Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3137372e31312e3130302e302f32342d3234203d3e203631363732.roa
File:                     3137372e31312e3130302e302f32342d3234203d3e203631363732.roa (raw, json)
Hash identifier:          gPVu5ZDSWrcjGIf4M510XKPhllMjPKKZ5LXUtpsXQYo=
Subject key identifier:   10:52:A5:4E:9E:C3:46:D0:46:20:FD:7D:8B:46:DA:4A:13:BE:4A:55
Certificate issuer:       /CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
Certificate serial:       2317B6E083E3507D694D98D39496227C0CFF95D7
Authority key identifier: 19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3137372e31312e3130302e302f32342d3234203d3e203631363732.roa
Signing time:             Thu 04 Apr 2024 18:22:41 +0000
ROA not before:           Thu 04 Apr 2024 18:17:41 +0000
ROA not after:            Thu 03 Apr 2025 18:22:41 +0000
asID:                     61672
IP address blocks:        177.11.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl
                          rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:17:b6:e0:83:e3:50:7d:69:4d:98:d3:94:96:22:7c:0c:ff:95:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
        Validity
            Not Before: Apr  4 18:17:41 2024 GMT
            Not After : Apr  3 18:22:41 2025 GMT
        Subject: CN=1052A54E9EC346D04620FD7D8B46DA4A13BE4A55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4c:50:e6:ac:9c:d6:00:a9:9c:d0:f6:41:ca:
                    c2:5b:e0:11:8c:b1:02:e4:02:45:a1:72:d0:46:1b:
                    05:51:7b:ab:29:a3:9f:af:cd:c0:f1:4a:00:d6:63:
                    26:4b:6d:c4:d8:e0:8b:ff:89:94:54:97:99:e3:c1:
                    d9:96:a3:9a:74:79:70:be:17:3a:05:a7:cb:98:8c:
                    76:5e:6a:e7:9b:7b:02:14:a3:be:ee:7e:b6:69:a6:
                    e7:64:a6:13:13:f6:9f:07:72:2b:98:45:13:c1:2e:
                    8c:63:d7:ac:ba:26:80:d3:9a:af:5a:5d:bb:c9:88:
                    19:b9:e1:7e:b5:3a:b3:8f:66:5f:2c:d6:8d:53:7e:
                    96:36:41:48:37:5e:0c:ac:c2:24:9e:61:0e:cb:05:
                    5b:2e:7f:bd:3d:ba:7d:ac:82:11:62:ad:3c:12:de:
                    49:4a:b9:61:6c:1e:9f:86:0b:df:7a:80:3a:31:63:
                    b0:2e:ca:0f:d3:ca:10:d3:29:63:a4:f5:1e:5a:2a:
                    44:82:f1:8c:61:0f:30:db:65:fd:68:80:f4:5b:79:
                    aa:21:58:16:15:7a:ec:83:4e:b1:9a:ed:e7:1d:2e:
                    d0:01:7f:44:06:db:8a:39:75:d3:0e:6b:f2:43:32:
                    e8:bc:a7:18:11:4b:00:54:5d:43:b7:ad:f8:56:54:
                    17:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:52:A5:4E:9E:C3:46:D0:46:20:FD:7D:8B:46:DA:4A:13:BE:4A:55
            X509v3 Authority Key Identifier:
                keyid:19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/3137372e31312e3130302e302f32342d3234203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:99:62:62:32:d2:a9:0d:5c:87:43:18:c9:80:c0:69:fb:f4:
         eb:9f:07:af:8a:61:9e:be:5d:75:eb:b5:41:0e:db:a1:0a:df:
         05:09:51:04:0b:54:93:e4:ae:48:e9:3c:ba:d9:3f:5f:3c:cd:
         29:b4:46:6d:98:59:01:d0:a8:7a:42:33:53:3a:cf:0a:3c:39:
         e5:0e:07:16:22:5d:a6:da:6d:d3:f1:c5:70:01:d8:aa:f1:2a:
         b9:5e:ea:cf:24:b9:bd:ac:6e:ae:c5:d0:ea:d3:d5:38:06:97:
         19:66:14:83:0a:68:61:19:2f:d1:c8:19:0c:6e:84:28:de:df:
         07:9c:7f:4f:dd:53:01:c4:43:2e:00:43:a8:4c:96:15:ba:e9:
         36:84:57:4a:0a:13:55:68:46:c9:fd:b6:10:3a:7c:80:6d:1d:
         6d:d9:7f:39:e6:ef:28:aa:2f:72:2f:98:6e:91:6e:35:56:a9:
         74:ff:56:75:80:f0:15:09:1c:62:06:d0:0f:d8:e2:88:32:6c:
         54:14:5f:66:5e:8c:15:1f:0f:e9:e8:7e:d6:bb:b5:85:d3:ba:
         b2:50:ff:10:6c:47:4e:8e:53:fd:fb:77:f8:8a:54:48:66:d9:
         3e:c8:ec:a4:fe:16:6e:87:04:84:da:c8:8a:2e:59:b4:7e:22:
         77:61:7d:39
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIxe24IPjUH1pTZjTlJYifAz/ldcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlGQTcxOEE3Njg5RjcxOEFCQjRDNDZEMEQ5QjBBMEMw
MzY2NjI4MTAeFw0yNDA0MDQxODE3NDFaFw0yNTA0MDMxODIyNDFaMDMxMTAvBgNV
BAMTKDEwNTJBNTRFOUVDMzQ2RDA0NjIwRkQ3RDhCNDZEQTRBMTNCRTRBNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1TFDmrJzWAKmc0PZBysJb4BGM
sQLkAkWhctBGGwVRe6spo5+vzcDxSgDWYyZLbcTY4Iv/iZRUl5njwdmWo5p0eXC+
FzoFp8uYjHZeauebewIUo77ufrZppudkphMT9p8HciuYRRPBLoxj16y6JoDTmq9a
XbvJiBm54X61OrOPZl8s1o1TfpY2QUg3XgyswiSeYQ7LBVsuf709un2sghFirTwS
3klKuWFsHp+GC996gDoxY7Auyg/TyhDTKWOk9R5aKkSC8YxhDzDbZf1ogPRbeaoh
WBYVeuyDTrGa7ecdLtABf0QG24o5ddMOa/JDMui8pxgRSwBUXUO3rfhWVBcXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUEFKlTp7DRtBGIP19i0baShO+SlUwHwYDVR0j
BBgwFoAUGfpxinaJ9xirtMRtDZsKDANmYoEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1VIYUxMV1Q1aVNkOE41aEFxUW1IVW5LWEpMUDJ1RlNSZ2tNN3NZcHY3
RlgvMS8xOUZBNzE4QTc2ODlGNzE4QUJCNEM0NkQwRDlCMEEwQzAzNjY2MjgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5RkE3MThBNzY4OUY3MThB
QkI0QzQ2RDBEOUIwQTBDMDM2NjYyODEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNVSGFMTFdUNWlTZDhONWhBcVFtSFVuS1hKTFAydUZTUmdrTTdzWXB2N0ZYLzEv
MzEzNzM3MmUzMTMxMmUzMTMwMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzYzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsQtkMA0GCSqGSIb3DQEBCwUAA4IBAQAhmWJiMtKp
DVyHQxjJgMBp+/TrnwevimGevl1167VBDtuhCt8FCVEEC1ST5K5I6Ty62T9fPM0p
tEZtmFkB0Kh6QjNTOs8KPDnlDgcWIl2m2m3T8cVwAdiq8Sq5XurPJLm9rG6uxdDq
09U4BpcZZhSDCmhhGS/RyBkMboQo3t8HnH9P3VMBxEMuAEOoTJYVuuk2hFdKChNV
aEbJ/bYQOnyAbR1t2X855u8oqi9yL5hukW41Vql0/1Z1gPAVCRxiBtAP2OKIMmxU
FF9mXowVHw/p6H7Wu7WF07qyUP8QbEdOjlP9+3f4ilRIZtk+yOyk/hZuhwSE2siK
Llm0fiJ3YX05
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:54 2024 by rpki-client on console-ams.rpki-client.org