Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3232342e302f32322d3232203d3e20323632333133.roa
File:                     3137372e3130352e3232342e302f32322d3232203d3e20323632333133.roa (raw, json)
Hash identifier:          otYC7ao8JCltAcLgboa77lOSKhiyzWWc98MSnDcyOHs=
Subject key identifier:   74:86:B8:3B:16:D0:4D:25:14:90:49:A6:09:6A:CC:FB:B1:0F:5B:AC
Certificate issuer:       /CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
Certificate serial:       302953F19C5CC9944CA8748ED19569D2A75651D4
Authority key identifier: D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3232342e302f32322d3232203d3e20323632333133.roa
Signing time:             Wed 03 Apr 2024 21:14:05 +0000
ROA not before:           Wed 03 Apr 2024 21:09:05 +0000
ROA not after:            Wed 02 Apr 2025 21:14:05 +0000
asID:                     262313
IP address blocks:        177.105.224.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl
                          rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:29:53:f1:9c:5c:c9:94:4c:a8:74:8e:d1:95:69:d2:a7:56:51:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
        Validity
            Not Before: Apr  3 21:09:05 2024 GMT
            Not After : Apr  2 21:14:05 2025 GMT
        Subject: CN=7486B83B16D04D25149049A6096ACCFBB10F5BAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bd:b2:d8:25:9d:db:23:36:93:eb:86:db:9c:
                    f4:00:73:82:79:4f:1e:3f:92:b8:bf:af:25:c6:a5:
                    93:86:9d:66:b6:3e:bb:83:5c:32:2d:71:61:db:22:
                    37:40:99:7f:d2:d0:e3:08:3f:31:8b:33:a5:67:dd:
                    96:c2:b9:a0:57:0d:f7:5f:94:d6:cd:48:5d:15:94:
                    6d:67:cf:38:30:86:b1:65:31:2a:bf:d4:76:95:b6:
                    3b:e8:c0:70:69:69:d1:be:e9:9d:be:85:1f:61:39:
                    e7:75:ea:ab:a0:16:43:09:97:00:5c:58:ce:28:f1:
                    24:8d:f9:22:bc:3e:59:6a:06:bd:25:1f:d3:80:02:
                    bf:a0:8b:32:66:3d:85:56:7a:9b:e0:4e:50:03:d9:
                    46:77:35:54:8f:2b:74:e7:7c:33:85:60:78:e5:1e:
                    36:4d:29:ff:e6:66:fa:8f:aa:c9:59:d9:71:a5:54:
                    1e:4b:fa:72:53:75:a7:3a:4d:1f:95:43:25:d9:be:
                    ae:65:e4:84:d6:b4:ef:12:a8:9c:d0:c0:7f:bd:59:
                    fa:1c:7f:69:ef:67:70:e7:80:ea:87:48:44:92:58:
                    0b:fb:10:4f:dd:c8:7d:36:40:b5:83:d6:32:03:cb:
                    a8:e2:60:0b:68:5f:cc:90:cb:ac:1e:c0:9c:e8:60:
                    c6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:86:B8:3B:16:D0:4D:25:14:90:49:A6:09:6A:CC:FB:B1:0F:5B:AC
            X509v3 Authority Key Identifier:
                keyid:D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3232342e302f32322d3232203d3e20323632333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:e9:18:b3:e6:8d:d0:31:8a:db:3b:6b:a8:a9:d5:66:07:21:
         fc:28:c6:a7:fd:a4:71:cd:08:79:21:d3:24:9b:50:6e:53:c0:
         9d:e0:af:bb:15:20:b7:58:2e:0b:76:c5:3f:7a:b0:fa:57:b6:
         b3:34:ee:69:8d:27:ec:17:b8:ac:39:e9:cb:33:7b:36:44:f4:
         ac:5a:88:68:b7:77:a1:42:5f:5e:d9:9b:9a:16:ed:1f:c1:95:
         f4:68:53:00:49:c2:5e:f1:f9:6a:fc:df:53:3c:df:30:98:d1:
         70:12:90:ca:eb:41:df:ff:52:6f:2d:c0:aa:ac:e0:22:df:e1:
         09:00:b9:a4:7c:59:8c:00:56:06:a9:d6:d9:1e:af:5a:51:91:
         f5:71:20:35:4b:a2:a1:53:77:e9:e3:95:39:9a:c4:0d:f8:81:
         8b:d8:a9:50:4a:dc:2b:91:bf:ad:db:3b:2d:b8:82:ef:64:51:
         5a:f0:36:a9:34:b9:7f:ab:89:5d:a2:ed:84:73:d2:55:68:ba:
         15:60:6b:ce:d5:02:38:bc:7f:42:64:63:f1:a3:5c:0d:0f:6a:
         63:a0:9b:88:c3:6b:6f:85:2c:d1:99:cf:75:c0:6f:27:08:de:
         f2:0d:a4:66:08:c8:99:b3:7b:32:a2:9e:a7:c3:4e:5f:e3:60:
         85:22:10:07
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUMClT8ZxcyZRMqHSO0ZVp0qdWUdQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA0NzU2Q0IwMEY5ODIyQThBNTBDNDdGRDk0Q0VDNURG
MzFEQTk0QjAeFw0yNDA0MDMyMTA5MDVaFw0yNTA0MDIyMTE0MDVaMDMxMTAvBgNV
BAMTKDc0ODZCODNCMTZEMDREMjUxNDkwNDlBNjA5NkFDQ0ZCQjEwRjVCQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1vbLYJZ3bIzaT64bbnPQAc4J5
Tx4/kri/ryXGpZOGnWa2PruDXDItcWHbIjdAmX/S0OMIPzGLM6Vn3ZbCuaBXDfdf
lNbNSF0VlG1nzzgwhrFlMSq/1HaVtjvowHBpadG+6Z2+hR9hOed16qugFkMJlwBc
WM4o8SSN+SK8PllqBr0lH9OAAr+gizJmPYVWepvgTlAD2UZ3NVSPK3TnfDOFYHjl
HjZNKf/mZvqPqslZ2XGlVB5L+nJTdac6TR+VQyXZvq5l5ITWtO8SqJzQwH+9Wfoc
f2nvZ3DngOqHSESSWAv7EE/dyH02QLWD1jIDy6jiYAtoX8yQy6wewJzoYMY3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUdIa4OxbQTSUUkEmmCWrM+7EPW6wwHwYDVR0j
BBgwFoAU0EdWywD5giqKUMR/2UzsXfMdqUswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0ozTFVzRHhWS1RFZmd5OG1jQ0hlc3FyTnhMc2trS3pxaEVwZ1FDVjZw
WnMvMS9EMDQ3NTZDQjAwRjk4MjJBOEE1MEM0N0ZEOTRDRUM1REYzMURBOTRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwNDc1NkNCMDBGOTgyMkE4
QTUwQzQ3RkQ5NENFQzVERjMxREE5NEIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdKM0xVc0R4VktURWZneThtY0NIZXNxck54THNra0t6cWhFcGdRQ1Y2cFpzLzEv
MzEzNzM3MmUzMTMwMzUyZTMyMzIzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMjMzMzEzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArFp4DANBgkqhkiG9w0BAQsFAAOCAQEAqOkY
s+aN0DGK2ztrqKnVZgch/CjGp/2kcc0IeSHTJJtQblPAneCvuxUgt1guC3bFP3qw
+le2szTuaY0n7Be4rDnpyzN7NkT0rFqIaLd3oUJfXtmbmhbtH8GV9GhTAEnCXvH5
avzfUzzfMJjRcBKQyutB3/9Sby3AqqzgIt/hCQC5pHxZjABWBqnW2R6vWlGR9XEg
NUuioVN36eOVOZrEDfiBi9ipUErcK5G/rds7LbiC72RRWvA2qTS5f6uJXaLthHPS
VWi6FWBrztUCOLx/QmRj8aNcDQ9qY6CbiMNrb4Us0ZnPdcBvJwje8g2kZgjImbN7
MqKep8NOX+NghSIQBw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:38 2024 by rpki-client on console-fra.rpki-client.org