Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e35382e302f32342d3234203d3e20323633353030.roa
File:                     3137372e3232332e35382e302f32342d3234203d3e20323633353030.roa (raw, json)
Hash identifier:          tUEkLZfPMlkMCbWJI8/VgTQ4E/YmwWIXOaYEnoVzA4U=
Subject key identifier:   E6:80:BF:B5:45:5A:F1:AB:C2:EE:CA:4F:D7:7D:F3:BD:49:BC:4B:4B
Certificate issuer:       /CN=688CFC6ED295D85CCEC2EEE0687D7F1077721DC1
Certificate serial:       4E1A75F2E3EB665C2BF36BC5FEC03783DD56CC8B
Authority key identifier: 68:8C:FC:6E:D2:95:D8:5C:CE:C2:EE:E0:68:7D:7F:10:77:72:1D:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e35382e302f32342d3234203d3e20323633353030.roa
Signing time:             Mon 15 Apr 2024 20:34:13 +0000
ROA not before:           Mon 15 Apr 2024 20:29:13 +0000
ROA not after:            Mon 14 Apr 2025 20:34:13 +0000
asID:                     263500
IP address blocks:        177.223.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.crl
                          rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:46:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:1a:75:f2:e3:eb:66:5c:2b:f3:6b:c5:fe:c0:37:83:dd:56:cc:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=688CFC6ED295D85CCEC2EEE0687D7F1077721DC1
        Validity
            Not Before: Apr 15 20:29:13 2024 GMT
            Not After : Apr 14 20:34:13 2025 GMT
        Subject: CN=E680BFB5455AF1ABC2EECA4FD77DF3BD49BC4B4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:14:60:0f:73:61:a1:d6:ab:57:9e:85:ef:30:
                    20:2b:7f:3f:1a:0d:c2:78:d5:1c:2a:af:51:db:43:
                    12:dd:46:2f:ce:bd:a5:ef:92:d3:f5:49:db:b5:c7:
                    ee:e9:43:bf:1f:28:39:9c:41:35:73:5b:f2:ad:e2:
                    cf:8a:7c:49:26:85:c8:12:66:68:ad:5c:cd:e4:1b:
                    c5:0b:d1:6e:c5:5a:89:79:24:1a:56:ee:c0:5d:3f:
                    27:d9:d8:d8:8e:0d:c2:77:19:9a:94:cb:dd:42:6a:
                    78:fb:3c:ca:b4:b9:27:66:bd:4b:2c:ff:ec:4d:cd:
                    06:f4:45:f4:b3:65:5e:7e:cc:66:b4:c4:91:a3:89:
                    f5:e1:46:c7:b0:7f:a7:8f:46:75:23:04:b4:c4:32:
                    da:2a:6c:43:a1:9b:ba:5a:3b:38:d0:63:ce:a9:14:
                    58:3a:7b:97:ae:b5:66:d7:e8:e4:08:dc:78:31:50:
                    30:d7:16:16:cb:bb:2b:c2:fb:61:1b:36:56:75:6d:
                    ad:7c:ce:de:f0:75:68:22:cf:1f:85:ec:84:9b:2a:
                    c5:6a:de:57:47:58:69:51:a2:ee:de:a2:67:55:2a:
                    da:6c:f4:ee:92:d3:21:6a:97:85:f7:9a:26:2f:55:
                    31:a7:38:61:aa:81:53:93:64:69:e0:94:66:ed:68:
                    9d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:80:BF:B5:45:5A:F1:AB:C2:EE:CA:4F:D7:7D:F3:BD:49:BC:4B:4B
            X509v3 Authority Key Identifier:
