Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3139302e3234312e302f32342d3234203d3e20323632333933.roa
File:                     3137372e3139302e3234312e302f32342d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          6qyAbwEW/mw630KepGCLBZ+1dUQD1d41otxfALVdu1U=
Subject key identifier:   D0:EC:4A:88:3C:1F:B7:7F:D6:FB:85:45:1E:E9:77:D2:EE:29:35:CD
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       563E03E1894B68A68D960BEA2F3A83984C927C98
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3139302e3234312e302f32342d3234203d3e20323632333933.roa
Signing time:             Sat 24 Aug 2024 19:53:37 +0000
ROA not before:           Sat 24 Aug 2024 19:48:37 +0000
ROA not after:            Sat 23 Aug 2025 19:53:37 +0000
asID:                     262393
IP address blocks:        177.190.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
                          rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 12:04:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:3e:03:e1:89:4b:68:a6:8d:96:0b:ea:2f:3a:83:98:4c:92:7c:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: Aug 24 19:48:37 2024 GMT
            Not After : Aug 23 19:53:37 2025 GMT
        Subject: CN=D0EC4A883C1FB77FD6FB85451EE977D2EE2935CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:58:2b:81:d8:49:74:ef:28:25:2b:64:98:b3:
                    5e:bf:19:bc:3c:b0:81:8c:15:1c:67:ee:03:cb:e5:
                    75:75:2d:91:a2:5b:5d:bc:cd:70:42:a2:3d:1f:4b:
                    e3:62:62:4f:1e:70:eb:59:dd:c3:cf:4a:f3:2c:be:
                    12:24:dc:4b:45:b6:57:bc:34:2e:ea:80:39:10:d9:
                    ef:66:d0:92:19:11:2d:5e:c4:56:53:00:e4:83:98:
                    ec:30:c0:e3:d8:08:6a:39:3f:d8:e4:39:4b:38:c0:
                    db:46:4c:e0:21:d5:00:f9:1e:c7:25:e1:6c:bf:b1:
                    0a:3a:64:8e:cc:79:d4:47:51:88:f1:b9:36:1e:07:
                    d9:f8:69:3b:a4:71:73:01:d1:2d:56:0d:fe:4f:36:
                    1b:54:ad:0c:1e:17:19:e1:c5:41:d6:13:93:90:d4:
                    fa:71:c1:8d:a5:0e:9b:3c:1c:46:61:52:27:2b:f4:
                    99:d4:2d:0c:ab:9e:89:ae:69:1c:d4:7c:5b:1a:43:
                    06:18:79:49:81:26:51:82:93:cf:88:7c:58:e1:17:
                    ad:c8:4f:8c:20:00:45:d4:e3:9e:9e:f7:81:c7:fe:
                    db:15:f1:34:3e:75:bc:5e:86:61:61:d5:79:e0:99:
                    ea:fe:58:d7:b2:68:cf:bf:4a:bb:3a:9f:3a:ca:7c:
                    cc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:EC:4A:88:3C:1F:B7:7F:D6:FB:85:45:1E:E9:77:D2:EE:29:35:CD
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3139302e3234312e302f32342d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:fc:e5:64:38:7f:aa:bd:61:27:cf:ed:23:aa:4f:2f:e4:65:
