Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/3137372e3232332e3134342e302f32322d3234203d3e20323731303032.roa
File:                     3137372e3232332e3134342e302f32322d3234203d3e20323731303032.roa (raw, json)
Hash identifier:          gv/9VFu57lErlFaf/XGYyqRZqpR9bpeXf9gGIpeqwPo=
Subject key identifier:   E5:CD:78:79:A8:F9:F1:CD:79:5D:28:24:7C:2C:8C:96:AC:B9:22:34
Certificate issuer:       /CN=1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC
Certificate serial:       2A59898FB7F3D597498581119AF398FF47FACC6E
Authority key identifier: 16:72:A6:AC:5D:FB:E8:5B:7B:10:CF:C8:AD:AC:DF:6B:BA:08:A4:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/3137372e3232332e3134342e302f32322d3234203d3e20323731303032.roa
Signing time:             Thu 04 Apr 2024 12:14:46 +0000
ROA not before:           Thu 04 Apr 2024 12:09:46 +0000
ROA not after:            Thu 03 Apr 2025 12:14:46 +0000
asID:                     271002
IP address blocks:        177.223.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.crl
                          rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:59:89:8f:b7:f3:d5:97:49:85:81:11:9a:f3:98:ff:47:fa:cc:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC
        Validity
            Not Before: Apr  4 12:09:46 2024 GMT
            Not After : Apr  3 12:14:46 2025 GMT
        Subject: CN=E5CD7879A8F9F1CD795D28247C2C8C96ACB92234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9f:4e:4c:6b:f0:7c:f9:73:ca:3a:d7:e4:91:
                    48:5f:52:2e:09:51:de:30:42:44:cb:0b:e4:49:3c:
                    78:3e:92:0a:d8:21:1c:85:e0:09:ef:ec:33:94:32:
                    d4:25:fa:93:33:bc:3c:03:4e:95:51:28:38:2c:85:
                    2a:a4:79:86:b8:89:fe:7d:18:04:c9:65:9b:49:41:
                    91:a9:58:88:fe:8a:19:38:2f:1d:29:bf:01:b1:17:
                    7b:2f:da:a6:a1:36:b4:e2:5c:09:07:b7:79:bb:27:
                    19:17:6c:80:77:f6:02:fe:a7:78:cf:13:02:fc:b9:
                    fb:b4:66:32:20:58:db:f0:f8:2e:bc:de:cc:58:ef:
                    b7:1b:37:81:35:1d:93:ff:82:f9:a4:5f:f6:f9:a1:
                    af:52:7a:70:99:11:1d:2b:c0:10:f0:a4:e0:2f:c1:
                    17:91:c5:89:af:28:ae:77:35:99:95:45:a2:0a:0f:
                    07:53:fe:7f:8e:ea:2a:fd:65:56:14:9b:08:71:91:
                    52:d8:c4:65:d2:f6:69:70:13:e6:24:21:53:fd:98:
                    61:d4:95:dd:fb:7e:09:40:d5:e1:ab:8c:7d:2b:e2:
                    48:05:c3:41:1a:b1:16:78:00:66:91:01:9f:b7:7a:
                    a2:19:bd:7b:4a:9c:c0:2d:63:30:51:dc:23:13:b8:
                    01:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CD:78:79:A8:F9:F1:CD:79:5D:28:24:7C:2C:8C:96:AC:B9:22:34
            X509v3 Authority Key Identifier:
                keyid:16:72:A6:AC:5D:FB:E8:5B:7B:10:CF:C8:AD:AC:DF:6B:BA:08:A4:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1672A6AC5DFBE85B7B10CFC8ADACDF6BBA08A4CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6D6aSzuJ6mNGtDyjkhriRrk49pzk7fKEXbxQa5jZjnSw/1/3137372e3232332e3134342e302f32322d3234203d3e20323731303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:0d:62:b0:a5:bf:20:2c:0b:cb:a1:63:27:23:2f:26:97:69:
         c1:dd:53:95:c4:1a:75:ac:26:f2:14:cd:e9:7c:06:1e:e1:23:
         24:39:01:8e:ad:81:17:f8:20:59:43:75:ef:ca:a8:22:c3:55:
         0a:e4:29:07:00:3e:93:16:20:f2:26:c4:af:e0:2c:33:ac:60:
         e7:d8:99:18:c6:c5:82:07:45:08:4b:fb:0c:d6:f2:0c:a0:8e:
         a8:a1:35:69:9a:4c:d5:68:38:ea:35:6a:f3:45:4d:19:c9:80:
         94:df:92:76:b6:58:a9:28:82:c8:97:58:a9:6c:38:ff:98:4e:
         ce:9f:14:5b:e5:6b:58:d6:92:a5:53:cd:0d:f4:3b:40:66:9a:
         c1:f4:00:69:81:c4:7e:77:65:56:37:7b:d2:2e:c6:99:4a:b2:
         03:a2:d2:b8:5f:13:51:21:ba:db:96:a7:6f:e2:e7:45:7b:21:
         fa:7d:2d:3f:99:ad:ac:d3:64:b5:cd:6e:47:09:34:19:5a:77:
         b0:a2:e9:75:e1:10:36:27:b1:fa:4a:89:09:23:0b:26:18:02:
         b2:a5:5c:d4:f3:08:c2:b9:ec:3c:1f:d8:71:23:80:71:8f:7f:
         c3:02:c0:53:4e:31:00:39:af:7e:8a:33:1b:a1:7e:00:ac:00:
         d8:79:62:4d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUKlmJj7fz1ZdJhYERmvOY/0f6zG4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY3MkE2QUM1REZCRTg1QjdCMTBDRkM4QURBQ0RGNkJC
QTA4QTRDQzAeFw0yNDA0MDQxMjA5NDZaFw0yNTA0MDMxMjE0NDZaMDMxMTAvBgNV
BAMTKEU1Q0Q3ODc5QThGOUYxQ0Q3OTVEMjgyNDdDMkM4Qzk2QUNCOTIyMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjn05Ma/B8+XPKOtfkkUhfUi4J
Ud4wQkTLC+RJPHg+kgrYIRyF4Anv7DOUMtQl+pMzvDwDTpVRKDgshSqkeYa4if59
GATJZZtJQZGpWIj+ihk4Lx0pvwGxF3sv2qahNrTiXAkHt3m7JxkXbIB39gL+p3jP
EwL8ufu0ZjIgWNvw+C683sxY77cbN4E1HZP/gvmkX/b5oa9SenCZER0rwBDwpOAv
wReRxYmvKK53NZmVRaIKDwdT/n+O6ir9ZVYUmwhxkVLYxGXS9mlwE+YkIVP9mGHU
ld37fglA1eGrjH0r4kgFw0EasRZ4AGaRAZ+3eqIZvXtKnMAtYzBR3CMTuAFdAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU5c14eaj58c15XSgkfCyMlqy5IjQwHwYDVR0j
BBgwFoAUFnKmrF376Ft7EM/Irazfa7oIpMwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkQ2YVN6dUo2bU5HdER5amtocmlScms0OXB6azdmS0VYYnhRYTVqWmpu
U3cvMS8xNjcyQTZBQzVERkJFODVCN0IxMENGQzhBREFDREY2QkJBMDhBNENDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2NzJBNkFDNURGQkU4NUI3
QjEwQ0ZDOEFEQUNERjZCQkEwOEE0Q0MuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZENmFTenVKNm1OR3REeWpraHJpUnJrNDlwems3ZktFWGJ4UWE1alpqblN3LzEv
MzEzNzM3MmUzMjMyMzMyZTMxMzQzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzczMTMwMzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArHfkDANBgkqhkiG9w0BAQsFAAOCAQEADw1i
sKW/ICwLy6FjJyMvJpdpwd1TlcQadawm8hTN6XwGHuEjJDkBjq2BF/ggWUN178qo
IsNVCuQpBwA+kxYg8ibEr+AsM6xg59iZGMbFggdFCEv7DNbyDKCOqKE1aZpM1Wg4
6jVq80VNGcmAlN+SdrZYqSiCyJdYqWw4/5hOzp8UW+VrWNaSpVPNDfQ7QGaawfQA
aYHEfndlVjd70i7GmUqyA6LSuF8TUSG625anb+LnRXsh+n0tP5mtrNNktc1uRwk0
GVp3sKLpdeEQNiex+kqJCSMLJhgCsqVc1PMIwrnsPB/YcSOAcY9/wwLAU04xADmv
foozG6F+AKwA2HliTQ==
-----END CERTIFICATE-----
Generated at Sat Jun 29 07:19:15 2024 by rpki-client on console-ams.rpki-client.org