Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3233392e302f32342d3234203d3e20323632333133.roa
File:                     3137372e3130352e3233392e302f32342d3234203d3e20323632333133.roa (raw, json)
Hash identifier:          r6KpTIVTOIHpltktJXBQpkKK+zejqod3f9FwkAJZiS8=
Subject key identifier:   30:7E:2A:65:12:44:EF:AC:FA:E4:A2:35:CB:E0:60:1C:A0:F1:A8:83
Certificate issuer:       /CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
Certificate serial:       5F55003C094F9FD3B05A75EB04CA6F66EFB9F752
Authority key identifier: D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3233392e302f32342d3234203d3e20323632333133.roa
Signing time:             Wed 03 Apr 2024 21:14:08 +0000
ROA not before:           Wed 03 Apr 2024 21:09:08 +0000
ROA not after:            Wed 02 Apr 2025 21:14:08 +0000
asID:                     262313
IP address blocks:        177.105.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl
                          rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:55:00:3c:09:4f:9f:d3:b0:5a:75:eb:04:ca:6f:66:ef:b9:f7:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
        Validity
            Not Before: Apr  3 21:09:08 2024 GMT
            Not After : Apr  2 21:14:08 2025 GMT
        Subject: CN=307E2A651244EFACFAE4A235CBE0601CA0F1A883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a3:0b:4b:1e:2a:b9:95:ae:02:0c:1c:ea:e2:
                    02:36:82:f4:2c:d0:3c:f2:3a:ce:42:37:21:35:3b:
                    90:30:b1:fd:e9:fa:97:14:6f:7d:91:26:93:33:6c:
                    f3:0e:4a:3b:37:20:43:b5:9e:8d:89:36:3e:bc:b8:
                    c5:d4:63:27:86:c1:c7:2b:45:13:cb:12:69:d7:fe:
                    08:57:be:27:77:64:a3:0e:6b:c7:be:77:89:4d:eb:
                    64:bb:17:9b:19:29:01:e9:77:9f:98:95:bf:85:00:
                    61:e5:7a:e3:0b:6c:60:29:5b:93:42:6c:1a:47:53:
                    eb:15:a5:f8:14:f9:45:8d:1b:d5:e0:a7:b2:61:99:
                    ef:97:f8:05:db:0a:82:c5:7c:21:94:33:c7:62:ba:
                    4c:b8:66:a1:15:ee:a1:ca:b9:55:21:03:00:52:20:
                    a4:c8:66:1a:72:0b:f7:c6:09:d0:94:e6:fe:95:73:
                    0e:54:2f:85:25:be:d1:dc:52:c3:b9:b7:be:50:64:
                    14:d5:c2:35:08:a4:89:35:54:a8:48:99:d9:88:22:
                    6e:49:21:2c:25:37:50:89:d8:94:fd:51:54:50:3e:
                    84:2c:8c:4f:72:ec:fc:d2:c5:b3:66:52:18:5e:b4:
                    95:f4:fd:d9:2a:02:5a:14:72:f1:06:50:0a:a4:bd:
                    52:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:7E:2A:65:12:44:EF:AC:FA:E4:A2:35:CB:E0:60:1C:A0:F1:A8:83
            X509v3 Authority Key Identifier:
                keyid:D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/3137372e3130352e3233392e302f32342d3234203d3e20323632333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:0a:8d:25:3d:88:f9:5a:4d:c7:78:6c:c9:2f:1d:63:84:b8:
         28:89:ff:83:60:ef:61:fb:13:77:81:53:56:2f:32:32:60:58:
         98:61:b6:02:b8:27:b6:a0:01:11:b4:5a:45:6a:99:35:af:f3:
         43:2e:92:f1:4c:ad:ee:2f:57:3f:9f:58:d8:d8:cf:36:12:04:
         c0:4b:a6:47:c0:fc:37:58:ac:3c:40:34:e5:d5:d1:4f:44:15:
         83:ce:8c:44:27:22:88:b3:77:f3:6b:ee:e8:77:91:1c:ad:c2:
         79:bd:0a:f3:d7:0a:87:cf:26:c7:22:30:89:22:7c:de:11:d4:
         58:c1:99:87:87:9c:ce:a4:56:b3:62:9e:77:f6:49:84:03:9f:
         99:e3:ae:1f:91:41:da:ad:0a:62:43:e3:29:53:9f:f3:23:38:
         64:1b:87:57:b0:5a:ae:40:52:b8:b8:ad:39:11:7d:b4:28:de:
         37:92:5d:9c:65:ba:f9:55:8c:ed:f5:8a:33:3c:91:d9:51:46:
         bd:2f:f4:9a:24:27:f7:ab:9a:e7:25:57:9e:40:d1:81:db:a0:
         14:65:94:85:a1:68:62:10:c6:42:19:b4:1a:98:be:f3:4c:62:
         e4:7b:25:87:01:b4:4b:d1:ab:7a:c1:56:8b:54:6e:69:86:79:
         fb:3b:d7:61
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUX1UAPAlPn9OwWnXrBMpvZu+591IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA0NzU2Q0IwMEY5ODIyQThBNTBDNDdGRDk0Q0VDNURG
MzFEQTk0QjAeFw0yNDA0MDMyMTA5MDhaFw0yNTA0MDIyMTE0MDhaMDMxMTAvBgNV
BAMTKDMwN0UyQTY1MTI0NEVGQUNGQUU0QTIzNUNCRTA2MDFDQTBGMUE4ODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6owtLHiq5la4CDBzq4gI2gvQs
0DzyOs5CNyE1O5Awsf3p+pcUb32RJpMzbPMOSjs3IEO1no2JNj68uMXUYyeGwccr
RRPLEmnX/ghXvid3ZKMOa8e+d4lN62S7F5sZKQHpd5+Ylb+FAGHleuMLbGApW5NC
bBpHU+sVpfgU+UWNG9Xgp7Jhme+X+AXbCoLFfCGUM8diuky4ZqEV7qHKuVUhAwBS
IKTIZhpyC/fGCdCU5v6Vcw5UL4UlvtHcUsO5t75QZBTVwjUIpIk1VKhImdmIIm5J
ISwlN1CJ2JT9UVRQPoQsjE9y7PzSxbNmUhhetJX0/dkqAloUcvEGUAqkvVKDAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUMH4qZRJE76z65KI1y+BgHKDxqIMwHwYDVR0j
BBgwFoAU0EdWywD5giqKUMR/2UzsXfMdqUswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0ozTFVzRHhWS1RFZmd5OG1jQ0hlc3FyTnhMc2trS3pxaEVwZ1FDVjZw
WnMvMS9EMDQ3NTZDQjAwRjk4MjJBOEE1MEM0N0ZEOTRDRUM1REYzMURBOTRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwNDc1NkNCMDBGOTgyMkE4
QTUwQzQ3RkQ5NENFQzVERjMxREE5NEIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdKM0xVc0R4VktURWZneThtY0NIZXNxck54THNra0t6cWhFcGdRQ1Y2cFpzLzEv
MzEzNzM3MmUzMTMwMzUyZTMyMzMzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjMzMzEzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALFp7zANBgkqhkiG9w0BAQsFAAOCAQEAlAqN
JT2I+VpNx3hsyS8dY4S4KIn/g2DvYfsTd4FTVi8yMmBYmGG2ArgntqABEbRaRWqZ
Na/zQy6S8Uyt7i9XP59Y2NjPNhIEwEumR8D8N1isPEA05dXRT0QVg86MRCciiLN3
82vu6HeRHK3Ceb0K89cKh88mxyIwiSJ83hHUWMGZh4eczqRWs2Ked/ZJhAOfmeOu
H5FB2q0KYkPjKVOf8yM4ZBuHV7BarkBSuLitORF9tCjeN5JdnGW6+VWM7fWKMzyR
2VFGvS/0miQn96ua5yVXnkDRgdugFGWUhaFoYhDGQhm0Gpi+80xi5HslhwG0S9Gr
esFWi1RuaYZ5+zvXYQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:58 2024 by rpki-client on console-ams.rpki-client.org