Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/3137372e38342e32302e302f32322d3234203d3e203532373135.roa
File:                     3137372e38342e32302e302f32322d3234203d3e203532373135.roa (raw, json)
Hash identifier:          RL7RwQcjTKKA++BoYWaVFvGSkS1OFAP/DO2yENM0jCo=
Subject key identifier:   74:A3:56:A1:62:83:EB:C4:1D:E9:0B:E4:C2:92:0D:C1:14:40:49:CD
Certificate issuer:       /CN=5019A6C324130601793432FC2FAFF3DE1F1210C0
Certificate serial:       7B988E653BBF733B58ED41859FAD350F3EDC1326
Authority key identifier: 50:19:A6:C3:24:13:06:01:79:34:32:FC:2F:AF:F3:DE:1F:12:10:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/3137372e38342e32302e302f32322d3234203d3e203532373135.roa
Signing time:             Wed 07 Aug 2024 11:13:16 +0000
ROA not before:           Wed 07 Aug 2024 11:08:16 +0000
ROA not after:            Wed 06 Aug 2025 11:13:16 +0000
asID:                     52715
IP address blocks:        177.84.20.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.crl
                          rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 23:19:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:98:8e:65:3b:bf:73:3b:58:ed:41:85:9f:ad:35:0f:3e:dc:13:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5019A6C324130601793432FC2FAFF3DE1F1210C0
        Validity
            Not Before: Aug  7 11:08:16 2024 GMT
            Not After : Aug  6 11:13:16 2025 GMT
        Subject: CN=74A356A16283EBC41DE90BE4C2920DC1144049CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e1:13:b2:c0:82:72:c4:a3:28:0c:9f:44:76:
                    cf:17:86:99:83:ea:a0:67:3d:91:92:f9:bb:55:03:
                    d0:99:5c:fb:d3:57:a1:a1:f6:12:a9:cb:7f:2f:aa:
                    b8:c6:de:c8:cc:69:b0:cd:aa:44:87:4d:ef:d8:00:
                    54:74:07:77:fe:69:88:85:07:6b:21:a9:e2:44:87:
                    4a:ac:a0:aa:b4:71:62:ac:1d:3e:1c:a7:19:0d:fd:
                    4d:1b:78:7a:de:dd:47:83:28:0f:6f:a8:e7:45:7b:
                    06:fe:0c:43:13:f9:31:b6:ed:64:1f:5e:f6:4c:44:
                    b1:81:f0:f4:44:50:e1:7d:78:ca:11:59:2c:f7:e9:
                    6c:3e:86:d0:41:87:7f:2f:b5:64:7e:13:82:4d:28:
                    f4:31:d4:f9:78:40:5a:55:cb:6b:e4:73:aa:6b:ad:
                    c5:54:2e:1b:20:be:72:31:c8:63:8b:3e:86:34:64:
                    b1:e7:0c:c5:c6:37:0e:98:5d:de:b9:a2:23:bd:c5:
                    57:49:43:fe:47:98:3e:16:bb:8a:44:51:a3:c8:2b:
                    fc:bb:fa:b9:b5:dd:f5:de:e7:a6:68:0c:97:c7:8b:
                    d5:f6:d3:db:34:d2:e5:82:37:76:4f:70:53:b2:a7:
                    d9:99:4b:7e:d6:46:25:67:ab:64:c6:03:18:d6:af:
                    6f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A3:56:A1:62:83:EB:C4:1D:E9:0B:E4:C2:92:0D:C1:14:40:49:CD
            X509v3 Authority Key Identifier:
