Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3138352e302f32342d3234203d3e203238333036.roa
File:                     3137372e39312e3138352e302f32342d3234203d3e203238333036.roa (raw, json)
Hash identifier:          IdzifNMMZ5XovKjdnnps6xjvfoiU9tN3P/2M8Iz9QMw=
Subject key identifier:   EC:8D:BB:4A:69:17:2F:E4:19:F8:BC:1E:82:49:19:F5:90:A3:04:55
Certificate issuer:       /CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
Certificate serial:       1697A4B18D0DB84B099AFBAB0692F4E4B53AE727
Authority key identifier: 94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3138352e302f32342d3234203d3e203238333036.roa
Signing time:             Tue 25 Jun 2024 15:21:12 +0000
ROA not before:           Tue 25 Jun 2024 15:16:12 +0000
ROA not after:            Tue 24 Jun 2025 15:21:12 +0000
asID:                     28306
IP address blocks:        177.91.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl
                          rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:97:a4:b1:8d:0d:b8:4b:09:9a:fb:ab:06:92:f4:e4:b5:3a:e7:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94294401D5CB3E5895F6F68AEC5E4163AED0F324
        Validity
            Not Before: Jun 25 15:16:12 2024 GMT
            Not After : Jun 24 15:21:12 2025 GMT
        Subject: CN=EC8DBB4A69172FE419F8BC1E824919F590A30455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fc:d3:89:92:f2:0a:17:19:c1:96:7f:59:b2:
                    c9:69:c1:d5:44:87:52:35:41:7a:82:be:85:e5:fc:
                    c7:5c:ac:45:5e:4c:87:48:b8:21:71:0d:04:5f:0b:
                    5c:a8:16:d1:3f:d6:2f:26:81:bf:4c:8a:22:4c:a1:
                    53:30:b2:20:04:ba:d8:b8:37:3c:d3:38:ac:73:22:
                    68:5a:51:98:e8:33:91:c2:93:0f:ed:27:c0:02:17:
                    de:e3:35:49:ff:b7:c0:86:49:75:43:57:e1:e4:26:
                    d0:66:36:d8:89:7e:17:ae:f9:b1:0c:a8:9d:29:90:
                    d7:ab:8b:56:27:21:91:98:65:65:d1:9e:f0:f8:d9:
                    c0:6b:0a:03:7a:b0:7c:b7:27:ed:7d:6d:ae:49:9c:
                    d8:8a:9c:87:7a:e9:d3:43:4f:ab:fa:55:62:15:16:
                    ee:a1:36:10:7c:4e:22:ef:50:76:61:42:77:c6:0d:
                    4b:39:b1:82:1e:54:96:9e:81:86:ef:a9:5e:7b:b3:
                    b9:d2:2d:1c:b8:e5:83:15:9b:a1:07:ec:29:ce:d3:
                    bd:84:57:4d:f4:d7:f9:d3:17:0e:9f:2e:da:ae:0b:
                    15:ea:29:8f:90:d8:56:65:1e:ae:fa:e8:a2:fc:8a:
                    dd:fb:c5:71:ae:dc:f9:ec:68:67:ff:74:74:32:04:
                    bf:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:8D:BB:4A:69:17:2F:E4:19:F8:BC:1E:82:49:19:F5:90:A3:04:55
            X509v3 Authority Key Identifier:
                keyid:94:29:44:01:D5:CB:3E:58:95:F6:F6:8A:EC:5E:41:63:AE:D0:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/94294401D5CB3E5895F6F68AEC5E4163AED0F324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94294401D5CB3E5895F6F68AEC5E4163AED0F324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3137372e39312e3138352e302f32342d3234203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:3c:48:59:01:d3:1a:c2:31:53:85:fd:48:65:83:6c:59:e1:
