Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139322e302f32302d3332203d3e20323632393031.roa
File:                     3137372e32322e3139322e302f32302d3332203d3e20323632393031.roa (raw, json)
Hash identifier:          1oIDpO7wOVojqt1n0HcrxIdH0+FLKcqlfJJnsHODcOs=
Subject key identifier:   03:DB:64:23:9A:D2:A3:FE:DC:93:E6:E1:62:3D:28:DE:62:CB:BF:B3
Certificate issuer:       /CN=E792BDE63D5999B942575841C2AF8D944B3B4BE2
Certificate serial:       081AB6BDE4E73D1DB3DD9D85A73CE1414046A5FD
Authority key identifier: E7:92:BD:E6:3D:59:99:B9:42:57:58:41:C2:AF:8D:94:4B:3B:4B:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E792BDE63D5999B942575841C2AF8D944B3B4BE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139322e302f32302d3332203d3e20323632393031.roa
Signing time:             Thu 26 Sep 2024 14:43:31 +0000
ROA not before:           Thu 26 Sep 2024 14:38:31 +0000
ROA not after:            Thu 25 Sep 2025 14:43:31 +0000
asID:                     262901
IP address blocks:        177.22.192.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/E792BDE63D5999B942575841C2AF8D944B3B4BE2.crl
                          rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/E792BDE63D5999B942575841C2AF8D944B3B4BE2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E792BDE63D5999B942575841C2AF8D944B3B4BE2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 18:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:1a:b6:bd:e4:e7:3d:1d:b3:dd:9d:85:a7:3c:e1:41:40:46:a5:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E792BDE63D5999B942575841C2AF8D944B3B4BE2
        Validity
            Not Before: Sep 26 14:38:31 2024 GMT
            Not After : Sep 25 14:43:31 2025 GMT
        Subject: CN=03DB64239AD2A3FEDC93E6E1623D28DE62CBBFB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a0:11:e7:f2:0c:2d:09:a4:4f:f9:59:23:db:
                    57:39:99:32:25:31:e8:fd:48:20:da:c6:ac:6c:d1:
                    af:b8:91:38:6c:72:6f:e2:7a:47:05:55:64:ca:d0:
                    9a:3a:e1:a3:3b:2c:88:6b:b2:47:21:4d:61:5c:e6:
                    2e:33:cc:6a:52:27:d5:50:70:f3:d6:a5:b6:ec:b2:
                    30:92:18:c7:8f:bc:14:1a:55:7f:5d:07:92:d0:31:
                    7e:e5:2d:6a:d3:05:d0:d3:90:b9:e9:08:a0:75:a9:
                    ce:ce:31:64:d1:24:32:93:81:11:50:c4:4a:40:50:
                    50:ac:ce:b0:a8:29:6a:8d:69:4f:16:ce:41:63:38:
                    20:62:ec:e4:ac:9a:d1:83:de:5c:a8:0e:4c:5f:fd:
                    64:3a:ab:cd:da:b5:70:45:d4:c0:e8:33:04:46:f1:
                    e3:bb:36:b8:e2:31:ab:f7:81:c0:70:b4:2a:60:60:
                    85:0b:d6:d2:d8:fe:78:88:1a:75:58:15:3f:62:5c:
                    0f:5a:a0:27:5d:fe:59:cb:d9:11:d6:11:b3:bc:46:
                    09:18:08:44:1b:60:c5:6e:37:b9:10:15:76:ae:7e:
                    a7:cb:57:62:57:96:80:d8:21:40:f6:b9:dd:71:2f:
                    58:f7:cc:bd:1f:21:47:cd:9f:89:80:04:d2:1b:34:
                    a7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:DB:64:23:9A:D2:A3:FE:DC:93:E6:E1:62:3D:28:DE:62:CB:BF:B3
            X509v3 Authority Key Identifier:
                keyid:E7:92:BD:E6:3D:59:99:B9:42:57:58:41:C2:AF:8D:94:4B:3B:4B:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/E792BDE63D5999B942575841C2AF8D944B3B4BE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E792BDE63D5999B942575841C2AF8D944B3B4BE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3137372e32322e3139322e302f32302d3332203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         94:79:4e:b9:8a:7f:30:dd:93:b0:22:c7:78:bb:6e:4f:9c:a5:
         8b:1a:f5:f3:59:51:4f:eb:77:08:bd:5d:0e:52:34:6c:2a:2a:
         20:13:ec:e5:51:63:e7:90:4e:c1:ef:e8:8a:fa:5e:82:8c:e9:
         43:ef:b1:30:75:3c:ed:14:8e:70:a1:33:b9:df:0b:25:5f:08:
         08:0f:df:70:6d:1d:58:66:8f:18:a3:08:bf:65:9d:ca:af:2b:
         18:59:da:4b:32:e7:8b:a9:86:f8:45:a6:fb:e0:2a:78:1a:5d:
         79:02:97:a3:c2:d0:19:d0:15:71:22:32:e5:1e:12:0a:8b:e1:
         7e:71:cb:88:16:2a:83:91:75:62:ee:1b:cc:7b:54:75:5b:7f:
         b9:4b:24:8e:ab:1c:f0:ee:d4:67:29:40:0e:c1:ca:b3:b4:a2:
         00:13:50:79:ba:d3:7f:a8:8b:ca:33:1e:a0:72:32:60:ed:47:
         c1:96:01:4a:2d:82:30:bc:6e:ee:77:d2:88:63:b5:9d:10:67:
         ad:d4:5b:fa:17:57:41:00:2f:25:c7:c1:33:17:28:cc:c8:5e:
         80:66:03:05:6d:83:ad:64:9b:c9:80:cd:d6:47:78:05:a9:0d:
         2c:0e:8a:f5:3f:d0:9f:cf:ac:61:4b:77:f4:3a:6a:71:74:0f:
         a0:d4:d8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:56:19 2025 by rpki-client