Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3134322e302f32332d3233203d3e203533323039.roa
File:                     3137372e31312e3134322e302f32332d3233203d3e203533323039.roa (raw, json)
Hash identifier:          9CIGkB70B5X7rmbDHiewUEfAb5a7Iz1DUszv7V+xpbA=
Subject key identifier:   39:C5:50:BE:2D:51:9B:90:8A:44:92:2B:8C:3C:DA:B2:D7:A6:2D:85
Certificate issuer:       /CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
Certificate serial:       5762264F7C2E19896FAE61BB97F69CB07DA55A41
Authority key identifier: B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3134322e302f32332d3233203d3e203533323039.roa
Signing time:             Fri 01 Nov 2024 13:40:57 +0000
ROA not before:           Fri 01 Nov 2024 13:35:57 +0000
ROA not after:            Fri 31 Oct 2025 13:40:57 +0000
asID:                     53209
IP address blocks:        177.11.142.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/B2D2010B208ADA303E84ADA92145BD21A0BB1822.crl
                          rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/B2D2010B208ADA303E84ADA92145BD21A0BB1822.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:62:26:4f:7c:2e:19:89:6f:ae:61:bb:97:f6:9c:b0:7d:a5:5a:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
        Validity
            Not Before: Nov  1 13:35:57 2024 GMT
            Not After : Oct 31 13:40:57 2025 GMT
        Subject: CN=39C550BE2D519B908A44922B8C3CDAB2D7A62D85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c3:22:4c:e8:dc:af:0b:03:83:43:d6:8f:e8:
                    e7:97:cb:f2:4e:7e:e0:58:f5:d9:68:01:d7:91:ba:
                    a3:01:73:2e:bb:a0:55:8b:ee:5d:51:d5:f5:a2:32:
                    21:3e:78:49:3b:a2:26:48:f8:63:0f:86:d0:21:54:
                    e8:50:f1:66:7f:1b:59:06:b9:d8:f2:de:30:ed:a9:
                    48:bd:cc:52:65:26:97:be:db:b8:c4:67:35:b7:0c:
                    b0:56:a7:e2:02:b0:1b:0e:44:b6:11:3a:22:03:0d:
                    be:67:ba:2b:61:9d:5f:f0:62:13:e6:6d:c8:2c:a9:
                    9a:93:8e:9d:59:2f:64:0b:7d:e4:be:1e:5e:a7:f5:
                    fa:e3:1e:de:54:5d:76:57:21:6a:e7:5b:93:c7:21:
                    48:be:9d:e2:24:dd:15:41:7b:b5:c4:53:05:78:ec:
                    2f:95:64:41:3a:72:44:14:af:44:ea:36:27:4e:d6:
                    11:9d:c0:16:a0:0b:9e:0f:e4:3b:fd:e7:19:6f:f9:
                    bf:41:00:15:c1:ca:13:bc:f2:bd:d2:05:78:b7:4e:
                    4b:1f:58:94:9c:ba:6f:6f:68:0a:12:da:16:47:83:
                    c9:6e:ef:8d:7a:46:bb:7c:ed:fd:db:97:51:32:00:
                    3c:9b:88:cc:41:40:46:1a:2f:b9:e8:6a:5b:3f:4c:
                    91:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C5:50:BE:2D:51:9B:90:8A:44:92:2B:8C:3C:DA:B2:D7:A6:2D:85
            X509v3 Authority Key Identifier:
                keyid:B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/B2D2010B208ADA303E84ADA92145BD21A0BB1822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3137372e31312e3134322e302f32332d3233203d3e203533323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:75:08:25:64:f9:19:79:5a:75:eb:c6:7d:5f:e7:50:4e:ab:
         33:71:78:cc:d9:33:2e:5f:18:d3:08:82:3b:79:43:9b:66:3a:
         a9:bb:77:60:68:0b:97:85:43:f1:09:67:46:37:df:2b:7a:b8:
         53:30:55:8d:45:67:c3:8b:74:ef:15:aa:6e:c9:2a:fb:40:00:
         b0:01:ea:c7:37:aa:39:01:ff:ec:c7:49:53:ef:3b:8e:72:02:
         5d:e3:fc:99:d2:d0:fe:78:1a:a7:eb:32:31:7b:4f:c3:96:56:
         b0:4a:5c:a3:a8:c3:eb:fb:9e:6c:cb:3e:36:92:18:b0:a3:96:
         8c:24:27:6f:99:eb:c3:fb:3d:7b:86:b4:5a:70:1b:be:eb:7f:
         4c:6a:95:67:ee:c8:09:31:11:9e:32:8a:3f:73:20:0c:cd:5b:
         79:81:e5:cf:9e:ab:6c:77:64:90:d1:c8:69:a8:6a:50:a4:76:
         b9:95:3a:bf:da:2b:c7:1e:70:ce:96:4e:f3:52:d6:26:32:00:
         82:54:ab:7e:11:c7:ca:ef:fb:a2:cb:2f:0a:70:fa:2d:6f:02:
         23:39:7c:c1:01:32:73:b1:62:52:50:bb:f3:fc:11:c5:ac:c0:
         ef:09:db:44:db:72:de:88:e7:dc:13:af:65:6b:21:85:3c:8d:
         28:03:7e:0e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUV2ImT3wuGYlvrmG7l/acsH2lWkEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjJEMjAxMEIyMDhBREEzMDNFODRBREE5MjE0NUJEMjFB
MEJCMTgyMjAeFw0yNDExMDExMzM1NTdaFw0yNTEwMzExMzQwNTdaMDMxMTAvBgNV
BAMTKDM5QzU1MEJFMkQ1MTlCOTA4QTQ0OTIyQjhDM0NEQUIyRDdBNjJEODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6wyJM6NyvCwODQ9aP6OeXy/JO
fuBY9dloAdeRuqMBcy67oFWL7l1R1fWiMiE+eEk7oiZI+GMPhtAhVOhQ8WZ/G1kG
udjy3jDtqUi9zFJlJpe+27jEZzW3DLBWp+ICsBsORLYROiIDDb5nuithnV/wYhPm
bcgsqZqTjp1ZL2QLfeS+Hl6n9frjHt5UXXZXIWrnW5PHIUi+neIk3RVBe7XEUwV4
7C+VZEE6ckQUr0TqNidO1hGdwBagC54P5Dv95xlv+b9BABXByhO88r3SBXi3Tksf
WJScum9vaAoS2hZHg8lu7416Rrt87f3bl1EyADybiMxBQEYaL7noals/TJG5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUOcVQvi1Rm5CKRJIrjDzastemLYUwHwYDVR0j
BBgwFoAUstIBCyCK2jA+hK2pIUW9IaC7GCIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWtialZSWFZwWHZFWDExVXRSSG9CSlFqcDV0dWtCb05zbmg4enh1ZzZn
WUIvMC9CMkQyMDEwQjIwOEFEQTMwM0U4NEFEQTkyMTQ1QkQyMUEwQkIxODIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IyRDIwMTBCMjA4QURBMzAz
RTg0QURBOTIxNDVCRDIxQTBCQjE4MjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FrYmpWUlhWcFh2RVgxMVV0UkhvQkpRanA1dHVrQm9Oc25oOHp4dWc2Z1lCLzAv
MzEzNzM3MmUzMTMxMmUzMTM0MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMz
MzIzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsQuOMA0GCSqGSIb3DQEBCwUAA4IBAQCudQglZPkZ
eVp168Z9X+dQTqszcXjM2TMuXxjTCII7eUObZjqpu3dgaAuXhUPxCWdGN98rerhT
MFWNRWfDi3TvFapuySr7QACwAerHN6o5Af/sx0lT7zuOcgJd4/yZ0tD+eBqn6zIx
e0/DllawSlyjqMPr+55syz42khiwo5aMJCdvmevD+z17hrRacBu+639MapVn7sgJ
MRGeMoo/cyAMzVt5geXPnqtsd2SQ0chpqGpQpHa5lTq/2ivHHnDOlk7zUtYmMgCC
VKt+EcfK7/uiyy8KcPotbwIjOXzBATJzsWJSULvz/BHFrMDvCdtE23LeiOfcE69l
ayGFPI0oA34O
-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:56 2024 by rpki-client on console-ams.rpki-client.org