Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/1/3137372e3132392e38382e302f32312d3234203d3e20323632333934.roa
File:                     3137372e3132392e38382e302f32312d3234203d3e20323632333934.roa (raw, json)
Hash identifier:          D2atjTwTnweSR4wejvYuCIlyLWgDZX/02t53kTFaeyc=
Subject key identifier:   81:FF:49:D9:7A:58:7B:CE:CA:71:7B:A8:94:4E:40:0D:77:0C:E2:C9
Certificate issuer:       /CN=7F262696BA0E69FA1058BEF98B1386A9CCEB7D71
Certificate serial:       657C1A9752B0A614650B9D96F85722748ABCD8BC
Authority key identifier: 7F:26:26:96:BA:0E:69:FA:10:58:BE:F9:8B:13:86:A9:CC:EB:7D:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F262696BA0E69FA1058BEF98B1386A9CCEB7D71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/1/3137372e3132392e38382e302f32312d3234203d3e20323632333934.roa
Signing time:             Thu 04 Apr 2024 17:16:47 +0000
ROA not before:           Thu 04 Apr 2024 17:11:47 +0000
ROA not after:            Thu 03 Apr 2025 17:16:47 +0000
asID:                     262394
IP address blocks:        177.129.88.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/1/7F262696BA0E69FA1058BEF98B1386A9CCEB7D71.crl
                          rsync://rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/1/7F262696BA0E69FA1058BEF98B1386A9CCEB7D71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F262696BA0E69FA1058BEF98B1386A9CCEB7D71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:7c:1a:97:52:b0:a6:14:65:0b:9d:96:f8:57:22:74:8a:bc:d8:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F262696BA0E69FA1058BEF98B1386A9CCEB7D71
        Validity
            Not Before: Apr  4 17:11:47 2024 GMT
            Not After : Apr  3 17:16:47 2025 GMT
        Subject: CN=81FF49D97A587BCECA717BA8944E400D770CE2C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f0:08:0f:03:37:9e:a9:03:81:9b:09:46:2f:
                    65:81:3b:14:33:37:cf:f4:fb:68:ae:82:17:71:56:
                    55:2d:0a:a5:f5:6f:05:34:87:e3:a9:b0:5c:09:77:
                    cc:42:06:21:fc:ce:3b:49:ff:c7:50:35:f7:c4:73:
                    f7:d9:e2:a5:d5:a8:47:db:90:f1:e0:18:ac:58:1e:
                    24:fc:e0:7e:96:a6:91:c6:0a:0c:6d:d4:8c:a8:67:
                    94:0f:46:ea:a5:bc:80:08:ba:4a:5c:23:32:39:90:
                    89:7f:ef:c2:4c:7c:c1:cf:5e:6d:5a:82:26:5e:1f:
                    42:98:32:4a:3e:39:c3:7b:18:82:d2:07:94:83:f8:
                    41:4a:87:f7:3a:5b:c6:60:00:88:18:7a:a6:c4:bc:
                    03:17:50:41:a5:35:e6:4e:1c:a9:a7:96:27:87:ed:
                    b3:e8:6b:d0:ac:fe:d3:97:aa:76:fc:8a:05:7e:b4:
                    9f:2c:8d:c7:ca:d8:86:bb:76:df:a5:de:92:7e:b1:
                    db:65:9c:ed:a2:74:bd:19:50:35:48:50:5a:f3:2b:
                    f8:c7:44:ba:9c:79:29:36:6b:76:e8:ef:16:e1:2a:
                    60:96:6d:ad:c3:b8:d1:ae:7d:fc:a8:23:16:30:46:
                    23:af:2d:a8:ed:57:06:07:f0:86:ea:9a:ee:ee:cb:
                    8c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FF:49:D9:7A:58:7B:CE:CA:71:7B:A8:94:4E:40:0D:77:0C:E2:C9
            X509v3 Authority Key Identifier:
                keyid:7F:26:26:96:BA:0E:69:FA:10:58:BE:F9:8B:13:86:A9:CC:EB:7D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/1/7F262696BA0E69FA1058BEF98B1386A9CCEB7D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F262696BA0E69FA1058BEF98B1386A9CCEB7D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52Yz6uV45VGWooPFqAFwrnHFYxLqbLr1K6svXXZjBCu2/1/3137372e3132392e38382e302f32312d3234203d3e20323632333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a2:12:be:d7:d8:98:df:e3:2c:1d:47:a1:c8:3f:ec:bf:2f:d5:
         41:e3:35:01:d1:18:41:09:a2:f5:ce:c1:ac:b0:84:63:79:41:
         36:61:51:a3:7a:e9:87:a4:32:2f:c4:cf:d1:bb:77:bb:98:5b:
         b8:58:ab:b6:c0:52:d3:f1:91:ee:47:16:d1:47:83:a6:59:16:
         3a:6c:e8:e4:87:68:00:d3:1c:fe:e1:1c:9a:fc:0e:6e:8c:57:
         a7:21:97:44:b4:fc:ae:eb:d3:ab:9f:f5:d1:b1:1c:12:3d:86:
         bd:16:3a:76:98:3d:b2:5b:97:b5:83:da:38:53:8a:ad:a5:28:
         96:00:49:36:34:5b:3e:a9:18:1a:b3:31:6c:46:a3:8a:03:42:
         b3:1d:96:2c:87:32:4c:7b:6c:a6:2f:ae:a1:01:39:b9:9a:57:
         79:f6:7c:13:30:4f:de:fe:0b:c1:c3:05:3d:7b:08:22:a9:f0:
         7d:8b:03:cd:d3:d4:fe:c8:11:34:8c:68:aa:2c:0e:c8:f0:40:
         a1:9e:14:27:2a:32:c2:3d:b6:87:2c:d4:8f:8b:6a:77:a7:6a:
         01:1b:be:fa:37:27:a3:50:ef:14:2a:f6:fa:a3:f7:e1:57:38:
         c4:74:d6:8a:39:3d:a7:99:a0:b4:77:5a:b9:5b:28:33:f7:78:
         a5:34:19:1b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZXwal1KwphRlC52W+FcidIq82LwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YyNjI2OTZCQTBFNjlGQTEwNThCRUY5OEIxMzg2QTlD
Q0VCN0Q3MTAeFw0yNDA0MDQxNzExNDdaFw0yNTA0MDMxNzE2NDdaMDMxMTAvBgNV
BAMTKDgxRkY0OUQ5N0E1ODdCQ0VDQTcxN0JBODk0NEU0MDBENzcwQ0UyQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm8AgPAzeeqQOBmwlGL2WBOxQz
N8/0+2iughdxVlUtCqX1bwU0h+OpsFwJd8xCBiH8zjtJ/8dQNffEc/fZ4qXVqEfb
kPHgGKxYHiT84H6WppHGCgxt1IyoZ5QPRuqlvIAIukpcIzI5kIl/78JMfMHPXm1a
giZeH0KYMko+OcN7GILSB5SD+EFKh/c6W8ZgAIgYeqbEvAMXUEGlNeZOHKmnlieH
7bPoa9Cs/tOXqnb8igV+tJ8sjcfK2Ia7dt+l3pJ+sdtlnO2idL0ZUDVIUFrzK/jH
RLqceSk2a3bo7xbhKmCWba3DuNGuffyoIxYwRiOvLajtVwYH8Ibqmu7uy4xjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUgf9J2XpYe87KcXuolE5ADXcM4skwHwYDVR0j
BBgwFoAUfyYmlroOafoQWL75ixOGqczrfXEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTJZejZ1VjQ1VkdXb29QRnFBRndybkhGWXhMcWJMcjFLNnN2WFhaakJD
dTIvMS83RjI2MjY5NkJBMEU2OUZBMTA1OEJFRjk4QjEzODZBOUNDRUI3RDcxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdGMjYyNjk2QkEwRTY5RkEx
MDU4QkVGOThCMTM4NkE5Q0NFQjdENzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUyWXo2dVY0NVZHV29vUEZxQUZ3cm5IRll4THFiTHIxSzZzdlhYWmpCQ3UyLzEv
MzEzNzM3MmUzMTMyMzkyZTM4MzgyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2
MzIzMzM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOxgVgwDQYJKoZIhvcNAQELBQADggEBAKISvtfY
mN/jLB1Hocg/7L8v1UHjNQHRGEEJovXOwaywhGN5QTZhUaN66YekMi/Ez9G7d7uY
W7hYq7bAUtPxke5HFtFHg6ZZFjps6OSHaADTHP7hHJr8Dm6MV6chl0S0/K7r06uf
9dGxHBI9hr0WOnaYPbJbl7WD2jhTiq2lKJYASTY0Wz6pGBqzMWxGo4oDQrMdliyH
Mkx7bKYvrqEBObmaV3n2fBMwT97+C8HDBT17CCKp8H2LA83T1P7IETSMaKosDsjw
QKGeFCcqMsI9tocs1I+LanenagEbvvo3J6NQ7xQq9vqj9+FXOMR01oo5PaeZoLR3
WrlbKDP3eKU0GRs=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:15 2024 by rpki-client on console-fra.rpki-client.org