Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3137372e32322e3136342e302f32322d3234203d3e20323632343539.roa
File:                     3137372e32322e3136342e302f32322d3234203d3e20323632343539.roa (raw, json)
Hash identifier:          lUy1Ad+Hjas5W1ipY19Y9XULHrDrmZoe0oYUycYwEQk=
Subject key identifier:   DC:D5:4A:98:21:23:E2:60:35:D6:FB:05:BB:AE:C2:DF:3B:BE:F4:A8
Certificate issuer:       /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial:       4F55B798AED88E92A2EB216E7C1162C480FC7C31
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3137372e32322e3136342e302f32322d3234203d3e20323632343539.roa
Signing time:             Fri 14 Jun 2024 20:16:27 +0000
ROA not before:           Fri 14 Jun 2024 20:11:27 +0000
ROA not after:            Fri 13 Jun 2025 20:16:27 +0000
asID:                     262459
IP address blocks:        177.22.164.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl
                          rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:55:b7:98:ae:d8:8e:92:a2:eb:21:6e:7c:11:62:c4:80:fc:7c:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
        Validity
            Not Before: Jun 14 20:11:27 2024 GMT
            Not After : Jun 13 20:16:27 2025 GMT
        Subject: CN=DCD54A982123E26035D6FB05BBAEC2DF3BBEF4A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:73:b0:64:32:c3:08:e2:aa:32:85:9c:be:b2:
                    a5:bf:51:ca:4a:d5:ba:8a:ea:87:2e:15:2c:07:0d:
                    61:0e:f1:ba:98:e8:89:ea:a7:4a:1f:2e:8c:24:c4:
                    fa:00:e2:03:0c:3d:45:91:43:36:00:99:1c:d3:4f:
                    bc:c2:56:d1:ac:8b:29:84:80:c6:e8:26:e5:c1:f3:
                    84:de:a9:7e:96:58:f1:dd:40:d0:69:2b:c1:af:ad:
                    80:b2:87:51:41:42:ea:83:40:5a:55:4d:c4:48:bd:
                    2e:b7:8e:fd:4b:df:d9:82:22:61:ed:14:36:7e:e0:
                    22:d5:71:ea:c3:38:0e:4c:64:e9:a7:1c:34:79:16:
                    32:6b:18:48:29:39:2f:99:01:4b:8d:dd:a4:48:0b:
                    93:51:e0:4c:72:52:9c:c8:b3:1c:32:19:05:c2:8c:
                    f3:13:66:81:b6:6d:95:59:30:a6:64:0d:88:f3:b0:
                    de:ab:df:a2:be:8c:b5:45:43:0f:5f:02:a8:30:4d:
                    b0:5b:5d:78:5b:aa:62:0b:c8:86:d0:4d:c3:67:21:
                    9f:db:da:2e:6b:a8:fe:7b:78:d8:35:32:c8:79:f5:
                    04:b8:c6:9d:8d:c5:4c:96:d0:bd:0c:ef:3a:1c:cd:
                    81:54:10:a7:c4:33:49:33:4e:0f:5a:e6:84:0f:9e:
                    ab:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D5:4A:98:21:23:E2:60:35:D6:FB:05:BB:AE:C2:DF:3B:BE:F4:A8
            X509v3 Authority Key Identifier:
                keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3137372e32322e3136342e302f32322d3234203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:3b:aa:95:60:b7:c5:3d:0c:9a:53:89:72:70:03:2e:cb:7f:
         e5:bd:56:f3:d8:44:94:d3:58:3a:e8:60:57:8b:23:90:a8:68:
         c8:c8:02:d6:e3:95:7e:ab:a9:3e:4d:5a:bd:6a:b6:22:b8:bb:
         b7:0a:9a:c6:c9:53:af:2e:6e:52:bc:bf:4e:d2:e5:78:31:8c:
         3d:3c:a5:47:d6:b3:42:cb:e7:34:91:c2:61:e0:21:9f:e0:40:
         2b:20:2a:de:20:20:62:85:a9:a2:da:57:98:9e:d2:80:59:eb:
         20:ca:d6:ee:53:c9:33:97:00:b7:30:49:3f:47:6d:da:45:d2:
         e3:a2:9f:e7:97:73:0b:e1:70:93:7f:3f:16:7b:75:d6:7b:d8:
         45:46:e4:eb:cf:8d:c1:ba:74:13:76:41:20:b3:02:7e:8e:d3:
         a7:58:4a:38:6c:48:da:35:ca:7b:16:0f:bc:b0:4c:db:e4:c0:
         41:69:95:1c:7c:2c:52:3e:76:9c:64:13:f4:46:0f:3d:16:1f:
         05:ec:b7:7a:c4:8a:00:01:4d:93:06:c4:a9:46:b2:7c:4e:88:
         71:56:b3:c3:94:43:45:7d:1e:5f:76:90:d3:2e:62:5b:99:8d:
         68:46:d2:3d:96:28:3e:37:cb:6d:1b:cc:23:f2:0f:a6:9f:b0:
         aa:cb:4b:93
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUT1W3mK7YjpKi6yFufBFixID8fDEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjEyRjg1N0NFNzFFNzJFN0U4OTJDRjk3N0Q4MEI2QThC
NzVDNzhBNDAeFw0yNDA2MTQyMDExMjdaFw0yNTA2MTMyMDE2MjdaMDMxMTAvBgNV
BAMTKERDRDU0QTk4MjEyM0UyNjAzNUQ2RkIwNUJCQUVDMkRGM0JCRUY0QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPc7BkMsMI4qoyhZy+sqW/UcpK
1bqK6ocuFSwHDWEO8bqY6Inqp0ofLowkxPoA4gMMPUWRQzYAmRzTT7zCVtGsiymE
gMboJuXB84TeqX6WWPHdQNBpK8GvrYCyh1FBQuqDQFpVTcRIvS63jv1L39mCImHt
FDZ+4CLVcerDOA5MZOmnHDR5FjJrGEgpOS+ZAUuN3aRIC5NR4ExyUpzIsxwyGQXC
jPMTZoG2bZVZMKZkDYjzsN6r36K+jLVFQw9fAqgwTbBbXXhbqmILyIbQTcNnIZ/b
2i5rqP57eNg1Msh59QS4xp2NxUyW0L0M7zoczYFUEKfEM0kzTg9a5oQPnqtzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU3NVKmCEj4mA11vsFu67C3zu+9KgwHwYDVR0j
BBgwFoAUsS+FfOcecufoks+XfYC2qLdceKQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjhIc3dveUszZ2kzTlUzUHl6am9zWHNnVFVBNmhVY2JQVnVhM2tidzdK
RXAvMS9CMTJGODU3Q0U3MUU3MkU3RTg5MkNGOTc3RDgwQjZBOEI3NUM3OEE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxMkY4NTdDRTcxRTcyRTdF
ODkyQ0Y5NzdEODBCNkE4Qjc1Qzc4QTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI4SHN3b3lLM2dpM05VM1B5empvc1hzZ1RVQTZoVWNiUFZ1YTNrYnc3SkVwLzEv
MzEzNzM3MmUzMjMyMmUzMTM2MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNDM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxFqQwDQYJKoZIhvcNAQELBQADggEBAJk7qpVg
t8U9DJpTiXJwAy7Lf+W9VvPYRJTTWDroYFeLI5CoaMjIAtbjlX6rqT5NWr1qtiK4
u7cKmsbJU68ublK8v07S5XgxjD08pUfWs0LL5zSRwmHgIZ/gQCsgKt4gIGKFqaLa
V5ie0oBZ6yDK1u5TyTOXALcwST9HbdpF0uOin+eXcwvhcJN/PxZ7ddZ72EVG5OvP
jcG6dBN2QSCzAn6O06dYSjhsSNo1ynsWD7ywTNvkwEFplRx8LFI+dpxkE/RGDz0W
HwXst3rEigABTZMGxKlGsnxOiHFWs8OUQ0V9Hl92kNMuYluZjWhG0j2WKD43y20b
zCPyD6afsKrLS5M=
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:32 2024 by rpki-client on console-fra.rpki-client.org