Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/3137372e37352e3234302e302f32302d3230203d3e20323632363031.roa
File:                     3137372e37352e3234302e302f32302d3230203d3e20323632363031.roa (raw, json)
Hash identifier:          /DB/a78hznL+b/zozdfB4I03aDk5RVg1s/+QggIT+gA=
Subject key identifier:   E8:95:FD:51:79:8D:58:39:AF:CD:E1:FC:68:4F:10:AA:6A:28:52:6A
Certificate issuer:       /CN=8FA5DE968220D66A9164CA3AA24677EF9C127EE8
Certificate serial:       534CA17F410157C98DBF36C20E5166DDCCB85A9B
Authority key identifier: 8F:A5:DE:96:82:20:D6:6A:91:64:CA:3A:A2:46:77:EF:9C:12:7E:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/3137372e37352e3234302e302f32302d3230203d3e20323632363031.roa
Signing time:             Mon 08 Apr 2024 15:24:39 +0000
ROA not before:           Mon 08 Apr 2024 15:19:39 +0000
ROA not after:            Mon 07 Apr 2025 15:24:39 +0000
asID:                     262601
IP address blocks:        177.75.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.crl
                          rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 14:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:4c:a1:7f:41:01:57:c9:8d:bf:36:c2:0e:51:66:dd:cc:b8:5a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FA5DE968220D66A9164CA3AA24677EF9C127EE8
        Validity
            Not Before: Apr  8 15:19:39 2024 GMT
            Not After : Apr  7 15:24:39 2025 GMT
        Subject: CN=E895FD51798D5839AFCDE1FC684F10AA6A28526A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a3:53:e9:0d:15:af:18:21:eb:b1:21:53:27:
                    b0:82:87:22:d4:58:a1:05:b4:42:30:27:3f:b2:63:
                    ed:37:63:0a:56:04:67:2b:34:66:18:25:d1:c0:cd:
                    1a:4e:10:1b:cc:70:15:0e:d0:48:31:29:eb:73:34:
                    d4:40:85:d8:ff:d5:ef:9a:da:71:cf:09:1c:f1:6a:
                    83:a2:4d:93:cd:f1:71:cd:a4:11:7d:3a:a5:a8:1b:
                    fa:b4:3e:6e:18:0a:c0:ef:d0:e1:bf:59:77:9f:70:
                    52:e9:d0:0f:0c:ac:4d:b1:73:b8:40:12:f0:15:5e:
                    a9:ff:61:e3:29:f6:6b:57:aa:10:0d:89:fe:70:b9:
                    96:f8:e4:e9:dc:66:61:36:5a:c2:43:ae:10:d1:6a:
                    78:12:75:9e:1b:46:c2:f5:2a:f0:b0:6a:69:8a:f5:
                    ef:92:22:ef:d9:92:f5:e0:ac:59:96:5d:f4:99:58:
                    9a:f3:c7:46:55:c0:af:6c:cd:d2:25:f4:12:73:a2:
                    b0:51:60:3b:8a:08:70:db:08:94:97:05:3e:0d:78:
                    54:f1:ee:50:59:10:2d:9d:b0:2b:ab:f4:72:c1:23:
                    79:7f:87:9a:f3:c8:79:16:a1:dc:6a:5b:ed:af:94:
                    0d:44:1f:c5:ba:8f:80:26:17:87:18:bd:67:c8:85:
                    dc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:95:FD:51:79:8D:58:39:AF:CD:E1:FC:68:4F:10:AA:6A:28:52:6A
            X509v3 Authority Key Identifier:
                keyid:8F:A5:DE:96:82:20:D6:6A:91:64:CA:3A:A2:46:77:EF:9C:12:7E:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FA5DE968220D66A9164CA3AA24677EF9C127EE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCWHiog812WhFQtZDoisQ49o2numrJpHn1VBiNzNj8Np/1/3137372e37352e3234302e302f32302d3230203d3e20323632363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         29:50:57:8d:5a:1f:e0:11:ec:fb:71:8d:87:35:f1:f0:0c:6e:
         37:75:43:56:a8:d4:d0:25:7b:eb:ed:7a:b2:e7:fc:1a:cb:ee:
         ea:0c:7a:6a:ba:a6:46:43:db:8a:b3:6f:e1:57:a5:0a:7d:27:
         a7:18:dd:e2:62:88:3e:5f:62:6c:fa:b2:50:36:3e:c9:f8:8f:
         75:34:f8:33:b6:2e:21:53:15:90:f2:cd:57:7a:d2:53:1c:f2:
         79:57:7b:28:22:3d:f3:51:bc:a8:6c:58:4e:ea:f4:c7:17:63:
         55:f3:7f:5b:62:e5:8e:66:65:a4:3a:0d:26:e5:81:9d:13:31:
         9e:fd:00:19:30:25:7a:d0:60:95:e5:31:ff:ef:21:a4:29:b5:
         d1:9c:b3:ae:59:82:74:8f:62:fc:90:a6:81:6e:3b:ed:07:5f:
         90:1b:9f:15:fb:48:9d:32:fe:f7:b3:85:f8:b0:9f:a8:52:4d:
         f3:85:62:90:9b:0f:e6:37:1f:72:ac:cb:7e:1e:9d:2d:76:e3:
         18:04:6e:4f:86:4a:b2:a3:76:f6:a2:44:56:7a:c8:38:6f:82:
         82:33:83:e6:b0:0d:8e:7f:0f:9b:b3:da:86:1f:2b:2e:6c:b9:
         f3:ce:b8:2e:92:03:84:fe:c5:86:d1:63:4e:63:e0:6f:7d:87:
         62:89:91:3b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUU0yhf0EBV8mNvzbCDlFm3cy4WpswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZBNURFOTY4MjIwRDY2QTkxNjRDQTNBQTI0Njc3RUY5
QzEyN0VFODAeFw0yNDA0MDgxNTE5MzlaFw0yNTA0MDcxNTI0MzlaMDMxMTAvBgNV
BAMTKEU4OTVGRDUxNzk4RDU4MzlBRkNERTFGQzY4NEYxMEFBNkEyODUyNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNo1PpDRWvGCHrsSFTJ7CChyLU
WKEFtEIwJz+yY+03YwpWBGcrNGYYJdHAzRpOEBvMcBUO0EgxKetzNNRAhdj/1e+a
2nHPCRzxaoOiTZPN8XHNpBF9OqWoG/q0Pm4YCsDv0OG/WXefcFLp0A8MrE2xc7hA
EvAVXqn/YeMp9mtXqhANif5wuZb45OncZmE2WsJDrhDRangSdZ4bRsL1KvCwammK
9e+SIu/ZkvXgrFmWXfSZWJrzx0ZVwK9szdIl9BJzorBRYDuKCHDbCJSXBT4NeFTx
7lBZEC2dsCur9HLBI3l/h5rzyHkWodxqW+2vlA1EH8W6j4AmF4cYvWfIhdzZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6JX9UXmNWDmvzeH8aE8QqmooUmowHwYDVR0j
BBgwFoAUj6XeloIg1mqRZMo6okZ375wSfugwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0NXSGlvZzgxMldoRlF0WkRvaXNRNDlvMm51bXJKcEhuMVZCaU56Tmo4
TnAvMS84RkE1REU5NjgyMjBENjZBOTE2NENBM0FBMjQ2NzdFRjlDMTI3RUU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhGQTVERTk2ODIyMEQ2NkE5
MTY0Q0EzQUEyNDY3N0VGOUMxMjdFRTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NDV0hpb2c4MTJXaEZRdFpEb2lzUTQ5bzJudW1ySnBIbjFWQmlOek5qOE5wLzEv
MzEzNzM3MmUzNzM1MmUzMjM0MzAyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM2
MzIzNjMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASxS/AwDQYJKoZIhvcNAQELBQADggEBAClQV41a
H+AR7PtxjYc18fAMbjd1Q1ao1NAle+vterLn/BrL7uoMemq6pkZD24qzb+FXpQp9
J6cY3eJiiD5fYmz6slA2Psn4j3U0+DO2LiFTFZDyzVd60lMc8nlXeygiPfNRvKhs
WE7q9McXY1Xzf1ti5Y5mZaQ6DSblgZ0TMZ79ABkwJXrQYJXlMf/vIaQptdGcs65Z
gnSPYvyQpoFuO+0HX5AbnxX7SJ0y/vezhfiwn6hSTfOFYpCbD+Y3H3Ksy34enS12
4xgEbk+GSrKjdvaiRFZ6yDhvgoIzg+awDY5/D5uz2oYfKy5sufPOuC6SA4T+xYbR
Y05j4G99h2KJkTs=
-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:21 2024 by rpki-client on console-ams.rpki-client.org