Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32342e302f32332d3233203d3e203532373036.roa
File:                     3137372e3132362e32342e302f32332d3233203d3e203532373036.roa (raw, json)
Hash identifier:          OxyqMKx3YiAo0fsSQv9D+rL5nrC6Rg87xdGldHd9Y6w=
Subject key identifier:   D4:4E:42:A8:48:28:61:D5:69:51:15:1C:5B:01:56:9D:B2:7E:29:F5
Certificate issuer:       /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial:       7CDAA1E8F5E744188FF268A59A26802009CD4D68
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32342e302f32332d3233203d3e203532373036.roa
Signing time:             Thu 04 Apr 2024 02:28:29 +0000
ROA not before:           Thu 04 Apr 2024 02:23:29 +0000
ROA not after:            Thu 03 Apr 2025 02:28:29 +0000
asID:                     52706
IP address blocks:        177.126.24.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:da:a1:e8:f5:e7:44:18:8f:f2:68:a5:9a:26:80:20:09:cd:4d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
        Validity
            Not Before: Apr  4 02:23:29 2024 GMT
            Not After : Apr  3 02:28:29 2025 GMT
        Subject: CN=D44E42A8482861D56951151C5B01569DB27E29F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6a:25:03:3a:06:37:d2:10:d2:bb:d4:db:52:
                    48:f4:37:c8:02:40:6f:4e:22:77:7c:8d:70:8d:04:
                    21:a4:48:eb:bd:c5:79:07:25:1e:9e:6d:7a:d3:55:
                    15:55:69:74:e7:e3:0a:2c:f9:39:30:af:5d:f7:c6:
                    2c:71:fb:bc:da:63:69:31:37:11:64:a4:64:35:95:
                    45:63:dd:9c:d7:78:53:5b:67:fe:e3:81:1e:b7:f2:
                    f4:fd:d9:07:e5:10:48:6e:7a:4d:7a:53:1c:67:ab:
                    ec:85:7d:d0:be:58:19:97:80:0d:35:13:5c:77:e0:
                    21:c5:58:5e:ce:c1:b4:8f:7d:c3:ce:be:3c:f6:10:
                    4a:bc:de:c0:34:af:df:7f:50:b6:fd:32:db:d4:a6:
                    f0:3d:17:61:67:7b:b4:65:c9:ff:0f:14:29:98:01:
                    58:c0:fd:88:6c:32:06:30:af:4d:f3:79:36:4b:5c:
                    a2:3d:5a:0a:74:7f:31:28:83:24:47:2d:df:33:95:
                    9a:45:68:47:11:16:04:e9:98:2d:42:81:dd:f3:cb:
                    cf:ca:b8:11:5c:c7:66:ff:07:e5:ef:d7:02:78:2d:
                    db:c9:78:16:b2:71:22:8d:bc:d3:f3:a1:4f:40:bc:
                    c3:30:70:37:47:37:ff:52:20:50:5b:12:b6:4e:bd:
                    dd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4E:42:A8:48:28:61:D5:69:51:15:1C:5B:01:56:9D:B2:7E:29:F5
            X509v3 Authority Key Identifier:
                keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/3137372e3132362e32342e302f32332d3233203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:39:fc:53:74:46:30:11:48:39:63:27:0d:b0:a7:7b:6e:ec:
