Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e37382e302f32332d3233203d3e20323632333338.roa
File:                     3137372e3132362e37382e302f32332d3233203d3e20323632333338.roa (raw, json)
Hash identifier:          bx/yriqAG+4U/g+vVth/0xx/zFwcVgXKeo1HeKViN+k=
Subject key identifier:   21:81:92:FC:AF:F3:B5:0C:A1:1F:46:C6:69:A8:1B:3A:C2:9C:89:18
Certificate issuer:       /CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
Certificate serial:       3EBFCB856A0CA71032CF38B50BE34BC4357840D5
Authority key identifier: 5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e37382e302f32332d3233203d3e20323632333338.roa
Signing time:             Mon 06 May 2024 11:49:33 +0000
ROA not before:           Mon 06 May 2024 11:44:33 +0000
ROA not after:            Mon 05 May 2025 11:49:33 +0000
asID:                     262338
IP address blocks:        177.126.78.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl
                          rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 23:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:bf:cb:85:6a:0c:a7:10:32:cf:38:b5:0b:e3:4b:c4:35:78:40:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
        Validity
            Not Before: May  6 11:44:33 2024 GMT
            Not After : May  5 11:49:33 2025 GMT
        Subject: CN=218192FCAFF3B50CA11F46C669A81B3AC29C8918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:eb:f0:b5:d4:fa:96:f9:a0:a2:01:38:85:65:
                    72:57:c4:86:50:2c:26:ef:9e:0b:81:8d:86:82:dd:
                    82:7f:33:82:ba:79:07:43:9b:ef:da:6c:db:32:ef:
                    2e:aa:cb:91:50:6c:c1:08:fa:31:4e:a7:08:c1:2c:
                    7a:9b:a0:a4:cc:85:09:81:d1:9b:50:58:47:29:9e:
                    d3:f7:32:00:8c:ac:a6:8f:88:8a:65:58:49:e7:92:
                    20:15:ec:87:ab:6a:12:85:53:0f:91:cf:00:0a:56:
                    2a:98:b0:71:69:6f:1f:6b:15:88:37:ce:38:03:78:
                    9e:46:eb:ff:87:00:b8:5e:90:e2:00:3b:2b:32:d5:
                    04:c8:4f:dc:c3:2b:e4:8c:30:b7:2c:7a:64:6b:f2:
                    86:7e:34:f1:76:1f:63:39:03:96:06:55:94:9d:6b:
                    65:c4:25:2d:ee:d8:f2:b3:8a:98:be:97:a1:76:97:
                    19:38:5d:a3:54:bf:42:fd:0f:3e:b8:1a:ea:61:40:
                    0c:34:91:e1:a6:fa:05:51:27:c2:3d:15:df:5e:78:
                    5d:d3:e0:20:b0:52:e1:f8:39:06:43:55:e2:69:16:
                    06:4d:06:e4:5b:19:88:55:ef:84:e6:ae:c4:56:48:
                    fb:bc:e0:fc:b4:c5:c3:b1:52:62:5d:f5:9e:da:4f:
                    ef:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:81:92:FC:AF:F3:B5:0C:A1:1F:46:C6:69:A8:1B:3A:C2:9C:89:18
            X509v3 Authority Key Identifier:
                keyid:5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/3137372e3132362e37382e302f32332d3233203d3e20323632333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ba:b1:be:d6:c8:7e:4a:56:39:66:21:c9:92:27:42:7e:93:1e:
         ef:8c:54:45:74:23:41:37:3e:fe:33:2b:bb:b7:c2:f5:71:3c:
         e7:3d:2b:b1:3b:35:63:b5:2a:70:7a:4c:71:f3:05:7f:b7:df:
         0e:cc:00:e4:1f:a8:aa:1b:1a:12:74:a3:24:79:95:f9:24:c6:
         01:a9:af:e0:7c:13:ef:12:66:c2:14:36:18:d4:e1:9e:28:89:
         85:97:98:60:90:e4:ea:92:8c:b7:99:16:ca:58:04:00:95:e7:
         2c:a4:04:23:9f:fa:cf:bd:79:a7:11:d4:b1:52:b9:38:c0:b5:
         a3:b0:4e:82:c1:28:b8:bf:13:42:f1:5e:6c:69:c7:53:ea:a3:
         5a:5d:93:2c:38:03:43:fa:84:8b:14:c6:f8:fe:86:dc:94:09:
         fe:18:dc:83:a8:99:81:87:d3:9a:3d:c2:9e:5f:7a:d6:01:64:
         af:72:1a:2b:0a:1a:94:1e:62:77:e3:96:7e:87:dd:2b:a1:cc:
         f1:9b:d9:12:cf:c0:fb:22:7e:29:ef:05:af:b3:a7:65:5e:38:
         28:94:b3:77:04:e1:a7:66:08:45:42:9e:d7:5f:ce:0b:f6:65:
         e8:87:93:6e:ee:36:0f:bd:b4:bf:e2:b9:c2:02:37:53:64:4c:
         2d:a7:86:7a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPr/LhWoMpxAyzzi1C+NLxDV4QNUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQxQTEyMEQ3MjgxMjVGNjBGRjREQ0JGMUVDN0RBNTRG
MERCRUQwMzAeFw0yNDA1MDYxMTQ0MzNaFw0yNTA1MDUxMTQ5MzNaMDMxMTAvBgNV
BAMTKDIxODE5MkZDQUZGM0I1MENBMTFGNDZDNjY5QTgxQjNBQzI5Qzg5MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw6/C11PqW+aCiATiFZXJXxIZQ
LCbvnguBjYaC3YJ/M4K6eQdDm+/abNsy7y6qy5FQbMEI+jFOpwjBLHqboKTMhQmB
0ZtQWEcpntP3MgCMrKaPiIplWEnnkiAV7IerahKFUw+RzwAKViqYsHFpbx9rFYg3
zjgDeJ5G6/+HALhekOIAOysy1QTIT9zDK+SMMLcsemRr8oZ+NPF2H2M5A5YGVZSd
a2XEJS3u2PKzipi+l6F2lxk4XaNUv0L9Dz64GuphQAw0keGm+gVRJ8I9Fd9eeF3T
4CCwUuH4OQZDVeJpFgZNBuRbGYhV74TmrsRWSPu84Py0xcOxUmJd9Z7aT+9hAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUIYGS/K/ztQyhH0bGaagbOsKciRgwHwYDVR0j
BBgwFoAUXRoSDXKBJfYP9Ny/HsfaVPDb7QMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOW9rc2Yzc0x4bmJxZ3hQZUNQaENNYXM5dDdqUkFrVjgydm44VGtMUnhH
c3YvMC81RDFBMTIwRDcyODEyNUY2MEZGNERDQkYxRUM3REE1NEYwREJFRDAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVEMUExMjBENzI4MTI1RjYw
RkY0RENCRjFFQzdEQTU0RjBEQkVEMDMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzlva3NmM3NMeG5icWd4UGVDUGhDTWFzOXQ3alJBa1Y4MnZuOFRrTFJ4R3N2LzAv
MzEzNzM3MmUzMTMyMzYyZTM3MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzMzMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxfk4wDQYJKoZIhvcNAQELBQADggEBALqxvtbI
fkpWOWYhyZInQn6THu+MVEV0I0E3Pv4zK7u3wvVxPOc9K7E7NWO1KnB6THHzBX+3
3w7MAOQfqKobGhJ0oyR5lfkkxgGpr+B8E+8SZsIUNhjU4Z4oiYWXmGCQ5OqSjLeZ
FspYBACV5yykBCOf+s+9eacR1LFSuTjAtaOwToLBKLi/E0LxXmxpx1Pqo1pdkyw4
A0P6hIsUxvj+htyUCf4Y3IOomYGH05o9wp5fetYBZK9yGisKGpQeYnfjln6H3Suh
zPGb2RLPwPsifinvBa+zp2VeOCiUs3cE4admCEVCntdfzgv2ZeiHk27uNg+9tL/i
ucICN1NkTC2nhno=
-----END CERTIFICATE-----
Generated at Sun Jun 2 00:29:02 2024 by rpki-client on console-ams.rpki-client.org