Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/3137372e3132352e3235322e302f32322d3232203d3e20323633333936.roa
File:                     3137372e3132352e3235322e302f32322d3232203d3e20323633333936.roa (raw, json)
Hash identifier:          kBXo/lyIeNkSJCqMxb6nJ/O5Wj7XXcE0Xbahys/uQus=
Subject key identifier:   D8:E1:5D:D1:AB:C2:13:55:B9:46:22:E3:6A:18:35:02:04:7C:D5:C5
Certificate issuer:       /CN=40636332B02FA344DE75686E874C7425B2C58624
Certificate serial:       075DEA170024D0F922B96E4B1EDE48D111E08A2E
Authority key identifier: 40:63:63:32:B0:2F:A3:44:DE:75:68:6E:87:4C:74:25:B2:C5:86:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40636332B02FA344DE75686E874C7425B2C58624.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/3137372e3132352e3235322e302f32322d3232203d3e20323633333936.roa
Signing time:             Thu 04 Apr 2024 19:28:17 +0000
ROA not before:           Thu 04 Apr 2024 19:23:17 +0000
ROA not after:            Thu 03 Apr 2025 19:28:17 +0000
asID:                     263396
IP address blocks:        177.125.252.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.crl
                          rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40636332B02FA344DE75686E874C7425B2C58624.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:5d:ea:17:00:24:d0:f9:22:b9:6e:4b:1e:de:48:d1:11:e0:8a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40636332B02FA344DE75686E874C7425B2C58624
        Validity
            Not Before: Apr  4 19:23:17 2024 GMT
            Not After : Apr  3 19:28:17 2025 GMT
        Subject: CN=D8E15DD1ABC21355B94622E36A183502047CD5C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:57:fa:a2:19:24:e6:c4:03:07:47:f2:ab:52:
                    6b:e7:e6:4a:6f:cc:c1:3a:bf:dd:30:c0:03:e4:5e:
                    d4:60:43:dc:10:c1:9a:10:e0:a2:b9:33:b5:65:fb:
                    8f:ac:b8:a3:0f:3f:2c:e6:b1:51:8e:60:04:c1:3f:
                    b6:14:87:71:3d:b3:25:3b:c2:d5:f5:6b:a9:05:6c:
                    5c:0d:bd:b3:f3:25:2e:98:ea:d6:64:1e:07:3a:7d:
                    e3:a2:c2:6b:bc:26:09:ab:85:ae:1c:6a:4c:c7:9a:
                    46:da:39:56:86:b9:a1:e5:8f:a8:9b:8c:8d:7c:b9:
                    dd:8a:a8:02:37:dc:e7:aa:8d:af:30:b7:6b:a9:18:
                    ec:d2:90:2a:4d:52:da:99:41:a0:fc:12:88:18:3a:
                    b8:bc:42:4b:b2:c2:d5:ce:71:89:a4:f6:f5:3d:5a:
                    3e:74:73:f1:0b:17:d0:41:8b:81:c0:ba:00:76:fc:
                    e8:9d:f4:a1:e9:3d:88:7a:d3:72:27:e2:37:50:3e:
                    4d:b2:60:4c:45:f0:b9:a0:d1:5f:72:14:27:64:e8:
                    f9:9d:bd:68:41:e8:49:97:c6:fc:d8:4f:05:4a:1d:
                    74:b0:7b:54:07:59:47:01:e7:9a:4c:7e:2f:e4:6a:
                    81:be:b8:c5:47:54:45:40:d7:1d:1c:95:2e:d0:75:
                    3c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E1:5D:D1:AB:C2:13:55:B9:46:22:E3:6A:18:35:02:04:7C:D5:C5
            X509v3 Authority Key Identifier:
                keyid:40:63:63:32:B0:2F:A3:44:DE:75:68:6E:87:4C:74:25:B2:C5:86:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40636332B02FA344DE75686E874C7425B2C58624.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/3137372e3132352e3235322e302f32322d3232203d3e20323633333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c6:89:48:3d:23:00:b9:a1:1d:bc:76:c9:f7:8e:73:62:49:f7:
         9b:ad:45:e6:f0:c8:9d:30:c4:4b:4e:82:aa:60:9f:c6:14:b7:
         69:d4:51:df:03:11:49:cb:b0:67:0e:b3:aa:f6:55:11:92:db:
         9a:e4:61:e3:1a:96:aa:9b:8c:c6:69:8a:5d:1a:91:ef:20:89:
         81:ac:a5:94:ac:73:76:55:06:5c:22:30:80:d5:30:93:93:96:
         2d:cd:9a:dc:91:16:97:37:f4:39:8b:25:c1:e3:eb:e5:f0:14:
         26:df:83:76:92:0f:60:eb:10:f8:f5:61:71:c6:7a:d2:e0:61:
         7d:df:d0:17:8d:63:01:77:6a:29:e3:ad:07:c2:4c:c9:7b:22:
         69:f4:b7:e7:2c:15:2a:3f:5d:53:c9:75:8d:9a:f4:5e:b0:e7:
         ee:e2:66:e0:f7:c5:f8:71:29:c6:c8:b0:f3:42:25:d3:0d:2e:
         45:9a:27:3b:8c:fa:bb:77:39:47:af:08:88:58:69:bf:75:ef:
         b0:96:de:66:a5:6a:e9:91:6c:17:26:4b:63:13:38:0c:ef:67:
         a3:19:8a:31:3d:f4:e5:23:a1:3c:61:55:42:47:9c:27:ae:59:
         ee:92:59:61:28:23:b9:00:34:67:1b:3d:f5:78:5a:76:16:3a:
         7d:cd:8a:36
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUB13qFwAk0PkiuW5LHt5I0RHgii4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDA2MzYzMzJCMDJGQTM0NERFNzU2ODZFODc0Qzc0MjVC
MkM1ODYyNDAeFw0yNDA0MDQxOTIzMTdaFw0yNTA0MDMxOTI4MTdaMDMxMTAvBgNV
BAMTKEQ4RTE1REQxQUJDMjEzNTVCOTQ2MjJFMzZBMTgzNTAyMDQ3Q0Q1QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDV/qiGSTmxAMHR/KrUmvn5kpv
zME6v90wwAPkXtRgQ9wQwZoQ4KK5M7Vl+4+suKMPPyzmsVGOYATBP7YUh3E9syU7
wtX1a6kFbFwNvbPzJS6Y6tZkHgc6feOiwmu8Jgmrha4cakzHmkbaOVaGuaHlj6ib
jI18ud2KqAI33Oeqja8wt2upGOzSkCpNUtqZQaD8EogYOri8QkuywtXOcYmk9vU9
Wj50c/ELF9BBi4HAugB2/Oid9KHpPYh603In4jdQPk2yYExF8Lmg0V9yFCdk6Pmd
vWhB6EmXxvzYTwVKHXSwe1QHWUcB55pMfi/kaoG+uMVHVEVA1x0clS7QdTytAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU2OFd0avCE1W5RiLjahg1AgR81cUwHwYDVR0j
BBgwFoAUQGNjMrAvo0TedWhuh0x0JbLFhiQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN01KeThqVkVqVTZjYzJTUUVmcFh4enRWSlJqaGtvVjlEczY0TXFtZTJT
RVIvMS80MDYzNjMzMkIwMkZBMzQ0REU3NTY4NkU4NzRDNzQyNUIyQzU4NjI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwNjM2MzMyQjAyRkEzNDRE
RTc1Njg2RTg3NEM3NDI1QjJDNTg2MjQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdNSnk4alZFalU2Y2MyU1FFZnBYeHp0VkpSamhrb1Y5RHM2NE1xbWUyU0VSLzEv
MzEzNzM3MmUzMTMyMzUyZTMyMzUzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMzMzMzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArF9/DANBgkqhkiG9w0BAQsFAAOCAQEAxolI
PSMAuaEdvHbJ945zYkn3m61F5vDInTDES06CqmCfxhS3adRR3wMRScuwZw6zqvZV
EZLbmuRh4xqWqpuMxmmKXRqR7yCJgayllKxzdlUGXCIwgNUwk5OWLc2a3JEWlzf0
OYslwePr5fAUJt+DdpIPYOsQ+PVhccZ60uBhfd/QF41jAXdqKeOtB8JMyXsiafS3
5ywVKj9dU8l1jZr0XrDn7uJm4PfF+HEpxsiw80Il0w0uRZonO4z6u3c5R68IiFhp
v3XvsJbeZqVq6ZFsFyZLYxM4DO9noxmKMT305SOhPGFVQkecJ65Z7pJZYSgjuQA0
Zxs99XhadhY6fc2KNg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:46 2024 by rpki-client on console-fra.rpki-client.org