Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3135322e3131362e302f32322d3232203d3e20323733333039.roa
File:                     3137372e3135322e3131362e302f32322d3232203d3e20323733333039.roa (raw, json)
Hash identifier:          aAF7K+8V/b3vpY5330iAiaMM8oikyWVzxmrSU2b4u0Q=
Subject key identifier:   B1:83:B5:48:A5:9B:3B:5D:7D:0B:8B:E2:A8:7F:C5:F0:CB:20:D7:81
Certificate issuer:       /CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
Certificate serial:       5C59BCE278DCFFAD5E024BE6EF1ABB22E4185D4C
Authority key identifier: 11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3135322e3131362e302f32322d3232203d3e20323733333039.roa
Signing time:             Thu 09 May 2024 13:30:16 +0000
ROA not before:           Thu 09 May 2024 13:25:16 +0000
ROA not after:            Thu 08 May 2025 13:30:16 +0000
asID:                     273309
IP address blocks:        177.152.116.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:59:bc:e2:78:dc:ff:ad:5e:02:4b:e6:ef:1a:bb:22:e4:18:5d:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C40A54AEA8862C23E5838BA28E2EC6317D1116
        Validity
            Not Before: May  9 13:25:16 2024 GMT
            Not After : May  8 13:30:16 2025 GMT
        Subject: CN=B183B548A59B3B5D7D0B8BE2A87FC5F0CB20D781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:95:db:e0:7f:8b:ea:72:f8:52:c8:7d:82:37:
                    07:ab:3b:53:94:52:45:31:f8:4d:e8:1d:eb:b5:3b:
                    71:d5:d1:98:8d:48:be:a4:c9:95:bd:90:48:d7:52:
                    aa:f3:e8:70:c0:7f:c3:df:79:75:0a:35:c9:1f:e5:
                    34:39:34:69:f2:02:e6:ad:79:54:90:8c:e0:12:44:
                    3b:2d:d7:96:26:72:ec:35:b5:3d:f3:5c:f1:16:77:
                    4d:69:a6:f1:4c:7e:39:c3:a5:c2:27:c5:02:40:c6:
                    e0:ea:d4:22:9d:5e:49:20:c1:23:67:ac:da:51:34:
                    5d:f2:08:25:c1:12:44:ca:e5:05:2b:a1:66:ac:21:
                    97:d0:85:e5:c3:1c:77:02:be:f5:42:a2:df:b1:6f:
                    d5:fb:d0:15:62:01:34:92:d0:68:75:67:3b:53:59:
                    1a:b2:6d:f4:16:92:1a:d5:9f:5b:80:12:27:93:5c:
                    14:7a:28:bd:5a:ee:4f:0c:f8:66:61:51:f2:fc:58:
                    b9:52:b6:80:6e:8d:6d:a9:d9:ec:ca:68:f4:a5:a8:
                    af:75:b5:5b:97:a7:61:34:4e:ea:77:40:65:8a:b0:
                    02:ec:a4:db:24:d7:bc:3e:7c:70:27:31:4f:25:5c:
                    af:e4:d3:e8:d1:25:b9:bd:ac:dd:7d:d3:01:c7:67:
                    4d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:83:B5:48:A5:9B:3B:5D:7D:0B:8B:E2:A8:7F:C5:F0:CB:20:D7:81
            X509v3 Authority Key Identifier:
                keyid:11:C4:0A:54:AE:A8:86:2C:23:E5:83:8B:A2:8E:2E:C6:31:7D:11:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/11C40A54AEA8862C23E5838BA28E2EC6317D1116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11C40A54AEA8862C23E5838BA28E2EC6317D1116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/3137372e3135322e3131362e302f32322d3232203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cd:15:85:ee:54:f0:21:b9:f7:29:35:04:8b:e7:3b:77:98:eb:
         68:a9:fb:6d:09:62:69:93:32:74:f1:b1:56:b9:e6:d5:60:7c:
         51:ca:8f:60:5a:7b:7f:26:89:57:2d:f2:0e:28:c2:3c:d6:15:
         c5:ec:e3:c8:01:d0:7d:04:c5:26:b3:a2:b9:8b:56:2a:16:01:
         06:f3:e5:dc:a7:40:35:85:8b:b0:23:b0:f5:63:3b:a6:a8:cb:
         88:13:b3:c6:99:a6:2c:45:f7:be:5d:97:2c:f8:2e:f9:92:e1:
         a4:78:f6:de:28:f8:57:67:77:68:86:52:81:12:ce:69:b7:81:
         fe:f4:5d:59:ab:f2:4f:07:ae:6c:11:79:72:02:11:bd:ce:c9:
         0b:14:d8:6a:c3:80:a6:e7:85:65:f5:11:e8:4d:9f:07:88:1e:
         04:64:ec:ec:49:05:fa:c1:fd:03:37:fe:03:5d:90:c3:8f:31:
         f2:43:d2:d9:32:63:6b:5d:d8:d1:2d:0d:83:1a:80:f4:ca:23:
         70:12:c0:8c:79:f1:ce:f4:b6:fa:d2:0d:c2:80:5b:9b:37:d9:
         54:57:27:a5:66:03:74:1d:e3:6e:6f:1b:cb:bc:16:ca:79:51:
         66:ee:5c:65:5c:0e:ac:1f:bb:f5:bf:de:0f:c5:43:15:2b:5e:
         0d:bd:6c:63
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUXFm84njc/61eAkvm7xq7IuQYXUwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFDNDBBNTRBRUE4ODYyQzIzRTU4MzhCQTI4RTJFQzYz
MTdEMTExNjAeFw0yNDA1MDkxMzI1MTZaFw0yNTA1MDgxMzMwMTZaMDMxMTAvBgNV
BAMTKEIxODNCNTQ4QTU5QjNCNUQ3RDBCOEJFMkE4N0ZDNUYwQ0IyMEQ3ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYldvgf4vqcvhSyH2CNwerO1OU
UkUx+E3oHeu1O3HV0ZiNSL6kyZW9kEjXUqrz6HDAf8PfeXUKNckf5TQ5NGnyAuat
eVSQjOASRDst15Ymcuw1tT3zXPEWd01ppvFMfjnDpcInxQJAxuDq1CKdXkkgwSNn
rNpRNF3yCCXBEkTK5QUroWasIZfQheXDHHcCvvVCot+xb9X70BViATSS0Gh1ZztT
WRqybfQWkhrVn1uAEieTXBR6KL1a7k8M+GZhUfL8WLlStoBujW2p2ezKaPSlqK91
tVuXp2E0Tup3QGWKsALspNsk17w+fHAnMU8lXK/k0+jRJbm9rN190wHHZ001AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUsYO1SKWbO119C4viqH/F8Msg14EwHwYDVR0j
BBgwFoAUEcQKVK6ohiwj5YOLoo4uxjF9ERYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFNpalBXWUY1dWNBRGg2NWl2TnNZOGV5a2VVWTdQdnQzeEZWYzFkQ0xa
R0MvMC8xMUM0MEE1NEFFQTg4NjJDMjNFNTgzOEJBMjhFMkVDNjMxN0QxMTE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExQzQwQTU0QUVBODg2MkMy
M0U1ODM4QkEyOEUyRUM2MzE3RDExMTYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RTaWpQV1lGNXVjQURoNjVpdk5zWThleWtlVVk3UHZ0M3hGVmMxZENMWkdDLzAv
MzEzNzM3MmUzMTM1MzIyZTMxMzEzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzczMzMzMzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArGYdDANBgkqhkiG9w0BAQsFAAOCAQEAzRWF
7lTwIbn3KTUEi+c7d5jraKn7bQliaZMydPGxVrnm1WB8UcqPYFp7fyaJVy3yDijC
PNYVxezjyAHQfQTFJrOiuYtWKhYBBvPl3KdANYWLsCOw9WM7pqjLiBOzxpmmLEX3
vl2XLPgu+ZLhpHj23ij4V2d3aIZSgRLOabeB/vRdWavyTweubBF5cgIRvc7JCxTY
asOApueFZfUR6E2fB4geBGTs7EkF+sH9Azf+A12Qw48x8kPS2TJja13Y0S0NgxqA
9MojcBLAjHnxzvS2+tINwoBbmzfZVFcnpWYDdB3jbm8by7wWynlRZu5cZVwOrB+7
9b/eD8VDFSteDb1sYw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:09 2024 by rpki-client on console-ams.rpki-client.org