Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/3137372e3139302e3137312e302f32342d3234203d3e20323633343539.roa
File:                     3137372e3139302e3137312e302f32342d3234203d3e20323633343539.roa (raw, json)
Hash identifier:          FDBRQ4DHMn6QIbTEljwzx4a/4gThgBtwDphi1Jua4tc=
Subject key identifier:   C9:7A:06:A0:58:40:9D:96:85:E8:E9:71:0A:21:5C:3F:B3:67:11:BF
Certificate issuer:       /CN=1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E
Certificate serial:       343C4D12E9FB400D9956DD195C47CE207FC89DC5
Authority key identifier: 1F:0D:02:1C:F2:5E:5F:3E:38:DA:B4:5D:EE:DD:26:D6:61:CF:E7:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/3137372e3139302e3137312e302f32342d3234203d3e20323633343539.roa
Signing time:             Fri 06 Sep 2024 12:52:46 +0000
ROA not before:           Fri 06 Sep 2024 12:47:46 +0000
ROA not after:            Fri 05 Sep 2025 12:52:46 +0000
asID:                     263459
IP address blocks:        177.190.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E.crl
                          rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:21:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:3c:4d:12:e9:fb:40:0d:99:56:dd:19:5c:47:ce:20:7f:c8:9d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E
        Validity
            Not Before: Sep  6 12:47:46 2024 GMT
            Not After : Sep  5 12:52:46 2025 GMT
        Subject: CN=C97A06A058409D9685E8E9710A215C3FB36711BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:11:c1:99:48:06:5b:7c:57:d9:50:3d:30:92:
                    17:56:7b:cb:7a:a2:0d:b2:3a:19:12:85:73:9b:3c:
                    6c:b9:73:4d:b0:d5:3a:0a:b4:cd:95:a4:61:05:54:
                    44:f2:d8:c0:15:46:3c:c6:8f:8f:f5:da:36:c1:94:
                    02:53:2b:35:0f:d0:d1:4d:0e:98:e0:d4:59:e6:18:
                    1d:a7:c9:60:77:6c:5f:94:2b:b7:bb:ce:5e:d3:bf:
                    66:66:5d:cc:9b:67:01:0f:8a:2f:4e:fb:f0:bf:d9:
                    de:9a:13:31:3a:03:2d:af:8f:d8:cf:67:54:e7:44:
                    2f:bc:b2:3c:bc:65:38:c5:71:48:59:5f:f5:33:84:
                    19:4d:03:d9:38:da:8e:c6:a9:02:4c:f4:bd:ab:03:
                    9f:74:c1:dc:af:f8:f8:13:84:95:14:e9:fa:03:c1:
                    0a:3d:30:23:f9:5b:7c:77:7c:02:c2:f9:5b:11:f3:
                    70:f0:ed:6b:36:cf:b3:65:84:62:75:b2:93:53:f7:
                    a9:e6:1d:12:c9:3d:b4:77:47:e9:6f:0e:65:10:93:
                    59:c7:f2:90:31:d3:92:c2:61:a9:03:ff:68:64:ad:
                    82:08:8e:ce:ab:4a:c7:56:2b:73:a1:af:d2:b9:d4:
                    94:39:35:c3:68:d6:8a:5e:cf:34:7e:49:54:e1:cc:
                    94:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7A:06:A0:58:40:9D:96:85:E8:E9:71:0A:21:5C:3F:B3:67:11:BF
            X509v3 Authority Key Identifier:
