Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e3230302e39372e302f32342d3234203d3e203238333036.roa
File:                     3137372e3230302e39372e302f32342d3234203d3e203238333036.roa (raw, json)
Hash identifier:          VqtN0VDuLkcFNAeIGs+ldhsLQPb1RclG+HYmLMc3eSc=
Subject key identifier:   A7:90:A7:4F:4C:99:1B:B1:D7:9C:99:85:F0:91:7B:E9:89:04:0D:6A
Certificate issuer:       /CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
Certificate serial:       4A3EB1B6A69C22F9B17BDF31B6936E00AC08C5F2
Authority key identifier: 94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e3230302e39372e302f32342d3234203d3e203238333036.roa
Signing time:             Tue 25 Jun 2024 15:21:21 +0000
ROA not before:           Tue 25 Jun 2024 15:16:21 +0000
ROA not after:            Tue 24 Jun 2025 15:21:21 +0000
asID:                     28306
IP address blocks:        177.200.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl
                          rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 03:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:3e:b1:b6:a6:9c:22:f9:b1:7b:df:31:b6:93:6e:00:ac:08:c5:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
        Validity
            Not Before: Jun 25 15:16:21 2024 GMT
            Not After : Jun 24 15:21:21 2025 GMT
        Subject: CN=A790A74F4C991BB1D79C9985F0917BE989040D6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:66:ea:33:ff:25:08:4c:64:28:e0:78:70:a0:
                    3d:b8:e5:6d:c5:5e:15:7c:17:db:f3:3b:d8:d9:c4:
                    cb:a2:bc:56:39:42:8c:d7:3e:2d:5c:67:a1:aa:d2:
                    1d:b4:80:33:9e:29:60:fc:c8:5e:95:6e:f4:a5:7d:
                    89:73:88:ce:f2:a7:28:ba:ed:9a:87:a4:e6:e9:a4:
                    ea:0d:5e:52:f7:cc:6d:84:c7:29:ae:29:55:00:6e:
                    5e:46:f7:78:1c:7c:3b:74:a3:d0:c6:b5:01:8a:b3:
                    81:47:20:ad:20:07:54:69:86:c6:60:c0:50:fb:a3:
                    c9:02:2a:c5:79:04:45:9f:a8:9b:91:5a:39:35:84:
                    bf:25:e7:90:97:7d:5b:3b:69:aa:53:1c:36:17:69:
                    f4:bc:3e:b6:3a:29:a6:d2:41:c4:53:90:2f:bf:6b:
                    da:eb:f0:b0:14:91:a5:5a:4f:85:9e:51:ec:26:e8:
                    55:92:88:31:b4:84:eb:8a:7e:0f:60:80:bb:b6:29:
                    45:51:91:08:4a:03:0a:0a:aa:a6:8d:ad:50:ae:39:
                    c4:71:9f:eb:54:ed:82:28:0e:ce:60:cc:09:ab:a1:
                    dc:2c:ab:f6:2c:68:2a:5f:9d:34:b5:84:05:b4:8f:
                    46:a3:11:5f:1d:0c:7f:2f:8a:40:88:a4:27:f5:fd:
                    75:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:90:A7:4F:4C:99:1B:B1:D7:9C:99:85:F0:91:7B:E9:89:04:0D:6A
            X509v3 Authority Key Identifier:
                keyid:94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e3230302e39372e302f32342d3234203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:5a:a5:80:b4:0e:a3:34:30:f6:24:1f:49:2b:6c:c0:90:0f:
