Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/3137372e3132352e3235322e302f32342d3234203d3e20323633333936.roa
File:                     3137372e3132352e3235322e302f32342d3234203d3e20323633333936.roa (raw, json)
Hash identifier:          qjLBFPI28F5AFHZ20ec/riaGpqh0ARkE1T+0GeI3ZFU=
Subject key identifier:   C7:FF:36:02:56:1A:A4:B1:48:E2:15:DC:00:38:69:C6:71:36:BE:39
Certificate issuer:       /CN=40636332B02FA344DE75686E874C7425B2C58624
Certificate serial:       11579D4D3E664341990555EED2879BE085DC6509
Authority key identifier: 40:63:63:32:B0:2F:A3:44:DE:75:68:6E:87:4C:74:25:B2:C5:86:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40636332B02FA344DE75686E874C7425B2C58624.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/3137372e3132352e3235322e302f32342d3234203d3e20323633333936.roa
Signing time:             Thu 04 Apr 2024 19:28:16 +0000
ROA not before:           Thu 04 Apr 2024 19:23:16 +0000
ROA not after:            Thu 03 Apr 2025 19:28:16 +0000
asID:                     263396
IP address blocks:        177.125.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.crl
                          rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40636332B02FA344DE75686E874C7425B2C58624.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:57:9d:4d:3e:66:43:41:99:05:55:ee:d2:87:9b:e0:85:dc:65:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40636332B02FA344DE75686E874C7425B2C58624
        Validity
            Not Before: Apr  4 19:23:16 2024 GMT
            Not After : Apr  3 19:28:16 2025 GMT
        Subject: CN=C7FF3602561AA4B148E215DC003869C67136BE39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b6:77:54:53:e4:22:45:e7:d5:0a:fc:89:89:
                    d5:c3:6e:23:4e:13:93:47:12:61:55:b9:19:b9:93:
                    e9:2c:b8:44:cb:43:1f:a1:dd:84:22:12:f3:75:9d:
                    a0:5d:ce:07:bf:52:5a:e0:62:e0:06:60:2d:d4:ca:
                    6f:a0:d7:0e:fc:e9:ae:e4:af:32:93:73:77:0d:44:
                    c8:fe:ee:d3:cd:c1:ab:7e:0c:bd:2b:ed:1d:0c:83:
                    29:9d:db:f2:54:c3:da:5c:d8:31:dc:ba:6e:7b:5c:
                    d0:f9:34:55:66:06:af:7d:a4:19:b9:64:63:10:44:
                    51:5b:b2:e6:72:4a:37:1e:77:e5:16:01:9c:15:0e:
                    3b:4f:a7:4f:37:da:c0:21:8a:80:f7:e1:17:74:19:
                    b2:1d:96:4a:71:1e:cf:f5:a6:d6:12:0a:5f:5a:00:
                    91:9b:87:2e:8e:0c:5e:0c:c0:f7:72:70:0f:71:c0:
                    ab:2e:97:e1:e6:2e:f9:d9:28:84:4f:4b:29:ed:ad:
                    ed:11:8e:6a:b7:70:8a:f6:07:54:a8:54:79:7d:3b:
                    16:12:3b:15:65:80:91:30:6e:63:58:25:4d:29:55:
                    23:21:f8:b2:97:6e:49:8c:4d:6e:b2:f7:7d:6d:53:
                    77:99:95:fc:0f:fd:59:8e:36:53:8e:cf:b7:c5:7b:
                    b4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FF:36:02:56:1A:A4:B1:48:E2:15:DC:00:38:69:C6:71:36:BE:39
            X509v3 Authority Key Identifier:
                keyid:40:63:63:32:B0:2F:A3:44:DE:75:68:6E:87:4C:74:25:B2:C5:86:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40636332B02FA344DE75686E874C7425B2C58624.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/3137372e3132352e3235322e302f32342d3234203d3e20323633333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:3d:8d:b5:96:5a:99:03:3f:75:ef:ff:6b:64:37:02:2b:ab:
         0b:20:cc:9e:1c:49:f3:58:9d:9f:c3:36:40:f5:57:67:2e:fb:
         d7:b2:09:84:13:c8:71:32:c4:4e:32:da:37:63:2a:8f:2c:11:
         f1:91:ad:ca:24:af:fb:06:1e:3d:fe:63:1e:56:2a:8b:78:2b:
         5d:09:75:c1:b8:88:46:95:fd:f0:9b:0d:d2:66:38:6d:49:42:
         d8:f6:61:6a:b7:9c:91:b9:59:3e:a5:a1:11:e8:dd:60:36:47:
         b8:c9:14:a3:3a:b2:d0:9b:e9:34:90:46:f0:99:4a:a2:4a:47:
         a3:ed:65:0f:99:3d:06:90:bc:1a:98:6b:9c:12:6e:00:b7:8d:
         68:ce:54:7a:cd:b7:ac:61:6a:3e:6c:bc:91:1e:36:d7:84:2e:
         8b:b0:70:6c:5f:d4:e8:c1:48:9c:6e:d2:75:99:2f:cb:d6:b4:
         0f:5e:a3:45:47:c7:ad:7e:38:87:82:03:73:3f:f6:51:37:e7:
         f5:90:1b:09:44:63:5e:a0:3c:84:7c:88:24:71:4d:20:52:d7:
         ab:f0:97:1a:be:fa:31:fa:c7:e7:c9:83:1a:c7:cb:fc:ec:16:
         b9:69:02:f4:74:2d:c9:2f:68:42:d0:70:92:68:a3:32:08:74:
         38:2d:da:98
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUEVedTT5mQ0GZBVXu0oeb4IXcZQkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDA2MzYzMzJCMDJGQTM0NERFNzU2ODZFODc0Qzc0MjVC
MkM1ODYyNDAeFw0yNDA0MDQxOTIzMTZaFw0yNTA0MDMxOTI4MTZaMDMxMTAvBgNV
BAMTKEM3RkYzNjAyNTYxQUE0QjE0OEUyMTVEQzAwMzg2OUM2NzEzNkJFMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvtndUU+QiRefVCvyJidXDbiNO
E5NHEmFVuRm5k+ksuETLQx+h3YQiEvN1naBdzge/UlrgYuAGYC3Uym+g1w786a7k
rzKTc3cNRMj+7tPNwat+DL0r7R0Mgymd2/JUw9pc2DHcum57XND5NFVmBq99pBm5
ZGMQRFFbsuZySjced+UWAZwVDjtPp0832sAhioD34Rd0GbIdlkpxHs/1ptYSCl9a
AJGbhy6ODF4MwPdycA9xwKsul+HmLvnZKIRPSyntre0Rjmq3cIr2B1SoVHl9OxYS
OxVlgJEwbmNYJU0pVSMh+LKXbkmMTW6y931tU3eZlfwP/VmONlOOz7fFe7SvAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUx/82AlYapLFI4hXcADhpxnE2vjkwHwYDVR0j
BBgwFoAUQGNjMrAvo0TedWhuh0x0JbLFhiQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN01KeThqVkVqVTZjYzJTUUVmcFh4enRWSlJqaGtvVjlEczY0TXFtZTJT
RVIvMS80MDYzNjMzMkIwMkZBMzQ0REU3NTY4NkU4NzRDNzQyNUIyQzU4NjI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQwNjM2MzMyQjAyRkEzNDRE
RTc1Njg2RTg3NEM3NDI1QjJDNTg2MjQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdNSnk4alZFalU2Y2MyU1FFZnBYeHp0VkpSamhrb1Y5RHM2NE1xbWUyU0VSLzEv
MzEzNzM3MmUzMTMyMzUyZTMyMzUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzMzMzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALF9/DANBgkqhkiG9w0BAQsFAAOCAQEA0T2N
tZZamQM/de//a2Q3AiurCyDMnhxJ81idn8M2QPVXZy7717IJhBPIcTLETjLaN2Mq
jywR8ZGtyiSv+wYePf5jHlYqi3grXQl1wbiIRpX98JsN0mY4bUlC2PZhareckblZ
PqWhEejdYDZHuMkUozqy0JvpNJBG8JlKokpHo+1lD5k9BpC8GphrnBJuALeNaM5U
es23rGFqPmy8kR4214Qui7BwbF/U6MFInG7SdZkvy9a0D16jRUfHrX44h4IDcz/2
UTfn9ZAbCURjXqA8hHyIJHFNIFLXq/CXGr76MfrH58mDGsfL/OwWuWkC9HQtyS9o
QtBwkmijMgh0OC3amA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:11 2024 by rpki-client on console-ams.rpki-client.org