Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/1/3137372e35322e3136342e302f32322d3332203d3e20323632343336.roa
File:                     3137372e35322e3136342e302f32322d3332203d3e20323632343336.roa (raw, json)
Hash identifier:          IiDWZVte8e9s6b7gpWpbfB9YfZjTHSyAU0dXz7mpr88=
Subject key identifier:   1F:2E:82:31:BF:D5:6D:21:D5:62:7B:FC:0F:1E:CF:16:E5:D6:AE:09
Certificate issuer:       /CN=344CBA05B0788F63198ADAAB801BD06F775E3484
Certificate serial:       2CDD6A726EB479B29B8678180809FF68B8A94360
Authority key identifier: 34:4C:BA:05:B0:78:8F:63:19:8A:DA:AB:80:1B:D0:6F:77:5E:34:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/344CBA05B0788F63198ADAAB801BD06F775E3484.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/1/3137372e35322e3136342e302f32322d3332203d3e20323632343336.roa
Signing time:             Thu 04 Apr 2024 17:03:06 +0000
ROA not before:           Thu 04 Apr 2024 16:58:06 +0000
ROA not after:            Thu 03 Apr 2025 17:03:06 +0000
asID:                     262436
IP address blocks:        177.52.164.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/1/344CBA05B0788F63198ADAAB801BD06F775E3484.crl
                          rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/1/344CBA05B0788F63198ADAAB801BD06F775E3484.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/344CBA05B0788F63198ADAAB801BD06F775E3484.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:57:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:dd:6a:72:6e:b4:79:b2:9b:86:78:18:08:09:ff:68:b8:a9:43:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=344CBA05B0788F63198ADAAB801BD06F775E3484
        Validity
            Not Before: Apr  4 16:58:06 2024 GMT
            Not After : Apr  3 17:03:06 2025 GMT
        Subject: CN=1F2E8231BFD56D21D5627BFC0F1ECF16E5D6AE09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b1:02:bc:13:d3:47:ac:7d:e2:c8:be:9c:fa:
                    df:67:57:24:96:38:de:3f:cb:a1:e8:b1:3a:01:5e:
                    1f:92:27:96:8f:33:7d:d5:e0:9b:c4:c1:73:09:24:
                    e2:3c:c4:7d:e4:ac:11:80:b4:25:58:47:62:27:12:
                    74:c4:db:14:0f:72:47:57:0f:75:a9:2c:44:81:8a:
                    73:1b:af:26:d0:88:9c:d4:03:f9:12:b3:28:e7:9a:
                    54:69:14:15:35:51:33:a9:ad:56:8f:30:ea:42:29:
                    39:3f:b8:e8:16:ba:93:f3:b2:6a:77:82:eb:06:86:
                    aa:6f:72:f8:10:1f:e7:03:a0:e5:c7:84:ff:50:e7:
                    79:44:b6:0c:0f:bb:ad:95:a4:6c:f6:31:8b:f3:80:
                    00:cf:7c:6c:fa:00:ea:11:5e:bc:da:1d:bf:8b:7d:
                    0b:17:36:fc:e9:10:6e:b9:2a:4a:df:74:47:87:1e:
                    5a:5a:be:9d:b7:cb:9e:b6:09:b1:dd:5e:7f:32:aa:
                    31:78:da:20:39:d8:1c:80:f2:19:b1:d8:b9:ab:61:
                    59:84:fd:bd:f9:72:35:8f:34:d7:ef:03:2d:04:1c:
                    06:d1:11:b4:b3:da:c2:c1:70:df:4c:5a:9e:35:ec:
                    0c:a6:73:9f:f2:70:fc:5d:5a:2c:fe:51:6a:2a:af:
                    07:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:2E:82:31:BF:D5:6D:21:D5:62:7B:FC:0F:1E:CF:16:E5:D6:AE:09
            X509v3 Authority Key Identifier:
                keyid:34:4C:BA:05:B0:78:8F:63:19:8A:DA:AB:80:1B:D0:6F:77:5E:34:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/1/344CBA05B0788F63198ADAAB801BD06F775E3484.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/344CBA05B0788F63198ADAAB801BD06F775E3484.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/1/3137372e35322e3136342e302f32322d3332203d3e20323632343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:3d:81:50:58:14:f0:7f:f7:fd:f6:0c:d8:ff:fb:cd:d8:12:
         bc:c0:b6:57:67:f4:70:a1:c5:d0:3d:02:cb:29:d2:69:fb:7d:
         4d:83:95:4f:2c:57:b6:92:73:de:aa:a7:f2:0f:1f:d9:75:97:
         d1:7f:65:0f:e2:eb:19:4c:a6:a9:3b:f7:f6:cf:7c:b9:25:9b:
         6d:b9:df:8c:68:df:74:24:e6:52:d0:16:22:d9:f8:75:77:21:
         5d:fb:ad:55:5d:90:ac:7d:48:78:2f:b8:eb:6f:61:6e:d8:44:
         1f:aa:24:e2:95:3e:57:4e:ad:0e:e5:af:cb:ab:3e:1f:e8:8b:
         4f:65:93:75:f1:df:0c:d3:15:1c:e8:c6:95:a2:ab:9a:47:74:
         fb:7f:a8:24:0b:8a:44:0d:f8:3e:c1:f0:4b:a8:db:56:5e:21:
         87:4e:7c:a7:7e:6c:c1:26:1a:16:e7:6a:ca:22:cc:a7:16:1e:
         e8:22:1c:42:9c:53:c5:93:c4:d1:98:0d:9a:29:0a:f5:4a:87:
         f7:21:92:55:04:15:78:c7:3c:c7:94:28:c5:39:41:55:c7:99:
         74:3f:97:41:d6:a9:d9:2b:17:5e:4b:43:29:91:59:15:7c:55:
         46:03:6c:cb:f7:b3:e7:67:70:c6:15:04:5a:08:87:1e:c6:a2:
         ad:49:a5:95
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULN1qcm60ebKbhngYCAn/aLipQ2AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQ0Q0JBMDVCMDc4OEY2MzE5OEFEQUFCODAxQkQwNkY3
NzVFMzQ4NDAeFw0yNDA0MDQxNjU4MDZaFw0yNTA0MDMxNzAzMDZaMDMxMTAvBgNV
BAMTKDFGMkU4MjMxQkZENTZEMjFENTYyN0JGQzBGMUVDRjE2RTVENkFFMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMsQK8E9NHrH3iyL6c+t9nVySW
ON4/y6HosToBXh+SJ5aPM33V4JvEwXMJJOI8xH3krBGAtCVYR2InEnTE2xQPckdX
D3WpLESBinMbrybQiJzUA/kSsyjnmlRpFBU1UTOprVaPMOpCKTk/uOgWupPzsmp3
gusGhqpvcvgQH+cDoOXHhP9Q53lEtgwPu62VpGz2MYvzgADPfGz6AOoRXrzaHb+L
fQsXNvzpEG65KkrfdEeHHlpavp23y562CbHdXn8yqjF42iA52ByA8hmx2LmrYVmE
/b35cjWPNNfvAy0EHAbREbSz2sLBcN9MWp417Aymc5/ycPxdWiz+UWoqrwexAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUHy6CMb/VbSHVYnv8Dx7PFuXWrgkwHwYDVR0j
BBgwFoAUNEy6BbB4j2MZitqrgBvQb3deNIQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXhtdUUyanoyQ0tHVktOV3o4bmY5M0ROWjhRZ0FOOHJURGdyRmRVVjhF
dWMvMS8zNDRDQkEwNUIwNzg4RjYzMTk4QURBQUI4MDFCRDA2Rjc3NUUzNDg0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM0NENCQTA1QjA3ODhGNjMx
OThBREFBQjgwMUJEMDZGNzc1RTM0ODQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F4bXVFMmp6MkNLR1ZLTld6OG5mOTNETlo4UWdBTjhyVERnckZkVVY4RXVjLzEv
MzEzNzM3MmUzNTMyMmUzMTM2MzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzIzNDMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxNKQwDQYJKoZIhvcNAQELBQADggEBAJs9gVBY
FPB/9/32DNj/+83YErzAtldn9HChxdA9Assp0mn7fU2DlU8sV7aSc96qp/IPH9l1
l9F/ZQ/i6xlMpqk79/bPfLklm22534xo33Qk5lLQFiLZ+HV3IV37rVVdkKx9SHgv
uOtvYW7YRB+qJOKVPldOrQ7lr8urPh/oi09lk3Xx3wzTFRzoxpWiq5pHdPt/qCQL
ikQN+D7B8Euo21ZeIYdOfKd+bMEmGhbnasoizKcWHugiHEKcU8WTxNGYDZopCvVK
h/chklUEFXjHPMeUKMU5QVXHmXQ/l0HWqdkrF15LQymRWRV8VUYDbMv3s+dncMYV
BFoIhx7Goq1JpZU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:22 2024 by rpki-client on console-ams.rpki-client.org