Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/1/3137372e3132382e38302e302f32312d3234203d3e20323632333635.roa
File:                     3137372e3132382e38302e302f32312d3234203d3e20323632333635.roa (raw, json)
Hash identifier:          lsiRX8l7lbJl3XdC9k7RVZ0b71MxkDk5eNa1qsb6dT0=
Subject key identifier:   A8:B6:6E:03:72:28:90:ED:A9:B8:98:F5:C1:2B:56:B1:38:C1:FE:97
Certificate issuer:       /CN=267CFD31CE3D98329F42489671A8D3C987CB2774
Certificate serial:       1269D239E9DC8385D6DC11171A4CF3A58A913967
Authority key identifier: 26:7C:FD:31:CE:3D:98:32:9F:42:48:96:71:A8:D3:C9:87:CB:27:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/267CFD31CE3D98329F42489671A8D3C987CB2774.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/1/3137372e3132382e38302e302f32312d3234203d3e20323632333635.roa
Signing time:             Thu 04 Apr 2024 13:39:19 +0000
ROA not before:           Thu 04 Apr 2024 13:34:19 +0000
ROA not after:            Thu 03 Apr 2025 13:39:19 +0000
asID:                     262365
IP address blocks:        177.128.80.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/1/267CFD31CE3D98329F42489671A8D3C987CB2774.crl
                          rsync://rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/1/267CFD31CE3D98329F42489671A8D3C987CB2774.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/267CFD31CE3D98329F42489671A8D3C987CB2774.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 16:54:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:69:d2:39:e9:dc:83:85:d6:dc:11:17:1a:4c:f3:a5:8a:91:39:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=267CFD31CE3D98329F42489671A8D3C987CB2774
        Validity
            Not Before: Apr  4 13:34:19 2024 GMT
            Not After : Apr  3 13:39:19 2025 GMT
        Subject: CN=A8B66E03722890EDA9B898F5C12B56B138C1FE97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:80:48:e2:6a:ac:65:85:45:1a:d7:31:f1:c4:
                    84:f3:50:dc:31:a3:41:a2:57:bc:52:d2:0f:d4:02:
                    64:06:4a:19:a7:56:c2:eb:64:21:8c:05:5c:0b:29:
                    3d:22:4e:c0:53:44:91:c6:ca:a4:52:6d:d4:bc:94:
                    13:a7:f4:eb:50:77:b1:9d:26:1e:97:7a:12:3c:f9:
                    3d:18:57:b0:52:90:f7:eb:d2:bd:1b:fa:49:17:9c:
                    00:e5:5c:8c:c9:94:b1:6d:d0:ec:a3:7f:66:3d:ed:
                    ae:ff:2f:1d:ba:30:8b:6d:fc:10:a4:6e:4c:72:cc:
                    e1:ec:c8:73:10:c5:ca:28:cc:f7:6b:7f:9f:01:38:
                    b6:26:91:d0:8d:82:c0:38:11:ad:8b:cd:ed:ab:26:
                    35:3f:ac:3d:b7:45:24:96:c0:d3:5c:76:f0:5a:38:
                    78:e1:4a:a4:93:8e:db:06:af:37:40:de:3b:60:b0:
                    48:be:e8:7c:27:3b:dc:e6:76:88:a0:b1:fe:a4:b3:
                    75:73:cb:b5:d3:8e:4d:04:73:40:60:0b:83:93:03:
                    78:e6:2e:4a:97:d8:2b:e7:a8:6e:ea:e6:95:3d:4e:
                    f4:2b:9e:25:94:01:99:6f:79:ed:91:cb:54:4f:20:
                    24:95:a8:ff:25:66:e6:19:4b:7d:ca:5d:f7:38:fe:
                    fd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B6:6E:03:72:28:90:ED:A9:B8:98:F5:C1:2B:56:B1:38:C1:FE:97
            X509v3 Authority Key Identifier:
                keyid:26:7C:FD:31:CE:3D:98:32:9F:42:48:96:71:A8:D3:C9:87:CB:27:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/1/267CFD31CE3D98329F42489671A8D3C987CB2774.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/267CFD31CE3D98329F42489671A8D3C987CB2774.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/1/3137372e3132382e38302e302f32312d3234203d3e20323632333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         27:d7:2d:f3:da:3f:8c:65:a0:83:98:85:7b:96:04:2a:cc:be:
         d9:23:81:89:09:0f:76:2a:0c:7a:90:47:61:ce:b7:93:28:36:
         bb:23:1e:55:8e:a4:2c:7d:c6:b1:62:0d:ee:2f:e4:36:70:96:
         f3:ae:38:33:be:30:e5:50:e0:80:b0:d9:24:d9:74:d3:3a:88:
         64:77:a6:4b:88:a0:15:9b:6b:8c:06:a6:d8:22:e6:e4:32:9e:
         36:a9:01:22:9a:96:f5:8b:4e:8f:fe:b7:2a:73:c2:e9:29:e6:
         5f:38:f8:ef:19:a3:0e:aa:69:f6:4b:9a:28:e9:76:61:25:58:
         cf:64:96:dc:e5:49:c8:f8:26:01:a3:5a:7c:4f:2b:f0:6b:3a:
         ef:54:2b:18:04:67:a2:8d:e0:d0:1c:04:78:0f:bc:bb:96:74:
         b7:65:50:48:61:9a:49:ce:27:48:26:9d:b5:ff:3b:f2:b0:41:
         de:1e:b8:22:05:b2:1d:fa:2a:a8:fd:99:4b:68:fb:55:01:d5:
         be:e8:d8:b2:f7:11:d7:24:1d:08:39:ad:ee:b9:e7:b0:1c:87:
         ee:b6:72:a6:c9:2d:51:ae:f0:6c:d9:c0:e5:f4:ac:02:fc:8d:
         d9:4e:3e:52:a6:c7:11:c4:d3:09:ac:d4:64:d5:7f:9e:99:bb:
         5b:88:b2:a7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEmnSOencg4XW3BEXGkzzpYqROWcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjY3Q0ZEMzFDRTNEOTgzMjlGNDI0ODk2NzFBOEQzQzk4
N0NCMjc3NDAeFw0yNDA0MDQxMzM0MTlaFw0yNTA0MDMxMzM5MTlaMDMxMTAvBgNV
BAMTKEE4QjY2RTAzNzIyODkwRURBOUI4OThGNUMxMkI1NkIxMzhDMUZFOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxgEjiaqxlhUUa1zHxxITzUNwx
o0GiV7xS0g/UAmQGShmnVsLrZCGMBVwLKT0iTsBTRJHGyqRSbdS8lBOn9OtQd7Gd
Jh6XehI8+T0YV7BSkPfr0r0b+kkXnADlXIzJlLFt0Oyjf2Y97a7/Lx26MItt/BCk
bkxyzOHsyHMQxcoozPdrf58BOLYmkdCNgsA4Ea2Lze2rJjU/rD23RSSWwNNcdvBa
OHjhSqSTjtsGrzdA3jtgsEi+6HwnO9zmdoigsf6ks3Vzy7XTjk0Ec0BgC4OTA3jm
LkqX2CvnqG7q5pU9TvQrniWUAZlvee2Ry1RPICSVqP8lZuYZS33KXfc4/v23AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUqLZuA3IokO2puJj1wStWsTjB/pcwHwYDVR0j
BBgwFoAUJnz9Mc49mDKfQkiWcajTyYfLJ3QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2lMUkRkdGdwTGpCUGJ4cWpZS2JZZXdaU2F5WXRSUVBHbjg3UFUzNlRw
eVMvMS8yNjdDRkQzMUNFM0Q5ODMyOUY0MjQ4OTY3MUE4RDNDOTg3Q0IyNzc0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI2N0NGRDMxQ0UzRDk4MzI5
RjQyNDg5NjcxQThEM0M5ODdDQjI3NzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NpTFJEZHRncExqQlBieHFqWUtiWWV3WlNheVl0UlFQR244N1BVMzZUcHlTLzEv
MzEzNzM3MmUzMTMyMzgyZTM4MzAyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2
MzIzMzM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOxgFAwDQYJKoZIhvcNAQELBQADggEBACfXLfPa
P4xloIOYhXuWBCrMvtkjgYkJD3YqDHqQR2HOt5MoNrsjHlWOpCx9xrFiDe4v5DZw
lvOuODO+MOVQ4ICw2STZdNM6iGR3pkuIoBWba4wGptgi5uQynjapASKalvWLTo/+
typzwukp5l84+O8Zow6qafZLmijpdmElWM9kltzlScj4JgGjWnxPK/BrOu9UKxgE
Z6KN4NAcBHgPvLuWdLdlUEhhmknOJ0gmnbX/O/KwQd4euCIFsh36Kqj9mUto+1UB
1b7o2LL3EdckHQg5re6557Ach+62cqbJLVGu8GzZwOX0rAL8jdlOPlKmxxHE0wms
1GTVf56Zu1uIsqc=
-----END CERTIFICATE-----
Generated at Mon Nov 25 15:27:08 2024 by rpki-client on console-fra.rpki-client.org