Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/3137372e33382e39362e302f32312d3234203d3e20323632343033.roa
File:                     3137372e33382e39362e302f32312d3234203d3e20323632343033.roa (raw, json)
Hash identifier:          nEiDxU/o15ePUaHRuT+i1bDqTXfns9JvX5aObhnPMz8=
Subject key identifier:   7D:92:A1:0F:72:33:35:FA:4D:90:0D:32:87:26:B1:A3:00:72:DD:CD
Certificate issuer:       /CN=BFAA18EA5036844FFCF9BBAE36148EEBC2C75F51
Certificate serial:       147C222E981AA3DC8AB2766788DE8118A2527AC6
Authority key identifier: BF:AA:18:EA:50:36:84:4F:FC:F9:BB:AE:36:14:8E:EB:C2:C7:5F:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFAA18EA5036844FFCF9BBAE36148EEBC2C75F51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/3137372e33382e39362e302f32312d3234203d3e20323632343033.roa
Signing time:             Mon 29 Jul 2024 16:55:12 +0000
ROA not before:           Mon 29 Jul 2024 16:50:12 +0000
ROA not after:            Mon 28 Jul 2025 16:55:12 +0000
asID:                     262403
IP address blocks:        177.38.96.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/BFAA18EA5036844FFCF9BBAE36148EEBC2C75F51.crl
                          rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/BFAA18EA5036844FFCF9BBAE36148EEBC2C75F51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFAA18EA5036844FFCF9BBAE36148EEBC2C75F51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 14:12:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:7c:22:2e:98:1a:a3:dc:8a:b2:76:67:88:de:81:18:a2:52:7a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFAA18EA5036844FFCF9BBAE36148EEBC2C75F51
        Validity
            Not Before: Jul 29 16:50:12 2024 GMT
            Not After : Jul 28 16:55:12 2025 GMT
        Subject: CN=7D92A10F723335FA4D900D328726B1A30072DDCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:44:e2:86:a7:c1:dd:b7:95:3c:f4:70:e8:5b:
                    8f:b4:af:cc:d9:1f:42:2e:fd:66:5f:8a:42:99:ec:
                    8d:cd:33:01:a0:7b:02:03:45:cb:46:0a:1b:23:fa:
                    c7:26:b5:be:84:06:7d:eb:08:a0:be:1f:08:7b:e6:
                    2a:44:0b:7a:07:de:a4:2b:71:57:ae:8b:cc:22:f8:
                    86:a3:8a:22:61:fc:14:64:51:32:a3:f1:8a:e8:4d:
                    65:b4:e1:91:18:74:10:fb:f7:ba:45:2b:e2:31:d0:
                    2c:5c:e5:52:07:22:8e:b7:5c:59:27:bf:bc:81:db:
                    23:aa:e8:b6:31:99:29:df:e0:63:a2:c3:2d:3f:35:
                    56:22:9c:78:86:89:7e:a4:3e:a5:d8:85:09:66:07:
                    63:4d:3c:87:5f:b1:64:7d:3d:94:a1:d4:d0:58:c9:
                    fe:5f:99:6f:43:ea:56:9b:3b:b1:0b:56:cd:69:c6:
                    95:1f:fa:84:54:8e:d0:6f:aa:ad:5e:24:a8:95:1f:
                    31:79:49:68:ce:fd:3a:f0:ed:72:0b:b3:3a:2b:d6:
                    cb:32:24:72:0c:37:72:8d:5a:c7:50:cd:57:ad:89:
                    e0:a5:a9:03:f9:5b:23:a1:b8:48:c2:5d:16:a1:57:
                    b6:93:3a:71:eb:fb:93:18:aa:f4:1f:d7:b7:80:8b:
                    6c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:92:A1:0F:72:33:35:FA:4D:90:0D:32:87:26:B1:A3:00:72:DD:CD
            X509v3 Authority Key Identifier:
