Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3134332e3235352e31372e302f32342d3234203d3e203532393136.roa
File:                     3134332e3235352e31372e302f32342d3234203d3e203532393136.roa (raw, json)
Hash identifier:          CNwTiG9/oz0EvxsTeHSJgRbmRwmzfFxT34DY+S9qHYw=
Subject key identifier:   C2:F9:0A:33:85:79:FC:AF:04:DC:71:57:63:50:CF:16:9D:4E:D6:26
Certificate issuer:       /CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
Certificate serial:       2227C79D5CEE03A538A606A30C0E91D82C0FE0B3
Authority key identifier: EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3134332e3235352e31372e302f32342d3234203d3e203532393136.roa
Signing time:             Wed 03 Apr 2024 20:51:32 +0000
ROA not before:           Wed 03 Apr 2024 20:46:32 +0000
ROA not after:            Wed 02 Apr 2025 20:51:32 +0000
asID:                     52916
IP address blocks:        143.255.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.crl
                          rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:27:c7:9d:5c:ee:03:a5:38:a6:06:a3:0c:0e:91:d8:2c:0f:e0:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
        Validity
            Not Before: Apr  3 20:46:32 2024 GMT
            Not After : Apr  2 20:51:32 2025 GMT
        Subject: CN=C2F90A338579FCAF04DC71576350CF169D4ED626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:91:0f:e5:97:87:03:d2:05:41:73:a1:5c:91:
                    5b:18:4d:61:02:a8:bc:28:71:70:33:0c:60:38:12:
                    1e:80:90:70:3c:d8:c4:25:b5:ed:f9:49:b1:5a:d9:
                    87:4d:37:f1:44:c1:59:f9:d3:b1:71:2d:af:a2:d5:
                    da:55:6c:5f:cd:84:e6:19:cf:42:49:74:88:b9:ea:
                    81:60:86:68:5a:01:fe:a7:d3:75:05:e0:4b:7c:ac:
                    d0:ec:f2:ee:18:70:5a:9e:83:98:09:7a:a4:a9:e8:
                    ec:23:c2:24:62:e8:ca:b0:87:7d:86:93:16:c2:ee:
                    21:75:36:79:0b:d1:15:1a:72:74:72:a5:cf:d7:f7:
                    47:c3:e2:c7:7a:ba:a4:9a:94:9d:68:cc:fe:1f:fc:
                    89:2a:95:67:40:5a:aa:a8:12:b5:9a:2e:0d:ed:93:
                    e0:af:7a:59:f5:8f:b2:c6:60:98:0c:2d:db:01:f9:
                    29:32:d7:f9:96:1b:0a:45:12:6a:83:40:70:d3:f1:
                    69:91:54:d2:e7:51:17:0e:58:c3:4e:87:8c:f4:29:
                    e4:64:2a:6c:66:4f:83:dc:31:20:8c:a7:29:d0:e9:
                    3d:44:35:94:25:96:4f:80:2a:dc:e2:2b:3c:5e:db:
                    9d:01:a1:ad:f5:c3:1f:34:db:95:25:26:23:89:49:
                    b5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F9:0A:33:85:79:FC:AF:04:DC:71:57:63:50:CF:16:9D:4E:D6:26
            X509v3 Authority Key Identifier:
                keyid:EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3134332e3235352e31372e302f32342d3234203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:88:2f:3e:41:a5:3f:36:8b:01:a5:12:ab:a7:15:7d:81:ae:
