Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/3137372e38372e38382e302f32322d3234203d3e203238333334.roa
File:                     3137372e38372e38382e302f32322d3234203d3e203238333334.roa (raw, json)
Hash identifier:          /RQ7ngKLrfsHXkmHVML1PdSBIUt2QhuUMt8R40MvYBM=
Subject key identifier:   48:BF:8F:EE:B3:2B:02:A1:9F:64:0F:40:1E:BB:52:36:77:85:52:0D
Certificate issuer:       /CN=FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1
Certificate serial:       54734687D7F68555739A8C51E06C5F02510E428A
Authority key identifier: FB:44:51:EF:F9:D1:A7:4F:2B:A6:C3:7C:E6:09:E7:16:2C:C4:76:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/3137372e38372e38382e302f32322d3234203d3e203238333334.roa
Signing time:             Wed 03 Apr 2024 18:30:03 +0000
ROA not before:           Wed 03 Apr 2024 18:25:03 +0000
ROA not after:            Wed 02 Apr 2025 18:30:03 +0000
asID:                     28334
IP address blocks:        177.87.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.crl
                          rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:73:46:87:d7:f6:85:55:73:9a:8c:51:e0:6c:5f:02:51:0e:42:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1
        Validity
            Not Before: Apr  3 18:25:03 2024 GMT
            Not After : Apr  2 18:30:03 2025 GMT
        Subject: CN=48BF8FEEB32B02A19F640F401EBB52367785520D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7b:0c:d2:cf:9c:22:3c:af:02:9b:da:fa:4e:
                    f3:08:4b:33:10:42:01:a8:3b:13:9f:5b:46:67:cd:
                    e9:56:4c:c6:66:ab:11:a4:40:2d:f9:1a:a3:92:d5:
                    da:91:7e:96:26:6a:ae:b7:3b:98:61:2c:f1:7d:9b:
                    d3:a3:93:a4:43:59:0b:38:61:2b:db:09:a2:03:f3:
                    81:74:f7:e0:1b:f0:ad:4c:f1:f2:91:cc:dc:2d:f4:
                    cf:ab:b1:6c:b7:11:01:2d:c0:52:40:30:73:46:0d:
                    d6:83:2e:44:51:4a:cb:9b:2b:29:34:8b:93:1d:b7:
                    dd:f0:9d:bc:ab:c9:cf:28:3a:24:f6:97:15:e8:c6:
                    28:19:b9:e3:be:13:37:1c:99:c9:44:5b:9c:6b:93:
                    57:e0:3b:ce:89:3f:c5:13:dc:d8:3e:51:60:40:05:
                    8a:b3:6e:f4:e7:4f:f3:62:04:b1:44:46:d0:e9:28:
                    f0:1b:7c:96:ef:35:ce:21:28:77:5c:a1:0c:73:3d:
                    01:95:16:a5:f6:79:cb:a5:b8:d2:bb:63:c0:2f:a9:
                    f4:c8:f8:99:bd:53:8d:59:95:72:e3:83:3d:48:7b:
                    2f:32:c7:90:29:ad:50:16:f3:9a:74:cb:da:4f:a5:
                    0d:94:fb:59:97:45:ba:9f:31:c0:99:37:6f:c9:4a:
                    7d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:BF:8F:EE:B3:2B:02:A1:9F:64:0F:40:1E:BB:52:36:77:85:52:0D
            X509v3 Authority Key Identifier:
                keyid:FB:44:51:EF:F9:D1:A7:4F:2B:A6:C3:7C:E6:09:E7:16:2C:C4:76:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4451EFF9D1A74F2BA6C37CE609E7162CC476E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKob3ZXom2UV2QCTJFCUavLPNGJqHnhBeoEoA95j5hR5/1/3137372e38372e38382e302f32322d3234203d3e203238333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:50:3b:07:0b:96:d8:14:34:97:41:f6:4d:70:fe:0d:3f:09:
         f1:ea:0e:31:15:d1:93:9a:1e:dc:6b:33:7a:e5:79:cb:18:3b:
         76:fc:48:8c:d9:b3:fe:7c:dd:7c:20:10:64:5d:c4:16:b4:7d:
         72:b4:ab:ed:90:c5:21:f7:1a:45:9b:a5:d1:d4:8c:0f:a2:ed:
         25:4c:d2:21:d0:8d:84:a6:cc:0b:12:da:ff:08:13:85:3a:e1:
         97:64:ea:15:72:7c:b7:19:bc:6e:d2:89:b1:ee:dc:4d:2e:33:
         e9:b2:a1:e9:23:9d:01:c3:2c:34:47:66:bd:74:73:57:3c:1e:
         bb:4c:71:65:35:2e:52:d7:87:77:07:79:d1:57:78:e9:b4:97:
         65:9b:f6:f0:a3:74:4c:c8:14:35:77:c3:01:20:83:cb:af:6b:
         d0:7a:11:6b:0b:8e:42:cb:97:10:e8:ee:c7:ee:3a:f2:ac:e6:
         ff:89:0f:29:2a:4d:5a:e9:93:c6:3f:d5:d6:37:ba:8b:1a:b4:
         63:98:12:28:66:20:f3:ec:26:fe:fe:33:2c:6a:ad:ce:27:24:
         37:b7:0d:04:e7:4c:1e:47:ce:47:99:91:fa:f7:bb:57:be:f3:
         ad:56:7a:a2:2d:0c:bb:38:22:99:92:1f:25:f0:81:dc:31:b8:
         d2:b7:69:47
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUVHNGh9f2hVVzmoxR4GxfAlEOQoowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI0NDUxRUZGOUQxQTc0RjJCQTZDMzdDRTYwOUU3MTYy
Q0M0NzZFMTAeFw0yNDA0MDMxODI1MDNaFw0yNTA0MDIxODMwMDNaMDMxMTAvBgNV
BAMTKDQ4QkY4RkVFQjMyQjAyQTE5RjY0MEY0MDFFQkI1MjM2Nzc4NTUyMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKewzSz5wiPK8Cm9r6TvMISzMQ
QgGoOxOfW0ZnzelWTMZmqxGkQC35GqOS1dqRfpYmaq63O5hhLPF9m9Ojk6RDWQs4
YSvbCaID84F09+Ab8K1M8fKRzNwt9M+rsWy3EQEtwFJAMHNGDdaDLkRRSsubKyk0
i5Mdt93wnbyryc8oOiT2lxXoxigZueO+EzccmclEW5xrk1fgO86JP8UT3Ng+UWBA
BYqzbvTnT/NiBLFERtDpKPAbfJbvNc4hKHdcoQxzPQGVFqX2eculuNK7Y8AvqfTI
+Jm9U41ZlXLjgz1Iey8yx5AprVAW85p0y9pPpQ2U+1mXRbqfMcCZN2/JSn3hAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUSL+P7rMrAqGfZA9AHrtSNneFUg0wHwYDVR0j
BBgwFoAU+0RR7/nRp08rpsN85gnnFizEduEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUtvYjNaWG9tMlVWMlFDVEpGQ1VhdkxQTkdKcUhuaEJlb0VvQTk1ajVo
UjUvMS9GQjQ0NTFFRkY5RDFBNzRGMkJBNkMzN0NFNjA5RTcxNjJDQzQ3NkUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCNDQ1MUVGRjlEMUE3NEYy
QkE2QzM3Q0U2MDlFNzE2MkNDNDc2RTEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FLb2IzWlhvbTJVVjJRQ1RKRkNVYXZMUE5HSnFIbmhCZW9Fb0E5NWo1aFI1LzEv
MzEzNzM3MmUzODM3MmUzODM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzODMz
MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArFXWDANBgkqhkiG9w0BAQsFAAOCAQEAIVA7BwuW2BQ0
l0H2TXD+DT8J8eoOMRXRk5oe3GszeuV5yxg7dvxIjNmz/nzdfCAQZF3EFrR9crSr
7ZDFIfcaRZul0dSMD6LtJUzSIdCNhKbMCxLa/wgThTrhl2TqFXJ8txm8btKJse7c
TS4z6bKh6SOdAcMsNEdmvXRzVzweu0xxZTUuUteHdwd50Vd46bSXZZv28KN0TMgU
NXfDASCDy69r0HoRawuOQsuXEOjux+468qzm/4kPKSpNWumTxj/V1je6ixq0Y5gS
KGYg8+wm/v4zLGqtzickN7cNBOdMHkfOR5mR+ve7V77zrVZ6oi0MuzgimZIfJfCB
3DG40rdpRw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:12 2024 by rpki-client on console-ams.rpki-client.org