Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131352e302f32342d3234203d3e203532393332.roa
File:                     3137372e3138352e3131352e302f32342d3234203d3e203532393332.roa (raw, json)
Hash identifier:          4CQEUPdI+B4M1KZIMOn6z3aQhDlklrS4Ezobih+k4eU=
Subject key identifier:   41:6A:52:F0:EF:8C:32:A3:A9:5D:63:02:4B:BD:71:CF:27:7D:68:F4
Certificate issuer:       /CN=EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C
Certificate serial:       4301C1A636D24077668171234D9835AB4CCEA734
Authority key identifier: EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131352e302f32342d3234203d3e203532393332.roa
Signing time:             Wed 08 May 2024 18:20:59 +0000
ROA not before:           Wed 08 May 2024 18:15:59 +0000
ROA not after:            Wed 07 May 2025 18:20:59 +0000
asID:                     52932
IP address blocks:        177.185.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.crl
                          rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 15 Jun 2024 23:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:01:c1:a6:36:d2:40:77:66:81:71:23:4d:98:35:ab:4c:ce:a7:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C
        Validity
            Not Before: May  8 18:15:59 2024 GMT
            Not After : May  7 18:20:59 2025 GMT
        Subject: CN=416A52F0EF8C32A3A95D63024BBD71CF277D68F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a0:30:ee:f9:21:67:98:2e:65:8d:e0:02:bf:
                    c3:ee:8a:2a:7c:d7:81:4b:18:9e:1b:a8:6c:72:df:
                    e5:38:fc:29:97:5e:36:1f:e4:4a:0c:a6:a4:fd:ba:
                    5d:f8:b5:99:41:71:e2:85:ad:02:65:89:b3:d8:12:
                    cd:19:2e:f9:a6:2f:9f:2b:35:06:b2:a5:32:b8:a4:
                    e5:4d:ae:73:9a:74:21:a8:78:e6:83:68:06:ab:a2:
                    b8:fd:71:a3:76:20:1a:b5:21:fc:95:f0:b5:81:e9:
                    dd:79:65:3a:7e:62:17:3e:b5:49:5a:1e:e5:49:3c:
                    8f:43:7a:11:63:21:d6:55:71:a9:61:be:f3:83:33:
                    10:1b:a3:c7:8d:72:a4:aa:60:37:07:da:8e:00:89:
                    d7:2f:b5:3d:7e:48:bf:08:e1:e9:f2:fa:ec:bf:f5:
                    11:41:04:1b:ac:8c:f5:a8:d4:c6:81:42:69:fb:5d:
                    5c:58:8c:61:9b:ae:e7:71:15:ab:2f:95:15:3d:73:
                    19:b1:13:86:dc:e2:8f:b4:67:bd:50:57:6f:5a:d9:
                    5b:88:2d:36:55:93:1c:e8:5d:99:e5:17:69:13:ae:
                    bd:5f:40:8d:62:10:c3:91:15:24:9f:01:58:1f:1d:
                    e0:af:9a:43:7b:c9:10:d2:08:70:8a:f5:ad:7a:5c:
                    aa:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6A:52:F0:EF:8C:32:A3:A9:5D:63:02:4B:BD:71:CF:27:7D:68:F4
            X509v3 Authority Key Identifier:
                keyid:EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131352e302f32342d3234203d3e203532393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:57:82:bd:f4:f5:21:b9:c9:06:54:f2:8b:1b:2d:14:29:41:
