Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/3137392e3132352e35362e302f32322d3234203d3e20323633303433.roa
File:                     3137392e3132352e35362e302f32322d3234203d3e20323633303433.roa (raw, json)
Hash identifier:          3SMGDwfMP49z5sdAYt3bkV5/CuxSSuhhzR/DOispzAo=
Subject key identifier:   A7:F7:96:07:82:8D:85:4D:E6:83:C1:6A:38:BA:28:2D:F4:3B:24:E9
Certificate issuer:       /CN=2847CCC684CE308C8CDBAF04E90C9E18DB33AC17
Certificate serial:       5D696D99ABDE1FDFE7BB1B9F58BBACF72F772CF7
Authority key identifier: 28:47:CC:C6:84:CE:30:8C:8C:DB:AF:04:E9:0C:9E:18:DB:33:AC:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/3137392e3132352e35362e302f32322d3234203d3e20323633303433.roa
Signing time:             Thu 04 Apr 2024 05:03:06 +0000
ROA not before:           Thu 04 Apr 2024 04:58:06 +0000
ROA not after:            Thu 03 Apr 2025 05:03:06 +0000
asID:                     263043
IP address blocks:        179.125.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl
                          rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:34:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:69:6d:99:ab:de:1f:df:e7:bb:1b:9f:58:bb:ac:f7:2f:77:2c:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2847CCC684CE308C8CDBAF04E90C9E18DB33AC17
        Validity
            Not Before: Apr  4 04:58:06 2024 GMT
            Not After : Apr  3 05:03:06 2025 GMT
        Subject: CN=A7F79607828D854DE683C16A38BA282DF43B24E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:69:a9:e5:19:e9:25:b5:9c:3b:c7:88:63:a7:
                    cd:d9:23:52:8b:b3:c4:95:bb:c7:91:81:0e:ec:f3:
                    02:3a:df:a3:a3:a3:42:68:3c:b6:5a:da:f3:d3:d5:
                    9b:3d:c7:75:3e:22:cc:b3:0e:57:d6:1f:dd:00:68:
                    ad:6b:4e:e4:20:fd:ef:62:33:a5:c5:51:65:d2:51:
                    61:6d:7e:22:f5:b2:95:bd:72:c1:4a:79:02:17:bb:
                    d8:dd:86:b4:f2:b0:2b:ff:6f:fe:11:42:39:1b:4f:
                    11:33:be:34:62:8a:35:2e:4e:55:b2:c5:62:1d:53:
                    46:36:49:9b:fa:bf:21:63:68:b8:f8:08:9e:02:c4:
                    f9:18:d7:b7:0a:45:cb:38:86:52:c7:31:44:0a:06:
                    ce:6a:b2:27:ff:b2:38:99:14:1f:91:fc:94:79:82:
                    28:a0:44:b3:4b:c7:0f:4c:d6:25:af:a7:15:4c:0c:
                    27:a1:bf:1b:3e:70:54:24:0e:a7:df:d9:35:45:34:
                    c1:67:d1:8f:7a:58:57:83:03:b0:59:a6:ab:81:63:
                    61:02:cc:56:b9:d5:d6:a0:b6:ed:18:1c:58:6b:42:
                    01:a3:3e:f8:21:1e:14:90:9b:1c:47:0e:46:6a:21:
                    24:25:fd:85:e6:4b:da:1c:57:b6:6d:98:89:ef:1e:
                    a0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F7:96:07:82:8D:85:4D:E6:83:C1:6A:38:BA:28:2D:F4:3B:24:E9
            X509v3 Authority Key Identifier:
                keyid:28:47:CC:C6:84:CE:30:8C:8C:DB:AF:04:E9:0C:9E:18:DB:33:AC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/3137392e3132352e35362e302f32322d3234203d3e20323633303433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:4a:30:c4:1e:81:5a:d8:59:57:78:a5:db:64:2c:01:ab:a7:
         5a:ff:54:4a:c3:88:17:7a:3f:64:4c:76:c3:eb:64:ea:91:5c:
         e2:79:94:43:8c:91:1d:71:79:5f:1c:9c:64:a1:c4:c4:c0:5c:
         59:70:1b:9d:a6:f6:2f:b0:06:ae:5e:cc:e7:e4:3f:b5:f4:1e:
         c7:94:93:69:10:8d:17:d1:e1:2c:41:83:c4:c5:39:26:b3:52:
         8b:e3:0d:1d:b0:fe:5a:e6:1e:ee:3b:2c:dc:d3:d0:71:5a:5d:
         5a:12:88:77:b0:c5:8f:24:eb:80:75:ed:a6:bc:5d:ef:82:53:
         b0:1d:6c:9a:4a:48:ed:4c:05:61:8b:f1:e0:13:5a:f1:01:db:
         f2:27:7a:03:82:bf:bf:63:49:15:da:9b:56:13:10:7b:4c:6f:
         98:65:4d:69:12:03:57:28:4b:73:3e:0e:3c:ee:02:9d:7d:b7:
         83:9b:bd:c1:23:b8:62:6d:a6:a1:aa:f2:a3:d9:a5:53:ad:01:
         27:68:8e:4e:1c:7e:bd:b8:59:79:fc:82:cf:be:5a:64:f4:76:
         0a:75:d4:93:90:c3:08:0d:2c:bf:7f:a1:9b:69:5e:2b:7f:8f:
         62:f2:ed:95:69:67:aa:c0:0f:20:14:29:18:a5:48:9a:20:aa:
         18:15:6a:89
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXWltmaveH9/nuxufWLus9y93LPcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjg0N0NDQzY4NENFMzA4QzhDREJBRjA0RTkwQzlFMThE
QjMzQUMxNzAeFw0yNDA0MDQwNDU4MDZaFw0yNTA0MDMwNTAzMDZaMDMxMTAvBgNV
BAMTKEE3Rjc5NjA3ODI4RDg1NERFNjgzQzE2QTM4QkEyODJERjQzQjI0RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgaanlGekltZw7x4hjp83ZI1KL
s8SVu8eRgQ7s8wI636Ojo0JoPLZa2vPT1Zs9x3U+IsyzDlfWH90AaK1rTuQg/e9i
M6XFUWXSUWFtfiL1spW9csFKeQIXu9jdhrTysCv/b/4RQjkbTxEzvjRiijUuTlWy
xWIdU0Y2SZv6vyFjaLj4CJ4CxPkY17cKRcs4hlLHMUQKBs5qsif/sjiZFB+R/JR5
giigRLNLxw9M1iWvpxVMDCehvxs+cFQkDqff2TVFNMFn0Y96WFeDA7BZpquBY2EC
zFa51dagtu0YHFhrQgGjPvghHhSQmxxHDkZqISQl/YXmS9ocV7ZtmInvHqD1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUp/eWB4KNhU3mg8FqOLooLfQ7JOkwHwYDVR0j
BBgwFoAUKEfMxoTOMIyM268E6QyeGNszrBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm5DM0pZU1Q4ODlyazJyN0RpNldRMXlqSjZ3dFNTQWEyZEp4cXJMYnE4
YlkvMi8yODQ3Q0NDNjg0Q0UzMDhDOENEQkFGMDRFOTBDOUUxOERCMzNBQzE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4NDdDQ0M2ODRDRTMwOEM4
Q0RCQUYwNEU5MEM5RTE4REIzM0FDMTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJuQzNKWVNUODg5cmsycjdEaTZXUTF5ako2d3RTU0FhMmRKeHFyTGJxOGJZLzIv
MzEzNzM5MmUzMTMyMzUyZTM1MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzMzMDM0MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKzfTgwDQYJKoZIhvcNAQELBQADggEBAC9KMMQe
gVrYWVd4pdtkLAGrp1r/VErDiBd6P2RMdsPrZOqRXOJ5lEOMkR1xeV8cnGShxMTA
XFlwG52m9i+wBq5ezOfkP7X0HseUk2kQjRfR4SxBg8TFOSazUovjDR2w/lrmHu47
LNzT0HFaXVoSiHewxY8k64B17aa8Xe+CU7AdbJpKSO1MBWGL8eATWvEB2/InegOC
v79jSRXam1YTEHtMb5hlTWkSA1coS3M+DjzuAp19t4ObvcEjuGJtpqGq8qPZpVOt
ASdojk4cfr24WXn8gs++WmT0dgp11JOQwwgNLL9/oZtpXit/j2Ly7ZVpZ6rADyAU
KRilSJogqhgVaok=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:13 2024 by rpki-client on console-ams.rpki-client.org