Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/3137372e34342e3232302e302f32322d3234203d3e20323633313339.roa
File:                     3137372e34342e3232302e302f32322d3234203d3e20323633313339.roa (raw, json)
Hash identifier:          smyF8xsg0mBUiGUO66lMTZEVMiBDNZObj9Yum7CbI3Y=
Subject key identifier:   A9:FE:91:C6:34:ED:80:F3:88:00:E5:6B:2D:98:11:F0:13:83:D4:BA
Certificate issuer:       /CN=BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA
Certificate serial:       5EE047FFBBFF877B8BCC4D45325447C65828BDF8
Authority key identifier: BD:E6:E0:CD:CD:D7:C3:37:D6:45:1A:6B:E9:4B:32:1C:22:CF:08:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/3137372e34342e3232302e302f32322d3234203d3e20323633313339.roa
Signing time:             Fri 05 Apr 2024 00:11:22 +0000
ROA not before:           Fri 05 Apr 2024 00:06:22 +0000
ROA not after:            Fri 04 Apr 2025 00:11:22 +0000
asID:                     263139
IP address blocks:        177.44.220.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.crl
                          rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 14:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:e0:47:ff:bb:ff:87:7b:8b:cc:4d:45:32:54:47:c6:58:28:bd:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA
        Validity
            Not Before: Apr  5 00:06:22 2024 GMT
            Not After : Apr  4 00:11:22 2025 GMT
        Subject: CN=A9FE91C634ED80F38800E56B2D9811F01383D4BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:04:8f:50:10:fb:d1:a2:24:49:a6:22:64:02:
                    e0:97:08:0c:95:3a:b2:2e:5f:ca:59:fb:a3:84:df:
                    83:08:b4:e9:15:5b:63:c0:b5:91:5a:1d:ad:13:eb:
                    d4:78:76:74:63:7e:20:9c:77:7d:d6:db:34:99:21:
                    76:ce:fe:5d:fb:77:02:ce:2f:46:38:5c:37:f4:2a:
                    54:b3:da:08:65:53:f0:8f:69:a5:2d:b7:6e:23:bf:
                    4d:75:0a:ff:09:64:00:16:b8:7e:0f:6b:03:2d:e2:
                    24:21:4d:b7:ef:c6:17:d1:1f:ac:9b:53:06:b3:96:
                    1e:53:e2:df:5a:c8:da:dd:a5:ab:73:01:80:bd:b1:
                    3e:18:cf:59:05:db:a8:1b:be:b8:8f:66:3b:a1:91:
                    11:f8:9b:85:81:08:eb:4d:d0:da:02:1e:dd:e0:d8:
                    cf:26:86:85:fb:bd:a8:37:b5:cb:f0:f4:4d:31:39:
                    25:1b:90:4e:68:63:ed:19:a2:7a:00:62:62:92:7f:
                    ce:8f:87:c7:8d:cc:94:41:f8:69:11:44:40:ca:47:
                    b6:4c:ae:12:a3:dd:2e:98:1e:26:97:44:8a:ca:54:
                    fb:27:0c:13:56:79:ec:12:c9:9d:99:a4:e8:70:3a:
                    49:90:5b:36:d8:c0:0a:b2:ee:60:b6:4c:ad:08:82:
                    b9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:FE:91:C6:34:ED:80:F3:88:00:E5:6B:2D:98:11:F0:13:83:D4:BA
            X509v3 Authority Key Identifier:
