Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137372e3132352e3137342e302f32332d3233203d3e203532363133.roa
File:                     3137372e3132352e3137342e302f32332d3233203d3e203532363133.roa (raw, json)
Hash identifier:          qtN865hBPn+oiUkRYFgHGvREhtZcBi0pq4w3DwLnDMI=
Subject key identifier:   CE:F4:AA:56:D7:10:14:04:1D:C4:43:6C:58:77:87:75:F2:7C:AB:1E
Certificate issuer:       /CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
Certificate serial:       72B8D6A8CC0250E5E32EF49DD981D77EB2352F25
Authority key identifier: 90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137372e3132352e3137342e302f32332d3233203d3e203532363133.roa
Signing time:             Thu 04 Apr 2024 09:18:14 +0000
ROA not before:           Thu 04 Apr 2024 09:13:14 +0000
ROA not after:            Thu 03 Apr 2025 09:18:14 +0000
asID:                     52613
IP address blocks:        177.125.174.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl
                          rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 15:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:b8:d6:a8:cc:02:50:e5:e3:2e:f4:9d:d9:81:d7:7e:b2:35:2f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
        Validity
            Not Before: Apr  4 09:13:14 2024 GMT
            Not After : Apr  3 09:18:14 2025 GMT
        Subject: CN=CEF4AA56D71014041DC4436C58778775F27CAB1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:77:a7:11:17:fb:ae:b8:66:fc:71:69:c0:c6:
                    48:3e:1b:18:06:91:65:4a:21:09:02:29:b3:17:48:
                    86:5c:d8:dd:d0:23:56:21:93:13:b3:6a:7d:66:a8:
                    17:f1:e2:1b:12:f2:d3:32:32:68:f5:c2:92:f0:24:
                    ef:ce:9c:da:eb:e8:0f:42:87:e2:f4:de:f3:9c:de:
                    09:8e:68:03:9d:d6:1d:1d:05:34:fd:a3:ca:98:1e:
                    1d:57:9c:21:fd:c9:e9:a7:b5:be:98:47:f2:c3:dd:
                    cc:be:2c:3c:92:3a:5d:e5:e0:22:e3:16:22:0b:2a:
                    74:94:9e:a4:42:02:93:8e:29:39:62:46:0c:f9:82:
                    4c:84:88:8c:d2:d4:35:ef:f5:1c:7f:c9:29:fe:c1:
                    6d:94:96:49:72:85:65:b9:64:62:19:a4:2a:f1:69:
                    ac:16:be:13:72:39:92:e9:fa:79:d3:ff:20:f9:9a:
                    86:05:16:38:ed:57:c9:41:16:05:12:05:0d:5f:c7:
                    27:90:b0:e3:ec:bf:46:12:70:b4:93:54:09:c6:c5:
                    b0:66:16:ea:e3:9c:e9:26:d0:7d:d9:32:f8:9f:52:
                    b9:ba:fe:db:6f:ca:e1:30:14:a2:b9:94:c6:f3:05:
                    7b:4d:7f:03:97:2c:46:93:05:a6:a1:16:b4:ce:55:
                    e3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F4:AA:56:D7:10:14:04:1D:C4:43:6C:58:77:87:75:F2:7C:AB:1E
            X509v3 Authority Key Identifier:
                keyid:90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/3137372e3132352e3137342e302f32332d3233203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:11:05:f0:d1:1d:9d:c9:65:97:9e:83:c2:25:a0:ba:0e:61:
         17:88:2c:98:e8:82:3c:fa:38:db:2a:80:0e:d9:b5:11:5e:84:
         07:e1:f1:7a:4b:49:d0:f7:ee:d5:e4:55:0c:d8:d4:3f:cc:15:
         26:e5:57:b8:cc:84:d7:dd:7f:e3:d7:54:10:5b:97:4a:7d:b7:
         e1:06:0f:6e:0c:cb:28:ef:36:66:18:8c:1e:a6:2b:42:39:0a:
         74:e4:b2:b8:ea:f0:0e:c7:ee:da:50:d9:12:5d:50:26:3f:96:
         1a:72:f6:c4:42:a9:28:70:47:c3:11:95:67:78:cd:4c:7e:72:
         ae:b7:70:4b:c1:b8:b3:54:9c:80:d0:2e:19:66:29:99:34:6b:
         56:06:6d:bf:cb:dc:0f:bf:16:be:d5:5a:8a:9c:6a:dd:80:8b:
         24:86:11:42:fd:ed:0b:ee:72:13:e3:a6:da:cd:ee:52:99:24:
         c3:d2:cd:78:52:83:f3:a6:1b:bc:e6:a4:86:fa:f9:0e:22:72:
         1e:14:e5:b0:28:6a:c6:07:60:4f:c8:02:ff:6f:0d:14:da:79:
         b8:b5:39:08:c4:d7:32:b3:9d:4f:22:59:bf:8b:a1:4a:28:5c:
         cd:73:54:51:2c:7e:98:80:2e:0e:13:e3:33:1a:04:af:da:72:
         99:ef:1a:25
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcrjWqMwCUOXjLvSd2YHXfrI1LyUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBEQzVBMzVCOTQ3MDdENEVCNzEwNkY2QkE5RTlDRjg3
NkJBRTQ1NjAeFw0yNDA0MDQwOTEzMTRaFw0yNTA0MDMwOTE4MTRaMDMxMTAvBgNV
BAMTKENFRjRBQTU2RDcxMDE0MDQxREM0NDM2QzU4Nzc4Nzc1RjI3Q0FCMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2d6cRF/uuuGb8cWnAxkg+GxgG
kWVKIQkCKbMXSIZc2N3QI1YhkxOzan1mqBfx4hsS8tMyMmj1wpLwJO/OnNrr6A9C
h+L03vOc3gmOaAOd1h0dBTT9o8qYHh1XnCH9yemntb6YR/LD3cy+LDySOl3l4CLj
FiILKnSUnqRCApOOKTliRgz5gkyEiIzS1DXv9Rx/ySn+wW2UlklyhWW5ZGIZpCrx
aawWvhNyOZLp+nnT/yD5moYFFjjtV8lBFgUSBQ1fxyeQsOPsv0YScLSTVAnGxbBm
FurjnOkm0H3ZMvifUrm6/ttvyuEwFKK5lMbzBXtNfwOXLEaTBaahFrTOVePBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUzvSqVtcQFAQdxENsWHeHdfJ8qx4wHwYDVR0j
BBgwFoAUkNxaNblHB9TrcQb2up6c+Ha65FYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3VTNlF5M2lqejdMSktjblRHZzZOVEc0WXBFY0RDTGZ6aFAyYm5FemtQ
TWkvMS85MERDNUEzNUI5NDcwN0Q0RUI3MTA2RjZCQTlFOUNGODc2QkFFNDU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkwREM1QTM1Qjk0NzA3RDRF
QjcxMDZGNkJBOUU5Q0Y4NzZCQUU0NTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N1UzZReTNpano3TEpLY25UR2c2TlRHNFlwRWNEQ0xmemhQMmJuRXprUE1pLzEv
MzEzNzM3MmUzMTMyMzUyZTMxMzczNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM1
MzIzNjMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxfa4wDQYJKoZIhvcNAQELBQADggEBAEMRBfDR
HZ3JZZeeg8IloLoOYReILJjogjz6ONsqgA7ZtRFehAfh8XpLSdD37tXkVQzY1D/M
FSblV7jMhNfdf+PXVBBbl0p9t+EGD24MyyjvNmYYjB6mK0I5CnTksrjq8A7H7tpQ
2RJdUCY/lhpy9sRCqShwR8MRlWd4zUx+cq63cEvBuLNUnIDQLhlmKZk0a1YGbb/L
3A+/Fr7VWoqcat2AiySGEUL97QvuchPjptrN7lKZJMPSzXhSg/OmG7zmpIb6+Q4i
ch4U5bAoasYHYE/IAv9vDRTaebi1OQjE1zKznU8iWb+LoUooXM1zVFEsfpiALg4T
4zMaBK/acpnvGiU=
-----END CERTIFICATE-----
Generated at Fri Jun 28 15:42:23 2024 by rpki-client on console-fra.rpki-client.org