Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234362e302f32332d3233203d3e20323632383636.roa
File:                     3137372e31322e3234362e302f32332d3233203d3e20323632383636.roa (raw, json)
Hash identifier:          +Ly92k+YC34/lRmUu0xe0BZiHnYQwxLyUcsYtWQoSlw=
Subject key identifier:   FE:1B:71:69:35:1C:CB:73:A7:E8:53:98:86:CE:D4:2A:00:06:DA:BB
Certificate issuer:       /CN=732B1140085142A7D7474788EEF465DEABBE5080
Certificate serial:       6E9CC6556FCB3C82F1EC605A6FA262584836EECA
Authority key identifier: 73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234362e302f32332d3233203d3e20323632383636.roa
Signing time:             Thu 04 Apr 2024 00:56:08 +0000
ROA not before:           Thu 04 Apr 2024 00:51:08 +0000
ROA not after:            Thu 03 Apr 2025 00:56:08 +0000
asID:                     262866
IP address blocks:        177.12.246.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl
                          rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:9c:c6:55:6f:cb:3c:82:f1:ec:60:5a:6f:a2:62:58:48:36:ee:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732B1140085142A7D7474788EEF465DEABBE5080
        Validity
            Not Before: Apr  4 00:51:08 2024 GMT
            Not After : Apr  3 00:56:08 2025 GMT
        Subject: CN=FE1B7169351CCB73A7E8539886CED42A0006DABB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a4:3b:9d:9a:9c:1e:7a:99:fb:19:f1:69:ff:
                    d9:c0:92:13:91:a7:81:9b:e2:4c:18:df:bc:7d:ce:
                    6b:a9:e5:63:5f:42:c2:1d:7e:f8:ee:8a:bf:55:33:
                    f0:71:a3:d1:9e:38:34:d8:8e:c5:7a:c9:36:bf:10:
                    20:19:89:03:a9:c8:6b:00:8b:87:7f:e1:52:26:97:
                    9e:e3:fc:00:29:e5:19:8c:1e:d1:00:15:0d:13:b7:
                    14:36:11:29:7e:ee:59:9a:26:25:7a:95:ff:11:18:
                    8e:8d:4f:0c:23:ba:97:a1:f4:f0:83:8f:5e:e8:7b:
                    8d:46:9a:34:dc:72:86:6d:15:26:bd:5d:eb:b1:e4:
                    5c:5b:17:0e:64:bc:02:84:ae:5c:16:f9:45:38:c1:
                    f7:19:c0:e2:e4:1e:d3:29:83:7e:fb:38:50:b5:31:
                    61:90:a9:cf:0f:cc:f1:1f:b9:23:38:6d:68:cc:8f:
                    ba:6c:b8:1a:71:9f:39:f4:c8:15:cd:f0:b8:f9:32:
                    1d:70:96:62:8d:45:27:80:d6:c2:8e:fd:36:e7:90:
                    1c:1c:3e:9d:7d:d5:b9:22:92:de:64:99:67:2c:eb:
                    4b:56:dd:5b:a8:23:18:80:d4:cc:39:c5:05:d9:0c:
                    6c:e4:9a:eb:2b:39:4d:a1:34:62:89:bb:22:33:19:
                    d4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:1B:71:69:35:1C:CB:73:A7:E8:53:98:86:CE:D4:2A:00:06:DA:BB
            X509v3 Authority Key Identifier:
                keyid:73:2B:11:40:08:51:42:A7:D7:47:47:88:EE:F4:65:DE:AB:BE:50:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/732B1140085142A7D7474788EEF465DEABBE5080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732B1140085142A7D7474788EEF465DEABBE5080.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4s5hLinVUasaeu9eoJQPw6DUzZ242LEB8XpZTuKZNSEc/1/3137372e31322e3234362e302f32332d3233203d3e20323632383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:2f:49:04:f8:6c:65:85:21:3a:17:a8:d3:ec:2c:72:93:de:
