Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/3137372e3135352e37322e302f32322d3234203d3e20323637333031.roa
File:                     3137372e3135352e37322e302f32322d3234203d3e20323637333031.roa (raw, json)
Hash identifier:          GzJwIuRTwB5am7hsFlOr3JexCu6Fmevv+HPwP/qXlXk=
Subject key identifier:   C2:F5:81:AD:44:0E:36:7F:86:CD:38:53:99:B5:49:D5:AC:9D:B7:33
Certificate issuer:       /CN=CC4EF52A3D67EA2750F3439B62452606C17C41A1
Certificate serial:       02FAEA57DAA1D390557DA486D502FCBB5C35700F
Authority key identifier: CC:4E:F5:2A:3D:67:EA:27:50:F3:43:9B:62:45:26:06:C1:7C:41:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/3137372e3135352e37322e302f32322d3234203d3e20323637333031.roa
Signing time:             Thu 04 Apr 2024 03:55:52 +0000
ROA not before:           Thu 04 Apr 2024 03:50:52 +0000
ROA not after:            Thu 03 Apr 2025 03:55:52 +0000
asID:                     267301
IP address blocks:        177.155.72.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.crl
                          rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:58:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:fa:ea:57:da:a1:d3:90:55:7d:a4:86:d5:02:fc:bb:5c:35:70:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC4EF52A3D67EA2750F3439B62452606C17C41A1
        Validity
            Not Before: Apr  4 03:50:52 2024 GMT
            Not After : Apr  3 03:55:52 2025 GMT
        Subject: CN=C2F581AD440E367F86CD385399B549D5AC9DB733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:12:3c:88:93:64:ec:47:a8:b6:d0:48:7d:f4:
                    ea:51:28:fb:b1:c7:a0:18:16:6e:12:4f:70:3c:55:
                    f7:d4:f9:f2:cc:4a:72:13:f8:06:e2:9d:84:68:cf:
                    14:a3:fd:44:dd:b7:87:94:99:cf:5f:da:39:82:3e:
                    c9:40:81:2a:f9:76:b7:4c:9e:45:d7:29:20:66:96:
                    a4:d0:fe:0f:33:f9:9c:3c:99:b1:38:8e:f6:bf:28:
                    36:d7:da:fd:9e:64:55:89:49:1d:f4:66:94:93:6d:
                    30:8c:8e:33:21:a8:25:7c:b0:b0:9e:0f:b8:06:c7:
                    f1:7c:7a:f3:6b:ba:9a:90:33:6e:84:83:03:82:6c:
                    de:fc:7b:49:f1:d9:e5:66:ba:6d:9e:11:51:0f:4c:
                    24:94:ef:ea:7d:2f:a7:05:01:59:43:ab:9d:60:b1:
                    b1:a3:d9:9f:ef:b6:ee:b7:c6:af:3f:54:53:34:d0:
                    17:a5:76:3f:9a:46:49:fa:ba:66:17:08:7a:19:47:
                    08:38:b9:ff:8e:fb:60:5b:2e:94:d1:c0:d3:39:12:
                    4d:d2:ae:68:f1:24:4d:9b:f4:b5:a5:b5:ca:68:9d:
                    e4:cc:79:c9:ec:5c:3e:f4:9a:91:af:1d:ce:b3:74:
                    3b:97:e4:a6:ad:28:12:84:08:2d:16:c0:38:4d:b3:
                    6e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F5:81:AD:44:0E:36:7F:86:CD:38:53:99:B5:49:D5:AC:9D:B7:33
            X509v3 Authority Key Identifier:
                keyid:CC:4E:F5:2A:3D:67:EA:27:50:F3:43:9B:62:45:26:06:C1:7C:41:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4EF52A3D67EA2750F3439B62452606C17C41A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/1/3137372e3135352e37322e302f32322d3234203d3e20323637333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:66:c4:57:70:13:f3:49:ca:9d:da:5e:ad:a1:74:83:4c:44:
         f3:1f:a6:10:64:25:59:90:ed:ce:2a:9a:39:70:68:2a:f4:7b:
         25:84:1e:09:79:da:18:3d:84:5c:cd:4e:2c:0a:d0:a5:5b:18:
         fe:a6:32:99:ca:bb:b2:79:b0:ed:8d:30:5a:da:c5:4d:e0:c7:
         3a:e7:6b:26:36:b2:0a:04:20:2f:59:f7:65:64:53:a3:e6:6f:
         a1:ce:f0:98:e2:a3:71:ca:8f:a9:d1:1a:40:00:0b:a9:c2:04:
         c1:87:8f:b0:1a:97:8f:3d:44:e3:50:8d:7d:09:66:8c:2f:60:
         cc:e4:51:f8:78:90:78:62:cf:60:72:6f:43:a1:ab:b7:14:e5:
         96:88:fd:bb:01:7e:14:77:64:de:f5:ce:c0:d5:a7:a0:0c:fd:
         29:c9:ab:73:cd:27:b9:c1:6e:1c:8a:0b:55:5c:b7:a8:b5:ac:
         e6:e6:e0:f1:f0:13:81:6d:30:9d:35:c9:11:a2:93:a8:3c:1f:
         a7:84:3b:cb:6d:30:1c:95:db:ea:3b:f7:ab:64:78:19:80:a4:
         bb:bd:30:40:26:53:7e:fc:39:10:b8:65:53:36:fc:6b:bd:81:
         6b:5d:7b:39:85:78:13:3e:8f:61:16:7f:85:27:c6:6a:74:7e:
         8f:a4:a3:0b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAvrqV9qh05BVfaSG1QL8u1w1cA8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0M0RUY1MkEzRDY3RUEyNzUwRjM0MzlCNjI0NTI2MDZD
MTdDNDFBMTAeFw0yNDA0MDQwMzUwNTJaFw0yNTA0MDMwMzU1NTJaMDMxMTAvBgNV
BAMTKEMyRjU4MUFENDQwRTM2N0Y4NkNEMzg1Mzk5QjU0OUQ1QUM5REI3MzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUEjyIk2TsR6i20Eh99OpRKPux
x6AYFm4ST3A8VffU+fLMSnIT+AbinYRozxSj/UTdt4eUmc9f2jmCPslAgSr5drdM
nkXXKSBmlqTQ/g8z+Zw8mbE4jva/KDbX2v2eZFWJSR30ZpSTbTCMjjMhqCV8sLCe
D7gGx/F8evNrupqQM26EgwOCbN78e0nx2eVmum2eEVEPTCSU7+p9L6cFAVlDq51g
sbGj2Z/vtu63xq8/VFM00Beldj+aRkn6umYXCHoZRwg4uf+O+2BbLpTRwNM5Ek3S
rmjxJE2b9LWltcponeTMecnsXD70mpGvHc6zdDuX5KatKBKECC0WwDhNs27hAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUwvWBrUQONn+GzThTmbVJ1aydtzMwHwYDVR0j
BBgwFoAUzE71Kj1n6idQ80ObYkUmBsF8QaEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGRhZnFGWDl6RDljRHV5dHRETFNydjUyTXZTeXBEUU44eEpMVHdoSlRV
cm8vMS9DQzRFRjUyQTNENjdFQTI3NTBGMzQzOUI2MjQ1MjYwNkMxN0M0MUExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDNEVGNTJBM0Q2N0VBMjc1
MEYzNDM5QjYyNDUyNjA2QzE3QzQxQTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRkYWZxRlg5ekQ5Y0R1eXR0RExTcnY1Mk12U3lwRFFOOHhKTFR3aEpUVXJvLzEv
MzEzNzM3MmUzMTM1MzUyZTM3MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzczMzMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxm0gwDQYJKoZIhvcNAQELBQADggEBAKtmxFdw
E/NJyp3aXq2hdINMRPMfphBkJVmQ7c4qmjlwaCr0eyWEHgl52hg9hFzNTiwK0KVb
GP6mMpnKu7J5sO2NMFraxU3gxzrnayY2sgoEIC9Z92VkU6Pmb6HO8Jjio3HKj6nR
GkAAC6nCBMGHj7Aal489RONQjX0JZowvYMzkUfh4kHhiz2Byb0Ohq7cU5ZaI/bsB
fhR3ZN71zsDVp6AM/SnJq3PNJ7nBbhyKC1Vct6i1rObm4PHwE4FtMJ01yRGik6g8
H6eEO8ttMByV2+o796tkeBmApLu9MEAmU378ORC4ZVM2/Gu9gWtdezmFeBM+j2EW
f4Unxmp0fo+kows=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:50 2024 by rpki-client on console-fra.rpki-client.org