Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5egQvFFF6zsUysSfK3fVmGhg7g4HSB1vfJCdsKMxwTQQ/1/3137372e3135352e3233382e302f32342d3234203d3e20323633363230.roa
File:                     3137372e3135352e3233382e302f32342d3234203d3e20323633363230.roa (raw, json)
Hash identifier:          WFO4b6taUGtclrc0CFNNGd3Ngio+fAw4OnK5IK7Famk=
Subject key identifier:   08:EB:AE:DA:4C:BF:95:28:B4:B6:17:CB:43:4F:E2:99:18:70:2A:F5
Certificate issuer:       /CN=7EB6268AEA3642696A5D248CAC647350089A9C90
Certificate serial:       15E61748C76E7731098FEC8D47E160AA2877211C
Authority key identifier: 7E:B6:26:8A:EA:36:42:69:6A:5D:24:8C:AC:64:73:50:08:9A:9C:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EB6268AEA3642696A5D248CAC647350089A9C90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5egQvFFF6zsUysSfK3fVmGhg7g4HSB1vfJCdsKMxwTQQ/1/3137372e3135352e3233382e302f32342d3234203d3e20323633363230.roa
Signing time:             Wed 03 Apr 2024 22:48:59 +0000
ROA not before:           Wed 03 Apr 2024 22:43:59 +0000
ROA not after:            Wed 02 Apr 2025 22:48:59 +0000
asID:                     263620
IP address blocks:        177.155.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5egQvFFF6zsUysSfK3fVmGhg7g4HSB1vfJCdsKMxwTQQ/1/7EB6268AEA3642696A5D248CAC647350089A9C90.crl
                          rsync://rpki-repo.registro.br/repo/5egQvFFF6zsUysSfK3fVmGhg7g4HSB1vfJCdsKMxwTQQ/1/7EB6268AEA3642696A5D248CAC647350089A9C90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EB6268AEA3642696A5D248CAC647350089A9C90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e6:17:48:c7:6e:77:31:09:8f:ec:8d:47:e1:60:aa:28:77:21:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EB6268AEA3642696A5D248CAC647350089A9C90
        Validity
            Not Before: Apr  3 22:43:59 2024 GMT
            Not After : Apr  2 22:48:59 2025 GMT
        Subject: CN=08EBAEDA4CBF9528B4B617CB434FE29918702AF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f3:e1:58:38:ca:74:cf:d3:ac:27:80:20:39:
                    35:ac:05:0f:69:d3:38:41:d6:cc:64:b1:35:db:37:
                    75:d5:2d:3a:31:0b:fb:1e:fa:ca:d6:17:3f:ed:ed:
                    69:66:e0:07:2b:e6:fa:35:9c:2a:6f:af:58:e2:8b:
                    49:ed:c4:3f:92:c1:5f:05:b0:2b:5c:12:79:45:35:
                    c7:29:2f:f1:d3:71:14:4a:34:68:ca:a9:e2:21:43:
                    6c:02:60:71:f4:96:e5:79:1f:65:bc:9f:47:75:8c:
                    3e:60:21:d3:e5:bc:ab:d7:b3:bc:51:a6:75:0f:ed:
                    ff:47:5c:50:03:ef:d4:4c:1c:2d:27:11:4e:36:cb:
                    db:51:50:d6:4c:a2:07:6e:90:9e:d7:4b:7b:19:2a:
                    19:4d:7e:2e:f7:a9:a9:c9:d8:57:05:af:d1:b7:82:
                    00:2c:bd:ca:53:1b:99:f9:37:6e:92:40:b6:e0:d8:
                    d6:3e:af:b6:13:26:d1:f2:2a:be:5e:b1:81:87:f9:
                    64:72:6a:13:fc:ff:08:0c:d9:2f:d1:58:58:09:42:
                    58:86:d7:6b:7f:38:69:59:03:c7:e1:16:2e:c0:48:
                    46:35:70:51:7e:08:21:81:62:5f:a4:1e:0e:87:d2:
                    09:53:b8:4c:03:93:76:ab:1a:4b:87:8c:45:2b:46:
                    a0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:EB:AE:DA:4C:BF:95:28:B4:B6:17:CB:43:4F:E2:99:18:70:2A:F5
            X509v3 Authority Key Identifier:
