Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/3137372e35352e39322e302f32332d3234203d3e20323732373234.roa
File:                     3137372e35352e39322e302f32332d3234203d3e20323732373234.roa (raw, json)
Hash identifier:          srw/Uv0Hc0dblmTLwpJ1s0la2KE7ye6jHPJ3oZHCC0U=
Subject key identifier:   01:29:2D:3E:85:10:E5:46:7B:D0:F6:C7:6E:67:08:9E:AC:E3:E6:0F
Certificate issuer:       /CN=A1C8A1A058DF2CD31BED8D3D82EC49DB5C063829
Certificate serial:       29434F34FB885E892778789A49D45679742A6616
Authority key identifier: A1:C8:A1:A0:58:DF:2C:D3:1B:ED:8D:3D:82:EC:49:DB:5C:06:38:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1C8A1A058DF2CD31BED8D3D82EC49DB5C063829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/3137372e35352e39322e302f32332d3234203d3e20323732373234.roa
Signing time:             Mon 06 May 2024 16:34:39 +0000
ROA not before:           Mon 06 May 2024 16:29:39 +0000
ROA not after:            Mon 05 May 2025 16:34:39 +0000
asID:                     272724
IP address blocks:        177.55.92.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/A1C8A1A058DF2CD31BED8D3D82EC49DB5C063829.crl
                          rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/A1C8A1A058DF2CD31BED8D3D82EC49DB5C063829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1C8A1A058DF2CD31BED8D3D82EC49DB5C063829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:43:4f:34:fb:88:5e:89:27:78:78:9a:49:d4:56:79:74:2a:66:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1C8A1A058DF2CD31BED8D3D82EC49DB5C063829
        Validity
            Not Before: May  6 16:29:39 2024 GMT
            Not After : May  5 16:34:39 2025 GMT
        Subject: CN=01292D3E8510E5467BD0F6C76E67089EACE3E60F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:08:8b:27:ff:9d:1a:bd:17:9f:f3:25:31:b4:
                    cf:b0:71:b9:d0:de:43:e0:6a:d8:f8:d7:1a:cc:dd:
                    52:9a:93:ff:5f:47:0c:66:68:e7:d9:9f:d1:aa:89:
                    68:f4:51:51:9b:de:a2:ef:1c:3c:73:00:55:5c:7b:
                    42:95:b1:35:10:6d:6a:61:50:2a:0b:1d:bf:66:1a:
                    60:01:e8:9c:e7:5d:32:4c:f0:78:c9:17:28:ee:bd:
                    bd:ad:f4:c4:17:e8:45:f2:95:c3:11:b3:e4:0f:55:
                    41:9c:c4:da:38:bd:2f:c1:b3:95:8f:19:d3:00:6f:
                    c6:23:7f:0a:5d:d6:f8:3c:89:89:11:4c:f4:05:76:
                    78:17:ba:3a:65:ca:5e:5b:d9:9a:b5:27:e6:55:b6:
                    18:6a:a2:65:c2:87:14:b8:1d:6a:6d:35:5a:b7:02:
                    94:25:2a:9c:45:77:09:74:cb:cf:ee:4d:5b:c1:05:
                    05:af:98:e1:72:c3:12:a6:bc:14:22:88:b9:69:14:
                    44:27:14:bb:c8:aa:46:c0:9b:5b:9b:41:a7:fd:cb:
                    09:7a:33:f5:a9:f8:f7:d5:0a:a9:ff:13:47:61:16:
                    73:58:9f:4a:fa:4a:2d:ca:a0:40:70:52:6e:04:c4:
                    0f:a1:0f:51:06:53:41:79:fa:27:de:1e:8c:f1:60:
                    4b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:29:2D:3E:85:10:E5:46:7B:D0:F6:C7:6E:67:08:9E:AC:E3:E6:0F
            X509v3 Authority Key Identifier:
                keyid:A1:C8:A1:A0:58:DF:2C:D3:1B:ED:8D:3D:82:EC:49:DB:5C:06:38:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/A1C8A1A058DF2CD31BED8D3D82EC49DB5C063829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1C8A1A058DF2CD31BED8D3D82EC49DB5C063829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Yj6wtUYhaYY3Dp1KaQCexpu8mp36rsMvyTqgy1o6uNi/0/3137372e35352e39322e302f32332d3234203d3e20323732373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:29:d8:ac:58:02:91:e4:d4:f3:cf:05:6c:36:ea:02:09:d9:
         d2:3e:2e:c5:9f:f3:8c:6e:f9:d3:11:67:5b:e9:ba:90:67:76:
         a1:7b:8a:f0:39:aa:6e:34:61:ea:bf:66:12:d0:b9:b1:fa:14:
         e1:45:37:c6:55:17:50:93:75:d3:af:9e:a1:11:0d:96:50:be:
         25:2a:bd:42:f9:05:59:99:53:6f:b7:75:9f:d0:25:95:83:a2:
         c1:21:2c:b8:46:f2:d9:e1:35:0d:08:9c:b6:c9:41:87:1d:df:
         34:b4:44:2f:57:ea:59:97:e1:55:ff:ba:1b:44:c6:09:2f:49:
         b7:36:8f:44:06:a3:c2:74:be:34:a4:75:cb:92:13:32:fe:34:
         3c:85:ae:b7:fc:35:1c:98:9e:df:b2:54:7f:90:60:95:27:51:
         66:0d:37:b6:6b:a9:00:37:ee:ef:72:64:ea:77:d3:06:e8:3f:
         b3:07:a0:9d:d2:64:03:21:ab:0f:98:f1:bb:d7:90:8e:78:23:
         f6:ec:de:59:58:ab:31:50:43:7d:91:bb:60:88:73:d9:f5:ff:
         ac:21:8f:46:20:ee:c5:92:13:74:49:ff:77:81:72:c0:9c:35:
         8d:62:c1:c2:b3:07:46:3e:15:ef:04:47:a2:8b:ee:d9:2d:94:
         4e:fa:7b:2b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKUNPNPuIXokneHiaSdRWeXQqZhYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTFDOEExQTA1OERGMkNEMzFCRUQ4RDNEODJFQzQ5REI1
QzA2MzgyOTAeFw0yNDA1MDYxNjI5MzlaFw0yNTA1MDUxNjM0MzlaMDMxMTAvBgNV
BAMTKDAxMjkyRDNFODUxMEU1NDY3QkQwRjZDNzZFNjcwODlFQUNFM0U2MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSCIsn/50avRef8yUxtM+wcbnQ
3kPgatj41xrM3VKak/9fRwxmaOfZn9GqiWj0UVGb3qLvHDxzAFVce0KVsTUQbWph
UCoLHb9mGmAB6JznXTJM8HjJFyjuvb2t9MQX6EXylcMRs+QPVUGcxNo4vS/Bs5WP
GdMAb8Yjfwpd1vg8iYkRTPQFdngXujplyl5b2Zq1J+ZVthhqomXChxS4HWptNVq3
ApQlKpxFdwl0y8/uTVvBBQWvmOFywxKmvBQiiLlpFEQnFLvIqkbAm1ubQaf9ywl6
M/Wp+PfVCqn/E0dhFnNYn0r6Si3KoEBwUm4ExA+hD1EGU0F5+ifeHozxYEtzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUASktPoUQ5UZ70PbHbmcInqzj5g8wHwYDVR0j
BBgwFoAUocihoFjfLNMb7Y09guxJ21wGOCkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMllqNnd0VVloYVlZM0RwMUthUUNleHB1OG1wMzZyc012eVRxZ3kxbzZ1
TmkvMC9BMUM4QTFBMDU4REYyQ0QzMUJFRDhEM0Q4MkVDNDlEQjVDMDYzODI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ExQzhBMUEwNThERjJDRDMx
QkVEOEQzRDgyRUM0OURCNUMwNjM4MjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJZajZ3dFVZaGFZWTNEcDFLYVFDZXhwdThtcDM2cnNNdnlUcWd5MW82dU5pLzAv
MzEzNzM3MmUzNTM1MmUzOTMyMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNzMy
MzczMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsTdcMA0GCSqGSIb3DQEBCwUAA4IBAQBmKdisWAKR
5NTzzwVsNuoCCdnSPi7Fn/OMbvnTEWdb6bqQZ3ahe4rwOapuNGHqv2YS0Lmx+hTh
RTfGVRdQk3XTr56hEQ2WUL4lKr1C+QVZmVNvt3Wf0CWVg6LBISy4RvLZ4TUNCJy2
yUGHHd80tEQvV+pZl+FV/7obRMYJL0m3No9EBqPCdL40pHXLkhMy/jQ8ha63/DUc
mJ7fslR/kGCVJ1FmDTe2a6kAN+7vcmTqd9MG6D+zB6Cd0mQDIasPmPG715COeCP2
7N5ZWKsxUEN9kbtgiHPZ9f+sIY9GIO7FkhN0Sf93gXLAnDWNYsHCswdGPhXvBEei
i+7ZLZRO+nsr
-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:11 2024 by rpki-client on console-ams.rpki-client.org