Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3233362e302f32342d3234203d3e20323632333133.roa
File:                     3137372e3130352e3233362e302f32342d3234203d3e20323632333133.roa (raw, json)
Hash identifier:          iprOZbHQelxX4nUwT3geO7qSRv0rzxCkmw4+GAu/yMY=
Subject key identifier:   AB:B0:68:F3:B3:8B:21:BE:AD:66:E5:E8:2D:56:8B:6A:66:D4:48:8C
Certificate issuer:       /CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
Certificate serial:       61A5D460359E342E47640A6BE18918C6FC3EBF54
Authority key identifier: D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3233362e302f32342d3234203d3e20323632333133.roa
Signing time:             Wed 03 Apr 2024 21:14:05 +0000
ROA not before:           Wed 03 Apr 2024 21:09:05 +0000
ROA not after:            Wed 02 Apr 2025 21:14:05 +0000
asID:                     262313
IP address blocks:        177.105.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl
                          rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a5:d4:60:35:9e:34:2e:47:64:0a:6b:e1:89:18:c6:fc:3e:bf:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
        Validity
            Not Before: Apr  3 21:09:05 2024 GMT
            Not After : Apr  2 21:14:05 2025 GMT
        Subject: CN=ABB068F3B38B21BEAD66E5E82D568B6A66D4488C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:96:50:3e:68:70:2a:f7:d0:bb:89:0e:15:02:
                    b5:b4:f1:b9:c5:b0:ab:05:84:74:e9:af:84:90:00:
                    ec:ad:24:a4:a1:f2:8f:c7:db:4b:df:c9:70:82:12:
                    13:2e:e8:38:69:7c:22:c0:33:a9:50:31:5d:51:05:
                    06:1d:51:28:ce:32:c8:c6:0b:a8:d2:bc:b6:66:70:
                    b3:c1:19:c9:a1:0f:6a:48:d9:b1:57:f1:a8:b6:f9:
                    57:95:60:87:3f:13:50:9a:e9:ee:21:94:b9:cd:82:
                    30:07:02:b9:b1:e7:94:e6:7f:c9:6c:99:fa:7e:a2:
                    85:85:73:3b:3c:c6:e9:a3:06:f1:ce:d1:39:e8:84:
                    32:ab:e8:ef:d0:1f:f0:9f:27:45:d1:c9:28:64:bb:
                    28:fa:e3:8b:bc:fc:3b:aa:f8:78:74:74:10:72:c2:
                    00:ac:8d:07:a5:44:1a:04:ab:e1:d6:4c:5c:27:72:
                    40:f0:c4:04:2a:56:f8:51:48:4a:a1:7e:c6:29:95:
                    63:1f:f7:b4:b0:e6:b1:de:47:bd:a6:e5:d5:f6:05:
                    42:a7:62:49:f3:13:49:84:40:f1:6f:0a:3e:c9:f0:
                    4f:26:a2:dc:12:cc:5f:04:db:07:6a:15:72:96:88:
                    e1:16:14:76:72:23:5c:db:ef:01:ee:7f:f3:71:57:
                    2e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B0:68:F3:B3:8B:21:BE:AD:66:E5:E8:2D:56:8B:6A:66:D4:48:8C
            X509v3 Authority Key Identifier:
                keyid:D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3233362e302f32342d3234203d3e20323632333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:94:4b:cb:d9:ec:2e:c8:b6:5d:d6:31:0a:b8:de:78:a0:90:
         c3:02:c5:2e:ae:04:39:1a:7f:d2:a1:8a:07:5d:b9:76:0f:d9:
         d6:7a:21:7e:d8:2c:83:91:50:87:f2:36:7c:1c:1f:88:74:22:
         06:a0:88:8c:90:4f:64:ba:26:e4:78:25:6c:7d:4d:0f:9d:17:
         1e:3c:45:06:cc:96:9b:27:0d:e4:e0:f7:eb:6c:4e:b4:3b:ff:
         95:42:cd:16:d6:47:45:fb:bb:d2:37:c7:9c:4b:f6:a3:04:f8:
         40:a5:d4:a5:81:01:09:c4:6d:ec:43:61:29:82:36:27:d1:28:
         66:e5:56:b2:e1:cb:de:3a:35:e3:d2:2b:6c:af:0e:14:2c:4a:
         ea:89:44:88:79:fc:2d:2f:e4:d3:7b:95:14:97:1f:dc:92:4f:
         a2:31:69:82:fa:15:30:e6:18:e1:f7:f4:c6:8f:2b:31:a4:e6:
         e5:5f:d6:6e:05:85:82:16:ca:2e:ec:dc:04:34:41:5d:9a:a0:
         4f:63:49:af:83:ce:45:0c:d8:fc:8e:21:bc:4b:55:56:94:b7:
         ee:34:cb:d0:cf:23:c1:d0:c8:b1:2c:2f:1d:54:64:24:6e:31:
         32:bc:32:d1:81:92:07:41:e9:f1:71:22:62:90:82:cd:c0:31:
         11:c1:c0:3f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUYaXUYDWeNC5HZApr4YkYxvw+v1QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA0NzU2Q0IwMEY5ODIyQThBNTBDNDdGRDk0Q0VDNURG
MzFEQTk0QjAeFw0yNDA0MDMyMTA5MDVaFw0yNTA0MDIyMTE0MDVaMDMxMTAvBgNV
BAMTKEFCQjA2OEYzQjM4QjIxQkVBRDY2RTVFODJENTY4QjZBNjZENDQ4OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKllA+aHAq99C7iQ4VArW08bnF
sKsFhHTpr4SQAOytJKSh8o/H20vfyXCCEhMu6DhpfCLAM6lQMV1RBQYdUSjOMsjG
C6jSvLZmcLPBGcmhD2pI2bFX8ai2+VeVYIc/E1Ca6e4hlLnNgjAHArmx55Tmf8ls
mfp+ooWFczs8xumjBvHO0TnohDKr6O/QH/CfJ0XRyShkuyj644u8/Duq+Hh0dBBy
wgCsjQelRBoEq+HWTFwnckDwxAQqVvhRSEqhfsYplWMf97Sw5rHeR72m5dX2BUKn
YknzE0mEQPFvCj7J8E8motwSzF8E2wdqFXKWiOEWFHZyI1zb7wHuf/NxVy4xAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUq7Bo87OLIb6tZuXoLVaLambUSIwwHwYDVR0j
BBgwFoAU0EdWywD5giqKUMR/2UzsXfMdqUswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0ozTFVzRHhWS1RFZmd5OG1jQ0hlc3FyTnhMc2trS3pxaEVwZ1FDVjZw
WnMvMS9EMDQ3NTZDQjAwRjk4MjJBOEE1MEM0N0ZEOTRDRUM1REYzMURBOTRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwNDc1NkNCMDBGOTgyMkE4
QTUwQzQ3RkQ5NENFQzVERjMxREE5NEIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdKM0xVc0R4VktURWZneThtY0NIZXNxck54THNra0t6cWhFcGdRQ1Y2cFpzLzEv
MzEzNzM3MmUzMTMwMzUyZTMyMzMzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjMzMzEzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALFp7DANBgkqhkiG9w0BAQsFAAOCAQEAV5RL
y9nsLsi2XdYxCrjeeKCQwwLFLq4EORp/0qGKB125dg/Z1nohftgsg5FQh/I2fBwf
iHQiBqCIjJBPZLom5HglbH1ND50XHjxFBsyWmycN5OD362xOtDv/lULNFtZHRfu7
0jfHnEv2owT4QKXUpYEBCcRt7ENhKYI2J9EoZuVWsuHL3jo149IrbK8OFCxK6olE
iHn8LS/k03uVFJcf3JJPojFpgvoVMOYY4ff0xo8rMaTm5V/WbgWFghbKLuzcBDRB
XZqgT2NJr4PORQzY/I4hvEtVVpS37jTL0M8jwdDIsSwvHVRkJG4xMrwy0YGSB0Hp
8XEiYpCCzcAxEcHAPw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:38 2024 by rpki-client on console-fra.rpki-client.org