Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/3137372e3135342e32382e302f32322d3234203d3e20323633313435.roa
File:                     3137372e3135342e32382e302f32322d3234203d3e20323633313435.roa (raw, json)
Hash identifier:          yfBFxtmv66M/mnplAEG3DSpIsZHYIYpMyLW7EAJPRn0=
Subject key identifier:   F3:82:A2:90:16:1F:F2:38:3E:28:CA:73:32:F3:FD:24:6B:D5:59:58
Certificate issuer:       /CN=FA144211F588D96039C8D4D4A6F39AAB0B7B3461
Certificate serial:       2079F56F870E0DBEC37240CD303A8E70CB22A49E
Authority key identifier: FA:14:42:11:F5:88:D9:60:39:C8:D4:D4:A6:F3:9A:AB:0B:7B:34:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/3137372e3135342e32382e302f32322d3234203d3e20323633313435.roa
Signing time:             Wed 03 Apr 2024 18:39:22 +0000
ROA not before:           Wed 03 Apr 2024 18:34:22 +0000
ROA not after:            Wed 02 Apr 2025 18:39:22 +0000
asID:                     263145
IP address blocks:        177.154.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.crl
                          rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:79:f5:6f:87:0e:0d:be:c3:72:40:cd:30:3a:8e:70:cb:22:a4:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA144211F588D96039C8D4D4A6F39AAB0B7B3461
        Validity
            Not Before: Apr  3 18:34:22 2024 GMT
            Not After : Apr  2 18:39:22 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bf:ea:e9:33:07:11:a5:f3:66:3a:5f:e0:7c:
                    04:54:8c:27:67:8f:dd:91:02:43:ec:7c:5e:7f:32:
                    58:6b:c8:1a:60:3b:d5:b0:27:e8:12:7e:60:bf:4c:
                    9f:26:d1:60:0b:43:ee:ee:f1:0c:16:fc:eb:91:13:
                    db:59:56:03:59:db:e9:59:95:22:7d:cb:9b:52:17:
                    7d:b2:5f:b4:02:86:a5:59:7f:ef:a5:c2:8b:43:58:
                    4b:55:cf:8b:fe:f4:1c:18:80:5a:06:0e:e9:8a:29:
                    60:1a:0c:bc:f9:45:59:80:2f:ee:09:3e:ec:07:b2:
                    3c:d1:5d:88:99:4e:d8:f4:49:8b:1a:c4:ff:3f:ca:
                    7a:fc:c1:ca:8e:6d:84:5c:21:b4:66:98:c8:e3:17:
                    df:2a:56:b6:75:ff:9b:af:78:e6:69:2c:9a:c7:31:
                    c2:f2:36:92:dc:62:33:1d:7f:3d:de:5f:d3:e2:30:
                    b1:be:b4:43:8c:c3:bb:5a:8f:d4:69:e7:72:a2:84:
                    90:83:2c:e5:32:7d:17:76:51:c4:2e:3c:58:2c:4c:
                    16:c3:bb:33:90:e2:b9:d4:84:71:f1:a8:c7:1e:94:
                    bb:f6:10:8e:58:00:e1:25:c8:0d:df:34:a4:b4:15:
                    5b:4e:e2:29:6e:43:dd:42:ee:b6:64:ff:69:63:a5:
                    64:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:82:A2:90:16:1F:F2:38:3E:28:CA:73:32:F3:FD:24:6B:D5:59:58
            X509v3 Authority Key Identifier:
                keyid:FA:14:42:11:F5:88:D9:60:39:C8:D4:D4:A6:F3:9A:AB:0B:7B:34:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA144211F588D96039C8D4D4A6F39AAB0B7B3461.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/2/3137372e3135342e32382e302f32322d3234203d3e20323633313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:15:c1:a7:37:c5:a6:1d:35:81:9f:f1:d5:d1:0b:a2:af:81:
         62:ba:f8:66:1b:75:95:3e:f8:bd:26:4d:88:9f:79:e5:2b:60:
         e4:b9:b9:f1:8b:59:35:a5:17:37:37:b5:b4:92:16:88:eb:6f:
         e5:b4:f1:15:f8:6f:11:62:f0:2f:a5:43:2b:26:78:30:16:90:
         8c:3b:ca:4a:34:ec:19:8e:9a:5d:1e:ec:4c:3b:05:da:7c:bb:
         72:55:86:80:af:ba:55:20:b0:1b:69:7f:fb:98:57:b9:83:f9:
         33:fc:12:0e:b6:a0:6d:34:3d:16:64:bc:ed:e5:de:f8:3c:62:
         b1:3d:91:0d:d1:e1:80:0f:9b:cb:50:f6:0c:b9:f0:f3:ca:ed:
         65:dc:f8:13:2f:03:26:65:f2:3e:89:28:e5:e8:6d:74:50:3f:
         29:40:50:64:c6:1d:8e:ca:72:e8:20:bc:99:82:4e:fd:8d:fc:
         14:9b:d3:d5:49:cf:7a:91:13:7b:14:6c:2e:85:d3:02:1e:5b:
         ff:d9:78:da:40:0f:b1:82:c2:6b:ee:77:a1:7e:f0:8c:b7:fb:
         04:5c:3b:0c:9f:05:4b:cf:60:3e:2f:b3:5a:f7:85:c5:7a:39:
         c5:4e:d1:fe:9d:2f:a2:f3:4c:15:2e:5a:d1:6d:7e:4d:19:e5:
         eb:bf:ac:a6
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUIHn1b4cODb7DckDNMDqOcMsipJ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkExNDQyMTFGNTg4RDk2MDM5QzhENEQ0QTZGMzlBQUIw
QjdCMzQ2MTAeFw0yNDA0MDMxODM0MjJaFw0yNTA0MDIxODM5MjJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0RCRkVBRTkzMzA3MTFBNUYz
NjYzQTVGRTA3QzA0NTQ4QzI3Njc4RkREOTEwMjQzRUM3QzVFN0YzMjU4NkJDODFB
NjAzQkQ1QjAyN0U4MTI3RTYwQkY0QzlGMjZEMTYwMEI0M0VFRUVGMTBDMTZGQ0VC
OTExM0RCNTk1NjAzNTlEQkU5NTk5NTIyN0RDQjlCNTIxNzdEQjI1RkI0MDI4NkE1
NTk3RkVGQTVDMjhCNDM1ODRCNTVDRjhCRkVGNDFDMTg4MDVBMDYwRUU5OEEyOTYw
MUEwQ0JDRjk0NTU5ODAyRkVFMDkzRUVDMDdCMjNDRDE1RDg4OTk0RUQ4RjQ0OThC
MUFDNEZGM0ZDQTdBRkNDMUNBOEU2RDg0NUMyMUI0NjY5OEM4RTMxN0RGMkE1NkI2
NzVGRjlCQUY3OEU2NjkyQzlBQzczMUMyRjIzNjkyREM2MjMzMUQ3RjNEREU1RkQz
RTIzMEIxQkVCNDQzOENDM0JCNUE4RkQ0NjlFNzcyQTI4NDkwODMyQ0U1MzI3RDE3
NzY1MUM0MkUzQzU4MkM0QzE2QzNCQjMzOTBFMkI5RDQ4NDcxRjFBOEM3MUU5NEJC
RjYxMDhFNTgwMEUxMjVDODBEREYzNEE0QjQxNTVCNEVFMjI5NkU0M0RENDJFRUI2
NjRGRjY5NjNBNTY0NzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzb/q6TMHEaXzZjpf4HwEVIwnZ4/dkQJD7HxefzJYa8gaYDvVsCfo
En5gv0yfJtFgC0Pu7vEMFvzrkRPbWVYDWdvpWZUifcubUhd9sl+0AoalWX/vpcKL
Q1hLVc+L/vQcGIBaBg7piilgGgy8+UVZgC/uCT7sB7I80V2ImU7Y9EmLGsT/P8p6
/MHKjm2EXCG0ZpjI4xffKla2df+br3jmaSyaxzHC8jaS3GIzHX893l/T4jCxvrRD
jMO7Wo/UaedyooSQgyzlMn0XdlHELjxYLEwWw7szkOK51IRx8ajHHpS79hCOWADh
JcgN3zSktBVbTuIpbkPdQu62ZP9pY6VkcQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FPOCopAWH/I4PijKczLz/SRr1VlYMB8GA1UdIwQYMBaAFPoUQhH1iNlgOcjU1Kbz
mqsLezRhMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ1MTFzSFcxQXB3S1JZ
RUFmSGdFTWExQ3pzZ3c4NzFIcDRTTXBYM3BLc1JMLzIvRkExNDQyMTFGNTg4RDk2
MDM5QzhENEQ0QTZGMzlBQUIwQjdCMzQ2MS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9GQTE0NDIxMUY1ODhEOTYwMzlDOEQ0RDRBNkYzOUFBQjBCN0Iz
NDYxLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80NTExc0hXMUFwd0tSWUVBZkhn
RU1hMUN6c2d3ODcxSHA0U01wWDNwS3NSTC8yLzMxMzczNzJlMzEzNTM0MmUzMjM4
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMzMzEzNDM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
sZocMA0GCSqGSIb3DQEBCwUAA4IBAQCSFcGnN8WmHTWBn/HV0Quir4FiuvhmG3WV
Pvi9Jk2In3nlK2Dkubnxi1k1pRc3N7W0khaI62/ltPEV+G8RYvAvpUMrJngwFpCM
O8pKNOwZjppdHuxMOwXafLtyVYaAr7pVILAbaX/7mFe5g/kz/BIOtqBtND0WZLzt
5d74PGKxPZEN0eGAD5vLUPYMufDzyu1l3PgTLwMmZfI+iSjl6G10UD8pQFBkxh2O
ynLoILyZgk79jfwUm9PVSc96kRN7FGwuhdMCHlv/2XjaQA+xgsJr7nehfvCMt/sE
XDsMnwVLz2A+L7Na94XFejnFTtH+nS+i80wVLlrRbX5NGeXrv6ym
-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:31 2024 by rpki-client on console-fra.rpki-client.org