                keyid:7E:B6:26:8A:EA:36:42:69:6A:5D:24:8C:AC:64:73:50:08:9A:9C:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5egQvFFF6zsUysSfK3fVmGhg7g4HSB1vfJCdsKMxwTQQ/1/7EB6268AEA3642696A5D248CAC647350089A9C90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EB6268AEA3642696A5D248CAC647350089A9C90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5egQvFFF6zsUysSfK3fVmGhg7g4HSB1vfJCdsKMxwTQQ/1/3137372e3135352e3233382e302f32342d3234203d3e20323633363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:2e:1a:d8:41:0b:dd:1b:69:48:4a:ad:a0:30:c2:f8:ad:d7:
         ab:fc:47:0f:c8:b9:72:6e:83:75:e0:90:cb:cb:61:33:7c:83:
         48:32:59:c3:14:41:90:1f:73:73:e0:fe:df:53:0e:25:3c:f7:
         7a:35:2b:a4:1e:86:06:ad:bb:0f:39:73:7d:2f:30:ff:b0:1e:
         c7:f2:67:33:6c:30:43:1b:d9:30:bd:04:e5:13:ff:5d:4b:9f:
         91:7e:43:ee:79:92:fb:c9:c9:72:ff:55:ae:27:5d:ef:47:50:
         21:32:a0:56:6f:da:48:39:1d:ee:d7:a0:6c:4e:bb:e8:5d:5f:
         52:26:d7:5c:fb:9c:af:8f:6c:f8:b3:da:d5:38:ee:48:3b:e1:
         ed:0f:a9:60:6a:46:11:4f:66:e1:e0:1b:30:d8:0a:46:4b:b8:
         79:09:ba:3d:aa:db:1b:40:eb:74:f0:98:f8:d9:f0:0f:a2:7b:
         c2:0a:f1:d4:b2:8f:66:70:54:45:c6:bb:1b:4f:95:00:3b:2d:
         77:f5:5b:73:88:2d:84:21:a3:f6:37:82:41:0d:3e:17:c3:da:
         28:6d:08:55:1a:cf:e9:41:ce:64:25:3b:50:b6:b2:16:8e:1b:
         0d:ae:fa:7d:69:61:92:ce:0d:fb:17:c7:bf:6d:97:28:b0:c8:
         d7:2d:ef:69
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUFeYXSMdudzEJj+yNR+Fgqih3IRwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0VCNjI2OEFFQTM2NDI2OTZBNUQyNDhDQUM2NDczNTAw
ODlBOUM5MDAeFw0yNDA0MDMyMjQzNTlaFw0yNTA0MDIyMjQ4NTlaMDMxMTAvBgNV
BAMTKDA4RUJBRURBNENCRjk1MjhCNEI2MTdDQjQzNEZFMjk5MTg3MDJBRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC38+FYOMp0z9OsJ4AgOTWsBQ9p
0zhB1sxksTXbN3XVLToxC/se+srWFz/t7Wlm4Acr5vo1nCpvr1jii0ntxD+SwV8F
sCtcEnlFNccpL/HTcRRKNGjKqeIhQ2wCYHH0luV5H2W8n0d1jD5gIdPlvKvXs7xR
pnUP7f9HXFAD79RMHC0nEU42y9tRUNZMogdukJ7XS3sZKhlNfi73qanJ2FcFr9G3
ggAsvcpTG5n5N26SQLbg2NY+r7YTJtHyKr5esYGH+WRyahP8/wgM2S/RWFgJQliG
12t/OGlZA8fhFi7ASEY1cFF+CCGBYl+kHg6H0glTuEwDk3arGkuHjEUrRqB1AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUCOuu2ky/lSi0thfLQ0/imRhwKvUwHwYDVR0j
BBgwFoAUfrYmiuo2QmlqXSSMrGRzUAianJAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWVnUXZGRkY2enNVeXNTZkszZlZtR2hnN2c0SFNCMXZmSkNkc0tNeHdU
UVEvMS83RUI2MjY4QUVBMzY0MjY5NkE1RDI0OENBQzY0NzM1MDA4OUE5QzkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdFQjYyNjhBRUEzNjQyNjk2
QTVEMjQ4Q0FDNjQ3MzUwMDg5QTlDOTAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVlZ1F2RkZGNnpzVXlzU2ZLM2ZWbUdoZzdnNEhTQjF2ZkpDZHNLTXh3VFFRLzEv
MzEzNzM3MmUzMTM1MzUyZTMyMzMzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM2MzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALGb7jANBgkqhkiG9w0BAQsFAAOCAQEASS4a
2EEL3RtpSEqtoDDC+K3Xq/xHD8i5cm6DdeCQy8thM3yDSDJZwxRBkB9zc+D+31MO
JTz3ejUrpB6GBq27DzlzfS8w/7Aex/JnM2wwQxvZML0E5RP/XUufkX5D7nmS+8nJ
cv9Vridd70dQITKgVm/aSDkd7tegbE676F1fUibXXPucr49s+LPa1TjuSDvh7Q+p
YGpGEU9m4eAbMNgKRku4eQm6ParbG0DrdPCY+NnwD6J7wgrx1LKPZnBURca7G0+V
ADstd/Vbc4gthCGj9jeCQQ0+F8PaKG0IVRrP6UHOZCU7ULayFo4bDa76fWlhks4N
+xfHv22XKLDI1y3vaQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:41 2024 by rpki-client on console-fra.rpki-client.org