Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135382e302f32342d3234203d3e203532373732.roa
File:                     3137372e33392e3135382e302f32342d3234203d3e203532373732.roa (raw, json)
Hash identifier:          VBoZjiUNtCgb0ZvepA3zKGTw7hg7qhBPQRvimBel+Hs=
Subject key identifier:   E6:9F:94:2F:05:E2:90:E6:9C:60:4B:D7:A1:CC:57:60:64:FA:A2:85
Certificate issuer:       /CN=E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64
Certificate serial:       3A0FEAEC0437C45EDF030F7F21C826CB169BDF89
Authority key identifier: E7:99:2D:D1:B2:52:5C:1F:90:08:B6:33:9B:9D:B3:ED:A6:E6:2E:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135382e302f32342d3234203d3e203532373732.roa
Signing time:             Sat 31 Aug 2024 14:13:08 +0000
ROA not before:           Sat 31 Aug 2024 14:08:08 +0000
ROA not after:            Sat 30 Aug 2025 14:13:08 +0000
asID:                     52772
IP address blocks:        177.39.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.crl
                          rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:14:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:0f:ea:ec:04:37:c4:5e:df:03:0f:7f:21:c8:26:cb:16:9b:df:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64
        Validity
            Not Before: Aug 31 14:08:08 2024 GMT
            Not After : Aug 30 14:13:08 2025 GMT
        Subject: CN=E69F942F05E290E69C604BD7A1CC576064FAA285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:77:6c:d0:4c:c1:0f:3b:e4:f2:81:d1:8c:d1:
                    23:a7:cd:e7:b4:1b:2a:0c:59:6c:ef:56:f6:5e:33:
                    92:b5:24:fc:8d:b6:47:f7:2a:c0:36:05:64:a1:71:
                    6f:cf:96:02:e4:94:87:ba:26:86:93:56:86:37:ee:
                    7e:9b:3f:6a:f6:14:fb:47:5b:8b:fa:cb:46:e3:6e:
                    29:30:e2:25:c8:2b:66:1f:95:fc:1f:33:9c:3a:67:
                    d2:d4:8a:85:22:9b:69:63:5e:37:1c:51:b7:c9:65:
                    6e:6d:50:da:92:af:c8:5d:ab:5c:a2:38:28:41:99:
                    de:02:43:4e:31:ea:3c:b8:2d:1d:69:cb:74:d9:d1:
                    a5:d7:2a:43:7e:77:4e:64:0c:24:2e:7c:9e:1e:1b:
                    ef:39:da:83:b9:8f:00:76:bd:5f:ac:20:00:66:10:
                    f7:ea:49:f1:f7:1b:6b:3a:80:97:ec:37:55:bd:52:
                    31:5d:fc:7c:fd:2f:77:0d:46:77:6f:fe:69:38:e2:
                    28:e6:1f:b9:13:a2:b0:6b:9f:fc:c7:f3:87:c4:41:
                    6a:d6:b1:18:1d:29:6c:ea:39:43:52:5a:17:92:58:
                    be:d8:2b:7f:a0:5a:c7:d0:fa:de:e2:11:63:6b:ea:
                    8f:2e:93:9f:d6:ae:2a:35:93:d8:77:45:cf:01:ec:
                    3f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:9F:94:2F:05:E2:90:E6:9C:60:4B:D7:A1:CC:57:60:64:FA:A2:85
            X509v3 Authority Key Identifier:
                keyid:E7:99:2D:D1:B2:52:5C:1F:90:08:B6:33:9B:9D:B3:ED:A6:E6:2E:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7992DD1B2525C1F9008B6339B9DB3EDA6E62E64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135382e302f32342d3234203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:6c:8c:46:a5:e3:bb:01:21:13:6a:87:75:f6:f9:fe:79:e1:
         5c:ac:5d:c6:69:16:3f:b3:a6:6a:c3:c6:50:6e:b4:fa:21:f2:
         2c:7f:e3:19:89:35:bc:d3:0d:6f:44:75:18:99:c2:3b:fb:f7:
         91:d3:e1:e6:7a:fc:db:a8:8f:2f:74:ce:17:a4:65:5a:c7:76:
         74:e1:2b:41:c1:c3:fa:19:c5:8f:d4:c3:80:ad:c1:58:94:55:
         4c:22:90:d2:9a:4a:a1:23:4d:5b:c8:35:1f:ba:c5:61:75:97:
         ec:8d:5e:28:96:8d:c0:dd:6f:d3:d7:15:39:43:db:b9:8b:b2:
         4a:b8:c1:e8:b0:5e:d9:95:c9:ed:48:2d:be:d4:1a:2d:2f:98:
         32:f4:51:1e:86:26:0e:cb:fc:f8:18:ab:88:2e:66:dc:36:ac:
         84:8d:2b:57:d9:42:88:7c:bc:e9:94:22:bf:ae:d4:d5:c9:36:
         f9:93:5c:f3:e8:8a:79:39:5a:20:b5:aa:f3:92:ef:d3:91:95:
         37:62:aa:88:38:7a:7a:ba:92:af:d0:91:bf:88:3d:7d:c1:15:
         2f:9e:24:70:98:8f:5a:8e:33:d1:ac:64:e2:de:51:e3:80:f7:
         26:01:3d:c9:7c:21:57:e3:95:ee:c2:61:f3:19:30:82:6a:73:
         88:b6:39:ee
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOg/q7AQ3xF7fAw9/Icgmyxab34kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc5OTJERDFCMjUyNUMxRjkwMDhCNjMzOUI5REIzRURB
NkU2MkU2NDAeFw0yNDA4MzExNDA4MDhaFw0yNTA4MzAxNDEzMDhaMDMxMTAvBgNV
BAMTKEU2OUY5NDJGMDVFMjkwRTY5QzYwNEJEN0ExQ0M1NzYwNjRGQUEyODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPd2zQTMEPO+TygdGM0SOnzee0
GyoMWWzvVvZeM5K1JPyNtkf3KsA2BWShcW/PlgLklIe6JoaTVoY37n6bP2r2FPtH
W4v6y0bjbikw4iXIK2YflfwfM5w6Z9LUioUim2ljXjccUbfJZW5tUNqSr8hdq1yi
OChBmd4CQ04x6jy4LR1py3TZ0aXXKkN+d05kDCQufJ4eG+852oO5jwB2vV+sIABm
EPfqSfH3G2s6gJfsN1W9UjFd/Hz9L3cNRndv/mk44ijmH7kTorBrn/zH84fEQWrW
sRgdKWzqOUNSWheSWL7YK3+gWsfQ+t7iEWNr6o8uk5/Wrio1k9h3Rc8B7D9tAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU5p+ULwXikOacYEvXocxXYGT6ooUwHwYDVR0j
BBgwFoAU55kt0bJSXB+QCLYzm52z7abmLmQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDN4NHB3cmprSHY4Mm0xZ3hUS25wdjhKNXg0U0NKZk1iVUt5TldpUGR4
VGYvMC9FNzk5MkREMUIyNTI1QzFGOTAwOEI2MzM5QjlEQjNFREE2RTYyRTY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3OTkyREQxQjI1MjVDMUY5
MDA4QjYzMzlCOURCM0VEQTZFNjJFNjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QzeDRwd3Jqa0h2ODJtMWd4VEtucHY4SjV4NFNDSmZNYlVLeU5XaVBkeFRmLzAv
MzEzNzM3MmUzMzM5MmUzMTM1MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzczNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsSeeMA0GCSqGSIb3DQEBCwUAA4IBAQAVbIxGpeO7
ASETaod19vn+eeFcrF3GaRY/s6Zqw8ZQbrT6IfIsf+MZiTW80w1vRHUYmcI7+/eR
0+HmevzbqI8vdM4XpGVax3Z04StBwcP6GcWP1MOArcFYlFVMIpDSmkqhI01byDUf
usVhdZfsjV4olo3A3W/T1xU5Q9u5i7JKuMHosF7ZlcntSC2+1BotL5gy9FEehiYO
y/z4GKuILmbcNqyEjStX2UKIfLzplCK/rtTVyTb5k1zz6Ip5OVogtarzku/TkZU3
YqqIOHp6upKv0JG/iD19wRUvniRwmI9ajjPRrGTi3lHjgPcmAT3JfCFX45XuwmHz
GTCCanOItjnu
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:50 2024 by rpki-client on console-fra.rpki-client.org