                keyid:BF:AA:18:EA:50:36:84:4F:FC:F9:BB:AE:36:14:8E:EB:C2:C7:5F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/BFAA18EA5036844FFCF9BBAE36148EEBC2C75F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFAA18EA5036844FFCF9BBAE36148EEBC2C75F51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/3137372e33382e39362e302f32312d3234203d3e20323632343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5a:5a:e8:ad:91:08:e9:fb:35:35:5b:bf:83:02:a7:91:97:49:
         33:8b:e7:4b:4d:62:dc:31:6e:d2:88:86:f5:71:77:4d:47:75:
         12:1c:71:0c:dc:22:a9:6a:1a:81:a3:df:eb:e8:98:4d:ca:38:
         00:39:03:dc:2d:46:e7:5e:e2:1e:3a:89:70:bd:59:3a:ac:9b:
         fe:38:ed:3b:ef:ff:e1:6d:7b:ca:d0:34:16:1a:6a:0f:59:43:
         09:6c:62:64:e1:55:fd:1f:72:f8:39:64:95:4c:d3:c2:11:a3:
         b4:5d:a7:59:c3:3e:ce:4f:cb:46:56:7e:20:05:3e:d0:87:6c:
         58:f7:d8:bf:10:f0:49:20:ed:ab:fb:4b:da:8e:8f:e6:7b:9c:
         50:cf:6a:37:c0:b8:2c:43:04:ca:90:40:7c:42:37:71:8d:11:
         31:9e:fa:a2:a6:ee:e5:f0:22:df:4f:d6:54:25:94:9f:bd:1e:
         e6:e3:8c:ac:4c:40:00:0f:67:0f:24:7a:75:9c:ed:69:a9:a8:
         43:d0:3a:ab:78:04:74:b9:c4:bd:f6:70:ae:33:7a:f2:5e:83:
         54:71:76:a5:ea:45:e8:27:e2:c3:86:e7:94:ba:22:f3:41:c3:
         8b:fa:1f:39:f3:3c:ae:b4:f9:20:2b:96:d2:d6:7f:df:43:25:
         6e:b3:92:be
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFHwiLpgao9yKsnZniN6BGKJSesYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkZBQTE4RUE1MDM2ODQ0RkZDRjlCQkFFMzYxNDhFRUJD
MkM3NUY1MTAeFw0yNDA3MjkxNjUwMTJaFw0yNTA3MjgxNjU1MTJaMDMxMTAvBgNV
BAMTKDdEOTJBMTBGNzIzMzM1RkE0RDkwMEQzMjg3MjZCMUEzMDA3MkREQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoROKGp8Hdt5U89HDoW4+0r8zZ
H0Iu/WZfikKZ7I3NMwGgewIDRctGChsj+scmtb6EBn3rCKC+Hwh75ipEC3oH3qQr
cVeui8wi+IajiiJh/BRkUTKj8YroTWW04ZEYdBD797pFK+Ix0Cxc5VIHIo63XFkn
v7yB2yOq6LYxmSnf4GOiwy0/NVYinHiGiX6kPqXYhQlmB2NNPIdfsWR9PZSh1NBY
yf5fmW9D6labO7ELVs1pxpUf+oRUjtBvqq1eJKiVHzF5SWjO/Trw7XILszor1ssy
JHIMN3KNWsdQzVetieClqQP5WyOhuEjCXRahV7aTOnHr+5MYqvQf17eAi2ydAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUfZKhD3IzNfpNkA0yhyaxowBy3c0wHwYDVR0j
BBgwFoAUv6oY6lA2hE/8+buuNhSO68LHX1EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWZpa0s2S0V6UzdWbldQQUpuVXBqb0RycmJXZjRrOWdKTlI5VDFUbndu
SnkvMC9CRkFBMThFQTUwMzY4NDRGRkNGOUJCQUUzNjE0OEVFQkMyQzc1RjUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JGQUExOEVBNTAzNjg0NEZG
Q0Y5QkJBRTM2MTQ4RUVCQzJDNzVGNTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FmaWtLNktFelM3Vm5XUEFKblVwam9EcnJiV2Y0azlnSk5SOVQxVG53bkp5LzAv
MzEzNzM3MmUzMzM4MmUzOTM2MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNjMy
MzQzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsSZgMA0GCSqGSIb3DQEBCwUAA4IBAQBaWuitkQjp
+zU1W7+DAqeRl0kzi+dLTWLcMW7SiIb1cXdNR3USHHEM3CKpahqBo9/r6JhNyjgA
OQPcLUbnXuIeOolwvVk6rJv+OO077//hbXvK0DQWGmoPWUMJbGJk4VX9H3L4OWSV
TNPCEaO0XadZwz7OT8tGVn4gBT7Qh2xY99i/EPBJIO2r+0vajo/me5xQz2o3wLgs
QwTKkEB8QjdxjRExnvqipu7l8CLfT9ZUJZSfvR7m44ysTEAAD2cPJHp1nO1pqahD
0DqreAR0ucS99nCuM3ryXoNUcXal6kXoJ+LDhueUuiLzQcOL+h858zyutPkgK5bS
1n/fQyVus5K+
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:48 2024 by rpki-client on console-ams.rpki-client.org