         7b:c8:dd:91:51:3d:d1:3c:cc:76:16:55:3c:20:c8:17:61:f0:
         00:f9:10:a4:8a:34:db:63:22:0b:ed:d0:7e:75:79:37:17:72:
         12:62:90:d2:7f:3d:fc:a0:6d:c4:5f:4e:cf:b2:54:2a:38:02:
         15:1c:9b:80:52:dc:2d:d4:9f:2b:bb:a5:98:7e:80:4f:a0:d3:
         bc:a4:25:74:81:13:0d:7e:46:18:38:75:80:0d:ed:7f:39:79:
         5c:16:2c:df:40:db:9f:96:dd:b9:b0:02:da:36:2f:1d:72:6f:
         09:3c:2e:5d:12:43:fc:37:45:83:c8:b9:9e:67:8a:3f:4a:32:
         3b:1e:0f:89:8a:a9:c4:ed:8b:d8:02:fa:1c:12:75:6d:b4:95:
         3b:5f:27:02:42:3c:d6:3d:f1:7f:5a:2f:77:51:cc:2d:6f:72:
         e9:c4:cd:5a:41:6d:57:47:19:42:a3:b3:69:93:44:ca:83:c8:
         9f:22:a2:ae:92:be:6a:10:3a:17:01:a6:f0:dd:67:e1:5f:02:
         76:0e:ba:7c:f9:2c:72:99:14:ce:92:4e:06:ef:30:df:d4:fe:
         a4:0a:4b:1c:ac:a3:6e:52:25:1d:01:6d:de:bc:4f:50:be:cd:
         0e:d1:9d:f4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfNqh6PXnRBiP8milmiaAIAnNTWgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1RTU0RjFEMDI2M0I4RTkwM0EwOTI5QTYxMzEzQzhD
NUJFOERBNjAeFw0yNDA0MDQwMjIzMjlaFw0yNTA0MDMwMjI4MjlaMDMxMTAvBgNV
BAMTKEQ0NEU0MkE4NDgyODYxRDU2OTUxMTUxQzVCMDE1NjlEQjI3RTI5RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYaiUDOgY30hDSu9TbUkj0N8gC
QG9OInd8jXCNBCGkSOu9xXkHJR6ebXrTVRVVaXTn4wos+Tkwr133xixx+7zaY2kx
NxFkpGQ1lUVj3ZzXeFNbZ/7jgR638vT92QflEEhuek16Uxxnq+yFfdC+WBmXgA01
E1x34CHFWF7OwbSPfcPOvjz2EEq83sA0r99/ULb9MtvUpvA9F2Fne7Rlyf8PFCmY
AVjA/YhsMgYwr03zeTZLXKI9Wgp0fzEogyRHLd8zlZpFaEcRFgTpmC1Cgd3zy8/K
uBFcx2b/B+Xv1wJ4LdvJeBaycSKNvNPzoU9AvMMwcDdHN/9SIFBbErZOvd0BAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU1E5CqEgoYdVpURUcWwFWnbJ+KfUwHwYDVR0j
BBgwFoAU415U8dAmO46QOgkpphMTyMW+jaYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMS9FMzVFNTRGMUQwMjYzQjhFOTAzQTA5MjlBNjEzMTNDOEM1QkU4REE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzNUU1NEYxRDAyNjNCOEU5
MDNBMDkyOUE2MTMxM0M4QzVCRThEQTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzEv
MzEzNzM3MmUzMTMyMzYyZTMyMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMy
MzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsX4YMA0GCSqGSIb3DQEBCwUAA4IBAQA6OfxTdEYw
EUg5YycNsKd7bux7yN2RUT3RPMx2FlU8IMgXYfAA+RCkijTbYyIL7dB+dXk3F3IS
YpDSfz38oG3EX07PslQqOAIVHJuAUtwt1J8ru6WYfoBPoNO8pCV0gRMNfkYYOHWA
De1/OXlcFizfQNuflt25sALaNi8dcm8JPC5dEkP8N0WDyLmeZ4o/SjI7Hg+JiqnE
7YvYAvocEnVttJU7XycCQjzWPfF/Wi93Ucwtb3LpxM1aQW1XRxlCo7Npk0TKg8if
IqKukr5qEDoXAabw3WfhXwJ2Drp8+SxymRTOkk4G7zDf1P6kCkscrKNuUiUdAW3e
vE9Qvs0O0Z30
-----END CERTIFICATE-----
Generated at Fri Jun 28 06:07:36 2024 by rpki-client on console-fra.rpki-client.org