Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137372e31322e39342e302f32342d3234203d3e20323633363237.roa
File:                     3137372e31322e39342e302f32342d3234203d3e20323633363237.roa (raw, json)
Hash identifier:          GGRm0xQmU8qbNZLd2kfcd+N4w0TMmZkyrGhHnikLkuU=
Subject key identifier:   AD:B6:2B:81:E4:49:14:63:78:AA:F5:A3:3D:F8:96:9E:D4:48:90:68
Certificate issuer:       /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial:       704C41A6FB5EE73D87CE0B256E453A92460C5380
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137372e31322e39342e302f32342d3234203d3e20323633363237.roa
Signing time:             Tue 23 Apr 2024 19:13:39 +0000
ROA not before:           Tue 23 Apr 2024 19:08:39 +0000
ROA not after:            Tue 22 Apr 2025 19:13:39 +0000
asID:                     263627
IP address blocks:        177.12.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
                          rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 06:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:4c:41:a6:fb:5e:e7:3d:87:ce:0b:25:6e:45:3a:92:46:0c:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
        Validity
            Not Before: Apr 23 19:08:39 2024 GMT
            Not After : Apr 22 19:13:39 2025 GMT
        Subject: CN=ADB62B81E449146378AAF5A33DF8969ED4489068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a4:1a:29:6e:ba:c3:83:48:26:ca:0a:01:75:
                    6c:a3:e2:d6:fc:4a:5d:62:17:c0:01:b1:79:f6:3e:
                    20:7e:98:f2:2a:c0:2a:1b:0b:29:1c:be:90:f8:b8:
                    f1:39:8c:06:f5:9b:12:c4:8c:20:f7:29:66:fe:5e:
                    85:88:fe:5b:b5:9a:c8:2f:73:5d:04:b5:97:32:6a:
                    e7:7f:d8:27:0b:e4:b7:1f:3f:5b:85:0c:f4:65:48:
                    56:ab:53:3e:30:d4:13:3e:9f:92:e4:5a:75:83:de:
                    c9:ed:ab:c4:db:d6:7f:ac:48:f4:8f:a3:02:13:87:
                    20:32:46:c0:d1:42:06:20:67:b9:69:7e:b7:ab:f2:
                    3b:71:3d:30:76:64:6e:b8:37:1d:00:bd:d5:72:11:
                    ad:46:a6:54:96:b2:c0:c6:ac:d5:14:b6:a7:58:b0:
                    17:16:4e:19:ed:10:ff:29:95:47:1e:5e:f8:7f:48:
                    5d:97:ee:bf:8b:a7:88:9e:e4:fd:a5:b5:6a:b9:3b:
                    77:72:26:69:a0:3e:2c:d8:ca:45:02:45:c4:6e:19:
                    97:dc:3a:b5:37:0a:df:c7:cd:5b:e0:85:82:3d:77:
                    2d:87:5b:4e:c0:dd:fd:89:6c:9e:8d:b3:a1:2d:8a:
                    9b:62:bb:79:e3:02:02:f9:6a:4f:3e:9a:c6:af:d3:
                    91:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B6:2B:81:E4:49:14:63:78:AA:F5:A3:3D:F8:96:9E:D4:48:90:68
            X509v3 Authority Key Identifier:
                keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3137372e31322e39342e302f32342d3234203d3e20323633363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:f2:55:aa:17:53:04:3f:96:32:7b:9a:af:56:80:9f:17:d0:
         6f:21:a2:11:db:11:2a:0c:85:b7:13:a6:fd:d5:84:06:49:09:
         ca:4c:fc:7e:2a:a0:38:c2:dc:4a:7d:2e:6c:23:7c:27:8b:31:
         35:44:f9:e6:c3:d2:3b:ed:2c:2d:e9:0d:90:f6:86:19:e4:7f:
         dd:9b:6a:22:48:18:c9:b0:e2:1f:6b:cd:87:93:b2:58:86:91:
         f3:6b:41:f6:29:ee:c0:1e:e9:ad:2f:24:3b:23:c3:4a:50:fe:
         78:b6:14:f1:7f:cf:46:ce:6b:b8:b1:80:27:3b:44:a5:e5:47:
         92:a3:e2:ce:92:5c:ce:90:ce:8b:4e:5d:ab:4c:5b:be:f2:1c:
         3a:82:a6:d3:24:2b:04:78:34:75:f4:c3:01:f8:54:f1:77:76:
         ff:7e:39:2c:35:80:8c:49:ec:4e:da:6f:3a:68:47:fb:8f:33:
         5d:53:7c:7d:dd:65:89:53:3e:b7:b1:0c:50:36:6c:ff:1e:ef:
         44:5b:89:62:42:04:5f:4b:53:4f:cb:a2:41:0a:e9:64:b4:d1:
         23:a6:f8:10:3d:cc:35:e5:2f:41:54:87:22:c2:e8:4c:fe:8f:
         90:ba:c0:95:ad:01:82:ef:5a:f5:7e:78:8d:99:de:39:3b:6b:
         ec:92:41:93
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcExBpvte5z2HzgslbkU6kkYMU4AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFBMDE1MDYyMzE2MTFDODc0NjE0NDI0NzVCMTQwMUFE
NURFMzhEMjAeFw0yNDA0MjMxOTA4MzlaFw0yNTA0MjIxOTEzMzlaMDMxMTAvBgNV
BAMTKEFEQjYyQjgxRTQ0OTE0NjM3OEFBRjVBMzNERjg5NjlFRDQ0ODkwNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCopBopbrrDg0gmygoBdWyj4tb8
Sl1iF8ABsXn2PiB+mPIqwCobCykcvpD4uPE5jAb1mxLEjCD3KWb+XoWI/lu1msgv
c10EtZcyaud/2CcL5LcfP1uFDPRlSFarUz4w1BM+n5LkWnWD3sntq8Tb1n+sSPSP
owIThyAyRsDRQgYgZ7lpfrer8jtxPTB2ZG64Nx0AvdVyEa1GplSWssDGrNUUtqdY
sBcWThntEP8plUceXvh/SF2X7r+Lp4ie5P2ltWq5O3dyJmmgPizYykUCRcRuGZfc
OrU3Ct/HzVvghYI9dy2HW07A3f2JbJ6Ns6Etiptiu3njAgL5ak8+msav05ETAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUrbYrgeRJFGN4qvWjPfiWntRIkGgwHwYDVR0j
BBgwFoAUEaAVBiMWEch0YUQkdbFAGtXeONIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3lqR2FYcGpoUG5ERVhoUnE4aDhkUVQ4dTNxYnZDempTbVRWdjN4VEx6
V2kvMC8xMUEwMTUwNjIzMTYxMUM4NzQ2MTQ0MjQ3NUIxNDAxQUQ1REUzOEQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExQTAxNTA2MjMxNjExQzg3
NDYxNDQyNDc1QjE0MDFBRDVERTM4RDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN5akdhWHBqaFBuREVYaFJxOGg4ZFFUOHUzcWJ2Q3pqU21UVnYzeFRMeldpLzAv
MzEzNzM3MmUzMTMyMmUzOTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzYzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsQxeMA0GCSqGSIb3DQEBCwUAA4IBAQBj8lWqF1ME
P5Yye5qvVoCfF9BvIaIR2xEqDIW3E6b91YQGSQnKTPx+KqA4wtxKfS5sI3wnizE1
RPnmw9I77Swt6Q2Q9oYZ5H/dm2oiSBjJsOIfa82Hk7JYhpHza0H2Ke7AHumtLyQ7
I8NKUP54thTxf89Gzmu4sYAnO0Sl5UeSo+LOklzOkM6LTl2rTFu+8hw6gqbTJCsE
eDR19MMB+FTxd3b/fjksNYCMSexO2m86aEf7jzNdU3x93WWJUz63sQxQNmz/Hu9E
W4liQgRfS1NPy6JBCulktNEjpvgQPcw15S9BVIciwuhM/o+QusCVrQGC71r1fniN
md45O2vskkGT
-----END CERTIFICATE-----
Generated at Sat Jun 1 11:14:13 2024 by rpki-client on console-fra.rpki-client.org