Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3134302e302f32322d3232203d3e203533323039.roa
File:                     3137372e31312e3134302e302f32322d3232203d3e203533323039.roa (raw, json)
Hash identifier:          ll1BqlrsTaPM2R9ZcblhNXQEXH9op4XEYJL8IdzUiPg=
Subject key identifier:   63:67:C1:3E:0D:1A:69:60:74:69:3E:8A:53:F4:09:D3:F9:EB:AC:8B
Certificate issuer:       /CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
Certificate serial:       317E8FB559A86A495D0B32F6B7BC66DD97C9A100
Authority key identifier: B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3134302e302f32322d3232203d3e203533323039.roa
Signing time:             Fri 01 Nov 2024 13:40:17 +0000
ROA not before:           Fri 01 Nov 2024 13:35:17 +0000
ROA not after:            Fri 31 Oct 2025 13:40:17 +0000
asID:                     53209
IP address blocks:        177.11.140.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/B2D2010B208ADA303E84ADA92145BD21A0BB1822.crl
                          rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/B2D2010B208ADA303E84ADA92145BD21A0BB1822.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:7e:8f:b5:59:a8:6a:49:5d:0b:32:f6:b7:bc:66:dd:97:c9:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
        Validity
            Not Before: Nov  1 13:35:17 2024 GMT
            Not After : Oct 31 13:40:17 2025 GMT
        Subject: CN=6367C13E0D1A696074693E8A53F409D3F9EBAC8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fd:12:50:d1:38:57:eb:a1:39:54:83:60:61:
                    7f:7a:6f:dc:9c:94:6f:45:14:64:62:1f:3c:15:a7:
                    7a:6a:74:3f:6f:45:c7:27:f7:b7:9b:0e:65:a6:a6:
                    b8:95:f3:ee:dd:62:38:1b:89:e6:2b:fa:c8:7b:1c:
                    96:ce:39:7d:38:7f:b2:6f:e3:9e:4c:2c:d3:70:39:
                    4d:60:09:e5:19:7d:26:18:2e:87:cc:b7:1a:15:7b:
                    32:1c:08:6e:47:d2:6e:ef:8c:ca:5d:a5:8e:13:a8:
                    17:71:98:2c:50:45:d1:ad:c9:da:22:f2:e2:42:2c:
                    1a:68:d0:a6:d2:29:0d:1d:a6:c1:ec:87:e6:93:19:
                    9d:51:8a:17:d9:82:a6:21:05:76:a3:a3:5b:c9:19:
                    e6:cd:93:ab:48:45:dd:b9:f4:99:8c:e4:60:45:ea:
                    44:28:81:bc:8c:47:a2:12:cd:10:dc:2c:35:81:11:
                    af:5f:88:21:df:6c:13:de:d6:15:9b:7b:50:fc:5e:
                    6e:73:b0:00:ae:fe:19:43:43:5c:8b:e5:f0:ab:46:
                    d8:c8:8f:ff:36:ff:d3:59:ac:66:78:42:12:a0:4a:
                    31:e2:4a:2d:56:c6:99:6b:cf:eb:24:75:20:3b:43:
                    e1:58:4b:b3:d4:5c:5c:ed:30:bc:66:d5:7e:3c:47:
                    9d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:67:C1:3E:0D:1A:69:60:74:69:3E:8A:53:F4:09:D3:F9:EB:AC:8B
            X509v3 Authority Key Identifier:
