Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/3137372e3132362e3232322e302f32342d3234203d3e20323633353232.roa
File:                     3137372e3132362e3232322e302f32342d3234203d3e20323633353232.roa (raw, json)
Hash identifier:          zbozU4+k//EuXHterV7JtDjKfZCXiSb51iTaG0Zi0D4=
Subject key identifier:   B8:61:33:3C:5D:52:40:90:D1:A5:23:F4:97:C9:ED:B5:87:A0:FF:22
Certificate issuer:       /CN=ADE62729B7C2F675CBB616815CBA292A798BEB4B
Certificate serial:       77DAC7FB5C4A2195BBA978B904A2D8ECA19F70F1
Authority key identifier: AD:E6:27:29:B7:C2:F6:75:CB:B6:16:81:5C:BA:29:2A:79:8B:EB:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/3137372e3132362e3232322e302f32342d3234203d3e20323633353232.roa
Signing time:             Thu 04 Apr 2024 16:11:27 +0000
ROA not before:           Thu 04 Apr 2024 16:06:27 +0000
ROA not after:            Thu 03 Apr 2025 16:11:27 +0000
asID:                     263522
IP address blocks:        177.126.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.crl
                          rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Nov 2024 15:08:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:da:c7:fb:5c:4a:21:95:bb:a9:78:b9:04:a2:d8:ec:a1:9f:70:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADE62729B7C2F675CBB616815CBA292A798BEB4B
        Validity
            Not Before: Apr  4 16:06:27 2024 GMT
            Not After : Apr  3 16:11:27 2025 GMT
        Subject: CN=B861333C5D524090D1A523F497C9EDB587A0FF22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ae:a9:7a:ce:38:c0:8b:5d:15:9b:32:7f:0e:
                    0f:0f:f0:dd:3e:e4:73:0e:57:7b:a7:04:df:a3:e1:
                    d2:a8:62:9a:35:27:9a:e9:33:00:e2:ac:50:d2:8a:
                    2b:82:a7:7f:19:4f:77:77:f9:22:e0:14:77:bf:8c:
                    60:ac:70:cd:1f:c3:d7:04:51:5b:6a:c5:95:08:b8:
                    ed:b1:00:42:55:c1:1d:9c:28:de:02:b2:28:31:97:
                    01:11:24:fb:cc:9a:e1:13:58:7d:c6:ed:bc:35:a0:
                    79:31:73:7c:91:c9:28:66:5a:ef:ca:42:7f:55:88:
                    a0:38:3f:bc:e9:8f:bd:1a:af:27:ca:24:42:98:28:
                    58:06:04:82:42:a5:79:41:83:b1:30:42:f5:f8:56:
                    38:c8:5c:cc:eb:35:39:3b:6f:a9:16:7a:c1:40:cf:
                    30:59:37:ef:c6:01:7d:6c:59:1a:4f:5c:d7:ff:2c:
                    2e:e7:ff:0d:6c:1c:8c:e8:9e:ea:1a:d4:e3:08:fc:
                    c5:63:74:66:41:58:41:aa:a9:cd:dd:bc:f2:02:a5:
                    db:85:aa:3d:5c:9c:88:dd:73:0a:dc:b3:0f:e5:19:
                    14:f8:54:1e:95:45:eb:55:10:58:fb:6d:14:28:06:
                    78:e7:6a:bc:62:e1:e0:62:79:14:16:89:bc:f7:c5:
                    bd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:61:33:3C:5D:52:40:90:D1:A5:23:F4:97:C9:ED:B5:87:A0:FF:22
            X509v3 Authority Key Identifier:
                keyid:AD:E6:27:29:B7:C2:F6:75:CB:B6:16:81:5C:BA:29:2A:79:8B:EB:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/3137372e3132362e3232322e302f32342d3234203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:b7:7e:9f:05:a3:d0:ba:6c:f8:6b:85:c6:59:84:cb:54:32:
         51:00:b7:bc:73:36:ff:1b:c8:08:a1:25:e1:d7:92:ea:93:5b:
         8d:62:54:77:41:a9:51:5c:7d:3f:9e:ea:13:8c:7f:20:61:5e:
         e0:41:ad:92:24:bc:94:83:30:f2:89:01:81:65:92:e4:43:86:
         c0:59:36:2b:a7:7a:19:a2:54:04:fa:80:49:38:9e:f3:a2:ec:
         89:34:4c:66:7b:b7:72:a3:36:c0:fe:02:ff:1f:c7:fd:49:9e:
         78:94:3e:aa:18:15:90:5b:91:4b:e1:e9:fe:79:62:20:f2:29:
         36:1d:ae:8d:c8:81:0d:a4:91:2a:52:e5:9c:ad:f7:7f:e2:dd:
         ca:c4:34:25:5a:1c:88:5c:ad:ee:d4:bb:81:39:28:cd:d9:c9:
         40:a7:2c:35:a2:6b:3e:93:ed:9d:d1:13:af:9e:b8:5e:66:d3:
         6d:e8:fe:2e:ea:7f:74:44:53:67:ce:1a:02:3a:a1:a2:82:7d:
         0f:c6:a4:53:3a:35:9c:54:ae:08:1a:84:d5:6c:75:94:63:6b:
         96:77:6c:c1:d9:54:b3:51:63:ef:9b:c5:fe:01:11:81:17:4e:
         62:a3:1c:06:6f:e8:ec:48:ac:ff:cb:b2:c2:ff:89:88:8d:93:
         53:df:fc:df
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUd9rH+1xKIZW7qXi5BKLY7KGfcPEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURFNjI3MjlCN0MyRjY3NUNCQjYxNjgxNUNCQTI5MkE3
OThCRUI0QjAeFw0yNDA0MDQxNjA2MjdaFw0yNTA0MDMxNjExMjdaMDMxMTAvBgNV
BAMTKEI4NjEzMzNDNUQ1MjQwOTBEMUE1MjNGNDk3QzlFREI1ODdBMEZGMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCrql6zjjAi10VmzJ/Dg8P8N0+
5HMOV3unBN+j4dKoYpo1J5rpMwDirFDSiiuCp38ZT3d3+SLgFHe/jGCscM0fw9cE
UVtqxZUIuO2xAEJVwR2cKN4CsigxlwERJPvMmuETWH3G7bw1oHkxc3yRyShmWu/K
Qn9ViKA4P7zpj70aryfKJEKYKFgGBIJCpXlBg7EwQvX4VjjIXMzrNTk7b6kWesFA
zzBZN+/GAX1sWRpPXNf/LC7n/w1sHIzonuoa1OMI/MVjdGZBWEGqqc3dvPICpduF
qj1cnIjdcwrcsw/lGRT4VB6VRetVEFj7bRQoBnjnarxi4eBieRQWibz3xb0vAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUuGEzPF1SQJDRpSP0l8nttYeg/yIwHwYDVR0j
BBgwFoAUreYnKbfC9nXLthaBXLopKnmL60swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR244Vk54aVlNUUpSOGZkcTZFVU1LWlJKdlFFdGJGWTRLV2lkdG5lZURR
SDYvMS9BREU2MjcyOUI3QzJGNjc1Q0JCNjE2ODE1Q0JBMjkyQTc5OEJFQjRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FERTYyNzI5QjdDMkY2NzVD
QkI2MTY4MTVDQkEyOTJBNzk4QkVCNEIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duOFZOeGlZTVFKUjhmZHE2RVVNS1pSSnZRRXRiRlk0S1dpZHRuZWVEUUg2LzEv
MzEzNzM3MmUzMTMyMzYyZTMyMzIzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM1MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALF+3jANBgkqhkiG9w0BAQsFAAOCAQEAgbd+
nwWj0Lps+GuFxlmEy1QyUQC3vHM2/xvICKEl4deS6pNbjWJUd0GpUVx9P57qE4x/
IGFe4EGtkiS8lIMw8okBgWWS5EOGwFk2K6d6GaJUBPqASTie86LsiTRMZnu3cqM2
wP4C/x/H/UmeeJQ+qhgVkFuRS+Hp/nliIPIpNh2ujciBDaSRKlLlnK33f+LdysQ0
JVociFyt7tS7gTkozdnJQKcsNaJrPpPtndETr564XmbTbej+Lup/dERTZ84aAjqh
ooJ9D8akUzo1nFSuCBqE1Wx1lGNrlndswdlUs1Fj75vF/gERgRdOYqMcBm/o7Eis
/8uywv+JiI2TU9/83w==
-----END CERTIFICATE-----
Generated at Wed Nov 13 15:37:10 2024 by rpki-client on console-fra.rpki-client.org