         7e:fa:c5:66:35:9a:f9:cc:de:2e:75:df:0d:e6:87:12:74:da:
         9e:83:e6:dd:07:70:33:ab:75:25:d9:a9:32:ae:79:e0:22:f4:
         a9:0a:36:d4:06:87:7e:ff:26:5f:b8:0a:c7:a0:98:9d:24:95:
         fc:20:fe:69:65:40:46:ae:22:45:c0:f5:46:ab:f3:6d:a2:0a:
         e8:da:c9:30:2a:5e:f6:d6:4e:6c:2b:1f:91:4a:9b:21:d7:78:
         41:9e:52:40:75:a4:37:15:30:31:2b:1a:d2:ba:fe:d2:04:e5:
         fd:b6:fc:e5:4b:09:c0:b5:02:22:58:40:d1:c5:10:61:8c:21:
         d5:f7:63:fc:b3:34:65:bb:fa:8e:e3:1f:9c:60:24:41:f7:c2:
         7d:74:89:8f:b1:9a:40:ba:3a:1b:9c:e7:49:36:7e:d3:07:e2:
         bc:2e:8a:0f:c1:17:74:d9:08:fa:3d:f6:9b:49:07:55:a5:e5:
         70:58:94:20:42:ae:a1:0c:8e:dd:8e:75:c4:c3:68:e4:88:58:
         74:dd:0e:30:93:95:d8:1d:49:0a:a6:1c:c2:0e:dc:4c:50:30:
         46:46:95:d6:15:99:26:16:0d:07:e5:57:d9:70:ea:52:46:20:
         a5:ce:a8:10
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbpzGVW/LPILx7GBab6JiWEg27sowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzMyQjExNDAwODUxNDJBN0Q3NDc0Nzg4RUVGNDY1REVB
QkJFNTA4MDAeFw0yNDA0MDQwMDUxMDhaFw0yNTA0MDMwMDU2MDhaMDMxMTAvBgNV
BAMTKEZFMUI3MTY5MzUxQ0NCNzNBN0U4NTM5ODg2Q0VENDJBMDAwNkRBQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcpDudmpweepn7GfFp/9nAkhOR
p4Gb4kwY37x9zmup5WNfQsIdfvjuir9VM/Bxo9GeODTYjsV6yTa/ECAZiQOpyGsA
i4d/4VIml57j/AAp5RmMHtEAFQ0TtxQ2ESl+7lmaJiV6lf8RGI6NTwwjupeh9PCD
j17oe41GmjTccoZtFSa9Xeux5FxbFw5kvAKErlwW+UU4wfcZwOLkHtMpg377OFC1
MWGQqc8PzPEfuSM4bWjMj7psuBpxnzn0yBXN8Lj5Mh1wlmKNRSeA1sKO/TbnkBwc
Pp191bkikt5kmWcs60tW3VuoIxiA1Mw5xQXZDGzkmusrOU2hNGKJuyIzGdS/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/htxaTUcy3On6FOYhs7UKgAG2rswHwYDVR0j
BBgwFoAUcysRQAhRQqfXR0eI7vRl3qu+UIAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHM1aExpblZVYXNhZXU5ZW9KUVB3NkRVeloyNDJMRUI4WHBaVHVLWk5T
RWMvMS83MzJCMTE0MDA4NTE0MkE3RDc0NzQ3ODhFRUY0NjVERUFCQkU1MDgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczMkIxMTQwMDg1MTQyQTdE
NzQ3NDc4OEVFRjQ2NURFQUJCRTUwODAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRzNWhMaW5WVWFzYWV1OWVvSlFQdzZEVXpaMjQyTEVCOFhwWlR1S1pOU0VjLzEv
MzEzNzM3MmUzMTMyMmUzMjM0MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzODM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxDPYwDQYJKoZIhvcNAQELBQADggEBAIMvSQT4
bGWFIToXqNPsLHKT3n76xWY1mvnM3i513w3mhxJ02p6D5t0HcDOrdSXZqTKueeAi
9KkKNtQGh37/Jl+4CsegmJ0klfwg/mllQEauIkXA9Uar822iCujayTAqXvbWTmwr
H5FKmyHXeEGeUkB1pDcVMDErGtK6/tIE5f22/OVLCcC1AiJYQNHFEGGMIdX3Y/yz
NGW7+o7jH5xgJEH3wn10iY+xmkC6Ohuc50k2ftMH4rwuig/BF3TZCPo99ptJB1Wl
5XBYlCBCrqEMjt2OdcTDaOSIWHTdDjCTldgdSQqmHMIO3ExQMEZGldYVmSYWDQfl
V9lw6lJGIKXOqBA=
-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:50 2024 by rpki-client on console-fra.rpki-client.org