Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3137372e36372e32342e302f32322d3234203d3e203532363632.roa
File:                     3137372e36372e32342e302f32322d3234203d3e203532363632.roa (raw, json)
Hash identifier:          CaJ2YqX6hYjPow+L/+Ed8XjKqJ1iY+o5jqj7La4tRTg=
Subject key identifier:   70:AF:89:68:0D:2D:D2:67:71:3A:92:52:C6:AA:B3:A3:CF:D4:28:EE
Certificate issuer:       /CN=C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7
Certificate serial:       1BA4B3DA9582A69FDE089B2D204D9919C6BDEFBA
Authority key identifier: C5:C2:95:E6:A5:83:EE:5A:FE:D6:88:BF:67:FB:5D:62:DC:E1:6F:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3137372e36372e32342e302f32322d3234203d3e203532363632.roa
Signing time:             Thu 01 Aug 2024 17:26:43 +0000
ROA not before:           Thu 01 Aug 2024 17:21:43 +0000
ROA not after:            Thu 31 Jul 2025 17:26:43 +0000
asID:                     52662
IP address blocks:        177.67.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.crl
                          rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:a4:b3:da:95:82:a6:9f:de:08:9b:2d:20:4d:99:19:c6:bd:ef:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7
        Validity
            Not Before: Aug  1 17:21:43 2024 GMT
            Not After : Jul 31 17:26:43 2025 GMT
        Subject: CN=70AF89680D2DD267713A9252C6AAB3A3CFD428EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c4:95:f5:4e:19:6b:03:79:41:69:87:58:02:
                    d7:40:03:b0:13:57:f2:5b:de:95:49:b5:83:0b:cc:
                    6c:d5:b1:c9:b4:cd:39:10:77:8c:0d:e6:ad:d6:ee:
                    68:04:ff:6b:ec:9b:74:89:38:ef:62:2d:e0:f1:4a:
                    ca:8e:6a:ab:15:ed:d8:16:e8:01:2c:ed:a4:60:a5:
                    c5:96:6c:9a:a1:3f:3a:d0:ad:be:10:38:1b:0c:f9:
                    77:63:5b:ae:55:b6:cd:21:59:28:b2:99:89:74:99:
                    3a:7f:de:d3:e0:0c:10:71:5c:44:86:c0:a5:da:85:
                    1c:7e:f2:26:2f:4a:ec:a7:b4:07:5b:6a:74:62:a9:
                    d7:cc:59:8e:82:2c:8e:68:ec:9b:fd:31:ad:98:04:
                    18:91:a8:b9:df:f0:76:b3:92:03:cb:06:16:25:b8:
                    f2:58:31:84:8d:5f:5f:fd:75:c0:a3:cf:c8:83:35:
                    d3:dc:0d:40:2d:cd:0e:60:5e:55:c2:4c:64:a0:51:
                    f5:70:f3:dd:0b:91:0f:a8:d5:9d:5d:f0:89:b9:2f:
                    26:de:38:48:6d:4f:c9:bc:ff:3d:d5:d6:e3:0b:5a:
                    7d:b8:be:85:fa:ed:ad:f7:25:cf:62:66:37:4e:38:
                    94:ff:41:9d:ff:16:b6:e0:b4:02:4a:95:18:c2:f5:
                    e0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:AF:89:68:0D:2D:D2:67:71:3A:92:52:C6:AA:B3:A3:CF:D4:28:EE
            X509v3 Authority Key Identifier:
                keyid:C5:C2:95:E6:A5:83:EE:5A:FE:D6:88:BF:67:FB:5D:62:DC:E1:6F:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3137372e36372e32342e302f32322d3234203d3e203532363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:c1:a5:5d:f2:62:ac:e9:73:6e:0a:4b:94:cb:67:e1:04:0e:
         2f:02:51:a3:7f:7a:e7:93:78:dc:1d:09:4e:97:cf:0f:19:0e:
         54:90:e6:9a:56:68:e4:3c:0d:89:87:49:2c:9b:f9:e0:bb:fa:
         95:0d:ba:d0:7b:d6:2b:ed:09:9d:c7:43:a5:9c:fd:39:45:15:
         ff:a1:cd:23:95:53:f9:2f:89:c8:51:a4:ab:6e:e4:52:8b:89:
         bf:ea:0f:cf:2c:cb:ab:d6:9b:68:a9:be:29:1a:db:c2:3c:1f:
         1d:e8:48:69:a6:f3:d4:4b:cc:d9:48:4b:8e:17:b2:0e:50:77:
         8d:b1:1e:5f:6a:9a:6c:3d:d2:e9:c2:cd:c4:7b:9a:d7:b3:cd:
         df:a1:bf:25:92:f9:53:97:db:a0:d6:92:82:39:58:77:fd:af:
         c0:36:d5:9c:fc:dd:8e:bd:cd:e2:08:08:0c:4d:79:b7:00:16:
         ad:f4:aa:a8:39:4b:28:1b:d7:a7:55:b2:7d:d7:ce:94:3b:b8:
         54:6e:ba:43:94:d2:e6:9e:f3:c2:85:48:3c:8a:f7:bb:c1:7e:
         cc:6c:52:eb:ed:82:02:3a:d5:52:cf:d2:c8:c2:81:8f:7a:92:
         ed:3a:91:32:46:73:17:d8:37:ba:49:72:30:e9:01:1c:0e:f3:
         c9:8f:d8:50
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUG6Sz2pWCpp/eCJstIE2ZGca977owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzVDMjk1RTZBNTgzRUU1QUZFRDY4OEJGNjdGQjVENjJE
Q0UxNkZCNzAeFw0yNDA4MDExNzIxNDNaFw0yNTA3MzExNzI2NDNaMDMxMTAvBgNV
BAMTKDcwQUY4OTY4MEQyREQyNjc3MTNBOTI1MkM2QUFCM0EzQ0ZENDI4RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfxJX1ThlrA3lBaYdYAtdAA7AT
V/Jb3pVJtYMLzGzVscm0zTkQd4wN5q3W7mgE/2vsm3SJOO9iLeDxSsqOaqsV7dgW
6AEs7aRgpcWWbJqhPzrQrb4QOBsM+XdjW65Vts0hWSiymYl0mTp/3tPgDBBxXESG
wKXahRx+8iYvSuyntAdbanRiqdfMWY6CLI5o7Jv9Ma2YBBiRqLnf8HazkgPLBhYl
uPJYMYSNX1/9dcCjz8iDNdPcDUAtzQ5gXlXCTGSgUfVw890LkQ+o1Z1d8Im5Lybe
OEhtT8m8/z3V1uMLWn24voX67a33Jc9iZjdOOJT/QZ3/FrbgtAJKlRjC9eD7AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUcK+JaA0t0mdxOpJSxqqzo8/UKO4wHwYDVR0j
BBgwFoAUxcKV5qWD7lr+1oi/Z/tdYtzhb7cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWo4Q1Nkc2VBeW10NHdlWFhDWnRUWlVkVDk3Q0xCdlcySk13QTk3M0tD
RFQvMC9DNUMyOTVFNkE1ODNFRTVBRkVENjg4QkY2N0ZCNUQ2MkRDRTE2RkI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M1QzI5NUU2QTU4M0VFNUFG
RUQ2ODhCRjY3RkI1RDYyRENFMTZGQjcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVqOENTZHNlQXltdDR3ZVhYQ1p0VFpVZFQ5N0NMQnZXMkpNd0E5NzNLQ0RULzAv
MzEzNzM3MmUzNjM3MmUzMjM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjM2
MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArFDGDANBgkqhkiG9w0BAQsFAAOCAQEAZMGlXfJirOlz
bgpLlMtn4QQOLwJRo39655N43B0JTpfPDxkOVJDmmlZo5DwNiYdJLJv54Lv6lQ26
0HvWK+0JncdDpZz9OUUV/6HNI5VT+S+JyFGkq27kUouJv+oPzyzLq9abaKm+KRrb
wjwfHehIaabz1EvM2UhLjheyDlB3jbEeX2qabD3S6cLNxHua17PN36G/JZL5U5fb
oNaSgjlYd/2vwDbVnPzdjr3N4ggIDE15twAWrfSqqDlLKBvXp1WyfdfOlDu4VG66
Q5TS5p7zwoVIPIr3u8F+zGxS6+2CAjrVUs/SyMKBj3qS7TqRMkZzF9g3uklyMOkB
HA7zyY/YUA==
-----END CERTIFICATE-----
Generated at Tue Nov 26 09:06:07 2024 by rpki-client on console-fra.rpki-client.org