Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/3137372e32322e3232342e302f32302d3234203d3e20323632363639.roa
File:                     3137372e32322e3232342e302f32302d3234203d3e20323632363639.roa (raw, json)
Hash identifier:          BhK5i9ZsnnqH9Jc/GI3WdVgH0v6NQr9xM3W3k7KjUA8=
Subject key identifier:   17:6A:A3:87:AA:83:0A:F8:89:D1:EA:BB:F6:FA:C3:AD:50:58:84:E3
Certificate issuer:       /CN=F9FB33583132547FA2AA2454BAD750E527E58EAD
Certificate serial:       32CB4FECCFEEF675B1B761CC6E962294B0A87251
Authority key identifier: F9:FB:33:58:31:32:54:7F:A2:AA:24:54:BA:D7:50:E5:27:E5:8E:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9FB33583132547FA2AA2454BAD750E527E58EAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/3137372e32322e3232342e302f32302d3234203d3e20323632363639.roa
Signing time:             Wed 17 Apr 2024 18:18:44 +0000
ROA not before:           Wed 17 Apr 2024 18:13:44 +0000
ROA not after:            Wed 16 Apr 2025 18:18:44 +0000
asID:                     262669
IP address blocks:        177.22.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/F9FB33583132547FA2AA2454BAD750E527E58EAD.crl
                          rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/F9FB33583132547FA2AA2454BAD750E527E58EAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9FB33583132547FA2AA2454BAD750E527E58EAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 16:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:cb:4f:ec:cf:ee:f6:75:b1:b7:61:cc:6e:96:22:94:b0:a8:72:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9FB33583132547FA2AA2454BAD750E527E58EAD
        Validity
            Not Before: Apr 17 18:13:44 2024 GMT
            Not After : Apr 16 18:18:44 2025 GMT
        Subject: CN=176AA387AA830AF889D1EABBF6FAC3AD505884E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2f:6c:08:b5:c7:fe:84:16:5c:e2:87:bd:a3:
                    4b:4b:d6:6c:f7:28:f5:47:a2:ca:40:1b:f9:bd:ab:
                    bc:67:b8:f2:f8:3f:79:a6:32:38:aa:30:39:36:fd:
                    4a:bb:36:4b:d9:d4:95:51:47:86:a3:ac:d2:a2:c8:
                    8e:f9:02:26:69:59:cc:83:9e:88:0b:d1:24:26:cb:
                    07:c7:8d:65:12:74:bb:5d:cd:7f:af:4c:c2:94:d5:
                    11:53:e2:f6:32:7a:1d:f3:5e:62:96:4e:96:b8:6a:
                    e8:56:38:6c:bb:c1:cc:ca:a8:1c:bc:24:45:25:9b:
                    47:49:9c:95:30:58:56:82:71:8d:aa:6d:4f:85:56:
                    ae:75:9c:7d:ff:5b:73:e9:7e:04:f1:c4:bf:31:3a:
                    61:74:92:7a:c4:0f:c3:8a:ef:50:5c:a1:96:05:a8:
                    d6:3f:d9:a9:21:95:bd:8c:83:a5:ca:5e:41:53:c7:
                    6e:5d:e0:01:ee:f0:a5:61:49:61:a7:a6:2d:2e:d9:
                    2d:75:4d:54:d0:3c:04:cb:dc:8d:be:6c:a7:67:8e:
                    0f:98:8b:59:13:36:ba:dd:65:d6:45:b6:5b:73:81:
                    b8:56:61:5b:94:fb:d0:6a:da:7d:b7:ca:b6:47:b0:
                    2e:0d:2e:11:e3:4d:c5:d3:03:98:2c:5e:7e:03:01:
                    75:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6A:A3:87:AA:83:0A:F8:89:D1:EA:BB:F6:FA:C3:AD:50:58:84:E3
            X509v3 Authority Key Identifier:
                keyid:F9:FB:33:58:31:32:54:7F:A2:AA:24:54:BA:D7:50:E5:27:E5:8E:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/F9FB33583132547FA2AA2454BAD750E527E58EAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9FB33583132547FA2AA2454BAD750E527E58EAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/3137372e32322e3232342e302f32302d3234203d3e20323632363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         75:c6:14:93:9a:2a:99:7a:a9:77:ef:98:a9:eb:39:63:87:73:
         31:ad:55:0f:c4:b1:3f:21:e2:5e:c7:ef:1f:c7:d4:0d:ce:c2:
         56:26:a4:9b:61:bc:e1:3a:f1:62:04:1f:96:f9:2b:00:77:6e:
         b4:00:d3:2e:42:b2:2b:ea:e2:35:28:b4:8f:33:78:aa:e4:12:
         2a:a3:e2:cf:33:39:b5:86:26:a9:26:b1:1b:78:d2:c1:9c:dd:
         63:15:a9:ae:3a:9a:12:55:d2:e4:f0:24:51:39:4d:ef:c0:df:
         9c:3f:b1:c4:8e:0f:cc:20:3e:28:89:3e:09:46:5e:9b:77:84:
         b6:75:03:d8:35:83:5c:41:0c:c1:14:59:f3:e2:30:f4:ad:55:
         78:a3:24:ff:5d:a8:63:59:07:70:a3:ac:ee:0a:55:ad:54:1d:
         97:4b:77:c5:cb:57:c8:2d:b5:d6:36:fb:b4:0e:18:54:a4:17:
         07:ab:5a:55:d6:89:61:b6:fe:ee:fa:1a:63:ee:b3:bd:ef:f9:
         8f:7e:ff:72:e8:7d:3f:9a:05:15:4c:06:41:a0:e5:9f:d3:03:
         59:87:7a:64:b0:24:a7:bd:e6:d3:c3:40:54:40:bb:43:3c:ff:
         1c:d9:a7:70:9f:9c:2a:b1:ac:82:c8:1c:d6:6f:89:4b:c4:07:
         d9:9b:8d:fa
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMstP7M/u9nWxt2HMbpYilLCoclEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjlGQjMzNTgzMTMyNTQ3RkEyQUEyNDU0QkFENzUwRTUy
N0U1OEVBRDAeFw0yNDA0MTcxODEzNDRaFw0yNTA0MTYxODE4NDRaMDMxMTAvBgNV
BAMTKDE3NkFBMzg3QUE4MzBBRjg4OUQxRUFCQkY2RkFDM0FENTA1ODg0RTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwL2wItcf+hBZc4oe9o0tL1mz3
KPVHospAG/m9q7xnuPL4P3mmMjiqMDk2/Uq7NkvZ1JVRR4ajrNKiyI75AiZpWcyD
nogL0SQmywfHjWUSdLtdzX+vTMKU1RFT4vYyeh3zXmKWTpa4auhWOGy7wczKqBy8
JEUlm0dJnJUwWFaCcY2qbU+FVq51nH3/W3PpfgTxxL8xOmF0knrED8OK71BcoZYF
qNY/2akhlb2Mg6XKXkFTx25d4AHu8KVhSWGnpi0u2S11TVTQPATL3I2+bKdnjg+Y
i1kTNrrdZdZFtltzgbhWYVuU+9Bq2n23yrZHsC4NLhHjTcXTA5gsXn4DAXXnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUF2qjh6qDCviJ0eq79vrDrVBYhOMwHwYDVR0j
BBgwFoAU+fszWDEyVH+iqiRUutdQ5Sfljq0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmc5ZVdVelVjVTVqbUZTakVmMUVBOUZIWk5ENWtLd0tyYmpmcUtrS2dp
ZlQvMC9GOUZCMzM1ODMxMzI1NDdGQTJBQTI0NTRCQUQ3NTBFNTI3RTU4RUFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5RkIzMzU4MzEzMjU0N0ZB
MkFBMjQ1NEJBRDc1MEU1MjdFNThFQUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJnOWVXVXpVY1U1am1GU2pFZjFFQTlGSFpORDVrS3dLcmJqZnFLa0tnaWZULzAv
MzEzNzM3MmUzMjMyMmUzMjMyMzQyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASxFuAwDQYJKoZIhvcNAQELBQADggEBAHXGFJOa
Kpl6qXfvmKnrOWOHczGtVQ/EsT8h4l7H7x/H1A3OwlYmpJthvOE68WIEH5b5KwB3
brQA0y5Csivq4jUotI8zeKrkEiqj4s8zObWGJqkmsRt40sGc3WMVqa46mhJV0uTw
JFE5Te/A35w/scSOD8wgPiiJPglGXpt3hLZ1A9g1g1xBDMEUWfPiMPStVXijJP9d
qGNZB3CjrO4KVa1UHZdLd8XLV8gttdY2+7QOGFSkFwerWlXWiWG2/u76GmPus73v
+Y9+/3LofT+aBRVMBkGg5Z/TA1mHemSwJKe95tPDQFRAu0M8/xzZp3CfnCqxrILI
HNZviUvEB9mbjfo=
-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:42 2024 by rpki-client on console-fra.rpki-client.org