         b2:e4:47:8b:7e:33:84:ea:f8:69:0a:4d:2a:fe:de:6b:35:23:
         9a:39:e9:f9:ca:58:a5:da:46:1f:ca:dd:3c:76:3b:a3:3d:a7:
         4a:ce:02:77:53:13:37:67:50:8e:2d:94:bb:e6:9a:73:b3:8c:
         f1:bc:fd:8f:1f:ff:c4:3f:76:b8:e6:e4:ab:68:a8:ba:28:21:
         ec:85:63:a7:fe:ef:30:8d:cb:cf:6d:b1:e9:47:b4:2e:0c:1c:
         fd:b2:fd:26:f6:b1:8f:c9:7d:e7:ea:00:b4:b1:f2:74:d1:0f:
         f7:47:3c:71:02:86:f9:3d:ba:dd:cb:29:26:04:fe:5c:13:25:
         06:b3:76:42:69:88:fc:36:b5:0d:db:59:ec:2e:ac:01:95:98:
         ef:0d:b6:6c:64:75:1e:ae:f4:cd:b4:a4:20:94:3f:48:cc:aa:
         e5:a8:c3:18:de:a7:3e:4d:70:e7:dd:25:5e:8e:d7:5f:ab:28:
         ee:08:bd:65:1d:33:82:a5:14:d2:0e:30:3a:35:db:ce:5e:5e:
         8d:ba:4e:95:42:83:19:ae:09:6d:3c:70:ab:aa:3b:6d:95:ee:
         e1:77:6b:fc:15:7b:ec:48:c2:36:32:ce:f8:5e:bd:3c:31:99:
         ed:9f:62:9a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIifHnVzuA6U4pgajDA6R2CwP4LMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY5MDhBMTc3RkFGM0VERUVBRjM5RUYxQkMzQjIwODIy
NTMwMkU3NzAeFw0yNDA0MDMyMDQ2MzJaFw0yNTA0MDIyMDUxMzJaMDMxMTAvBgNV
BAMTKEMyRjkwQTMzODU3OUZDQUYwNERDNzE1NzYzNTBDRjE2OUQ0RUQ2MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDkQ/ll4cD0gVBc6FckVsYTWEC
qLwocXAzDGA4Eh6AkHA82MQlte35SbFa2YdNN/FEwVn507FxLa+i1dpVbF/NhOYZ
z0JJdIi56oFghmhaAf6n03UF4Et8rNDs8u4YcFqeg5gJeqSp6OwjwiRi6Mqwh32G
kxbC7iF1NnkL0RUacnRypc/X90fD4sd6uqSalJ1ozP4f/IkqlWdAWqqoErWaLg3t
k+Cveln1j7LGYJgMLdsB+Sky1/mWGwpFEmqDQHDT8WmRVNLnURcOWMNOh4z0KeRk
KmxmT4PcMSCMpynQ6T1ENZQllk+AKtziKzxe250Boa31wx8025UlJiOJSbWlAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUwvkKM4V5/K8E3HFXY1DPFp1O1iYwHwYDVR0j
BBgwFoAU75CKF3+vPt7q857xvDsggiUwLncwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTFWOWU4UEs4YWNGcGhrdjJyeEpKVm9hVFI0cjNhVnlDZkhWenJxM3Vo
NGovMS9FRjkwOEExNzdGQUYzRURFRUFGMzlFRjFCQzNCMjA4MjI1MzAyRTc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGOTA4QTE3N0ZBRjNFREVF
QUYzOUVGMUJDM0IyMDgyMjUzMDJFNzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0UxVjllOFBLOGFjRnBoa3YycnhKSlZvYVRSNHIzYVZ5Q2ZIVnpycTN1aDRqLzEv
MzEzNDMzMmUzMjM1MzUyZTMxMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzkzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAj/8RMA0GCSqGSIb3DQEBCwUAA4IBAQAeiC8+QaU/
NosBpRKrpxV9ga6y5EeLfjOE6vhpCk0q/t5rNSOaOen5ylil2kYfyt08djujPadK
zgJ3UxM3Z1COLZS75ppzs4zxvP2PH//EP3a45uSraKi6KCHshWOn/u8wjcvPbbHp
R7QuDBz9sv0m9rGPyX3n6gC0sfJ00Q/3RzxxAob5PbrdyykmBP5cEyUGs3ZCaYj8
NrUN21nsLqwBlZjvDbZsZHUervTNtKQglD9IzKrlqMMY3qc+TXDn3SVejtdfqyju
CL1lHTOCpRTSDjA6NdvOXl6Nuk6VQoMZrgltPHCrqjttle7hd2v8FXvsSMI2Ms74
Xr08MZntn2Ka
-----END CERTIFICATE-----
Generated at Fri Jun 28 06:07:40 2024 by rpki-client on console-fra.rpki-client.org