Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/3137372e39332e3134382e302f32322d3232203d3e203532383631.roa
File:                     3137372e39332e3134382e302f32322d3232203d3e203532383631.roa (raw, json)
Hash identifier:          KvlMQcqfs7OtUe7A/VpoxB7rp20bCrp7xkJRIcDgB4s=
Subject key identifier:   70:3C:99:BF:55:A2:34:27:44:18:45:15:0C:C9:F1:08:C6:99:C5:B7
Certificate issuer:       /CN=8F131A9124F4505661427DA97FDEE05C46117F4A
Certificate serial:       405747B1100F3D95F5FFD68F78C13EACCAC32AB7
Authority key identifier: 8F:13:1A:91:24:F4:50:56:61:42:7D:A9:7F:DE:E0:5C:46:11:7F:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F131A9124F4505661427DA97FDEE05C46117F4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/3137372e39332e3134382e302f32322d3232203d3e203532383631.roa
Signing time:             Thu 04 Apr 2024 08:07:13 +0000
ROA not before:           Thu 04 Apr 2024 08:02:13 +0000
ROA not after:            Thu 03 Apr 2025 08:07:13 +0000
asID:                     52861
IP address blocks:        177.93.148.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/8F131A9124F4505661427DA97FDEE05C46117F4A.crl
                          rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/8F131A9124F4505661427DA97FDEE05C46117F4A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F131A9124F4505661427DA97FDEE05C46117F4A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:57:47:b1:10:0f:3d:95:f5:ff:d6:8f:78:c1:3e:ac:ca:c3:2a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F131A9124F4505661427DA97FDEE05C46117F4A
        Validity
            Not Before: Apr  4 08:02:13 2024 GMT
            Not After : Apr  3 08:07:13 2025 GMT
        Subject: CN=703C99BF55A23427441845150CC9F108C699C5B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a0:c2:29:61:fd:5f:81:c0:6c:c5:49:04:7b:
                    c7:1d:a7:09:e7:98:29:92:1d:a9:8b:b6:c6:48:63:
                    5c:d2:15:4d:90:dc:eb:58:14:0c:52:c8:e4:da:df:
                    dd:4e:3c:a9:e2:1f:5d:a0:54:bf:e7:bc:c3:8d:56:
                    96:f6:a4:26:15:f7:0d:d8:06:58:a8:ad:ce:ef:2f:
                    b8:f1:62:95:29:ff:5a:2e:e4:52:71:a1:92:8d:85:
                    f0:aa:2a:f0:0e:62:38:44:b2:64:24:fa:cd:d0:8c:
                    95:c3:cc:57:9f:8f:63:78:c3:9d:ae:63:99:7c:fb:
                    16:92:5c:38:83:1a:c4:27:c9:3e:b6:93:2c:77:b2:
                    be:6b:4c:bc:ba:8f:48:03:25:2b:c0:ce:dc:d4:33:
                    88:3d:ae:f7:8f:4e:91:a2:26:01:4e:dc:f8:05:cc:
                    a8:26:a1:a2:98:24:88:f4:9b:2b:1a:3d:5d:37:ae:
                    e7:6c:b0:8e:a6:8b:91:49:3b:1b:85:8f:89:a8:76:
                    94:95:0a:8b:02:a6:f8:18:19:f1:f6:90:b4:8b:8a:
                    4a:e3:78:86:8b:05:64:24:8d:a3:9f:76:b3:8d:a9:
                    aa:7f:b6:21:6e:25:02:1e:c6:ec:dc:cc:de:e5:67:
                    ba:9c:dc:d2:68:b2:8a:f5:10:cd:af:27:77:f1:50:
                    48:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:3C:99:BF:55:A2:34:27:44:18:45:15:0C:C9:F1:08:C6:99:C5:B7
            X509v3 Authority Key Identifier:
                keyid:8F:13:1A:91:24:F4:50:56:61:42:7D:A9:7F:DE:E0:5C:46:11:7F:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/8F131A9124F4505661427DA97FDEE05C46117F4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F131A9124F4505661427DA97FDEE05C46117F4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/1/3137372e39332e3134382e302f32322d3232203d3e203532383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:50:8b:dd:e4:1e:20:e8:36:80:ca:cc:e7:ea:50:1b:2f:f0:
         95:e7:2a:4a:95:90:52:a1:29:cc:41:85:45:aa:be:4b:d8:a6:
         c0:10:41:f0:44:c0:87:ea:8b:35:e7:07:9e:48:59:50:44:d9:
         cd:ce:c9:ac:74:f0:89:d4:d4:67:ab:09:0a:97:4d:2d:cf:8f:
         4d:b3:5c:92:32:2b:d8:13:c3:37:10:ee:9a:33:94:0d:d2:ee:
         2b:7d:d0:dc:e3:e4:9f:35:c9:83:1f:f6:d8:cd:cb:59:8f:ed:
         53:d6:b0:81:66:2a:14:6c:82:d8:dc:42:2c:e5:45:26:e0:ed:
         4b:b8:dc:3f:a0:16:85:03:34:3a:c7:54:77:cf:92:fd:d7:65:
         37:1b:cc:a4:5a:9b:62:f7:fd:a2:d8:72:36:f5:96:58:83:f9:
         e7:4a:6f:bf:7c:79:78:24:18:02:c2:f0:a7:c2:22:60:b4:5a:
         20:ee:10:cc:6f:dc:b5:45:4d:f4:a7:3f:63:1f:9f:69:10:88:
         af:bc:ea:bb:29:de:bc:8f:0c:a3:2f:7f:85:88:39:f9:11:83:
         79:45:bb:3c:33:de:30:95:4f:9a:e4:45:f8:cb:67:99:a1:d6:
         17:9a:0c:9e:cf:48:fc:fa:5f:1b:0b:02:e8:18:0d:45:17:e7:
         19:3c:92:41
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQFdHsRAPPZX1/9aPeME+rMrDKrcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEYxMzFBOTEyNEY0NTA1NjYxNDI3REE5N0ZERUUwNUM0
NjExN0Y0QTAeFw0yNDA0MDQwODAyMTNaFw0yNTA0MDMwODA3MTNaMDMxMTAvBgNV
BAMTKDcwM0M5OUJGNTVBMjM0Mjc0NDE4NDUxNTBDQzlGMTA4QzY5OUM1QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgoMIpYf1fgcBsxUkEe8cdpwnn
mCmSHamLtsZIY1zSFU2Q3OtYFAxSyOTa391OPKniH12gVL/nvMONVpb2pCYV9w3Y
Bliorc7vL7jxYpUp/1ou5FJxoZKNhfCqKvAOYjhEsmQk+s3QjJXDzFefj2N4w52u
Y5l8+xaSXDiDGsQnyT62kyx3sr5rTLy6j0gDJSvAztzUM4g9rvePTpGiJgFO3PgF
zKgmoaKYJIj0mysaPV03rudssI6mi5FJOxuFj4modpSVCosCpvgYGfH2kLSLikrj
eIaLBWQkjaOfdrONqap/tiFuJQIexuzczN7lZ7qc3NJosor1EM2vJ3fxUEjHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUcDyZv1WiNCdEGEUVDMnxCMaZxbcwHwYDVR0j
BBgwFoAUjxMakST0UFZhQn2pf97gXEYRf0owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjF1VVdpVWtuUkRTV1AzM2ZTSDVuSzdMZndNOU1QMWNnZXZLVjU5eGhB
S1gvMS84RjEzMUE5MTI0RjQ1MDU2NjE0MjdEQTk3RkRFRTA1QzQ2MTE3RjRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGMTMxQTkxMjRGNDUwNTY2
MTQyN0RBOTdGREVFMDVDNDYxMTdGNEEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0IxdVVXaVVrblJEU1dQMzNmU0g1bks3TGZ3TTlNUDFjZ2V2S1Y1OXhoQUtYLzEv
MzEzNzM3MmUzOTMzMmUzMTM0MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTMy
MzgzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsV2UMA0GCSqGSIb3DQEBCwUAA4IBAQCGUIvd5B4g
6DaAyszn6lAbL/CV5ypKlZBSoSnMQYVFqr5L2KbAEEHwRMCH6os15weeSFlQRNnN
zsmsdPCJ1NRnqwkKl00tz49Ns1ySMivYE8M3EO6aM5QN0u4rfdDc4+SfNcmDH/bY
zctZj+1T1rCBZioUbILY3EIs5UUm4O1LuNw/oBaFAzQ6x1R3z5L912U3G8ykWpti
9/2i2HI29ZZYg/nnSm+/fHl4JBgCwvCnwiJgtFog7hDMb9y1RU30pz9jH59pEIiv
vOq7Kd68jwyjL3+FiDn5EYN5Rbs8M94wlU+a5EX4y2eZodYXmgyez0j8+l8bCwLo
GA1FF+cZPJJB
-----END CERTIFICATE-----
Generated at Sat Jun 29 09:54:23 2024 by rpki-client on console-fra.rpki-client.org