                keyid:50:19:A6:C3:24:13:06:01:79:34:32:FC:2F:AF:F3:DE:1F:12:10:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5019A6C324130601793432FC2FAFF3DE1F1210C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CnPKc29wPZgVxv8PMbCvu3YPAXMNeRQYNdFFZvdSyJkN/1/3137372e38342e32302e302f32322d3234203d3e203532373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:20:b3:ce:21:df:a8:6b:1f:b8:a6:2d:fc:79:ae:20:20:31:
         77:50:94:af:ac:28:cf:c3:25:57:de:9e:f6:33:43:1e:1e:b2:
         e0:b3:4f:45:95:21:14:06:bf:37:9a:55:9a:3d:17:1d:1b:19:
         48:a2:0e:7c:12:06:bb:b0:b8:25:59:7a:40:d0:ae:03:2a:cc:
         f0:ec:f8:fb:71:f9:46:3b:e9:9f:30:6c:b3:d9:08:7d:f4:1d:
         02:af:5e:68:5f:27:3d:bf:b0:00:33:ec:e7:d6:68:18:53:48:
         ea:7c:53:62:c1:4c:15:16:51:e7:ab:74:0e:a3:1c:7a:21:43:
         98:35:bd:aa:2f:98:b4:00:30:c4:08:46:08:26:5a:be:dd:86:
         be:4e:6e:08:b5:b8:ab:d4:3f:ee:56:47:78:55:0c:53:0a:1d:
         e2:84:7e:ce:d1:16:5c:7a:57:32:39:d8:07:25:ac:24:34:a1:
         c8:0c:88:d5:80:8c:d6:3e:12:fe:dd:94:4d:7d:85:45:45:c0:
         4e:54:79:c9:09:05:94:b6:ff:f3:ef:d8:3d:64:71:b4:50:c0:
         01:16:bd:da:a7:1c:98:ed:24:31:a5:18:da:1e:08:7d:4d:52:
         cb:e6:46:61:a9:2f:98:b5:2d:d2:3e:3a:4b:04:38:55:db:6d:
         cb:91:1d:c3
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUe5iOZTu/cztY7UGFn601Dz7cEyYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTAxOUE2QzMyNDEzMDYwMTc5MzQzMkZDMkZBRkYzREUx
RjEyMTBDMDAeFw0yNDA4MDcxMTA4MTZaFw0yNTA4MDYxMTEzMTZaMDMxMTAvBgNV
BAMTKDc0QTM1NkExNjI4M0VCQzQxREU5MEJFNEMyOTIwREMxMTQ0MDQ5Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU4ROywIJyxKMoDJ9Eds8XhpmD
6qBnPZGS+btVA9CZXPvTV6Gh9hKpy38vqrjG3sjMabDNqkSHTe/YAFR0B3f+aYiF
B2shqeJEh0qsoKq0cWKsHT4cpxkN/U0beHre3UeDKA9vqOdFewb+DEMT+TG27WQf
XvZMRLGB8PREUOF9eMoRWSz36Ww+htBBh38vtWR+E4JNKPQx1Pl4QFpVy2vkc6pr
rcVULhsgvnIxyGOLPoY0ZLHnDMXGNw6YXd65oiO9xVdJQ/5HmD4Wu4pEUaPIK/y7
+rm13fXe56ZoDJfHi9X209s00uWCN3ZPcFOyp9mZS37WRiVnq2TGAxjWr2/pAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUdKNWoWKD68Qd6QvkwpINwRRASc0wHwYDVR0j
BBgwFoAUUBmmwyQTBgF5NDL8L6/z3h8SEMAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ25QS2MyOXdQWmdWeHY4UE1iQ3Z1M1lQQVhNTmVSUVlOZEZGWnZkU3lK
a04vMS81MDE5QTZDMzI0MTMwNjAxNzkzNDMyRkMyRkFGRjNERTFGMTIxMEMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUwMTlBNkMzMjQxMzA2MDE3
OTM0MzJGQzJGQUZGM0RFMUYxMjEwQzAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NuUEtjMjl3UFpnVnh2OFBNYkN2dTNZUEFYTU5lUlFZTmRGRlp2ZFN5SmtOLzEv
MzEzNzM3MmUzODM0MmUzMjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjM3
MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArFUFDANBgkqhkiG9w0BAQsFAAOCAQEAKSCzziHfqGsf
uKYt/HmuICAxd1CUr6woz8MlV96e9jNDHh6y4LNPRZUhFAa/N5pVmj0XHRsZSKIO
fBIGu7C4JVl6QNCuAyrM8Oz4+3H5RjvpnzBss9kIffQdAq9eaF8nPb+wADPs59Zo
GFNI6nxTYsFMFRZR56t0DqMceiFDmDW9qi+YtAAwxAhGCCZavt2Gvk5uCLW4q9Q/
7lZHeFUMUwod4oR+ztEWXHpXMjnYByWsJDShyAyI1YCM1j4S/t2UTX2FRUXATlR5
yQkFlLb/8+/YPWRxtFDAARa92qccmO0kMaUY2h4IfU1Sy+ZGYakvmLUt0j46SwQ4
Vdtty5Edww==
-----END CERTIFICATE-----
Generated at Fri Sep 27 23:26:32 2024 by rpki-client on console-fra.rpki-client.org