5f:6e:a3:4b:3a:b5:45:d1:37:40:
         71:35:18:42:94:a8:d6:f9:89:48:fc:a1:60:52:3d:fe:0c:df:
         a6:3c:4c:76:75:7d:e7:c3:71:62:b5:eb:ba:07:f4:d6:37:16:
         09:18:a1:42:d5:de:4a:e5:b5:a9:09:bf:83:10:67:69:e3:b8:
         9d:b0:c1:6e:2c:68:a6:8b:f0:3e:4c:aa:e1:be:78:7c:ca:e0:
         68:23:7c:08:02:bd:29:5f:97:9c:74:79:50:d7:af:43:8a:1c:
         91:61:6b:0a:bd:ee:71:8b:2d:8b:b0:73:98:47:79:42:e6:89:
         df:76:c5:ab:ea:c4:87:3c:41:bd:04:8c:59:2d:d9:95:42:eb:
         dd:99:58:74:43:2a:61:e0:74:70:e4:e0:64:09:91:45:a1:f4:
         89:cb:8d:07:95:51:8b:70:69:78:5d:30:39:29:94:89:cb:d8:
         f6:04:37:8f:25:97:7a:5b:68:d8:c5:7b:69:3d:dc:85:8b:50:
         b7:77:d7:f3:0a:34:22:a1:d0:07:1a:c7:79:89:2d:28:d4:12:
         98:ff:6a:e8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFRgbQcl9LgArUugz3B3IZUq6OBAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzMyQjExNDAwODUxNDJBN0Q3NDc0Nzg4RUVGNDY1REVB
QkJFNTA4MDAeFw0yNDA0MDQwMDUxMDhaFw0yNTA0MDMwMDU2MDhaMDMxMTAvBgNV
BAMTKEIzNkE1NDZFQTcxNzQ1OUQwQzFENTE4Q0Q5NjM3NkIxQjY3QTdFMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6CDa1ac/jn8dqmBWuBp+HGdvM
aOayseWTmI2yKQjGO3UURG/X84BtrnvNy/AxtZCPYDgVXk8rCCNmSiXA/pWS2+2m
31sg7ZtU22FMBeyCUka52rj/HwuC5Kale2lcWLkVVkKhhWQjBu7xB6C6B9C+sr0W
zTuE/+MIU+gnyT2jlu54qc3fCkgtC+mKqwhX4z5536kCrHzwgvX3wvOFhNjNPOsr
F7QQsduLfawHcHpuiRmHBv3U31pzTAIuEs7LT9VlzDd8fBJvdmK6ai0fzmLPGFfJ
T/ZBfdHlSqq3qwZZvuWPSKxpsxr8DSaG6v+Dsbwt02eSl2k1kjTvwfTiRVuVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUs2pUbqcXRZ0MHVGM2WN2sbZ6fhswHwYDVR0j
BBgwFoAUcysRQAhRQqfXR0eI7vRl3qu+UIAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHM1aExpblZVYXNhZXU5ZW9KUVB3NkRVeloyNDJMRUI4WHBaVHVLWk5T
RWMvMS83MzJCMTE0MDA4NTE0MkE3RDc0NzQ3ODhFRUY0NjVERUFCQkU1MDgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczMkIxMTQwMDg1MTQyQTdE
NzQ3NDc4OEVFRjQ2NURFQUJCRTUwODAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRzNWhMaW5WVWFzYWV1OWVvSlFQdzZEVXpaMjQyTEVCOFhwWlR1S1pOU0VjLzEv
MzEzNzM3MmUzMTMyMmUzMjM0MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzODM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxDPAwDQYJKoZIhvcNAQELBQADggEBAAlVsttB
MHeZVk//wRdTbuxm6yyH4oMb88Z97noz0w6jvAm/JP76kt9ecrYyX26jSzq1RdE3
QHE1GEKUqNb5iUj8oWBSPf4M36Y8THZ1fefDcWK167oH9NY3FgkYoULV3krltakJ
v4MQZ2njuJ2wwW4saKaL8D5MquG+eHzK4GgjfAgCvSlfl5x0eVDXr0OKHJFhawq9
7nGLLYuwc5hHeULmid92xavqxIc8Qb0EjFkt2ZVC692ZWHRDKmHgdHDk4GQJkUWh
9InLjQeVUYtwaXhdMDkplInL2PYEN48ll3pbaNjFe2k93IWLULd31/MKNCKh0Aca
x3mJLSjUEpj/aug=
-----END CERTIFICATE-----
Generated at Sat Sep 28 11:59:53 2024 by rpki-client on console-fra.rpki-client.org