Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3137372e37322e3136382e302f32322d3234203d3e20323632353530.roa
File:                     3137372e37322e3136382e302f32322d3234203d3e20323632353530.roa (raw, json)
Hash identifier:          sSURpRqUkRjEQsAwYyy5y5Jgq50lO4Vi0OC07U8Neig=
Subject key identifier:   F2:3C:FF:47:8D:FA:4C:D4:65:0E:14:1E:D8:F0:AD:2B:B7:8B:DA:0A
Certificate issuer:       /CN=5060A86A09E56CD00DC4540812BD4D7775AC9715
Certificate serial:       0E24CCEF4B46F4C8E69B5F9E17625FE91DC51264
Authority key identifier: 50:60:A8:6A:09:E5:6C:D0:0D:C4:54:08:12:BD:4D:77:75:AC:97:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5060A86A09E56CD00DC4540812BD4D7775AC9715.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3137372e37322e3136382e302f32322d3234203d3e20323632353530.roa
Signing time:             Thu 12 Sep 2024 18:58:41 +0000
ROA not before:           Thu 12 Sep 2024 18:53:41 +0000
ROA not after:            Thu 11 Sep 2025 18:58:41 +0000
asID:                     262550
IP address blocks:        177.72.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/5060A86A09E56CD00DC4540812BD4D7775AC9715.crl
                          rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/5060A86A09E56CD00DC4540812BD4D7775AC9715.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5060A86A09E56CD00DC4540812BD4D7775AC9715.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 18:57:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:24:cc:ef:4b:46:f4:c8:e6:9b:5f:9e:17:62:5f:e9:1d:c5:12:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5060A86A09E56CD00DC4540812BD4D7775AC9715
        Validity
            Not Before: Sep 12 18:53:41 2024 GMT
            Not After : Sep 11 18:58:41 2025 GMT
        Subject: CN=F23CFF478DFA4CD4650E141ED8F0AD2BB78BDA0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:38:74:cf:a3:1a:ff:87:47:e3:ad:89:2b:88:
                    59:a3:cc:99:49:ce:34:e5:80:4b:60:6d:2a:3f:20:
                    ea:88:63:67:18:af:e2:0d:1c:bb:53:da:1b:10:23:
                    cc:2f:42:32:de:d6:01:b3:81:a3:7d:d5:a1:4d:9a:
                    c7:fa:66:01:e3:87:ce:e6:43:ed:17:4b:64:0e:ad:
                    b2:b7:2b:a3:73:c8:25:f5:ec:c5:32:47:4a:c6:d3:
                    00:1f:19:32:22:99:f0:78:f0:72:03:74:1f:65:c5:
                    2e:29:ce:f4:6a:c9:da:96:5a:45:d0:55:60:28:2c:
                    c1:fe:48:cb:28:55:08:a6:3c:31:91:33:9a:c4:17:
                    90:27:0b:41:8b:d0:f2:1e:cb:56:84:17:cb:af:5e:
                    ee:6f:2a:86:ff:79:2b:3e:77:5d:77:ff:97:d5:cc:
                    a4:17:a5:fa:cf:c6:b5:f7:26:36:61:d0:ae:9f:b6:
                    3c:44:8b:26:15:74:69:d1:11:7a:d2:76:04:18:fa:
                    6d:f9:cc:93:c2:eb:e7:ad:df:a1:e8:21:e3:71:9c:
                    d3:9b:9c:ea:31:d8:01:a2:c2:e4:da:28:6f:dd:a0:
                    6a:f9:dd:88:ab:5f:36:8a:bc:cd:ef:e4:8e:d9:47:
                    3f:d1:26:f6:e9:ca:21:8b:e4:db:e0:4b:ee:ba:b8:
                    5d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:3C:FF:47:8D:FA:4C:D4:65:0E:14:1E:D8:F0:AD:2B:B7:8B:DA:0A
            X509v3 Authority Key Identifier:
                keyid:50:60:A8:6A:09:E5:6C:D0:0D:C4:54:08:12:BD:4D:77:75:AC:97:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/5060A86A09E56CD00DC4540812BD4D7775AC9715.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5060A86A09E56CD00DC4540812BD4D7775AC9715.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3137372e37322e3136382e302f32322d3234203d3e20323632353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:de:b7:c3:b4:54:15:b4:0a:d2:79:78:de:6b:bb:9f:19:ad:
         a5:06:9f:cd:0c:24:2a:19:ef:3a:bf:40:13:5e:cc:54:78:62:
         af:56:55:34:26:b6:27:5b:9f:8f:d0:7b:4a:22:9b:27:65:c3:
         e0:28:5e:5d:a8:cb:ac:48:a9:1d:20:46:4e:40:86:53:d4:63:
         eb:02:18:be:70:57:b2:ec:6c:9e:07:c0:9b:65:0c:14:96:f7:
         a1:29:f0:73:2d:b6:0f:dc:9f:8d:9d:2a:50:0f:18:ce:db:cb:
         6d:c9:8a:3d:56:e3:fc:50:29:9b:3a:65:a3:8e:d6:7b:01:01:
         76:65:29:64:8e:2a:46:13:c9:63:74:c8:87:7f:4d:52:17:2c:
         c9:04:ac:5a:02:e6:eb:4c:87:0f:1d:e1:58:41:51:43:58:c2:
         9b:49:f7:75:89:e5:d2:54:63:e1:e7:67:79:89:c9:b1:a4:c4:
         24:fa:00:a5:32:5b:dc:b6:6e:d5:f3:60:79:49:83:50:44:3d:
         20:a6:b6:a2:7d:36:4d:42:24:e6:14:dc:93:85:22:89:c4:00:
         df:d6:42:07:f0:ce:75:36:34:af:6e:e3:e2:07:c0:47:94:5f:
         0d:8b:2d:7c:40:32:bb:64:3a:44:49:a8:f7:40:53:66:76:11:
         81:41:27:16
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDiTM70tG9Mjmm1+eF2Jf6R3FEmQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTA2MEE4NkEwOUU1NkNEMDBEQzQ1NDA4MTJCRDRENzc3
NUFDOTcxNTAeFw0yNDA5MTIxODUzNDFaFw0yNTA5MTExODU4NDFaMDMxMTAvBgNV
BAMTKEYyM0NGRjQ3OERGQTRDRDQ2NTBFMTQxRUQ4RjBBRDJCQjc4QkRBMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSOHTPoxr/h0fjrYkriFmjzJlJ
zjTlgEtgbSo/IOqIY2cYr+INHLtT2hsQI8wvQjLe1gGzgaN91aFNmsf6ZgHjh87m
Q+0XS2QOrbK3K6NzyCX17MUyR0rG0wAfGTIimfB48HIDdB9lxS4pzvRqydqWWkXQ
VWAoLMH+SMsoVQimPDGRM5rEF5AnC0GL0PIey1aEF8uvXu5vKob/eSs+d113/5fV
zKQXpfrPxrX3JjZh0K6ftjxEiyYVdGnREXrSdgQY+m35zJPC6+et36HoIeNxnNOb
nOox2AGiwuTaKG/doGr53YirXzaKvM3v5I7ZRz/RJvbpyiGL5NvgS+66uF01AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU8jz/R436TNRlDhQe2PCtK7eL2gowHwYDVR0j
BBgwFoAUUGCoagnlbNANxFQIEr1Nd3WslxUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUVTcGZqUUZvbUpROGVGaFJRbXJBaFUxQ1M3UGVKc1hNV2tIUlRic1Vv
emQvMC81MDYwQTg2QTA5RTU2Q0QwMERDNDU0MDgxMkJENEQ3Nzc1QUM5NzE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUwNjBBODZBMDlFNTZDRDAw
REM0NTQwODEyQkQ0RDc3NzVBQzk3MTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVFU3BmalFGb21KUThlRmhSUW1yQWhVMUNTN1BlSnNYTVdrSFJUYnNVb3pkLzAv
MzEzNzM3MmUzNzMyMmUzMTM2MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNTM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxSKgwDQYJKoZIhvcNAQELBQADggEBACDet8O0
VBW0CtJ5eN5ru58ZraUGn80MJCoZ7zq/QBNezFR4Yq9WVTQmtidbn4/Qe0oimydl
w+AoXl2oy6xIqR0gRk5AhlPUY+sCGL5wV7LsbJ4HwJtlDBSW96Ep8HMttg/cn42d
KlAPGM7by23Jij1W4/xQKZs6ZaOO1nsBAXZlKWSOKkYTyWN0yId/TVIXLMkErFoC
5utMhw8d4VhBUUNYwptJ93WJ5dJUY+HnZ3mJybGkxCT6AKUyW9y2btXzYHlJg1BE
PSCmtqJ9Nk1CJOYU3JOFIonEAN/WQgfwznU2NK9u4+IHwEeUXw2LLXxAMrtkOkRJ
qPdAU2Z2EYFBJxY=
-----END CERTIFICATE-----
Generated at Fri Mar 14 05:21:35 2025 by rpki-client