                keyid:BD:E6:E0:CD:CD:D7:C3:37:D6:45:1A:6B:E9:4B:32:1C:22:CF:08:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDE6E0CDCDD7C337D6451A6BE94B321C22CF08EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1JcEAGwUvEBm8Dc4jAtYdPcbGDeuMZhGPHvxfRn4TnS/1/3137372e34342e3232302e302f32322d3234203d3e20323633313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:95:6d:24:91:54:2e:cf:be:f1:87:38:97:84:39:f7:31:94:
         61:4e:b6:c3:34:e9:a3:28:54:34:98:f3:bf:56:ce:91:aa:b5:
         20:ca:68:98:b1:bc:9d:ea:36:4e:e3:15:3c:df:17:23:22:4e:
         93:06:74:e9:7d:80:c3:c6:95:59:a7:7d:7d:37:79:d4:71:ff:
         26:c4:7f:10:01:13:c5:7a:9e:6b:ea:4a:b2:6f:74:15:59:ce:
         4e:0c:42:57:8b:cd:c3:4e:14:9c:b2:b6:64:64:35:a4:79:08:
         ea:31:ab:bf:67:c5:50:3a:dd:c6:56:2d:cf:26:30:95:12:d4:
         a9:82:26:9f:09:76:93:63:e9:eb:33:df:46:26:76:73:88:bd:
         7b:44:3e:e2:40:3d:04:24:55:49:73:2d:33:ab:45:ec:f5:92:
         20:ab:c0:fb:1b:8e:98:95:0c:70:c3:a5:e2:d8:a6:a4:46:4d:
         e8:12:73:1a:17:d5:be:86:66:2b:d2:88:a5:fc:45:6a:88:d4:
         2e:fc:fb:83:15:bf:92:d5:b7:0b:5c:9a:2d:07:6b:9b:6e:cf:
         9e:a9:44:b6:f8:6f:fa:a4:08:f1:3b:89:e5:c7:f8:e9:5d:1b:
         70:7e:b9:3b:f3:f5:81:72:80:5c:a5:43:0f:3a:f8:b8:58:b7:
         dc:65:ed:99
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXuBH/7v/h3uLzE1FMlRHxlgovfgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkRFNkUwQ0RDREQ3QzMzN0Q2NDUxQTZCRTk0QjMyMUMy
MkNGMDhFQTAeFw0yNDA0MDUwMDA2MjJaFw0yNTA0MDQwMDExMjJaMDMxMTAvBgNV
BAMTKEE5RkU5MUM2MzRFRDgwRjM4ODAwRTU2QjJEOTgxMUYwMTM4M0Q0QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4BI9QEPvRoiRJpiJkAuCXCAyV
OrIuX8pZ+6OE34MItOkVW2PAtZFaHa0T69R4dnRjfiCcd33W2zSZIXbO/l37dwLO
L0Y4XDf0KlSz2ghlU/CPaaUtt24jv011Cv8JZAAWuH4PawMt4iQhTbfvxhfRH6yb
Uwazlh5T4t9ayNrdpatzAYC9sT4Yz1kF26gbvriPZjuhkRH4m4WBCOtN0NoCHt3g
2M8mhoX7vag3tcvw9E0xOSUbkE5oY+0ZonoAYmKSf86Ph8eNzJRB+GkRREDKR7ZM
rhKj3S6YHiaXRIrKVPsnDBNWeewSyZ2ZpOhwOkmQWzbYwAqy7mC2TK0Igrl9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUqf6RxjTtgPOIAOVrLZgR8BOD1LowHwYDVR0j
BBgwFoAUvebgzc3XwzfWRRpr6UsyHCLPCOowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDFKY0VBR3dVdkVCbThEYzRqQXRZZFBjYkdEZXVNWmhHUEh2eGZSbjRU
blMvMS9CREU2RTBDRENERDdDMzM3RDY0NTFBNkJFOTRCMzIxQzIyQ0YwOEVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JERTZFMENEQ0REN0MzMzdE
NjQ1MUE2QkU5NEIzMjFDMjJDRjA4RUEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QxSmNFQUd3VXZFQm04RGM0akF0WWRQY2JHRGV1TVpoR1BIdnhmUm40VG5TLzEv
MzEzNzM3MmUzNDM0MmUzMjMyMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzMzMTMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxLNwwDQYJKoZIhvcNAQELBQADggEBAAOVbSSR
VC7PvvGHOJeEOfcxlGFOtsM06aMoVDSY879WzpGqtSDKaJixvJ3qNk7jFTzfFyMi
TpMGdOl9gMPGlVmnfX03edRx/ybEfxABE8V6nmvqSrJvdBVZzk4MQleLzcNOFJyy
tmRkNaR5COoxq79nxVA63cZWLc8mMJUS1KmCJp8JdpNj6esz30YmdnOIvXtEPuJA
PQQkVUlzLTOrRez1kiCrwPsbjpiVDHDDpeLYpqRGTegScxoX1b6GZivSiKX8RWqI
1C78+4MVv5LVtwtcmi0Ha5tuz56pRLb4b/qkCPE7ieXH+OldG3B+uTvz9YFygFyl
Qw86+LhYt9xl7Zk=
-----END CERTIFICATE-----
Generated at Tue Nov 26 14:45:06 2024 by rpki-client on console-fra.rpki-client.org