Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3137372e32302e3230382e302f32302d3230203d3e20323632383638.roa
File:                     3137372e32302e3230382e302f32302d3230203d3e20323632383638.roa (raw, json)
Hash identifier:          CKSEfXEAqtKhqoALYRmT/DHk7mibNvdmTjCukl5uQCs=
Subject key identifier:   EF:64:B2:6F:27:0B:7E:F8:F9:F8:72:D2:7F:84:50:C6:49:F7:58:FA
Certificate issuer:       /CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Certificate serial:       6EBDA55C95CAFDC421744CEF1E96C2717B7CF65C
Authority key identifier: BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3137372e32302e3230382e302f32302d3230203d3e20323632383638.roa
Signing time:             Thu 04 Apr 2024 11:06:50 +0000
ROA not before:           Thu 04 Apr 2024 11:01:50 +0000
ROA not after:            Thu 03 Apr 2025 11:06:50 +0000
asID:                     262868
IP address blocks:        177.20.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl
                          rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:bd:a5:5c:95:ca:fd:c4:21:74:4c:ef:1e:96:c2:71:7b:7c:f6:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
        Validity
            Not Before: Apr  4 11:01:50 2024 GMT
            Not After : Apr  3 11:06:50 2025 GMT
        Subject: CN=EF64B26F270B7EF8F9F872D27F8450C649F758FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8a:cf:09:e9:4a:df:e4:9b:bf:1b:52:8f:c0:
                    91:ac:38:93:59:80:ae:6b:ae:ed:32:08:f7:61:d3:
                    7b:9f:3a:32:c5:ef:64:04:13:2e:e5:63:f3:d3:d6:
                    70:fa:6d:4d:83:b1:a6:e2:b3:da:9c:68:65:6c:fd:
                    00:74:d7:4c:7b:8b:fa:68:5b:eb:c1:c9:c9:e9:4d:
                    73:96:52:15:43:c0:50:af:47:21:85:fb:c2:7a:98:
                    c7:44:ab:22:8e:14:f3:5f:c1:17:73:ef:61:da:22:
                    68:6a:88:e4:4c:32:69:ea:fb:fd:8c:20:69:b5:2c:
                    1e:44:4b:b9:f7:ba:4b:af:51:ae:f7:0f:77:5c:ac:
                    c7:4a:a4:ce:b9:b5:db:86:6e:1d:93:94:60:92:2d:
                    e9:5c:87:d7:3f:9b:46:01:3f:d4:e8:38:bc:aa:c9:
                    6f:78:f3:2f:c6:dc:7d:2e:71:6e:7a:49:08:49:6f:
                    37:74:e1:b1:a7:0a:b8:1f:bf:86:43:bf:8a:17:9a:
                    81:93:8d:5a:01:cd:6c:c3:6e:a8:64:da:d2:71:f4:
                    98:7d:3b:d8:c9:59:3d:c3:0f:74:c9:27:87:3d:9f:
                    81:af:64:ff:25:a3:15:ad:6d:84:3f:fb:91:98:a7:
                    ba:05:5c:c7:78:45:4c:8f:a5:2e:f0:27:25:76:02:
                    e7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:64:B2:6F:27:0B:7E:F8:F9:F8:72:D2:7F:84:50:C6:49:F7:58:FA
            X509v3 Authority Key Identifier:
                keyid:BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3137372e32302e3230382e302f32302d3230203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.20.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         07:05:d1:1d:63:15:b9:38:a4:9d:d9:0e:54:61:de:53:9b:c4:
         63:c3:6e:a6:6a:b6:08:13:17:67:7a:ff:d8:49:c1:bc:14:b8:
         f1:64:f8:e7:f4:e4:29:d2:80:7c:43:eb:0e:15:7a:15:8a:01:
         84:97:43:9c:fe:17:c4:14:25:ad:a1:e6:ae:e0:dc:aa:8b:bd:
         79:db:f8:45:50:7e:3b:1f:dd:d6:01:11:fa:4c:ee:b1:d2:80:
         2d:10:a6:1b:de:d2:f0:62:40:19:85:bf:52:73:54:17:d0:ad:
         f2:69:e4:ce:b1:36:ce:e2:ae:e3:4e:e8:d0:80:a1:09:f0:65:
         52:d9:a1:17:42:3d:ec:c6:33:f8:29:ab:02:4e:ae:5b:25:e0:
         a2:83:33:8c:14:cc:6a:01:be:36:ab:8e:11:e4:5a:a7:6e:85:
         66:9f:51:b5:a6:b4:8b:25:d4:16:ee:88:f1:cd:f8:b4:35:eb:
         8b:56:d0:d3:ff:aa:ed:d7:9b:d7:89:e8:61:12:18:1d:fb:09:
         3d:35:f9:31:dc:54:bf:b7:85:33:2f:e3:aa:9f:ac:c1:5c:e3:
         e5:47:39:da:ba:f7:19:4c:a3:06:83:82:26:5d:41:56:b0:5e:
         7b:d9:04:d4:26:1c:47:98:6d:5f:b4:6c:2b:7b:89:ff:ed:05:
         a5:37:0c:ca
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbr2lXJXK/cQhdEzvHpbCcXt89lwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFFMkQ1NEQ2QzE3OTNCN0RDRDc3NDY5OTIxNkQzMTZF
OEM3NTM1MTAeFw0yNDA0MDQxMTAxNTBaFw0yNTA0MDMxMTA2NTBaMDMxMTAvBgNV
BAMTKEVGNjRCMjZGMjcwQjdFRjhGOUY4NzJEMjdGODQ1MEM2NDlGNzU4RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHis8J6Urf5Ju/G1KPwJGsOJNZ
gK5rru0yCPdh03ufOjLF72QEEy7lY/PT1nD6bU2Dsabis9qcaGVs/QB010x7i/po
W+vBycnpTXOWUhVDwFCvRyGF+8J6mMdEqyKOFPNfwRdz72HaImhqiORMMmnq+/2M
IGm1LB5ES7n3ukuvUa73D3dcrMdKpM65tduGbh2TlGCSLelch9c/m0YBP9ToOLyq
yW948y/G3H0ucW56SQhJbzd04bGnCrgfv4ZDv4oXmoGTjVoBzWzDbqhk2tJx9Jh9
O9jJWT3DD3TJJ4c9n4GvZP8loxWtbYQ/+5GYp7oFXMd4RUyPpS7wJyV2Aud3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU72SybycLfvj5+HLSf4RQxkn3WPowHwYDVR0j
BBgwFoAUuuLVTWwXk7fc13RpkhbTFujHU1EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjRUV1E4NFN3Z2k1cTg1SnQ3WGRFU0UxNlZQenZicE50dWpIVjZ5enpL
d0EvMS9CQUUyRDU0RDZDMTc5M0I3RENENzc0Njk5MjE2RDMxNkU4Qzc1MzUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBRTJENTRENkMxNzkzQjdE
Q0Q3NzQ2OTkyMTZEMzE2RThDNzUzNTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY0VFdRODRTd2dpNXE4NUp0N1hkRVNFMTZWUHp2YnBOdHVqSFY2eXp6S3dBLzEv
MzEzNzM3MmUzMjMwMmUzMjMwMzgyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM2
MzIzODM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASxFNAwDQYJKoZIhvcNAQELBQADggEBAAcF0R1j
Fbk4pJ3ZDlRh3lObxGPDbqZqtggTF2d6/9hJwbwUuPFk+Of05CnSgHxD6w4VehWK
AYSXQ5z+F8QUJa2h5q7g3KqLvXnb+EVQfjsf3dYBEfpM7rHSgC0Qphve0vBiQBmF
v1JzVBfQrfJp5M6xNs7iruNO6NCAoQnwZVLZoRdCPezGM/gpqwJOrlsl4KKDM4wU
zGoBvjarjhHkWqduhWafUbWmtIsl1BbuiPHN+LQ164tW0NP/qu3Xm9eJ6GESGB37
CT01+THcVL+3hTMv46qfrMFc4+VHOdq69xlMowaDgiZdQVawXnvZBNQmHEeYbV+0
bCt7if/tBaU3DMo=
-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:53 2024 by rpki-client on console-ams.rpki-client.org