Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/3137372e3232332e3136302e302f31392d3234203d3e203238333030.roa
File:                     3137372e3232332e3136302e302f31392d3234203d3e203238333030.roa (raw, json)
Hash identifier:          bTu8BbgtEK5z4eR4BM1S4rbtT+ozYki0zryO4A+e8eA=
Subject key identifier:   5E:05:CF:06:C8:92:A9:40:55:2E:97:A6:3F:DD:A9:75:45:B5:5C:41
Certificate issuer:       /CN=0B47F19EDA3877EE438A7AC26BB3850860C342BB
Certificate serial:       46E91EE2E54771A54631633DC5F4AA6162BE7D02
Authority key identifier: 0B:47:F1:9E:DA:38:77:EE:43:8A:7A:C2:6B:B3:85:08:60:C3:42:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B47F19EDA3877EE438A7AC26BB3850860C342BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/3137372e3232332e3136302e302f31392d3234203d3e203238333030.roa
Signing time:             Mon 27 May 2024 12:49:26 +0000
ROA not before:           Mon 27 May 2024 12:44:26 +0000
ROA not after:            Mon 26 May 2025 12:49:26 +0000
asID:                     28300
IP address blocks:        177.223.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/0B47F19EDA3877EE438A7AC26BB3850860C342BB.crl
                          rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/0B47F19EDA3877EE438A7AC26BB3850860C342BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B47F19EDA3877EE438A7AC26BB3850860C342BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:e9:1e:e2:e5:47:71:a5:46:31:63:3d:c5:f4:aa:61:62:be:7d:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B47F19EDA3877EE438A7AC26BB3850860C342BB
        Validity
            Not Before: May 27 12:44:26 2024 GMT
            Not After : May 26 12:49:26 2025 GMT
        Subject: CN=5E05CF06C892A940552E97A63FDDA97545B55C41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:82:f9:a5:2f:1d:c5:28:61:ea:ba:8e:68:a0:
                    35:37:0d:93:5d:97:8f:f2:de:0d:3f:73:3c:c7:b5:
                    cd:c4:01:4d:06:e7:2b:bf:a3:31:a4:7c:80:79:1f:
                    24:00:79:3c:34:e4:d8:95:11:6b:d0:10:bc:b0:90:
                    9a:4b:a7:d3:da:0a:5a:37:e3:a0:1c:73:86:0a:d2:
                    b8:55:f1:14:a7:be:7a:2a:a9:c7:88:67:96:99:2c:
                    3b:4e:48:a2:b5:8b:e6:7b:24:e2:4a:ed:2a:1c:79:
                    08:9a:65:c6:9b:b5:6c:ff:62:c9:58:38:e4:3e:64:
                    b1:87:a1:33:5d:fb:a7:1f:ab:9d:18:db:fa:21:2b:
                    e6:bb:72:bb:f9:2e:03:49:84:68:a8:75:82:77:f7:
                    9a:5c:3e:3b:3f:8b:7c:b9:90:48:d5:da:b1:37:54:
                    29:91:2f:18:73:c1:85:86:dc:1c:59:49:79:0f:59:
                    0f:cb:37:1c:f0:d9:45:f3:36:7a:e9:2a:2b:d2:11:
                    1c:34:9c:35:5d:c0:37:b1:b0:36:ee:37:e2:da:0f:
                    6c:6a:b7:1a:c2:6d:d3:c4:9b:ba:85:20:39:b0:95:
                    db:7a:7b:86:d8:50:80:3e:ef:9c:b7:63:21:d3:47:
                    64:fa:2d:8b:e0:61:d7:96:7f:d7:d9:ec:9e:b8:ca:
                    eb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:05:CF:06:C8:92:A9:40:55:2E:97:A6:3F:DD:A9:75:45:B5:5C:41
            X509v3 Authority Key Identifier:
                keyid:0B:47:F1:9E:DA:38:77:EE:43:8A:7A:C2:6B:B3:85:08:60:C3:42:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/0B47F19EDA3877EE438A7AC26BB3850860C342BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B47F19EDA3877EE438A7AC26BB3850860C342BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zSNjeGwHxYZ17zj6dTwywjgHVMJyJbxH4DsXfTyMeyy/0/3137372e3232332e3136302e302f31392d3234203d3e203238333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2a:0f:93:fd:a1:f7:ef:76:6a:59:38:4e:dd:99:8d:de:be:35:
         f6:49:ea:7d:89:2f:1e:c7:33:6f:02:2d:82:fc:a1:7c:89:fc:
         be:bf:f0:b7:2a:21:41:87:b6:8a:83:0e:7e:13:66:fc:3f:79:
         a3:70:6b:33:71:7d:1d:0a:0c:ce:8c:45:ff:7a:2c:7d:72:4b:
         9e:bb:83:b2:4b:7c:71:4d:b2:a5:49:1e:4b:a1:a6:1b:c7:31:
         d9:9c:c6:1e:13:76:d6:d7:d8:66:06:7f:69:49:68:bc:72:a1:
         40:05:72:a7:2d:4a:c6:f4:35:74:6b:d7:6e:dd:98:3c:29:de:
         23:2c:92:ce:a2:56:10:01:d5:a7:fb:71:19:91:5a:3e:9c:ad:
         f0:1d:f9:4e:b7:5f:e8:6f:a7:e5:18:1d:17:6a:d6:78:ef:8a:
         61:04:39:c4:dc:5a:00:25:3b:ab:6e:94:5e:f4:5f:c4:33:d0:
         2b:1e:83:da:ec:cf:32:6c:3f:fd:3d:cd:42:42:8e:da:ac:f1:
         8a:11:b7:ef:71:e1:b2:87:c1:95:76:a7:98:97:74:5b:0c:33:
         e2:1c:e0:91:af:f4:58:e7:7c:fa:20:d6:40:5e:6a:c3:54:99:
         25:a0:1e:87:70:78:9b:0c:1a:45:8f:27:e5:2b:e5:3d:f5:d5:
         b1:69:23:bb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURuke4uVHcaVGMWM9xfSqYWK+fQIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEI0N0YxOUVEQTM4NzdFRTQzOEE3QUMyNkJCMzg1MDg2
MEMzNDJCQjAeFw0yNDA1MjcxMjQ0MjZaFw0yNTA1MjYxMjQ5MjZaMDMxMTAvBgNV
BAMTKDVFMDVDRjA2Qzg5MkE5NDA1NTJFOTdBNjNGRERBOTc1NDVCNTVDNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAgvmlLx3FKGHquo5ooDU3DZNd
l4/y3g0/czzHtc3EAU0G5yu/ozGkfIB5HyQAeTw05NiVEWvQELywkJpLp9PaClo3
46Acc4YK0rhV8RSnvnoqqceIZ5aZLDtOSKK1i+Z7JOJK7SoceQiaZcabtWz/YslY
OOQ+ZLGHoTNd+6cfq50Y2/ohK+a7crv5LgNJhGiodYJ395pcPjs/i3y5kEjV2rE3
VCmRLxhzwYWG3BxZSXkPWQ/LNxzw2UXzNnrpKivSERw0nDVdwDexsDbuN+LaD2xq
txrCbdPEm7qFIDmwldt6e4bYUIA+75y3YyHTR2T6LYvgYdeWf9fZ7J64yusLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUXgXPBsiSqUBVLpemP92pdUW1XEEwHwYDVR0j
BBgwFoAUC0fxnto4d+5DinrCa7OFCGDDQrswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXpTTmplR3dIeFlaMTd6ajZkVHd5d2pnSFZNSnlKYnhINERzWGZUeU1l
eXkvMC8wQjQ3RjE5RURBMzg3N0VFNDM4QTdBQzI2QkIzODUwODYwQzM0MkJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCNDdGMTlFREEzODc3RUU0
MzhBN0FDMjZCQjM4NTA4NjBDMzQyQkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl6U05qZUd3SHhZWjE3emo2ZFR3eXdqZ0hWTUp5SmJ4SDREc1hmVHlNZXl5LzAv
MzEzNzM3MmUzMjMyMzMyZTMxMzYzMDJlMzAyZjMxMzkyZDMyMzQyMDNkM2UyMDMy
MzgzMzMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAWx36AwDQYJKoZIhvcNAQELBQADggEBACoPk/2h
9+92alk4Tt2Zjd6+NfZJ6n2JLx7HM28CLYL8oXyJ/L6/8LcqIUGHtoqDDn4TZvw/
eaNwazNxfR0KDM6MRf96LH1yS567g7JLfHFNsqVJHkuhphvHMdmcxh4TdtbX2GYG
f2lJaLxyoUAFcqctSsb0NXRr127dmDwp3iMsks6iVhAB1af7cRmRWj6crfAd+U63
X+hvp+UYHRdq1njvimEEOcTcWgAlO6tulF70X8Qz0Cseg9rszzJsP/09zUJCjtqs
8YoRt+9x4bKHwZV2p5iXdFsMM+Ic4JGv9FjnfPog1kBeasNUmSWgHodweJsMGkWP
J+Ur5T311bFpI7s=
-----END CERTIFICATE-----
Generated at Mon Nov 25 10:55:49 2024 by rpki-client on console-ams.rpki-client.org