Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3139302e3234322e302f32342d3234203d3e20323632333933.roa
File:                     3137372e3139302e3234322e302f32342d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          lrxdz/RpeDRG2OmO/nSLGQkl4Nwxq+s7wlcPX83Cv2U=
Subject key identifier:   78:BE:60:6A:34:03:B8:93:A3:1C:8D:C3:77:C8:06:38:4D:DC:83:61
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       248D32B3B9F4AEFF1E58915E6E8B9F73EDCF66EB
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3139302e3234322e302f32342d3234203d3e20323632333933.roa
Signing time:             Sat 24 Aug 2024 19:52:59 +0000
ROA not before:           Sat 24 Aug 2024 19:47:59 +0000
ROA not after:            Sat 23 Aug 2025 19:52:59 +0000
asID:                     262393
IP address blocks:        177.190.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
                          rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 12:04:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:8d:32:b3:b9:f4:ae:ff:1e:58:91:5e:6e:8b:9f:73:ed:cf:66:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: Aug 24 19:47:59 2024 GMT
            Not After : Aug 23 19:52:59 2025 GMT
        Subject: CN=78BE606A3403B893A31C8DC377C806384DDC8361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5d:60:10:44:96:3a:54:56:44:d7:b3:54:0c:
                    d7:df:1e:7a:90:be:93:5a:18:ad:3e:ce:c3:06:80:
                    4d:ac:50:d6:4f:7c:8e:76:9a:79:f7:f0:18:d1:34:
                    f2:c1:e7:b3:5f:2b:a0:02:c9:4e:8e:1e:0f:4a:a3:
                    03:da:aa:60:d0:3c:56:10:a6:73:5e:07:a2:d9:2b:
                    8f:4d:19:2e:b3:0e:46:36:92:58:4b:d0:ef:ab:63:
                    ba:8a:d8:4a:c9:e0:6d:32:6b:28:42:6f:fa:1d:9d:
                    c9:0d:e1:fa:84:62:f8:eb:a1:6f:f4:22:70:07:60:
                    78:20:96:98:01:4a:dc:e3:ae:a0:9a:d1:bf:cf:e9:
                    63:50:23:35:34:18:cc:be:11:c1:9e:f9:c7:11:f6:
                    01:37:f0:43:6a:6c:76:23:81:8d:56:a7:7d:9c:a5:
                    59:f9:78:e0:db:04:67:02:1c:8c:2f:af:41:d7:e0:
                    fd:02:fb:84:35:86:32:f9:c3:53:69:09:55:f5:0d:
                    dd:d7:ac:f3:20:4e:fc:7d:8a:4e:f4:70:58:d1:5a:
                    99:82:03:02:6a:32:ff:dc:1e:99:96:cf:a1:0b:50:
                    57:4f:48:0a:28:da:62:04:85:0e:aa:a3:7e:06:12:
                    da:e0:c4:7c:f8:7d:b3:d5:f0:48:34:58:b2:00:53:
                    58:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BE:60:6A:34:03:B8:93:A3:1C:8D:C3:77:C8:06:38:4D:DC:83:61
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3139302e3234322e302f32342d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:f1:da:e4:3f:c7:b3:cd:e9:76:4b:ee:21:56:f1:a7:85:9f:
         1e:75:bf:77:01:dc:51:bd:3c:d7:da:1b:81:36:ce:23:83:8e:
         1f:03:27:e6:ea:38:fe:14:2d:a4:e3:17:e0:c7:0e:7c:44:e9:
         81:ba:88:2e:fd:c0:21:81:e6:5c:d7:ea:a5:72:0f:86:43:66:
         77:af:8f:57:47:21:c1:17:6f:a2:69:9f:db:d6:07:66:1a:1f:
         e4:66:0d:71:1d:d9:a9:2a:88:fc:6e:5d:0f:cf:97:4d:17:03:
         6f:15:1b:43:b1:6c:e2:ba:bd:83:a0:0e:5d:60:50:ed:ba:3c:
         e2:48:0d:da:0f:e1:c1:bc:8f:9f:79:4c:dc:18:f5:0c:5d:dd:
         88:1c:64:54:a2:fe:16:00:f0:04:10:4e:75:5e:ad:52:09:d1:
         b0:88:f0:50:cc:4a:45:b5:d5:2a:c2:3b:cb:9f:85:65:87:fa:
         4d:3d:60:06:7f:24:08:87:31:b5:fb:49:c4:cc:97:5e:1f:00:
         0d:60:d8:80:b1:7f:b2:09:61:7b:82:94:33:6d:e3:f2:9a:71:
         5b:df:c0:7c:73:4c:62:aa:68:82:2b:3e:6f:c3:bd:99:0d:1a:
         e9:fb:68:8e:71:da:32:e2:88:c7:26:b4:02:fb:7f:57:13:64:
         a3:30:4f:86
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJI0ys7n0rv8eWJFeboufc+3PZuswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhCQjFGM0M3QjEwNjc3Njk3RDM2NzU4NjFGNThFQzVF
NEM0QjFFNTAeFw0yNDA4MjQxOTQ3NTlaFw0yNTA4MjMxOTUyNTlaMDMxMTAvBgNV
BAMTKDc4QkU2MDZBMzQwM0I4OTNBMzFDOERDMzc3QzgwNjM4NEREQzgzNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsXWAQRJY6VFZE17NUDNffHnqQ
vpNaGK0+zsMGgE2sUNZPfI52mnn38BjRNPLB57NfK6ACyU6OHg9KowPaqmDQPFYQ
pnNeB6LZK49NGS6zDkY2klhL0O+rY7qK2ErJ4G0yayhCb/odnckN4fqEYvjroW/0
InAHYHgglpgBStzjrqCa0b/P6WNQIzU0GMy+EcGe+ccR9gE38ENqbHYjgY1Wp32c
pVn5eODbBGcCHIwvr0HX4P0C+4Q1hjL5w1NpCVX1Dd3XrPMgTvx9ik70cFjRWpmC
AwJqMv/cHpmWz6ELUFdPSAoo2mIEhQ6qo34GEtrgxHz4fbPV8Eg0WLIAU1iNAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUeL5gajQDuJOjHI3Dd8gGOE3cg2EwHwYDVR0j
BBgwFoAUyLsfPHsQZ3aX02dYYfWOxeTEseUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk1UdTh5aEZMcm9HTkdDcVZrUzJpVDlhOGhONHFTeTlZZHM0NXJhZkFL
VTYvMS9DOEJCMUYzQzdCMTA2Nzc2OTdEMzY3NTg2MUY1OEVDNUU0QzRCMUU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4QkIxRjNDN0IxMDY3NzY5
N0QzNjc1ODYxRjU4RUM1RTRDNEIxRTUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJNVHU4eWhGTHJvR05HQ3FWa1MyaVQ5YThoTjRxU3k5WWRzNDVyYWZBS1U2LzEv
MzEzNzM3MmUzMTM5MzAyZTMyMzQzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjMzMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALG+8jANBgkqhkiG9w0BAQsFAAOCAQEAlPHa
5D/Hs83pdkvuIVbxp4WfHnW/dwHcUb0819obgTbOI4OOHwMn5uo4/hQtpOMX4McO
fETpgbqILv3AIYHmXNfqpXIPhkNmd6+PV0chwRdvommf29YHZhof5GYNcR3ZqSqI
/G5dD8+XTRcDbxUbQ7Fs4rq9g6AOXWBQ7bo84kgN2g/hwbyPn3lM3Bj1DF3diBxk
VKL+FgDwBBBOdV6tUgnRsIjwUMxKRbXVKsI7y5+FZYf6TT1gBn8kCIcxtftJxMyX
Xh8ADWDYgLF/sglhe4KUM23j8ppxW9/AfHNMYqpogis+b8O9mQ0a6ftojnHaMuKI
xya0Avt/VxNkozBPhg==
-----END CERTIFICATE-----
Generated at Sat Sep 28 13:03:42 2024 by rpki-client on console-fra.rpki-client.org