                keyid:68:8C:FC:6E:D2:95:D8:5C:CE:C2:EE:E0:68:7D:7F:10:77:72:1D:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e35382e302f32342d3234203d3e20323633353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:04:79:6c:d6:6e:3c:28:cb:d2:91:2f:0d:8a:4f:7f:ce:04:
         ea:86:35:e5:a7:0c:fd:6c:06:d0:7f:db:0e:5d:c5:82:ce:00:
         82:a7:62:d9:f8:a7:50:0c:93:3d:04:86:30:c3:ae:69:d2:32:
         30:48:b0:ba:ad:2a:8a:25:24:1e:e0:3e:88:1a:e9:3d:e1:68:
         49:e2:cb:39:3b:ec:67:47:2c:81:fc:bf:63:9f:4b:68:49:5b:
         c7:14:00:d9:5a:e6:cb:82:7b:23:04:dd:93:92:c1:ae:69:79:
         b5:d2:f1:70:30:36:b8:28:e7:f1:1b:d2:19:d4:ba:e0:2d:e9:
         25:a2:50:d9:94:aa:94:09:2e:9b:16:f6:bb:39:13:58:8d:ae:
         82:36:4e:90:34:d7:18:4f:21:4f:e2:a9:a2:1b:d1:63:bc:56:
         5a:03:89:6f:6d:ce:39:f8:d5:7e:24:82:41:9c:ce:f4:60:b2:
         1e:6b:75:fb:ba:c8:bb:47:85:bc:43:21:02:2f:94:13:59:62:
         a6:ff:44:1d:1b:66:58:bd:91:3e:e4:61:21:88:77:c1:2e:3f:
         c5:ba:f0:74:ea:b1:30:14:1d:2f:75:7c:73:0a:45:80:82:7a:
         35:d8:40:8d:16:84:e9:a2:0d:9b:48:2e:f4:12:62:79:91:5d:
         3e:4b:2a:5e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUThp18uPrZlwr82vF/sA3g91WzIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg4Q0ZDNkVEMjk1RDg1Q0NFQzJFRUUwNjg3RDdGMTA3
NzcyMURDMTAeFw0yNDA0MTUyMDI5MTNaFw0yNTA0MTQyMDM0MTNaMDMxMTAvBgNV
BAMTKEU2ODBCRkI1NDU1QUYxQUJDMkVFQ0E0RkQ3N0RGM0JENDlCQzRCNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrFGAPc2Gh1qtXnoXvMCArfz8a
DcJ41Rwqr1HbQxLdRi/OvaXvktP1Sdu1x+7pQ78fKDmcQTVzW/Kt4s+KfEkmhcgS
ZmitXM3kG8UL0W7FWol5JBpW7sBdPyfZ2NiODcJ3GZqUy91Canj7PMq0uSdmvUss
/+xNzQb0RfSzZV5+zGa0xJGjifXhRsewf6ePRnUjBLTEMtoqbEOhm7paOzjQY86p
FFg6e5eutWbX6OQI3HgxUDDXFhbLuyvC+2EbNlZ1ba18zt7wdWgizx+F7ISbKsVq
3ldHWGlRou7eomdVKtps9O6S0yFql4X3miYvVTGnOGGqgVOTZGnglGbtaJ0LAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5oC/tUVa8avC7spP133zvUm8S0swHwYDVR0j
BBgwFoAUaIz8btKV2FzOwu7gaH1/EHdyHcEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmZnd1VEUXQ5b2RnUXptYUFiZE1TbkZXamVadzNLQ0JuWDhFZTlmMnBY
ZHQvMS82ODhDRkM2RUQyOTVEODVDQ0VDMkVFRTA2ODdEN0YxMDc3NzIxREMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4OENGQzZFRDI5NUQ4NUND
RUMyRUVFMDY4N0Q3RjEwNzc3MjFEQzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JmZ3dVRFF0OW9kZ1F6bWFBYmRNU25GV2plWnczS0NCblg4RWU5ZjJwWGR0LzEv
MzEzNzM3MmUzMjMyMzMyZTM1MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzNTMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACx3zowDQYJKoZIhvcNAQELBQADggEBAIMEeWzW
bjwoy9KRLw2KT3/OBOqGNeWnDP1sBtB/2w5dxYLOAIKnYtn4p1AMkz0EhjDDrmnS
MjBIsLqtKoolJB7gPoga6T3haEniyzk77GdHLIH8v2OfS2hJW8cUANla5suCeyME
3ZOSwa5pebXS8XAwNrgo5/Eb0hnUuuAt6SWiUNmUqpQJLpsW9rs5E1iNroI2TpA0
1xhPIU/iqaIb0WO8VloDiW9tzjn41X4kgkGczvRgsh5rdfu6yLtHhbxDIQIvlBNZ
Yqb/RB0bZli9kT7kYSGId8EuP8W68HTqsTAUHS91fHMKRYCCejXYQI0WhOmiDZtI
LvQSYnmRXT5LKl4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:58 2024 by rpki-client on console-fra.rpki-client.org