Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e36322e302f32342d3234203d3e20323633353030.roa
File:                     3137372e3232332e36322e302f32342d3234203d3e20323633353030.roa (raw, json)
Hash identifier:          jDnrA5548xctc50LvQHM6ZENBY4m8ccPGwzUVvQObe8=
Subject key identifier:   4D:95:77:40:2C:28:16:54:3F:BB:B1:63:D8:94:29:2C:57:02:5E:99
Certificate issuer:       /CN=688CFC6ED295D85CCEC2EEE0687D7F1077721DC1
Certificate serial:       2E81F90C7B0DD0190EC5EC22B7A300FF9DD45650
Authority key identifier: 68:8C:FC:6E:D2:95:D8:5C:CE:C2:EE:E0:68:7D:7F:10:77:72:1D:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e36322e302f32342d3234203d3e20323633353030.roa
Signing time:             Thu 04 Apr 2024 10:58:33 +0000
ROA not before:           Thu 04 Apr 2024 10:53:33 +0000
ROA not after:            Thu 03 Apr 2025 10:58:33 +0000
asID:                     263500
IP address blocks:        177.223.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.crl
                          rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:46:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:81:f9:0c:7b:0d:d0:19:0e:c5:ec:22:b7:a3:00:ff:9d:d4:56:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=688CFC6ED295D85CCEC2EEE0687D7F1077721DC1
        Validity
            Not Before: Apr  4 10:53:33 2024 GMT
            Not After : Apr  3 10:58:33 2025 GMT
        Subject: CN=4D9577402C2816543FBBB163D894292C57025E99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ba:40:0b:6a:e4:00:90:38:8c:4b:a1:71:da:
                    77:5c:b1:02:27:da:59:c7:94:6a:25:77:7b:f5:51:
                    23:33:1a:00:6d:a1:ff:8e:a6:8d:1f:64:ce:11:fb:
                    78:86:99:4a:ab:62:14:81:a0:a4:a5:98:47:8b:ad:
                    6d:2a:23:90:26:ec:f4:88:07:63:f3:7d:7d:ba:4e:
                    19:ca:81:2c:f1:bb:f4:04:a3:50:ca:c0:9f:0a:44:
                    1b:d7:13:f9:92:70:e8:ee:40:67:10:35:88:0f:d2:
                    0e:4d:c0:07:52:17:c3:6d:5b:e1:90:e3:65:2f:ed:
                    a4:05:45:6d:54:eb:8b:05:4a:07:13:8a:58:ca:27:
                    ab:cc:3a:48:77:3e:bc:4a:0f:32:c1:ee:df:59:f7:
                    45:e7:0e:0a:a6:7c:fa:8c:da:93:cf:14:1d:61:da:
                    2b:db:e3:c6:06:a9:83:c4:15:ae:b5:bb:9b:a9:91:
                    eb:0d:47:03:a4:6e:8e:d4:43:0f:e0:80:69:64:5a:
                    96:8a:ba:8b:ee:43:d8:97:df:40:5f:a6:09:45:e3:
                    55:c3:fb:b3:ca:e5:26:b6:e3:2f:bc:31:53:a1:83:
                    1c:2f:f2:ab:35:33:50:1d:c8:bc:55:25:91:e6:97:
                    26:a3:ee:26:41:5b:7c:b4:9b:ac:70:09:6e:64:9d:
                    68:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:95:77:40:2C:28:16:54:3F:BB:B1:63:D8:94:29:2C:57:02:5E:99
            X509v3 Authority Key Identifier:
                keyid:68:8C:FC:6E:D2:95:D8:5C:CE:C2:EE:E0:68:7D:7F:10:77:72:1D:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e36322e302f32342d3234203d3e20323633353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:1b:0d:1a:b7:ec:69:52:31:8f:c9:6f:bf:f6:53:38:b3:24:
         15:36:cb:d7:6f:40:6f:1b:24:53:49:09:0f:67:9f:26:69:b6:
         27:2f:29:0a:3b:0b:4e:55:5a:d5:20:4f:e8:2a:12:a2:17:45:
         90:cc:dd:0e:4b:f2:a2:89:93:9a:df:d5:45:ac:10:01:d7:fc:
         b1:66:d1:ab:c8:68:db:1f:32:ef:ac:14:c4:cd:af:2c:eb:a2:
         37:60:9a:87:1d:1f:5f:f4:71:c1:74:a7:04:ea:4f:56:62:69:
         18:99:1c:e7:c3:23:20:62:c1:22:8d:6d:70:6b:31:3c:c1:13:
         4f:9a:70:30:e5:19:0c:69:ac:a6:ba:cb:7b:f5:73:a6:1a:b3:
         c0:37:41:92:03:5b:36:5e:cb:d2:3a:96:cd:c6:c6:f5:60:76:
         c6:a4:11:63:00:bb:41:8a:be:71:f0:2a:eb:77:01:a6:fb:5a:
         f2:be:10:b3:4c:4e:95:ef:41:c5:08:0f:07:4e:2b:89:49:57:
         af:1f:e0:17:5c:08:be:a6:c4:59:ac:0b:7a:e5:d0:83:ce:d0:
         e1:e8:ef:36:7a:6f:87:5b:76:c2:b6:8f:6a:78:2b:23:34:0d:
         b2:34:91:1a:3a:44:07:34:a8:66:41:b5:36:69:83:7b:71:61:
         94:40:3e:8c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULoH5DHsN0BkOxewit6MA/53UVlAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg4Q0ZDNkVEMjk1RDg1Q0NFQzJFRUUwNjg3RDdGMTA3
NzcyMURDMTAeFw0yNDA0MDQxMDUzMzNaFw0yNTA0MDMxMDU4MzNaMDMxMTAvBgNV
BAMTKDREOTU3NzQwMkMyODE2NTQzRkJCQjE2M0Q4OTQyOTJDNTcwMjVFOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoukALauQAkDiMS6Fx2ndcsQIn
2lnHlGold3v1USMzGgBtof+Opo0fZM4R+3iGmUqrYhSBoKSlmEeLrW0qI5Am7PSI
B2PzfX26ThnKgSzxu/QEo1DKwJ8KRBvXE/mScOjuQGcQNYgP0g5NwAdSF8NtW+GQ
42Uv7aQFRW1U64sFSgcTiljKJ6vMOkh3PrxKDzLB7t9Z90XnDgqmfPqM2pPPFB1h
2ivb48YGqYPEFa61u5upkesNRwOkbo7UQw/ggGlkWpaKuovuQ9iX30BfpglF41XD
+7PK5Sa24y+8MVOhgxwv8qs1M1AdyLxVJZHmlyaj7iZBW3y0m6xwCW5knWj1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUTZV3QCwoFlQ/u7Fj2JQpLFcCXpkwHwYDVR0j
BBgwFoAUaIz8btKV2FzOwu7gaH1/EHdyHcEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmZnd1VEUXQ5b2RnUXptYUFiZE1TbkZXamVadzNLQ0JuWDhFZTlmMnBY
ZHQvMS82ODhDRkM2RUQyOTVEODVDQ0VDMkVFRTA2ODdEN0YxMDc3NzIxREMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4OENGQzZFRDI5NUQ4NUND
RUMyRUVFMDY4N0Q3RjEwNzc3MjFEQzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JmZ3dVRFF0OW9kZ1F6bWFBYmRNU25GV2plWnczS0NCblg4RWU5ZjJwWGR0LzEv
MzEzNzM3MmUzMjMyMzMyZTM2MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzNTMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACx3z4wDQYJKoZIhvcNAQELBQADggEBACUbDRq3
7GlSMY/Jb7/2UzizJBU2y9dvQG8bJFNJCQ9nnyZpticvKQo7C05VWtUgT+gqEqIX
RZDM3Q5L8qKJk5rf1UWsEAHX/LFm0avIaNsfMu+sFMTNryzrojdgmocdH1/0ccF0
pwTqT1ZiaRiZHOfDIyBiwSKNbXBrMTzBE0+acDDlGQxprKa6y3v1c6Yas8A3QZID
WzZey9I6ls3GxvVgdsakEWMAu0GKvnHwKut3Aab7WvK+ELNMTpXvQcUIDwdOK4lJ
V68f4BdcCL6mxFmsC3rl0IPO0OHo7zZ6b4dbdsK2j2p4KyM0DbI0kRo6RAc0qGZB
tTZpg3txYZRAPow=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:58 2024 by rpki-client on console-fra.rpki-client.org