Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7EX3Ai47QtzL21yoLGgc3HmacghStn4EQ95MA3BdPEPW/0/3137372e3133312e3133362e302f32322d3234203d3e20323730373833.roa
File:                     3137372e3133312e3133362e302f32322d3234203d3e20323730373833.roa (raw, json)
Hash identifier:          OYViK0COnR7rG70EXJVypwHrmzVpBeg1liWkuPm5bwc=
Subject key identifier:   36:36:10:6A:C1:F4:6E:80:EE:58:05:5D:81:F1:91:18:04:66:DB:77
Certificate issuer:       /CN=FA5B6BA1D194F09F71907F61D710577A55EEDEDF
Certificate serial:       2E225939565F1856921B5A55366770B901D801B2
Authority key identifier: FA:5B:6B:A1:D1:94:F0:9F:71:90:7F:61:D7:10:57:7A:55:EE:DE:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA5B6BA1D194F09F71907F61D710577A55EEDEDF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7EX3Ai47QtzL21yoLGgc3HmacghStn4EQ95MA3BdPEPW/0/3137372e3133312e3133362e302f32322d3234203d3e20323730373833.roa
Signing time:             Mon 25 Nov 2024 18:23:27 +0000
ROA not before:           Mon 25 Nov 2024 18:18:27 +0000
ROA not after:            Mon 24 Nov 2025 18:23:27 +0000
asID:                     270783
IP address blocks:        177.131.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7EX3Ai47QtzL21yoLGgc3HmacghStn4EQ95MA3BdPEPW/0/FA5B6BA1D194F09F71907F61D710577A55EEDEDF.crl
                          rsync://rpki-repo.registro.br/repo/7EX3Ai47QtzL21yoLGgc3HmacghStn4EQ95MA3BdPEPW/0/FA5B6BA1D194F09F71907F61D710577A55EEDEDF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA5B6BA1D194F09F71907F61D710577A55EEDEDF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 19:04:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:22:59:39:56:5f:18:56:92:1b:5a:55:36:67:70:b9:01:d8:01:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5B6BA1D194F09F71907F61D710577A55EEDEDF
        Validity
            Not Before: Nov 25 18:18:27 2024 GMT
            Not After : Nov 24 18:23:27 2025 GMT
        Subject: CN=3636106AC1F46E80EE58055D81F191180466DB77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c3:4e:bc:24:a0:f6:cd:7d:c6:24:fa:78:f2:
                    ef:31:18:62:52:bb:a8:af:f6:28:98:b0:be:01:f6:
                    95:eb:f2:9c:d4:ae:32:dd:50:cc:d7:ed:dc:a5:fa:
                    41:26:a2:8d:8f:f8:e6:80:ee:02:56:5f:0c:7b:96:
                    e3:8f:f2:3d:d9:ec:52:0d:97:61:4e:a6:06:85:b6:
                    78:3f:97:eb:a1:3a:c4:de:c2:19:13:33:a1:93:b2:
                    17:3b:81:61:f8:a4:ed:b7:f0:0f:06:c9:40:68:73:
                    cb:61:79:26:c0:31:17:15:98:ac:6a:18:45:82:3d:
                    8a:5f:77:16:57:46:9e:41:63:53:aa:68:13:a3:f7:
                    9e:32:97:82:14:7b:c6:55:76:b4:07:9b:f9:10:b9:
                    a5:a2:ac:9a:1e:2c:a6:d2:10:e5:93:02:73:47:e6:
                    25:4e:20:16:b7:b5:66:06:57:d5:a2:3f:bb:84:4d:
                    4a:ec:81:a7:a5:5d:e0:7d:4c:2e:4e:b9:f0:13:24:
                    37:59:7a:76:8a:86:ba:72:48:4d:50:5a:1a:b5:7b:
                    e5:63:72:43:2f:26:17:23:90:8f:f4:27:89:b4:b2:
                    89:6c:cd:af:7d:db:65:44:de:d0:ff:a4:72:98:b5:
                    e4:5e:43:f4:1e:0f:5b:f2:2b:05:f0:26:17:4d:56:
                    59:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:36:10:6A:C1:F4:6E:80:EE:58:05:5D:81:F1:91:18:04:66:DB:77
            X509v3 Authority Key Identifier:
                keyid:FA:5B:6B:A1:D1:94:F0:9F:71:90:7F:61:D7:10:57:7A:55:EE:DE:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7EX3Ai47QtzL21yoLGgc3HmacghStn4EQ95MA3BdPEPW/0/FA5B6BA1D194F09F71907F61D710577A55EEDEDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA5B6BA1D194F09F71907F61D710577A55EEDEDF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EX3Ai47QtzL21yoLGgc3HmacghStn4EQ95MA3BdPEPW/0/3137372e3133312e3133362e302f32322d3234203d3e20323730373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:62:42:ee:f4:69:bc:71:17:06:8c:20:3b:c4:c6:d2:23:2e:
         98:35:57:a1:f8:f8:4e:8a:6a:bc:c2:63:bf:09:07:47:82:89:
         51:7f:3d:35:a6:68:80:c0:5a:3d:23:ef:af:c7:1d:d2:2f:97:
         a6:83:c5:53:30:f0:dc:aa:41:a3:b2:24:21:75:64:ce:ed:b9:
         a3:49:9f:f1:eb:5e:80:23:16:a0:69:9b:1e:cb:47:85:d2:34:
         19:ea:fb:17:b3:98:2e:10:b8:0f:70:fb:8c:e6:85:62:c7:b5:
         9c:01:56:01:93:ac:8d:ce:71:9f:a2:1c:c9:bc:92:b5:59:d1:
         21:77:c0:74:65:ef:64:a2:e7:1d:39:2a:fa:08:97:f3:3c:88:
         e5:6c:63:b7:c7:72:ac:e7:ae:fa:f3:0e:2e:7a:6b:a3:dd:f6:
         41:48:83:6b:d5:f4:1e:69:90:f8:01:a3:48:ad:6b:e8:04:18:
         2d:54:3e:9d:88:5c:67:fd:e4:2a:68:33:2f:a7:8d:1c:31:ea:
         8d:f9:07:67:ed:46:16:62:c3:ea:85:fa:e5:09:b9:c7:b7:ff:
         5e:b8:10:14:18:7a:92:47:75:e0:ac:e7:ad:a7:6d:cd:b6:66:
         19:af:96:23:0c:f5:40:28:19:99:b6:3e:2b:d0:80:d4:de:6b:
         c4:2d:ea:19
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIULiJZOVZfGFaSG1pVNmdwuQHYAbIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE1QjZCQTFEMTk0RjA5RjcxOTA3RjYxRDcxMDU3N0E1
NUVFREVERjAeFw0yNDExMjUxODE4MjdaFw0yNTExMjQxODIzMjdaMDMxMTAvBgNV
BAMTKDM2MzYxMDZBQzFGNDZFODBFRTU4MDU1RDgxRjE5MTE4MDQ2NkRCNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAw068JKD2zX3GJPp48u8xGGJS
u6iv9iiYsL4B9pXr8pzUrjLdUMzX7dyl+kEmoo2P+OaA7gJWXwx7luOP8j3Z7FIN
l2FOpgaFtng/l+uhOsTewhkTM6GTshc7gWH4pO238A8GyUBoc8theSbAMRcVmKxq
GEWCPYpfdxZXRp5BY1OqaBOj954yl4IUe8ZVdrQHm/kQuaWirJoeLKbSEOWTAnNH
5iVOIBa3tWYGV9WiP7uETUrsgaelXeB9TC5OufATJDdZenaKhrpySE1QWhq1e+Vj
ckMvJhcjkI/0J4m0solsza9922VE3tD/pHKYteReQ/QeD1vyKwXwJhdNVlmzAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUNjYQasH0boDuWAVdgfGRGARm23cwHwYDVR0j
BBgwFoAU+ltrodGU8J9xkH9h1xBXelXu3t8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0VYM0FpNDdRdHpMMjF5b0xHZ2MzSG1hY2doU3RuNEVROTVNQTNCZFBF
UFcvMC9GQTVCNkJBMUQxOTRGMDlGNzE5MDdGNjFENzEwNTc3QTU1RUVERURGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBNUI2QkExRDE5NEYwOUY3
MTkwN0Y2MUQ3MTA1NzdBNTVFRURFREYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdFWDNBaTQ3UXR6TDIxeW9MR2djM0htYWNnaFN0bjRFUTk1TUEzQmRQRVBXLzAv
MzEzNzM3MmUzMTMzMzEyZTMxMzMzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzczMDM3MzgzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArGDiDANBgkqhkiG9w0BAQsFAAOCAQEAO2JC
7vRpvHEXBowgO8TG0iMumDVXofj4TopqvMJjvwkHR4KJUX89NaZogMBaPSPvr8cd
0i+XpoPFUzDw3KpBo7IkIXVkzu25o0mf8etegCMWoGmbHstHhdI0Ger7F7OYLhC4
D3D7jOaFYse1nAFWAZOsjc5xn6IcybyStVnRIXfAdGXvZKLnHTkq+giX8zyI5Wxj
t8dyrOeu+vMOLnpro932QUiDa9X0HmmQ+AGjSK1r6AQYLVQ+nYhcZ/3kKmgzL6eN
HDHqjfkHZ+1GFmLD6oX65Qm5x7f/XrgQFBh6kkd14KznradtzbZmGa+WIwz1QCgZ
mbY+K9CA1N5rxC3qGQ==
-----END CERTIFICATE-----
Generated at Fri Nov 29 18:27:26 2024 by rpki-client on console-ams.rpki-client.org