Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/1/3137372e3135322e3132342e302f32322d3234203d3e20323731343737.roa
File:                     3137372e3135322e3132342e302f32322d3234203d3e20323731343737.roa (raw, json)
Hash identifier:          1LDXv0zBhcADxYmwHZeK8ERsIuED0HuQvyOfe+AVLKQ=
Subject key identifier:   C5:2C:2B:80:2C:18:38:63:91:2A:B4:91:28:24:CF:75:DD:11:F9:DA
Certificate issuer:       /CN=4ABC2853483C8D55A291610B3C655D5FD053740E
Certificate serial:       5CE250760E68997B6D0F1564AE28F448F2CD4493
Authority key identifier: 4A:BC:28:53:48:3C:8D:55:A2:91:61:0B:3C:65:5D:5F:D0:53:74:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ABC2853483C8D55A291610B3C655D5FD053740E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/1/3137372e3135322e3132342e302f32322d3234203d3e20323731343737.roa
Signing time:             Wed 03 Apr 2024 22:56:19 +0000
ROA not before:           Wed 03 Apr 2024 22:51:19 +0000
ROA not after:            Wed 02 Apr 2025 22:56:19 +0000
asID:                     271477
IP address blocks:        177.152.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/1/4ABC2853483C8D55A291610B3C655D5FD053740E.crl
                          rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/1/4ABC2853483C8D55A291610B3C655D5FD053740E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ABC2853483C8D55A291610B3C655D5FD053740E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:11:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:e2:50:76:0e:68:99:7b:6d:0f:15:64:ae:28:f4:48:f2:cd:44:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ABC2853483C8D55A291610B3C655D5FD053740E
        Validity
            Not Before: Apr  3 22:51:19 2024 GMT
            Not After : Apr  2 22:56:19 2025 GMT
        Subject: CN=C52C2B802C183863912AB4912824CF75DD11F9DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6b:70:e1:d9:06:db:7a:3f:7f:29:fb:32:69:
                    6c:9c:13:01:bf:7f:d3:27:77:21:1b:88:0e:c3:41:
                    9a:23:8f:8a:94:3b:d1:cc:dd:de:34:98:4c:98:df:
                    82:f3:df:18:e2:97:71:52:07:89:bb:3c:de:74:95:
                    8f:db:cf:df:28:0c:ca:4e:0c:54:96:9c:17:37:94:
                    79:21:0a:97:2a:f2:f7:54:2b:a2:3f:af:f8:d7:5c:
                    bb:20:fb:b6:63:79:ce:dd:f0:e9:98:aa:49:a8:2f:
                    3a:34:ce:74:68:f8:85:75:9e:09:ad:bf:14:69:20:
                    de:f9:cd:04:bd:7d:53:e0:09:3d:ac:94:7e:c6:44:
                    3d:44:14:82:8b:30:88:6f:f5:96:57:00:29:95:60:
                    6c:32:3f:6f:05:b9:ed:5c:62:38:09:c4:8e:9f:ee:
                    29:70:66:5e:f4:54:d8:63:86:51:7f:47:47:b4:ea:
                    aa:26:0d:73:c9:0c:de:b1:0d:33:13:a2:c3:ac:ac:
                    64:b7:82:8d:54:6e:ba:45:f6:53:80:5f:15:09:c3:
                    1f:5d:cb:64:4b:1b:ee:05:5b:ca:4f:a6:58:6e:d2:
                    1b:6c:04:ec:44:ea:fe:f4:f2:83:92:ca:c3:6e:85:
                    b8:8f:41:a2:68:9d:f7:3c:7c:75:95:d9:50:21:25:
                    dc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2C:2B:80:2C:18:38:63:91:2A:B4:91:28:24:CF:75:DD:11:F9:DA
            X509v3 Authority Key Identifier:
                keyid:4A:BC:28:53:48:3C:8D:55:A2:91:61:0B:3C:65:5D:5F:D0:53:74:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/1/4ABC2853483C8D55A291610B3C655D5FD053740E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ABC2853483C8D55A291610B3C655D5FD053740E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/1/3137372e3135322e3132342e302f32322d3234203d3e20323731343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:c8:b3:c3:14:3b:a9:3b:86:11:fa:6d:fd:37:91:53:49:fb:
         01:f3:58:7e:85:c6:f7:f4:3f:d9:d6:96:02:93:5a:7c:fc:ac:
         03:1b:61:89:72:4c:53:51:ac:83:cf:c7:77:a7:46:a1:f9:70:
         02:e9:18:f6:ab:1d:35:e2:72:a9:a4:89:5a:ec:fd:66:ed:2a:
         75:ab:7f:40:dd:d2:c4:7b:7b:a7:10:1a:c6:ca:fa:5a:85:5f:
         55:fe:ec:da:5f:9a:51:d4:fb:1b:6c:25:ad:2d:92:7a:c9:5c:
         1f:1d:4b:fa:f6:b8:c6:78:fb:63:d7:ee:60:51:8a:b8:56:95:
         fa:9c:c1:49:3f:3c:5f:8a:bb:e6:b8:85:b7:57:07:6c:86:27:
         c6:91:85:c0:f1:a4:f8:58:a5:af:61:f4:97:81:98:f0:5e:63:
         37:10:77:38:62:71:17:e6:cc:39:4d:25:9e:30:f1:d9:25:58:
         c7:75:1f:f7:0a:fb:86:2f:da:13:41:28:09:6e:d3:be:98:50:
         7a:a3:73:61:01:07:a0:9f:ce:f8:64:63:01:1d:c2:68:4d:7e:
         c1:2b:fd:7f:88:42:62:37:cf:18:79:ad:72:f9:9c:fc:50:e7:
         f3:71:a1:c4:53:1a:6e:04:14:43:1a:6b:c3:f6:e6:d6:32:8c:
         4a:0e:f0:ae
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUXOJQdg5omXttDxVkrij0SPLNRJMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEFCQzI4NTM0ODNDOEQ1NUEyOTE2MTBCM0M2NTVENUZE
MDUzNzQwRTAeFw0yNDA0MDMyMjUxMTlaFw0yNTA0MDIyMjU2MTlaMDMxMTAvBgNV
BAMTKEM1MkMyQjgwMkMxODM4NjM5MTJBQjQ5MTI4MjRDRjc1REQxMUY5REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZa3Dh2Qbbej9/KfsyaWycEwG/
f9MndyEbiA7DQZojj4qUO9HM3d40mEyY34Lz3xjil3FSB4m7PN50lY/bz98oDMpO
DFSWnBc3lHkhCpcq8vdUK6I/r/jXXLsg+7Zjec7d8OmYqkmoLzo0znRo+IV1ngmt
vxRpIN75zQS9fVPgCT2slH7GRD1EFIKLMIhv9ZZXACmVYGwyP28Fue1cYjgJxI6f
7ilwZl70VNhjhlF/R0e06qomDXPJDN6xDTMTosOsrGS3go1UbrpF9lOAXxUJwx9d
y2RLG+4FW8pPplhu0htsBOxE6v708oOSysNuhbiPQaJonfc8fHWV2VAhJdxRAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUxSwrgCwYOGORKrSRKCTPdd0R+dowHwYDVR0j
BBgwFoAUSrwoU0g8jVWikWELPGVdX9BTdA4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODdXSmZXZ0d3QzY2M2JlNVBBV1pkRUo4dG43S3kyN3BtTFg0NFNIMUtR
UVYvMS80QUJDMjg1MzQ4M0M4RDU1QTI5MTYxMEIzQzY1NUQ1RkQwNTM3NDBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRBQkMyODUzNDgzQzhENTVB
MjkxNjEwQjNDNjU1RDVGRDA1Mzc0MEUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg3V0pmV2dHd0M2NjNiZTVQQVdaZEVKOHRuN0t5MjdwbUxYNDRTSDFLUVFWLzEv
MzEzNzM3MmUzMTM1MzIyZTMxMzIzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzczMTM0MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArGYfDANBgkqhkiG9w0BAQsFAAOCAQEAqsiz
wxQ7qTuGEfpt/TeRU0n7AfNYfoXG9/Q/2daWApNafPysAxthiXJMU1Gsg8/Hd6dG
oflwAukY9qsdNeJyqaSJWuz9Zu0qdat/QN3SxHt7pxAaxsr6WoVfVf7s2l+aUdT7
G2wlrS2SeslcHx1L+va4xnj7Y9fuYFGKuFaV+pzBST88X4q75riFt1cHbIYnxpGF
wPGk+Filr2H0l4GY8F5jNxB3OGJxF+bMOU0lnjDx2SVYx3Uf9wr7hi/aE0EoCW7T
vphQeqNzYQEHoJ/O+GRjAR3CaE1+wSv9f4hCYjfPGHmtcvmc/FDn83GhxFMabgQU
Qxprw/bm1jKMSg7wrg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:59 2024 by rpki-client on console-ams.rpki-client.org