         9c:0a:74:d0:ca:55:bf:99:8b:4c:44:ff:26:26:7b:c9:70:5d:
         89:06:10:49:09:c7:5a:17:8f:ae:7b:a7:98:5a:fc:c1:90:fa:
         d4:f0:8d:38:84:6f:3a:1c:7e:83:0e:43:05:d0:c5:d1:57:01:
         b6:69:a3:0a:eb:31:39:62:fe:8c:b2:61:a5:43:74:94:0a:9e:
         6f:56:00:dc:e5:2d:8a:17:bd:69:07:ba:55:b0:38:e2:c4:41:
         f9:f1:9a:19:97:23:4c:b2:24:1e:f8:a3:77:08:04:4b:af:5a:
         e1:69:19:9e:12:d4:ab:2f:9a:6f:56:0d:ee:a0:6f:be:96:25:
         13:ae:54:1d:b9:72:16:50:5f:0a:71:f3:e5:81:f6:60:ea:e6:
         98:39:76:ec:03:2b:e2:0d:af:eb:8c:74:4f:93:c3:99:e7:6a:
         47:1e:12:18:27:51:4a:3c:c2:00:d1:51:a8:3a:fb:e8:e7:5f:
         dc:ff:b4:86:3d:8d:84:c8:d8:c8:1f:53:30:ac:23:49:ed:36:
         c6:bc:de:6c:75:6f:95:55:ec:6e:6c:69:ef:07:2c:3e:23:d3:
         03:e7:06:39:ba:c7:3c:4b:0e:26:d9:3e:cd:6a:b0:72:18:22:
         be:a8:c9:16
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQwHBpjbSQHdmgXEjTZg1q0zOpzQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUE2QUQyRjVGNUJDRTdFOURDRkY3RjNDM0VFQzRCRTAx
MjBFMUM0QzAeFw0yNDA1MDgxODE1NTlaFw0yNTA1MDcxODIwNTlaMDMxMTAvBgNV
BAMTKDQxNkE1MkYwRUY4QzMyQTNBOTVENjMwMjRCQkQ3MUNGMjc3RDY4RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSoDDu+SFnmC5ljeACv8Puiip8
14FLGJ4bqGxy3+U4/CmXXjYf5EoMpqT9ul34tZlBceKFrQJlibPYEs0ZLvmmL58r
NQaypTK4pOVNrnOadCGoeOaDaAarorj9caN2IBq1IfyV8LWB6d15ZTp+Yhc+tUla
HuVJPI9DehFjIdZVcalhvvODMxAbo8eNcqSqYDcH2o4AidcvtT1+SL8I4eny+uy/
9RFBBBusjPWo1MaBQmn7XVxYjGGbrudxFasvlRU9cxmxE4bc4o+0Z71QV29a2VuI
LTZVkxzoXZnlF2kTrr1fQI1iEMORFSSfAVgfHeCvmkN7yRDSCHCK9a16XKptAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQWpS8O+MMqOpXWMCS71xzyd9aPQwHwYDVR0j
BBgwFoAU6mrS9fW85+nc/388PuxL4BIOHEwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHhXY2s2Qm80bVExQnV4QkZiR2JBbVFVWTJ4VW4yYWhkdW01TTJ6ZHpQ
R2QvMC9FQTZBRDJGNUY1QkNFN0U5RENGRjdGM0MzRUVDNEJFMDEyMEUxQzRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBNkFEMkY1RjVCQ0U3RTlE
Q0ZGN0YzQzNFRUM0QkUwMTIwRTFDNEMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR4V2NrNkJvNG1RMUJ1eEJGYkdiQW1RVVkyeFVuMmFoZHVtNU0yemR6UEdkLzAv
MzEzNzM3MmUzMTM4MzUyZTMxMzEzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzIzOTMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxuXMwDQYJKoZIhvcNAQELBQADggEBAFlXgr30
9SG5yQZU8osbLRQpQZwKdNDKVb+Zi0xE/yYme8lwXYkGEEkJx1oXj657p5ha/MGQ
+tTwjTiEbzocfoMOQwXQxdFXAbZpowrrMTli/oyyYaVDdJQKnm9WANzlLYoXvWkH
ulWwOOLEQfnxmhmXI0yyJB74o3cIBEuvWuFpGZ4S1Ksvmm9WDe6gb76WJROuVB25
chZQXwpx8+WB9mDq5pg5duwDK+INr+uMdE+Tw5nnakceEhgnUUo8wgDRUag6++jn
X9z/tIY9jYTI2MgfUzCsI0ntNsa83mx1b5VV7G5sae8HLD4j0wPnBjm6xzxLDibZ
Ps1qsHIYIr6oyRY=
-----END CERTIFICATE-----
Generated at Sat Jun 15 12:14:24 2024 by rpki-client on console-fra.rpki-client.org