Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131362e302f32322d3232203d3e203532393332.roa
File:                     3137372e3138352e3131362e302f32322d3232203d3e203532393332.roa (raw, json)
Hash identifier:          NtMZrX8LR3BdbEYLA6W0Hv/2qrfsU/3bCxTK8c2PJYw=
Subject key identifier:   D5:54:2B:AC:72:79:EC:90:2C:40:BB:34:13:96:90:BE:15:86:3E:92
Certificate issuer:       /CN=EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C
Certificate serial:       51E1F979E75DB5EB3116FD8EBA9DBDC0695CCA10
Authority key identifier: EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131362e302f32322d3232203d3e203532393332.roa
Signing time:             Wed 08 May 2024 18:21:01 +0000
ROA not before:           Wed 08 May 2024 18:16:01 +0000
ROA not after:            Wed 07 May 2025 18:21:01 +0000
asID:                     52932
IP address blocks:        177.185.116.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.crl
                          rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 11:14:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e1:f9:79:e7:5d:b5:eb:31:16:fd:8e:ba:9d:bd:c0:69:5c:ca:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C
        Validity
            Not Before: May  8 18:16:01 2024 GMT
            Not After : May  7 18:21:01 2025 GMT
        Subject: CN=D5542BAC7279EC902C40BB34139690BE15863E92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:09:b9:7f:13:a5:88:78:d2:63:87:29:6c:e1:
                    d1:a1:7f:d0:68:f3:59:67:63:c2:0e:66:b0:c2:c9:
                    57:71:49:2c:a1:bf:3d:e9:05:ce:e0:a6:8e:f2:1c:
                    14:86:8e:f6:ac:33:4b:4d:15:b4:6a:2f:6f:4b:9d:
                    92:ac:a4:d2:e1:ee:47:83:7f:71:10:49:08:21:aa:
                    ba:78:fb:e8:1f:a1:8b:17:e7:ae:e9:9a:1d:7b:1a:
                    37:cf:69:17:59:e1:6e:01:1e:40:fb:b2:76:70:4d:
                    fb:49:38:30:7e:01:8d:76:04:c3:3c:e4:ca:ad:a0:
                    6b:21:4c:6a:1a:3c:8b:95:65:7a:c5:20:62:18:14:
                    55:bb:97:ee:f7:e8:48:30:8b:d4:32:58:9b:79:69:
                    37:bd:e9:ff:76:b3:11:ae:6e:e9:80:8f:51:37:03:
                    2f:07:f2:63:eb:a5:4c:c0:2b:37:50:55:89:4d:e1:
                    d6:4e:86:24:ac:3a:50:1a:89:05:90:f4:12:36:90:
                    ad:a5:9f:dc:cc:cb:83:08:b3:80:e7:0f:d5:e1:a3:
                    d4:b8:1f:8c:38:bf:b5:70:bd:18:72:12:c2:0a:42:
                    a7:33:92:40:f2:25:66:d3:dc:38:60:f5:dc:47:98:
                    94:57:64:28:c6:70:61:4f:2f:15:b4:51:f4:35:ac:
                    f0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:54:2B:AC:72:79:EC:90:2C:40:BB:34:13:96:90:BE:15:86:3E:92
            X509v3 Authority Key Identifier:
                keyid:EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131362e302f32322d3232203d3e203532393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:8e:66:b6:df:c2:17:aa:cb:89:59:17:84:24:a4:65:99:d4:
         cf:65:80:6f:d4:9e:a7:55:e7:b0:91:38:b9:e1:3e:4f:3c:cf:
         67:dc:86:b7:57:ce:b8:60:33:71:60:9c:a6:c2:0f:bb:5b:d3:
         50:36:5e:41:65:40:1b:aa:90:6a:58:57:91:41:90:57:01:a9:
         45:53:b8:f6:57:7d:ed:e3:24:d5:8b:41:8e:20:aa:e5:76:3b:
         c3:e2:98:05:5e:70:32:87:81:ab:e6:e6:78:48:79:74:f4:8b:
         6f:28:b9:31:33:e1:c4:b1:e9:ab:b2:3d:cf:87:9a:41:12:13:
         91:57:2d:09:b9:cd:40:67:c8:1d:5f:7a:51:f7:93:01:49:1d:
         31:37:c4:22:91:9a:f6:ca:2c:09:65:c1:52:3a:f9:88:66:2a:
         08:de:35:7f:75:1f:d2:0e:6c:fa:67:e0:e4:62:0b:32:f5:e0:
         dc:dc:41:d0:ce:4c:8d:d0:3b:da:e7:99:2c:2c:c9:a8:3b:98:
         00:02:2f:78:24:4e:87:93:2e:4d:2a:9a:02:4d:32:ee:81:c2:
         5d:62:ab:94:55:c4:51:e1:35:23:9c:40:fa:69:0b:e1:4e:44:
         2f:7a:54:94:4a:7e:75:c6:91:88:93:3d:f9:e3:7c:be:73:eb:
         d8:b3:dd:d0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUeH5eeddtesxFv2Oup29wGlcyhAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUE2QUQyRjVGNUJDRTdFOURDRkY3RjNDM0VFQzRCRTAx
MjBFMUM0QzAeFw0yNDA1MDgxODE2MDFaFw0yNTA1MDcxODIxMDFaMDMxMTAvBgNV
BAMTKEQ1NTQyQkFDNzI3OUVDOTAyQzQwQkIzNDEzOTY5MEJFMTU4NjNFOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkCbl/E6WIeNJjhyls4dGhf9Bo
81lnY8IOZrDCyVdxSSyhvz3pBc7gpo7yHBSGjvasM0tNFbRqL29LnZKspNLh7keD
f3EQSQghqrp4++gfoYsX567pmh17GjfPaRdZ4W4BHkD7snZwTftJODB+AY12BMM8
5MqtoGshTGoaPIuVZXrFIGIYFFW7l+736Egwi9QyWJt5aTe96f92sxGubumAj1E3
Ay8H8mPrpUzAKzdQVYlN4dZOhiSsOlAaiQWQ9BI2kK2ln9zMy4MIs4DnD9Xho9S4
H4w4v7VwvRhyEsIKQqczkkDyJWbT3Dhg9dxHmJRXZCjGcGFPLxW0UfQ1rPCnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU1VQrrHJ57JAsQLs0E5aQvhWGPpIwHwYDVR0j
BBgwFoAU6mrS9fW85+nc/388PuxL4BIOHEwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHhXY2s2Qm80bVExQnV4QkZiR2JBbVFVWTJ4VW4yYWhkdW01TTJ6ZHpQ
R2QvMC9FQTZBRDJGNUY1QkNFN0U5RENGRjdGM0MzRUVDNEJFMDEyMEUxQzRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBNkFEMkY1RjVCQ0U3RTlE
Q0ZGN0YzQzNFRUM0QkUwMTIwRTFDNEMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR4V2NrNkJvNG1RMUJ1eEJGYkdiQW1RVVkyeFVuMmFoZHVtNU0yemR6UEdkLzAv
MzEzNzM3MmUzMTM4MzUyZTMxMzEzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM1
MzIzOTMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxuXQwDQYJKoZIhvcNAQELBQADggEBAKeOZrbf
wheqy4lZF4QkpGWZ1M9lgG/UnqdV57CROLnhPk88z2fchrdXzrhgM3FgnKbCD7tb
01A2XkFlQBuqkGpYV5FBkFcBqUVTuPZXfe3jJNWLQY4gquV2O8PimAVecDKHgavm
5nhIeXT0i28ouTEz4cSx6auyPc+HmkESE5FXLQm5zUBnyB1felH3kwFJHTE3xCKR
mvbKLAllwVI6+YhmKgjeNX91H9IObPpn4ORiCzL14NzcQdDOTI3QO9rnmSwsyag7
mAACL3gkToeTLk0qmgJNMu6Bwl1iq5RVxFHhNSOcQPppC+FORC96VJRKfnXGkYiT
PfnjfL5z69iz3dA=
-----END CERTIFICATE-----
Generated at Sat Jun 15 13:30:48 2024 by rpki-client on console-ams.rpki-client.org