         d2:ef:4a:0d:c6:80:3b:e7:cf:1e:eb:2e:d6:17:c0:7f:00:fe:
         6e:d7:de:cb:ec:82:b3:fe:98:b5:b4:fc:83:f9:c3:c1:ad:d2:
         ab:50:c0:39:c4:19:92:3b:de:62:84:e0:68:37:9f:54:2b:06:
         0c:58:bd:55:f4:c3:7f:0f:50:e3:da:c8:0b:b1:e5:e8:ef:0b:
         8e:02:82:86:20:55:1e:69:7d:bb:64:56:6f:7d:33:ba:1c:5c:
         08:49:70:e5:96:09:5a:df:ed:f8:62:d7:e7:23:a0:07:c1:93:
         33:ee:a8:af:c3:bf:39:5c:a4:4e:8e:d9:cb:fa:46:da:07:c3:
         76:f1:b5:3c:87:0f:58:90:42:83:ca:44:98:4f:8b:7d:52:b1:
         40:7e:56:97:e2:aa:49:6f:96:29:b3:29:2b:f1:6e:a6:a5:42:
         2c:cd:0f:5c:f8:20:a2:fd:80:eb:bf:6c:e0:0b:3c:68:17:4a:
         e5:b8:bd:54:78:8b:b0:77:17:db:3a:9f:42:ae:7a:86:90:87:
         63:4a:fe:2c:43:d6:38:0e:0e:e8:1d:1e:b1:04:dd:fd:d3:2b:
         f6:1d:49:36:8d:4e:db:14:d8:8c:b0:4e:e1:06:52:86:0b:d7:
         1b:e8:bf:6d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFpeksY0NuEsJmvurBpL05LU65ycwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQyOTQ0MDFENUNCM0U1ODk1RjZGNjhBRUM1RTQxNjNB
RUQwRjMyNDAeFw0yNDA2MjUxNTE2MTJaFw0yNTA2MjQxNTIxMTJaMDMxMTAvBgNV
BAMTKEVDOERCQjRBNjkxNzJGRTQxOUY4QkMxRTgyNDkxOUY1OTBBMzA0NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd/NOJkvIKFxnBln9ZsslpwdVE
h1I1QXqCvoXl/MdcrEVeTIdIuCFxDQRfC1yoFtE/1i8mgb9MiiJMoVMwsiAEuti4
NzzTOKxzImhaUZjoM5HCkw/tJ8ACF97jNUn/t8CGSXVDV+HkJtBmNtiJfheu+bEM
qJ0pkNeri1YnIZGYZWXRnvD42cBrCgN6sHy3J+19ba5JnNiKnId66dNDT6v6VWIV
Fu6hNhB8TiLvUHZhQnfGDUs5sYIeVJaegYbvqV57s7nSLRy45YMVm6EH7CnO072E
V0301/nTFw6fLtquCxXqKY+Q2FZlHq766KL8it37xXGu3PnsaGf/dHQyBL+xAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU7I27SmkXL+QZ+LwegkkZ9ZCjBFUwHwYDVR0j
BBgwFoAUlClEAdXLPliV9vaK7F5BY67Q8yQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1BEMlBudzFaclJFblYzck5rOGF6WmoxWHk2dmZ0ZTFXTE1KOWdCUE5O
dWcvMC85NDI5NDQwMUQ1Q0IzRTU4OTVGNkY2OEFFQzVFNDE2M0FFRDBGMzI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk0Mjk0NDAxRDVDQjNFNTg5
NUY2RjY4QUVDNUU0MTYzQUVEMEYzMjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdQRDJQbncxWnJSRW5WM3JOazhhelpqMVh5NnZmdGUxV0xNSjlnQlBOTnVnLzAv
MzEzNzM3MmUzOTMxMmUzMTM4MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzMzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsVu5MA0GCSqGSIb3DQEBCwUAA4IBAQCBPEhZAdMa
wjFThf1IZYNsWeHS70oNxoA7588e6y7WF8B/AP5u197L7IKz/pi1tPyD+cPBrdKr
UMA5xBmSO95ihOBoN59UKwYMWL1V9MN/D1Dj2sgLseXo7wuOAoKGIFUeaX27ZFZv
fTO6HFwISXDllgla3+34YtfnI6AHwZMz7qivw785XKROjtnL+kbaB8N28bU8hw9Y
kEKDykSYT4t9UrFAflaX4qpJb5Ypsykr8W6mpUIszQ9c+CCi/YDrv2zgCzxoF0rl
uL1UeIuwdxfbOp9CrnqGkIdjSv4sQ9Y4Dg7oHR6xBN390yv2HUk2jU7bFNiMsE7h
BlKGC9cb6L9t
-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:04 2024 by rpki-client on console-fra.rpki-client.org