                keyid:1F:0D:02:1C:F2:5E:5F:3E:38:DA:B4:5D:EE:DD:26:D6:61:CF:E7:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F0D021CF25E5F3E38DAB45DEEDD26D661CFE78E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/3137372e3139302e3137312e302f32342d3234203d3e20323633343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:e0:c1:40:f5:34:c3:38:0e:d1:2e:8e:e2:11:dd:a0:1b:c6:
         eb:a7:b3:e7:8c:d5:20:aa:1c:61:07:bb:40:c3:65:cf:48:8f:
         32:f8:a7:b2:c9:2b:41:ac:35:31:0d:d0:32:62:7d:a6:6d:63:
         90:dd:cd:85:65:26:58:d8:c3:5e:d8:78:b6:f4:44:08:2d:05:
         7d:71:d6:0f:b9:03:d8:e3:ba:9f:db:a0:31:48:9e:6b:c9:01:
         69:b5:f0:7a:83:bf:f9:07:8c:f1:56:dd:0c:df:29:16:90:2c:
         aa:fe:0c:1d:ae:86:3d:54:d1:a3:94:75:0e:52:22:ea:21:c2:
         58:bd:93:59:49:e7:43:d5:25:50:ea:7f:7d:4f:16:9b:c2:84:
         1f:93:e5:f5:a2:f3:a6:26:41:7f:0e:5a:b1:61:c8:5b:5c:07:
         cf:73:c9:50:66:b4:96:a9:62:d8:b2:66:ac:0d:46:ab:cf:b2:
         4b:93:01:f0:d5:13:e4:9c:a4:46:2c:76:db:f9:6d:c6:58:43:
         7b:75:fe:9f:15:53:7c:da:5a:87:a0:23:0b:02:c3:32:08:06:
         41:21:d7:c8:4e:09:c2:e1:6e:fc:38:a2:f6:73:fc:19:21:24:
         9e:18:98:24:88:69:e3:52:e0:d5:fa:97:4b:5d:13:c2:8c:5e:
         52:ec:9f:f0
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUNDxNEun7QA2ZVt0ZXEfOIH/IncUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUYwRDAyMUNGMjVFNUYzRTM4REFCNDVERUVERDI2RDY2
MUNGRTc4RTAeFw0yNDA5MDYxMjQ3NDZaFw0yNTA5MDUxMjUyNDZaMDMxMTAvBgNV
BAMTKEM5N0EwNkEwNTg0MDlEOTY4NUU4RTk3MTBBMjE1QzNGQjM2NzExQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsEcGZSAZbfFfZUD0wkhdWe8t6
og2yOhkShXObPGy5c02w1ToKtM2VpGEFVETy2MAVRjzGj4/12jbBlAJTKzUP0NFN
Dpjg1FnmGB2nyWB3bF+UK7e7zl7Tv2ZmXcybZwEPii9O+/C/2d6aEzE6Ay2vj9jP
Z1TnRC+8sjy8ZTjFcUhZX/UzhBlNA9k42o7GqQJM9L2rA590wdyv+PgThJUU6foD
wQo9MCP5W3x3fALC+VsR83Dw7Ws2z7NlhGJ1spNT96nmHRLJPbR3R+lvDmUQk1nH
8pAx05LCYakD/2hkrYIIjs6rSsdWK3Ohr9K51JQ5NcNo1opezzR+SVThzJS3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUyXoGoFhAnZaF6OlxCiFcP7NnEb8wHwYDVR0j
BBgwFoAUHw0CHPJeXz442rRd7t0m1mHP544wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRURybUNpaW9Kb0xzdVozTFE3dno3VDF0bTdCOEJ0VVpCTUtTU3JnaGt3
S1QvMC8xRjBEMDIxQ0YyNUU1RjNFMzhEQUI0NURFRUREMjZENjYxQ0ZFNzhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGMEQwMjFDRjI1RTVGM0Uz
OERBQjQ1REVFREQyNkQ2NjFDRkU3OEUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VEcm1DaWlvSm9Mc3VaM0xRN3Z6N1QxdG03QjhCdFVaQk1LU1NyZ2hrd0tULzAv
MzEzNzM3MmUzMTM5MzAyZTMxMzczMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM0MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALG+qzANBgkqhkiG9w0BAQsFAAOCAQEAReDB
QPU0wzgO0S6O4hHdoBvG66ez54zVIKocYQe7QMNlz0iPMvinsskrQaw1MQ3QMmJ9
pm1jkN3NhWUmWNjDXth4tvRECC0FfXHWD7kD2OO6n9ugMUiea8kBabXweoO/+QeM
8VbdDN8pFpAsqv4MHa6GPVTRo5R1DlIi6iHCWL2TWUnnQ9UlUOp/fU8Wm8KEH5Pl
9aLzpiZBfw5asWHIW1wHz3PJUGa0lqli2LJmrA1Gq8+yS5MB8NUT5JykRix22/lt
xlhDe3X+nxVTfNpah6AjCwLDMggGQSHXyE4JwuFu/Dii9nP8GSEknhiYJIhp41Lg
1fqXS10TwoxeUuyf8A==
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:10 2024 by rpki-client on console-ams.rpki-client.org