Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/3137372e38372e34342e302f32322d3234203d3e203532353839.roa
File:                     3137372e38372e34342e302f32322d3234203d3e203532353839.roa (raw, json)
Hash identifier:          qmY9owjBP0r5Nn2ChUf09B7YkmPX7tPMDkcOeYGa9P0=
Subject key identifier:   0A:B3:59:D2:B4:F0:FB:C8:36:A7:46:CD:21:5D:2F:F1:87:A8:0F:E4
Certificate issuer:       /CN=2B470E5C2388FD4EE27FD093A188DB51D57CAD3B
Certificate serial:       3EA56AC024DFED281A13B6B1E3D181CD62D1D430
Authority key identifier: 2B:47:0E:5C:23:88:FD:4E:E2:7F:D0:93:A1:88:DB:51:D5:7C:AD:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/3137372e38372e34342e302f32322d3234203d3e203532353839.roa
Signing time:             Thu 04 Apr 2024 12:10:56 +0000
ROA not before:           Thu 04 Apr 2024 12:05:56 +0000
ROA not after:            Thu 03 Apr 2025 12:10:56 +0000
asID:                     52589
IP address blocks:        177.87.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.crl
                          rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 08:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a5:6a:c0:24:df:ed:28:1a:13:b6:b1:e3:d1:81:cd:62:d1:d4:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B470E5C2388FD4EE27FD093A188DB51D57CAD3B
        Validity
            Not Before: Apr  4 12:05:56 2024 GMT
            Not After : Apr  3 12:10:56 2025 GMT
        Subject: CN=0AB359D2B4F0FBC836A746CD215D2FF187A80FE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:06:d7:2a:37:bb:5a:3a:da:25:d2:fa:08:97:
                    5e:2c:d5:65:63:38:1b:7e:87:61:cb:47:1f:f2:b0:
                    f7:e6:61:38:c0:4f:44:b4:31:1e:cd:cd:41:37:85:
                    fc:75:5a:26:b6:3a:f8:88:a7:40:d7:b6:8d:2f:cb:
                    5c:86:12:c6:0b:69:e3:72:ce:c6:1e:87:1c:2e:87:
                    5a:70:f9:fe:13:e5:33:3d:b3:83:d6:4b:a4:a6:4c:
                    32:3b:b6:b3:e5:1b:45:7d:08:51:c4:3b:9f:af:e4:
                    0a:64:0c:31:b6:70:cc:7b:f3:9f:89:78:a3:75:74:
                    77:f8:2f:c5:9b:e4:77:5f:90:2f:7b:f2:41:20:90:
                    d7:00:01:db:1d:df:19:8e:b0:c4:ff:bb:c0:1f:3e:
                    c3:6d:c7:d0:d5:8c:dc:15:4c:0e:c8:cd:38:78:93:
                    6b:95:b4:99:39:43:f4:54:f2:47:70:cb:c6:e0:75:
                    36:7c:83:f8:c7:4b:95:94:bc:70:bd:01:71:33:13:
                    db:09:b1:79:f3:88:c5:ab:ce:91:fe:2b:04:1c:83:
                    73:2e:40:07:33:10:68:f7:a8:14:ec:16:a3:07:4a:
                    3c:e2:af:33:c5:8c:f3:e0:a3:ec:6d:c8:67:68:08:
                    8f:1b:ad:38:e8:d0:47:f7:a3:48:d4:9a:85:78:92:
                    b8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B3:59:D2:B4:F0:FB:C8:36:A7:46:CD:21:5D:2F:F1:87:A8:0F:E4
            X509v3 Authority Key Identifier:
                keyid:2B:47:0E:5C:23:88:FD:4E:E2:7F:D0:93:A1:88:DB:51:D5:7C:AD:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B470E5C2388FD4EE27FD093A188DB51D57CAD3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cv9XxPEkyev8fsmd7ggwLXMiPyNvgVkjArH5RxGEJdX1/1/3137372e38372e34342e302f32322d3234203d3e203532353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:56:b5:33:22:38:15:e5:c4:c0:47:ed:58:d0:e8:c3:f0:39:
         5e:82:76:95:b5:36:9a:7a:3e:f0:4e:13:0a:cd:f7:d2:de:e0:
         29:bb:e4:2c:43:57:44:a1:ce:52:30:06:70:61:0b:96:87:3f:
         6e:06:5f:b5:31:f6:70:18:87:d7:e6:59:42:a8:1a:b9:e0:f5:
         94:d1:c4:18:a2:f7:2e:f2:41:8c:d0:d7:9a:9a:f2:b4:cd:01:
         e2:1f:79:e3:3b:88:d1:2b:d8:36:c5:87:05:e8:5e:02:31:7c:
         cc:e7:4e:2a:4f:b9:f4:cc:c8:e2:3e:4d:11:1f:fe:38:04:d0:
         4e:65:73:20:5e:ea:af:79:00:79:76:9e:05:56:93:14:ea:f4:
         77:34:9b:86:f8:77:e8:bb:07:b4:8b:ab:b7:11:d1:f9:74:ff:
         9b:19:a7:39:dc:3e:a3:13:6c:1e:e9:ca:2e:1e:7f:1e:55:66:
         3f:6f:d3:d3:34:38:0e:f5:40:d4:37:bd:34:b2:8e:5c:bb:0c:
         7a:93:15:88:07:62:42:02:96:d6:f4:96:2e:7a:ca:54:3f:bb:
         c0:3f:11:d4:5c:24:c7:e1:aa:96:ca:73:45:b1:09:82:5a:a3:
         d7:9d:bc:82:83:45:ec:ed:b6:6e:a3:4d:7b:86:d1:13:9a:fe:
         2f:46:f3:8e
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUPqVqwCTf7SgaE7ax49GBzWLR1DAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI0NzBFNUMyMzg4RkQ0RUUyN0ZEMDkzQTE4OERCNTFE
NTdDQUQzQjAeFw0yNDA0MDQxMjA1NTZaFw0yNTA0MDMxMjEwNTZaMDMxMTAvBgNV
BAMTKDBBQjM1OUQyQjRGMEZCQzgzNkE3NDZDRDIxNUQyRkYxODdBODBGRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXBtcqN7taOtol0voIl14s1WVj
OBt+h2HLRx/ysPfmYTjAT0S0MR7NzUE3hfx1Wia2OviIp0DXto0vy1yGEsYLaeNy
zsYehxwuh1pw+f4T5TM9s4PWS6SmTDI7trPlG0V9CFHEO5+v5ApkDDG2cMx785+J
eKN1dHf4L8Wb5HdfkC978kEgkNcAAdsd3xmOsMT/u8AfPsNtx9DVjNwVTA7IzTh4
k2uVtJk5Q/RU8kdwy8bgdTZ8g/jHS5WUvHC9AXEzE9sJsXnziMWrzpH+KwQcg3Mu
QAczEGj3qBTsFqMHSjzirzPFjPPgo+xtyGdoCI8brTjo0Ef3o0jUmoV4krjRAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUCrNZ0rTw+8g2p0bNIV0v8YeoD+QwHwYDVR0j
BBgwFoAUK0cOXCOI/U7if9CToYjbUdV8rTswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3Y5WHhQRWt5ZXY4ZnNtZDdnZ3dMWE1pUHlOdmdWa2pBckg1UnhHRUpk
WDEvMS8yQjQ3MEU1QzIzODhGRDRFRTI3RkQwOTNBMTg4REI1MUQ1N0NBRDNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCNDcwRTVDMjM4OEZENEVF
MjdGRDA5M0ExODhEQjUxRDU3Q0FEM0IuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N2OVh4UEVreWV2OGZzbWQ3Z2d3TFhNaVB5TnZnVmtqQXJINVJ4R0VKZFgxLzEv
MzEzNzM3MmUzODM3MmUzNDM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjM1
MzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArFXLDANBgkqhkiG9w0BAQsFAAOCAQEAjVa1MyI4FeXE
wEftWNDow/A5XoJ2lbU2mno+8E4TCs330t7gKbvkLENXRKHOUjAGcGELloc/bgZf
tTH2cBiH1+ZZQqgaueD1lNHEGKL3LvJBjNDXmprytM0B4h954zuI0SvYNsWHBehe
AjF8zOdOKk+59MzI4j5NER/+OATQTmVzIF7qr3kAeXaeBVaTFOr0dzSbhvh36LsH
tIurtxHR+XT/mxmnOdw+oxNsHunKLh5/HlVmP2/T0zQ4DvVA1De9NLKOXLsMepMV
iAdiQgKW1vSWLnrKVD+7wD8R1Fwkx+GqlspzRbEJglqj1528goNF7O22bqNNe4bR
E5r+L0bzjg==
-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:25 2024 by rpki-client on console-fra.rpki-client.org