Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3137372e3138352e3136302e302f31392d3234203d3e203533303038.roa
File:                     3137372e3138352e3136302e302f31392d3234203d3e203533303038.roa (raw, json)
Hash identifier:          glNAHhDRW1Z8b7ZFZxEA6O5WtRjRQIZ8PWf2nemaKdc=
Subject key identifier:   31:01:28:F5:D1:CE:10:E0:9E:2A:9C:B8:0E:67:0D:52:1B:0B:C3:AF
Certificate issuer:       /CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
Certificate serial:       016DC4700662BB0CB42AAADD137C3709DAC18155
Authority key identifier: 0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3137372e3138352e3136302e302f31392d3234203d3e203533303038.roa
Signing time:             Mon 08 Jul 2024 19:43:06 +0000
ROA not before:           Mon 08 Jul 2024 19:38:06 +0000
ROA not after:            Mon 07 Jul 2025 19:43:06 +0000
asID:                     53008
IP address blocks:        177.185.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 17 Nov 2024 03:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:6d:c4:70:06:62:bb:0c:b4:2a:aa:dd:13:7c:37:09:da:c1:81:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
        Validity
            Not Before: Jul  8 19:38:06 2024 GMT
            Not After : Jul  7 19:43:06 2025 GMT
        Subject: CN=310128F5D1CE10E09E2A9CB80E670D521B0BC3AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f7:57:b8:1d:a0:ad:8d:e0:0b:d9:f6:ce:bc:
                    1a:51:39:c3:41:f9:4c:36:6c:05:e1:6b:fd:ce:52:
                    64:e5:d8:86:cd:45:d4:93:0e:ed:80:c3:e6:21:8f:
                    a4:88:0d:b7:f0:65:aa:83:a4:ae:9e:27:ae:d5:5b:
                    bd:2d:eb:f2:41:44:41:0e:85:93:f6:58:a0:93:b9:
                    f9:ac:04:29:09:07:2a:62:e2:72:fd:cb:db:8b:51:
                    a7:61:01:b3:a5:72:1a:37:b8:af:eb:4a:8d:b8:a7:
                    70:b3:1f:64:ec:1b:57:5f:5a:7a:1a:9f:98:47:f5:
                    39:af:6b:94:b1:6f:18:11:c0:7d:df:e1:16:32:c7:
                    ee:06:38:f0:32:b7:a4:dc:65:ff:c2:36:50:40:d7:
                    ca:6b:1c:7d:1a:86:1f:b4:38:13:aa:57:04:4d:d7:
                    13:b7:6a:9d:42:a5:80:3f:1d:b0:5c:07:ac:9b:3a:
                    fd:12:77:a2:0d:dd:68:18:e4:b6:5f:0a:1b:d2:06:
                    bb:17:73:ec:b8:2b:c5:23:de:af:ba:94:36:fb:27:
                    be:a2:c5:0f:a7:c6:87:b4:78:ff:e5:d7:22:f9:e0:
                    1c:ff:01:b5:45:4f:52:88:49:45:8c:21:16:68:09:
                    ab:ad:27:34:52:1c:85:3e:c2:45:28:3b:3e:aa:9d:
                    cb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:01:28:F5:D1:CE:10:E0:9E:2A:9C:B8:0E:67:0D:52:1B:0B:C3:AF
            X509v3 Authority Key Identifier:
                keyid:0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3137372e3138352e3136302e302f31392d3234203d3e203533303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         91:9b:02:f4:79:ae:1b:e3:04:ab:69:10:0f:03:3a:fc:1a:e1:
         be:57:d4:bd:8b:b7:06:ac:61:c0:e4:b8:df:33:2c:01:d4:ca:
         92:8a:89:17:4e:56:02:5c:89:00:44:f2:98:b2:5e:96:00:4c:
         51:7b:2b:a7:f8:66:71:a1:8b:3d:fc:66:e5:81:fc:b4:24:f9:
         68:3f:8d:bb:7a:9b:8a:7e:f2:bc:42:11:1a:47:8a:ba:0c:06:
         76:69:5c:f4:75:c7:0a:12:29:6a:83:54:3e:a4:c7:c4:93:ea:
         50:09:5f:15:28:72:50:76:85:6c:bc:a5:65:f8:c9:28:ff:73:
         3c:7c:a3:0d:19:07:42:18:99:b1:f0:a5:0a:f0:cb:f9:d7:39:
         65:38:3f:de:65:53:7d:3e:84:87:81:35:77:4c:58:43:a8:17:
         84:64:f5:1c:ac:87:07:19:03:5c:29:22:a9:e4:b8:d0:f0:11:
         2c:e2:46:11:dd:5c:a2:a9:6c:81:1f:68:a3:0f:b6:57:49:c9:
         27:83:6b:1a:6d:6a:f9:df:32:0f:e9:06:b9:12:f0:b7:71:09:
         9f:58:db:94:42:49:6f:af:ad:43:ed:6f:43:94:f7:1d:8f:0c:
         f9:f1:d7:1a:f4:aa:06:37:c5:21:52:ab:2d:5f:bd:3c:d9:d0:
         06:07:85:f8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAW3EcAZiuwy0KqrdE3w3CdrBgVUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMERFQjkyRjMzMDdCMEU5NENDNzBEOUIyMUI1MEY2RkUy
MTM1Q0Q5ODAeFw0yNDA3MDgxOTM4MDZaFw0yNTA3MDcxOTQzMDZaMDMxMTAvBgNV
BAMTKDMxMDEyOEY1RDFDRTEwRTA5RTJBOUNCODBFNjcwRDUyMUIwQkMzQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE91e4HaCtjeAL2fbOvBpROcNB
+Uw2bAXha/3OUmTl2IbNRdSTDu2Aw+Yhj6SIDbfwZaqDpK6eJ67VW70t6/JBREEO
hZP2WKCTufmsBCkJBypi4nL9y9uLUadhAbOlcho3uK/rSo24p3CzH2TsG1dfWnoa
n5hH9Tmva5SxbxgRwH3f4RYyx+4GOPAyt6TcZf/CNlBA18prHH0ahh+0OBOqVwRN
1xO3ap1CpYA/HbBcB6ybOv0Sd6IN3WgY5LZfChvSBrsXc+y4K8Uj3q+6lDb7J76i
xQ+nxoe0eP/l1yL54Bz/AbVFT1KISUWMIRZoCautJzRSHIU+wkUoOz6qncu9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMQEo9dHOEOCeKpy4DmcNUhsLw68wHwYDVR0j
BBgwFoAUDeuS8zB7DpTMcNmyG1D2/iE1zZgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWk1dVl4UzY3MTdONTdWZUZ4aFk3V0hSd1M1TmhmTDZMTDh0eTRNVFpw
NUovMi8wREVCOTJGMzMwN0IwRTk0Q0M3MEQ5QjIxQjUwRjZGRTIxMzVDRDk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBERUI5MkYzMzA3QjBFOTRD
QzcwRDlCMjFCNTBGNkZFMjEzNUNEOTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FpNXVZeFM2NzE3TjU3VmVGeGhZN1dIUndTNU5oZkw2TEw4dHk0TVRacDVKLzIv
MzEzNzM3MmUzMTM4MzUyZTMxMzYzMDJlMzAyZjMxMzkyZDMyMzQyMDNkM2UyMDM1
MzMzMDMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAWxuaAwDQYJKoZIhvcNAQELBQADggEBAJGbAvR5
rhvjBKtpEA8DOvwa4b5X1L2LtwasYcDkuN8zLAHUypKKiRdOVgJciQBE8piyXpYA
TFF7K6f4ZnGhiz38ZuWB/LQk+Wg/jbt6m4p+8rxCERpHiroMBnZpXPR1xwoSKWqD
VD6kx8ST6lAJXxUoclB2hWy8pWX4ySj/czx8ow0ZB0IYmbHwpQrwy/nXOWU4P95l
U30+hIeBNXdMWEOoF4Rk9RyshwcZA1wpIqnkuNDwESziRhHdXKKpbIEfaKMPtldJ
ySeDaxptavnfMg/pBrkS8LdxCZ9Y25RCSW+vrUPtb0OU9x2PDPnx1xr0qgY3xSFS
qy1fvTzZ0AYHhfg=
-----END CERTIFICATE-----
Generated at Sat Nov 16 04:16:30 2024 by rpki-client on console-fra.rpki-client.org