                keyid:B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/B2D2010B208ADA303E84ADA92145BD21A0BB1822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3134302e302f32322d3232203d3e203533323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:a1:81:1e:65:cf:d3:38:03:ef:9b:33:41:82:79:ea:1f:3f:
         fb:f9:1b:2f:22:f2:e4:88:e6:8b:66:a4:00:10:12:07:2d:40:
         81:cd:ed:38:47:3f:9c:a5:82:4f:b9:4f:49:1f:c2:cc:8d:23:
         ba:74:66:cb:ec:af:8d:55:2c:d6:0b:83:3d:bc:f3:83:71:fa:
         71:6a:42:33:00:bf:5b:19:26:b8:2b:77:3d:2b:32:e5:de:62:
         f5:64:e4:c8:93:e1:83:7a:1b:43:9d:ee:05:37:52:d4:c6:7e:
         d0:f0:17:23:6c:51:dc:b8:07:c9:43:a5:b2:bc:79:16:75:5a:
         05:04:7b:3b:83:cf:90:0f:16:47:ad:33:df:8c:c5:a5:73:4e:
         cf:cd:8c:70:75:16:5c:7c:dd:4e:0c:66:cb:48:79:3a:ee:1c:
         79:16:23:ab:a2:f1:49:4c:9f:a3:9d:ff:0d:f4:30:26:99:7b:
         d9:38:bb:24:c8:52:c4:67:12:63:10:12:57:7a:5c:51:54:80:
         29:cd:83:e5:7a:67:94:fb:f0:cb:cc:89:e8:c5:5d:39:93:4c:
         05:70:18:e1:c9:a3:9e:c9:1c:c5:a0:62:48:09:05:5d:f0:a2:
         64:f7:62:c4:25:35:9c:a9:64:29:a1:af:64:78:b7:58:dc:19:
         bd:3d:ac:c6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMX6PtVmoakldCzL2t7xm3ZfJoQAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjJEMjAxMEIyMDhBREEzMDNFODRBREE5MjE0NUJEMjFB
MEJCMTgyMjAeFw0yNDExMDExMzM1MTdaFw0yNTEwMzExMzQwMTdaMDMxMTAvBgNV
BAMTKDYzNjdDMTNFMEQxQTY5NjA3NDY5M0U4QTUzRjQwOUQzRjlFQkFDOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5/RJQ0ThX66E5VINgYX96b9yc
lG9FFGRiHzwVp3pqdD9vRccn97ebDmWmpriV8+7dYjgbieYr+sh7HJbOOX04f7Jv
455MLNNwOU1gCeUZfSYYLofMtxoVezIcCG5H0m7vjMpdpY4TqBdxmCxQRdGtydoi
8uJCLBpo0KbSKQ0dpsHsh+aTGZ1RihfZgqYhBXajo1vJGebNk6tIRd259JmM5GBF
6kQogbyMR6ISzRDcLDWBEa9fiCHfbBPe1hWbe1D8Xm5zsACu/hlDQ1yL5fCrRtjI
j/82/9NZrGZ4QhKgSjHiSi1Wxplrz+skdSA7Q+FYS7PUXFztMLxm1X48R501AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUY2fBPg0aaWB0aT6KU/QJ0/nrrIswHwYDVR0j
BBgwFoAUstIBCyCK2jA+hK2pIUW9IaC7GCIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWtialZSWFZwWHZFWDExVXRSSG9CSlFqcDV0dWtCb05zbmg4enh1ZzZn
WUIvMC9CMkQyMDEwQjIwOEFEQTMwM0U4NEFEQTkyMTQ1QkQyMUEwQkIxODIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IyRDIwMTBCMjA4QURBMzAz
RTg0QURBOTIxNDVCRDIxQTBCQjE4MjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FrYmpWUlhWcFh2RVgxMVV0UkhvQkpRanA1dHVrQm9Oc25oOHp4dWc2Z1lCLzAv
MzEzNzM3MmUzMTMxMmUzMTM0MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTMz
MzIzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsQuMMA0GCSqGSIb3DQEBCwUAA4IBAQA3oYEeZc/T
OAPvmzNBgnnqHz/7+RsvIvLkiOaLZqQAEBIHLUCBze04Rz+cpYJPuU9JH8LMjSO6
dGbL7K+NVSzWC4M9vPODcfpxakIzAL9bGSa4K3c9KzLl3mL1ZOTIk+GDehtDne4F
N1LUxn7Q8BcjbFHcuAfJQ6WyvHkWdVoFBHs7g8+QDxZHrTPfjMWlc07PzYxwdRZc
fN1ODGbLSHk67hx5FiOrovFJTJ+jnf8N9DAmmXvZOLskyFLEZxJjEBJXelxRVIAp
zYPlemeU+/DLzInoxV05k0wFcBjhyaOeyRzFoGJICQVd8KJk92LEJTWcqWQpoa9k
eLdY3Bm9PazG
-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:37 2024 by rpki-client on console-fra.rpki-client.org