Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3137372e31302e32302e302f32342d3234203d3e203532393136.roa
File:                     3137372e31302e32302e302f32342d3234203d3e203532393136.roa (raw, json)
Hash identifier:          TYr0sfjrm3n2agRExp6Mp1Rok1F7R2wa9j0aO0xGcLo=
Subject key identifier:   96:1E:52:A3:5F:7E:24:63:A0:34:0C:AB:1B:4E:11:53:A4:40:54:9E
Certificate issuer:       /CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
Certificate serial:       10DF2F4FA3010ECB951B4ED305D0A080D845D957
Authority key identifier: EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3137372e31302e32302e302f32342d3234203d3e203532393136.roa
Signing time:             Wed 03 Apr 2024 20:51:35 +0000
ROA not before:           Wed 03 Apr 2024 20:46:35 +0000
ROA not after:            Wed 02 Apr 2025 20:51:35 +0000
asID:                     52916
IP address blocks:        177.10.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.crl
                          rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:df:2f:4f:a3:01:0e:cb:95:1b:4e:d3:05:d0:a0:80:d8:45:d9:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
        Validity
            Not Before: Apr  3 20:46:35 2024 GMT
            Not After : Apr  2 20:51:35 2025 GMT
        Subject: CN=961E52A35F7E2463A0340CAB1B4E1153A440549E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d3:0b:ba:c2:7b:df:85:9c:31:bd:6f:4d:bf:
                    68:26:6e:70:33:2e:a8:01:d9:ad:de:a5:a0:1c:ec:
                    db:e4:40:bd:1c:9f:40:4a:d0:fe:24:dc:74:0b:89:
                    e6:fb:18:68:5e:c6:bc:64:d3:ed:8f:5c:65:26:58:
                    25:c8:3e:ee:24:36:1a:70:3c:5e:a6:71:43:44:d5:
                    40:cf:77:3a:32:b0:e7:91:4c:6f:74:99:71:0f:6b:
                    0c:bb:e0:c2:ea:72:1e:39:b0:04:6c:b6:c6:cd:4a:
                    e4:4f:a1:7a:5f:b8:65:42:02:7e:62:14:97:cf:32:
                    ae:fb:8b:78:1e:24:3f:93:f5:69:a2:11:14:97:86:
                    70:f2:bf:df:9c:f1:d0:16:79:97:1e:80:e5:b7:75:
                    f5:4a:f0:8a:aa:d8:ce:b9:53:27:7f:f9:b0:0a:2a:
                    43:5e:99:b4:19:f1:c7:d9:30:ca:5f:e5:24:33:61:
                    ce:c2:13:5c:ec:a4:a8:ac:4c:59:2f:2b:d0:87:2d:
                    39:eb:6f:a1:f3:5c:bb:b0:05:b8:26:c8:b3:ce:1c:
                    e3:20:a1:7f:5e:f7:30:c3:2e:2a:2e:d5:ef:ab:2c:
                    4f:34:2a:b6:13:06:c1:14:2e:66:e0:6a:76:0c:76:
                    98:ac:68:55:6c:02:30:e3:50:41:84:c3:85:03:96:
                    49:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:1E:52:A3:5F:7E:24:63:A0:34:0C:AB:1B:4E:11:53:A4:40:54:9E
            X509v3 Authority Key Identifier:
                keyid:EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3137372e31302e32302e302f32342d3234203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:2f:c0:8e:03:24:b8:f9:d6:59:46:ad:ea:a3:6f:8a:04:19:
         50:fe:d7:d9:ca:1a:5f:eb:29:2e:af:bc:fa:d6:13:5b:82:c6:
         68:09:22:7c:2d:82:96:61:a1:23:ca:25:8e:11:10:aa:47:f3:
         58:cb:c1:05:63:6e:cf:b8:b0:0d:00:79:fa:6a:1e:88:f7:64:
         7b:4c:63:59:f9:b8:c3:f3:81:f0:fe:d4:44:b9:ef:85:44:f0:
         07:a1:dc:3b:ee:c5:4e:fc:71:7d:48:cb:8b:d1:7b:4f:de:9f:
         5f:b2:ac:5d:09:68:74:ed:43:16:40:59:0d:47:a9:73:83:82:
         24:ec:39:e6:7d:e4:50:08:84:88:2b:e8:e9:2f:9b:1f:58:02:
         30:ee:f7:2e:6d:42:61:43:78:30:02:bc:28:c8:87:80:b7:10:
         89:00:d0:27:ce:07:00:05:7c:11:6a:43:37:13:1b:f8:ed:79:
         2a:2e:29:17:ad:ad:06:a8:4f:d1:31:9b:92:ff:c9:83:4d:09:
         f9:2e:4a:e1:03:74:f2:15:e7:da:cb:57:22:8f:3b:b1:2b:22:
         2e:20:4f:b1:21:7d:93:44:2f:0e:86:63:31:9a:64:dc:83:e9:
         bd:34:70:5a:9e:a0:db:7f:99:e5:6c:f0:72:ff:ac:5e:da:da:
         97:fb:b0:fe
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUEN8vT6MBDsuVG07TBdCggNhF2VcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY5MDhBMTc3RkFGM0VERUVBRjM5RUYxQkMzQjIwODIy
NTMwMkU3NzAeFw0yNDA0MDMyMDQ2MzVaFw0yNTA0MDIyMDUxMzVaMDMxMTAvBgNV
BAMTKDk2MUU1MkEzNUY3RTI0NjNBMDM0MENBQjFCNEUxMTUzQTQ0MDU0OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi0wu6wnvfhZwxvW9Nv2gmbnAz
LqgB2a3epaAc7NvkQL0cn0BK0P4k3HQLieb7GGhexrxk0+2PXGUmWCXIPu4kNhpw
PF6mcUNE1UDPdzoysOeRTG90mXEPawy74MLqch45sARstsbNSuRPoXpfuGVCAn5i
FJfPMq77i3geJD+T9WmiERSXhnDyv9+c8dAWeZcegOW3dfVK8Iqq2M65Uyd/+bAK
KkNembQZ8cfZMMpf5SQzYc7CE1zspKisTFkvK9CHLTnrb6HzXLuwBbgmyLPOHOMg
oX9e9zDDLiou1e+rLE80KrYTBsEULmbganYMdpisaFVsAjDjUEGEw4UDlkk7AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUlh5So19+JGOgNAyrG04RU6RAVJ4wHwYDVR0j
BBgwFoAU75CKF3+vPt7q857xvDsggiUwLncwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTFWOWU4UEs4YWNGcGhrdjJyeEpKVm9hVFI0cjNhVnlDZkhWenJxM3Vo
NGovMS9FRjkwOEExNzdGQUYzRURFRUFGMzlFRjFCQzNCMjA4MjI1MzAyRTc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGOTA4QTE3N0ZBRjNFREVF
QUYzOUVGMUJDM0IyMDgyMjUzMDJFNzcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0UxVjllOFBLOGFjRnBoa3YycnhKSlZvYVRSNHIzYVZ5Q2ZIVnpycTN1aDRqLzEv
MzEzNzM3MmUzMTMwMmUzMjMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM5
MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALEKFDANBgkqhkiG9w0BAQsFAAOCAQEAFS/AjgMkuPnW
WUat6qNvigQZUP7X2coaX+spLq+8+tYTW4LGaAkifC2ClmGhI8oljhEQqkfzWMvB
BWNuz7iwDQB5+moeiPdke0xjWfm4w/OB8P7URLnvhUTwB6HcO+7FTvxxfUjLi9F7
T96fX7KsXQlodO1DFkBZDUepc4OCJOw55n3kUAiEiCvo6S+bH1gCMO73Lm1CYUN4
MAK8KMiHgLcQiQDQJ84HAAV8EWpDNxMb+O15Ki4pF62tBqhP0TGbkv/Jg00J+S5K
4QN08hXn2stXIo87sSsiLiBPsSF9k0QvDoZjMZpk3IPpvTRwWp6g23+Z5Wzwcv+s
Xtral/uw/g==
-----END CERTIFICATE-----
Generated at Fri Jun 28 05:28:06 2024 by rpki-client on console-ams.rpki-client.org