Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e38362e3233342e302f32332d3233203d3e20323632343434.roa
File:                     3137372e38362e3233342e302f32332d3233203d3e20323632343434.roa (raw, json)
Hash identifier:          KQjoRhx1cXA6wuTBC3rmJ464pwld7p99JhWQuxjSGl4=
Subject key identifier:   04:0E:36:6B:A0:44:8E:15:A6:FC:EE:FA:2F:5C:7D:3A:5F:89:B6:0D
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       14FDD659AFE3B11DC241FEBC854036D620BB76A0
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e38362e3233342e302f32332d3233203d3e20323632343434.roa
Signing time:             Wed 07 Aug 2024 13:14:45 +0000
ROA not before:           Wed 07 Aug 2024 13:09:45 +0000
ROA not after:            Wed 06 Aug 2025 13:14:45 +0000
asID:                     262444
IP address blocks:        177.86.234.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:34:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:fd:d6:59:af:e3:b1:1d:c2:41:fe:bc:85:40:36:d6:20:bb:76:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Aug  7 13:09:45 2024 GMT
            Not After : Aug  6 13:14:45 2025 GMT
        Subject: CN=040E366BA0448E15A6FCEEFA2F5C7D3A5F89B60D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9b:32:16:4e:be:e5:53:88:39:3d:73:ad:f9:
                    c4:6c:c1:65:72:29:d6:7e:e7:c9:54:e2:e2:e8:06:
                    15:20:f5:99:6c:d7:3c:b5:69:7c:35:fa:92:49:15:
                    bc:96:3d:40:b8:ad:de:20:0b:1e:34:eb:cf:72:56:
                    47:0a:01:4c:d9:4c:f3:31:5d:21:ae:80:29:a2:32:
                    43:5d:37:10:a2:97:21:c9:3e:55:75:d4:0e:71:a8:
                    60:47:5f:59:14:56:58:dc:88:86:70:c1:1f:39:c5:
                    33:f7:bd:90:76:53:ce:95:83:12:36:aa:0e:bb:28:
                    37:8a:83:3f:04:2b:81:b1:ad:2e:ee:cf:30:ea:10:
                    0c:37:da:f5:b4:a4:ea:e9:47:2f:77:ce:36:8c:c7:
                    5b:3e:ea:4d:47:21:9a:10:a6:7e:79:23:0a:4f:ba:
                    e6:56:e5:6c:07:94:2d:4f:27:d9:23:9d:0e:29:cc:
                    ac:60:ff:de:9e:1a:39:ce:5f:5c:2b:25:13:ca:19:
                    70:83:ee:96:da:aa:fc:7c:ad:df:e8:bf:05:8c:c0:
                    74:fb:e2:fc:31:c8:6d:9f:4a:84:5c:bd:b1:11:68:
                    91:a3:47:dc:d9:6e:16:a7:39:4d:3d:75:54:6c:e0:
                    99:19:6f:b0:45:2c:26:83:a2:dd:d9:a0:45:8f:45:
                    91:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:0E:36:6B:A0:44:8E:15:A6:FC:EE:FA:2F:5C:7D:3A:5F:89:B6:0D
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e38362e3233342e302f32332d3233203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:78:88:f6:fd:fe:6d:74:f2:f4:5e:67:ca:aa:66:27:5d:7a:
         be:1a:3c:05:e5:e1:9b:a1:3d:46:42:1f:e4:de:bf:04:fe:1a:
         0a:48:e7:ef:14:66:61:49:47:29:e8:a3:73:df:35:41:bb:78:
         de:1e:53:9f:bc:60:13:90:e6:2a:c7:32:c4:07:6b:52:32:bd:
         4e:ba:89:33:b8:c7:52:ed:ed:bf:d6:3e:3f:31:d0:1b:ec:e4:
         6f:35:db:17:63:28:35:8f:33:2a:c1:50:12:1d:b7:a4:1b:a0:
         a8:0c:be:64:1d:ba:f5:e4:0e:1b:12:77:b8:f9:85:fe:e9:30:
         c9:d3:a5:c6:6f:c6:ff:ee:7c:cb:f4:bb:6a:78:03:7c:15:86:
         44:9a:60:88:c7:0d:f2:f0:f5:76:36:a9:cf:84:c0:63:c1:4c:
         9d:77:3c:f0:01:a4:cd:47:28:06:fe:ce:de:53:5d:12:4c:65:
         85:ed:6c:4c:09:1f:79:7e:93:61:ac:a0:7e:1d:53:72:e8:2d:
         6b:f7:b0:31:48:6b:8b:88:0f:f8:12:01:8a:10:c5:e1:21:54:
         de:a4:f0:ac:85:65:e2:53:13:55:24:2c:c3:15:a3:5e:32:7e:
         6a:93:82:77:7c:3d:3b:26:e2:39:6b:86:34:4c:9c:9b:1b:da:
         07:32:42:88
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFP3WWa/jsR3CQf68hUA21iC7dqAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg4MzUyOTIxODg0MEY0NzFFMzk4Q0Y4RjU4NUI3MUQw
MDdBMkIzNTAeFw0yNDA4MDcxMzA5NDVaFw0yNTA4MDYxMzE0NDVaMDMxMTAvBgNV
BAMTKDA0MEUzNjZCQTA0NDhFMTVBNkZDRUVGQTJGNUM3RDNBNUY4OUI2MEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0mzIWTr7lU4g5PXOt+cRswWVy
KdZ+58lU4uLoBhUg9Zls1zy1aXw1+pJJFbyWPUC4rd4gCx40689yVkcKAUzZTPMx
XSGugCmiMkNdNxCilyHJPlV11A5xqGBHX1kUVljciIZwwR85xTP3vZB2U86VgxI2
qg67KDeKgz8EK4GxrS7uzzDqEAw32vW0pOrpRy93zjaMx1s+6k1HIZoQpn55IwpP
uuZW5WwHlC1PJ9kjnQ4pzKxg/96eGjnOX1wrJRPKGXCD7pbaqvx8rd/ovwWMwHT7
4vwxyG2fSoRcvbERaJGjR9zZbhanOU09dVRs4JkZb7BFLCaDot3ZoEWPRZE1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBA42a6BEjhWm/O76L1x9Ol+Jtg0wHwYDVR0j
BBgwFoAUuINSkhiED0ceOYz49YW3HQB6KzUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlFlZFp0SFM5eXFONjNvMXJzVEFMblhhQmFtTnZ0OW1MQWdlQmFnTjVQ
bjQvMS9CODgzNTI5MjE4ODQwRjQ3MUUzOThDRjhGNTg1QjcxRDAwN0EyQjM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4ODM1MjkyMTg4NDBGNDcx
RTM5OENGOEY1ODVCNzFEMDA3QTJCMzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJRZWRadEhTOXlxTjYzbzFyc1RBTG5YYUJhbU52dDltTEFnZUJhZ041UG40LzEv
MzEzNzM3MmUzODM2MmUzMjMzMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzNDM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxVuowDQYJKoZIhvcNAQELBQADggEBAFx4iPb9
/m108vReZ8qqZidder4aPAXl4ZuhPUZCH+TevwT+GgpI5+8UZmFJRynoo3PfNUG7
eN4eU5+8YBOQ5irHMsQHa1IyvU66iTO4x1Lt7b/WPj8x0Bvs5G812xdjKDWPMyrB
UBIdt6QboKgMvmQduvXkDhsSd7j5hf7pMMnTpcZvxv/ufMv0u2p4A3wVhkSaYIjH
DfLw9XY2qc+EwGPBTJ13PPABpM1HKAb+zt5TXRJMZYXtbEwJH3l+k2GsoH4dU3Lo
LWv3sDFIa4uID/gSAYoQxeEhVN6k8KyFZeJTE1UkLMMVo14yfmqTgnd8PTsm4jlr
hjRMnJsb2gcyQog=
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:06 2024 by rpki-client on console-ams.rpki-client.org