         1e:03:2b:80:8c:05:9f:ee:e9:1c:98:1e:e3:9d:d0:68:d7:06:
         b1:de:40:ef:ff:ed:84:3a:a2:71:f0:0d:04:fe:5b:dc:d4:09:
         fa:68:68:ee:b7:b3:9b:ff:1a:d0:c1:76:2a:ff:f9:a1:6b:b5:
         55:b7:d7:34:43:97:16:43:e4:1b:93:cd:96:40:90:54:54:69:
         8c:70:a3:7e:c4:24:6b:8c:f5:2b:c0:58:06:9f:35:46:8c:a1:
         81:4b:05:aa:d3:b1:cb:78:5c:ec:62:d0:70:f1:37:5b:17:d2:
         3d:15:81:de:11:c6:e5:e9:96:9b:99:87:7e:72:dc:74:89:92:
         c9:e3:0d:dc:14:a7:18:e8:47:3d:d0:d3:d1:23:d8:21:ab:e1:
         89:33:2a:4c:43:58:0b:32:60:bf:28:a2:22:12:48:03:b7:61:
         ce:12:f8:d0:a5:cf:db:83:41:c5:78:c9:db:7f:23:76:5d:74:
         68:f3:64:45:e0:cc:99:e2:1e:d8:19:d2:71:24:10:b5:30:13:
         aa:fb:09:15:de:c4:4a:8d:81:91:ed:d3:16:96:f9:df:f6:00:
         ec:cb:fd:07:a5:1b:47:cb:fe:0f:0e:0f:39:11:34:e4:e6:f3:
         dc:9a:d8:ab
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUVj4D4YlLaKaNlgvqLzqDmEySfJgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhCQjFGM0M3QjEwNjc3Njk3RDM2NzU4NjFGNThFQzVF
NEM0QjFFNTAeFw0yNDA4MjQxOTQ4MzdaFw0yNTA4MjMxOTUzMzdaMDMxMTAvBgNV
BAMTKEQwRUM0QTg4M0MxRkI3N0ZENkZCODU0NTFFRTk3N0QyRUUyOTM1Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZWCuB2El07yglK2SYs16/Gbw8
sIGMFRxn7gPL5XV1LZGiW128zXBCoj0fS+NiYk8ecOtZ3cPPSvMsvhIk3EtFtle8
NC7qgDkQ2e9m0JIZES1exFZTAOSDmOwwwOPYCGo5P9jkOUs4wNtGTOAh1QD5Hscl
4Wy/sQo6ZI7MedRHUYjxuTYeB9n4aTukcXMB0S1WDf5PNhtUrQweFxnhxUHWE5OQ
1PpxwY2lDps8HEZhUicr9JnULQyrnomuaRzUfFsaQwYYeUmBJlGCk8+IfFjhF63I
T4wgAEXU456e94HH/tsV8TQ+dbxehmFh1Xngmer+WNeyaM+/Srs6nzrKfMxzAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU0OxKiDwft3/W+4VFHul30u4pNc0wHwYDVR0j
BBgwFoAUyLsfPHsQZ3aX02dYYfWOxeTEseUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk1UdTh5aEZMcm9HTkdDcVZrUzJpVDlhOGhONHFTeTlZZHM0NXJhZkFL
VTYvMS9DOEJCMUYzQzdCMTA2Nzc2OTdEMzY3NTg2MUY1OEVDNUU0QzRCMUU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4QkIxRjNDN0IxMDY3NzY5
N0QzNjc1ODYxRjU4RUM1RTRDNEIxRTUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJNVHU4eWhGTHJvR05HQ3FWa1MyaVQ5YThoTjRxU3k5WWRzNDVyYWZBS1U2LzEv
MzEzNzM3MmUzMTM5MzAyZTMyMzQzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjMzMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALG+8TANBgkqhkiG9w0BAQsFAAOCAQEAtPzl
ZDh/qr1hJ8/tI6pPL+RlHgMrgIwFn+7pHJge453QaNcGsd5A7//thDqicfANBP5b
3NQJ+mho7rezm/8a0MF2Kv/5oWu1VbfXNEOXFkPkG5PNlkCQVFRpjHCjfsQka4z1
K8BYBp81RoyhgUsFqtOxy3hc7GLQcPE3WxfSPRWB3hHG5emWm5mHfnLcdImSyeMN
3BSnGOhHPdDT0SPYIavhiTMqTENYCzJgvyiiIhJIA7dhzhL40KXP24NBxXjJ238j
dl10aPNkReDMmeIe2BnScSQQtTATqvsJFd7ESo2Bke3TFpb53/YA7Mv9B6UbR8v+
Dw4PORE05Obz3JrYqw==
-----END CERTIFICATE-----
Generated at Sat Sep 28 13:03:42 2024 by rpki-client on console-fra.rpki-client.org