         e6:10:8e:19:57:52:7d:6b:30:53:4d:b5:b9:34:ee:2e:93:9d:
         2e:cd:78:af:36:da:33:13:a7:70:70:f7:b6:bc:18:6a:75:55:
         4b:12:21:03:98:76:97:e6:40:d9:b6:6c:76:8a:27:9b:08:b0:
         b3:78:eb:c2:b5:59:c4:cc:a2:d0:da:d6:02:36:61:cd:87:2a:
         ee:1b:49:fc:59:23:e9:05:d2:20:a7:5f:fe:a3:43:52:2e:84:
         9d:9f:3f:e8:0c:31:8b:bd:7b:a2:63:a7:0f:98:c6:95:89:fb:
         2b:03:53:d8:e6:cf:fb:db:bf:17:32:fc:a8:9f:19:d5:60:e0:
         04:9f:dc:21:27:e9:6f:27:be:f1:a0:92:95:20:a4:96:d6:ef:
         8b:1c:1c:26:fb:d1:53:59:69:2a:5a:02:01:55:e3:3b:da:c9:
         85:59:cc:06:8e:76:e4:7e:e9:23:e7:c8:08:e9:e2:ab:18:a9:
         b2:72:a3:f5:a9:a7:a2:d6:69:d7:12:30:3f:86:e2:30:f3:52:
         20:54:9a:a5:0d:46:90:96:c9:2a:b3:32:9f:00:6b:77:57:14:
         0f:7e:f0:b6:50:03:06:dd:9b:c2:4e:ee:38:a9:56:e6:c9:2b:
         a5:20:0b:3a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSj6xtqacIvmxe98xtpNuAKwIxfIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQyOTQ0MDFENUNCM0U1ODk1RjZGNjhBRUM1RTQxNjNB
RUQwRjMyNDAeFw0yNDA2MjUxNTE2MjFaFw0yNTA2MjQxNTIxMjFaMDMxMTAvBgNV
BAMTKEE3OTBBNzRGNEM5OTFCQjFENzlDOTk4NUYwOTE3QkU5ODkwNDBENkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoZuoz/yUITGQo4HhwoD245W3F
XhV8F9vzO9jZxMuivFY5QozXPi1cZ6Gq0h20gDOeKWD8yF6VbvSlfYlziM7ypyi6
7ZqHpObppOoNXlL3zG2ExymuKVUAbl5G93gcfDt0o9DGtQGKs4FHIK0gB1RphsZg
wFD7o8kCKsV5BEWfqJuRWjk1hL8l55CXfVs7aapTHDYXafS8PrY6KabSQcRTkC+/
a9rr8LAUkaVaT4WeUewm6FWSiDG0hOuKfg9ggLu2KUVRkQhKAwoKqqaNrVCuOcRx
n+tU7YIoDs5gzAmrodwsq/YsaCpfnTS1hAW0j0ajEV8dDH8vikCIpCf1/XULAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUp5CnT0yZG7HXnJmF8JF76YkEDWowHwYDVR0j
BBgwFoAUlClEAdXLPliV9vaK7F5BY67Q8yQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1BEMlBudzFaclJFblYzck5rOGF6WmoxWHk2dmZ0ZTFXTE1KOWdCUE5O
dWcvMC85NDI5NDQwMUQ1Q0IzRTU4OTVGNkY2OEFFQzVFNDE2M0FFRDBGMzI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk0Mjk0NDAxRDVDQjNFNTg5
NUY2RjY4QUVDNUU0MTYzQUVEMEYzMjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdQRDJQbncxWnJSRW5WM3JOazhhelpqMVh5NnZmdGUxV0xNSjlnQlBOTnVnLzAv
MzEzNzM3MmUzMjMwMzAyZTM5MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzMzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAschhMA0GCSqGSIb3DQEBCwUAA4IBAQBFWqWAtA6j
NDD2JB9JK2zAkA/mEI4ZV1J9azBTTbW5NO4uk50uzXivNtozE6dwcPe2vBhqdVVL
EiEDmHaX5kDZtmx2iiebCLCzeOvCtVnEzKLQ2tYCNmHNhyruG0n8WSPpBdIgp1/+
o0NSLoSdnz/oDDGLvXuiY6cPmMaVifsrA1PY5s/7278XMvyonxnVYOAEn9whJ+lv
J77xoJKVIKSW1u+LHBwm+9FTWWkqWgIBVeM72smFWcwGjnbkfukj58gI6eKrGKmy
cqP1qaei1mnXEjA/huIw81IgVJqlDUaQlskqszKfAGt3VxQPfvC2UAMG3ZvCTu44
qVbmySulIAs6
-----END CERTIFICATE-----
Generated at Fri Nov 29 07:06:33 2024 by rpki-client on console-fra.rpki-client.org