Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/3137372e3232332e3132382e302f32322d3234203d3e20323731303030.roa
File:                     3137372e3232332e3132382e302f32322d3234203d3e20323731303030.roa (raw, json)
Hash identifier:          KfWMtY8fO2klw3Zuhw9fObHmAcQ/5Ssr3ZsU5NWjayk=
Subject key identifier:   3F:A9:67:C3:E4:B3:CF:E7:4F:D4:60:DC:23:CB:5E:3B:93:CB:5E:77
Certificate issuer:       /CN=1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB
Certificate serial:       73A05770EFEF25420B21CBCF75D3DE11E1515219
Authority key identifier: 1B:8D:A4:5C:39:C0:DF:6F:B7:4B:06:F0:F8:09:8A:C6:91:68:64:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/3137372e3232332e3132382e302f32322d3234203d3e20323731303030.roa
Signing time:             Fri 05 Apr 2024 00:25:29 +0000
ROA not before:           Fri 05 Apr 2024 00:20:29 +0000
ROA not after:            Fri 04 Apr 2025 00:25:29 +0000
asID:                     271000
IP address blocks:        177.223.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.crl
                          rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:04:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a0:57:70:ef:ef:25:42:0b:21:cb:cf:75:d3:de:11:e1:51:52:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB
        Validity
            Not Before: Apr  5 00:20:29 2024 GMT
            Not After : Apr  4 00:25:29 2025 GMT
        Subject: CN=3FA967C3E4B3CFE74FD460DC23CB5E3B93CB5E77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:7e:fb:f8:1c:a9:17:21:87:08:08:27:06:17:
                    fd:7c:5e:6c:81:16:51:68:6b:2b:58:7d:3c:c6:0e:
                    34:80:cf:40:b6:c5:9e:5b:f9:d5:02:ab:70:87:91:
                    f8:99:10:84:8f:54:85:74:cf:4d:25:7c:46:00:57:
                    b8:60:a5:43:ee:d0:75:1d:38:e3:d1:4e:fd:fb:a2:
                    bb:26:7b:f3:23:bd:1d:0a:13:14:59:c6:68:94:7e:
                    d3:87:64:e8:a6:a2:1c:45:e0:fa:bc:7e:2d:19:40:
                    a7:18:66:47:df:6e:35:77:40:78:bd:a0:c7:c9:b7:
                    4a:9c:38:1f:bd:0e:3e:4e:af:95:8f:94:45:f3:78:
                    f8:fe:30:4a:cd:90:d0:fb:53:cb:9b:19:99:e6:30:
                    29:3f:46:68:be:fe:c8:cf:b3:24:a3:c8:a5:1a:31:
                    ca:49:e4:fc:46:a8:ba:84:d8:8c:e0:e9:2f:5f:ce:
                    01:6d:74:6a:c3:21:5f:4e:1f:d0:69:5a:04:35:6b:
                    90:4a:9c:99:6d:26:c3:20:89:fd:00:37:89:40:14:
                    0a:ac:65:d1:f0:e3:5a:e5:1f:5a:2f:61:15:b0:2d:
                    89:52:a3:04:7b:c4:df:41:b9:5c:92:8b:03:ee:fc:
                    ac:46:35:ab:82:fe:a0:b7:84:cb:73:88:cb:6d:a6:
                    d4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A9:67:C3:E4:B3:CF:E7:4F:D4:60:DC:23:CB:5E:3B:93:CB:5E:77
            X509v3 Authority Key Identifier:
                keyid:1B:8D:A4:5C:39:C0:DF:6F:B7:4B:06:F0:F8:09:8A:C6:91:68:64:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/3137372e3232332e3132382e302f32322d3234203d3e20323731303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:c5:77:d0:53:fd:82:ef:a4:fc:02:a5:04:29:08:56:1c:fa:
         8d:89:28:60:a1:56:9c:2f:00:f4:d2:07:dc:1c:df:c2:92:7f:
         95:30:59:8f:69:13:32:1a:90:4a:42:1a:89:2d:c7:ad:a6:cb:
         63:f9:ca:1b:51:04:81:d6:be:9f:23:fd:6b:4c:c3:db:c6:3f:
         e4:56:8d:7e:52:5a:c6:79:2d:cb:3d:c9:61:ad:db:c5:5b:1f:
         34:83:60:2d:bd:dc:ec:da:dd:39:9b:cf:66:94:11:f6:cc:a7:
         de:fa:2c:27:b7:91:c7:04:38:61:ab:eb:3c:8a:30:a7:a8:b7:
         5c:b8:17:14:07:d5:34:ec:c1:70:5d:bc:31:db:c7:d2:47:4a:
         b1:ee:38:dc:3e:20:63:1c:0b:81:2b:0e:2a:16:e6:01:d8:03:
         2d:b5:7a:0a:28:50:7a:4e:0a:40:01:45:c9:fa:cc:85:31:ba:
         b2:f2:9f:b1:ca:b6:2a:d8:d1:da:bd:a9:d6:29:fe:2d:50:f4:
         a1:ea:a6:da:bf:31:11:65:ef:49:c0:de:60:d6:dc:6a:21:ed:
         ea:39:2f:6b:c2:56:9b:e0:ee:da:bf:3a:31:a4:4c:91:ff:18:
         f8:f6:be:46:a3:48:08:fd:83:7c:9c:7b:cc:c6:e3:0c:ce:05:
         8a:62:73:a9
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUc6BXcO/vJUILIcvPddPeEeFRUhkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI4REE0NUMzOUMwREY2RkI3NEIwNkYwRjgwOThBQzY5
MTY4NjREQjAeFw0yNDA0MDUwMDIwMjlaFw0yNTA0MDQwMDI1MjlaMDMxMTAvBgNV
BAMTKDNGQTk2N0MzRTRCM0NGRTc0RkQ0NjBEQzIzQ0I1RTNCOTNDQjVFNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxfvv4HKkXIYcICCcGF/18XmyB
FlFoaytYfTzGDjSAz0C2xZ5b+dUCq3CHkfiZEISPVIV0z00lfEYAV7hgpUPu0HUd
OOPRTv37orsme/MjvR0KExRZxmiUftOHZOimohxF4Pq8fi0ZQKcYZkffbjV3QHi9
oMfJt0qcOB+9Dj5Or5WPlEXzePj+MErNkND7U8ubGZnmMCk/Rmi+/sjPsySjyKUa
McpJ5PxGqLqE2Izg6S9fzgFtdGrDIV9OH9BpWgQ1a5BKnJltJsMgif0AN4lAFAqs
ZdHw41rlH1ovYRWwLYlSowR7xN9BuVySiwPu/KxGNauC/qC3hMtziMttptTlAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUP6lnw+Szz+dP1GDcI8teO5PLXncwHwYDVR0j
BBgwFoAUG42kXDnA32+3Swbw+AmKxpFoZNswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1ZWclFib25jQWRwZ2NLcWhKaVh3dTRqU1J0UWVtUTNyYWZ6ak5GREs1
WWcvMS8xQjhEQTQ1QzM5QzBERjZGQjc0QjA2RjBGODA5OEFDNjkxNjg2NERCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCOERBNDVDMzlDMERGNkZC
NzRCMDZGMEY4MDk4QUM2OTE2ODY0REIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdWVnJRYm9uY0FkcGdjS3FoSmlYd3U0alNSdFFlbVEzcmFmempORkRLNVlnLzEv
MzEzNzM3MmUzMjMyMzMyZTMxMzIzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzczMTMwMzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArHfgDANBgkqhkiG9w0BAQsFAAOCAQEAX8V3
0FP9gu+k/AKlBCkIVhz6jYkoYKFWnC8A9NIH3BzfwpJ/lTBZj2kTMhqQSkIaiS3H
rabLY/nKG1EEgda+nyP9a0zD28Y/5FaNflJaxnktyz3JYa3bxVsfNINgLb3c7Nrd
OZvPZpQR9syn3vosJ7eRxwQ4YavrPIowp6i3XLgXFAfVNOzBcF28MdvH0kdKse44
3D4gYxwLgSsOKhbmAdgDLbV6CihQek4KQAFFyfrMhTG6svKfscq2KtjR2r2p1in+
LVD0oeqm2r8xEWXvScDeYNbcaiHt6jkva8JWm+Du2r86MaRMkf8Y+Pa+RqNICP2D
fJx7zMbjDM4FimJzqQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:53 2024 by rpki-client on console-fra.rpki-client.org