Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139322e302f32332d3233203d3e20323632383238.roa
File:                     3137372e3135352e3139322e302f32332d3233203d3e20323632383238.roa (raw, json)
Hash identifier:          m/cpKY6KAjqDcewDC+zZpAs1CtTOpg2E7EczJrI8Pvk=
Subject key identifier:   F6:C5:BF:21:BE:64:2B:9D:06:7A:AD:AF:B3:FE:3A:8A:70:C0:D4:A2
Certificate issuer:       /CN=CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8
Certificate serial:       4ADFFD0D29B8545A84D76B206992B7D7370B6F26
Authority key identifier: CC:1F:4A:B3:9C:78:F0:8A:78:01:EE:D7:E7:A3:1B:2D:F1:80:42:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139322e302f32332d3233203d3e20323632383238.roa
Signing time:             Tue 03 Sep 2024 20:09:00 +0000
ROA not before:           Tue 03 Sep 2024 20:04:00 +0000
ROA not after:            Tue 02 Sep 2025 20:09:00 +0000
asID:                     262828
IP address blocks:        177.155.192.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.crl
                          rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:df:fd:0d:29:b8:54:5a:84:d7:6b:20:69:92:b7:d7:37:0b:6f:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8
        Validity
            Not Before: Sep  3 20:04:00 2024 GMT
            Not After : Sep  2 20:09:00 2025 GMT
        Subject: CN=F6C5BF21BE642B9D067AADAFB3FE3A8A70C0D4A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:13:d2:9f:9e:67:86:1a:a1:f6:b0:a0:62:79:
                    f0:d5:85:2e:e6:c7:38:55:7c:c4:72:a9:fb:3b:28:
                    bb:3b:a1:6d:25:86:af:92:11:1a:f5:25:97:22:0f:
                    66:47:d4:44:84:eb:4f:2c:e8:97:ad:cd:86:09:90:
                    b7:1f:5f:d3:37:65:52:95:ed:43:3c:b8:fb:ec:f2:
                    ec:22:f1:45:ec:7f:d6:a8:47:06:de:4e:7f:ef:f8:
                    a4:d5:f2:08:50:0d:fc:0b:eb:8d:ff:75:9c:b0:5e:
                    21:97:4e:ab:46:a0:65:c4:0b:5b:90:be:ce:85:eb:
                    9e:86:f4:12:5d:af:ee:17:b7:52:6b:19:51:3d:f0:
                    6a:35:e6:2e:04:68:82:b3:6f:53:fd:ee:b3:b8:eb:
                    2a:a3:e4:c2:05:ad:42:fa:5c:6e:ad:1b:6c:03:03:
                    2d:88:c0:1e:0a:bc:46:3e:99:d8:63:88:7d:27:71:
                    11:07:d6:38:42:20:b0:78:18:99:fa:23:3b:a4:48:
                    94:5e:b4:6e:de:36:52:2a:10:ad:aa:4d:6e:70:cd:
                    f5:c1:14:a8:b8:c9:b5:97:30:3d:bd:b8:96:10:e1:
                    a2:a7:43:d8:1b:ac:3c:56:c6:aa:8c:ae:f7:73:45:
                    a6:c7:9f:f3:54:68:b5:f6:47:86:4f:c3:45:76:3e:
                    c4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C5:BF:21:BE:64:2B:9D:06:7A:AD:AF:B3:FE:3A:8A:70:C0:D4:A2
            X509v3 Authority Key Identifier:
                keyid:CC:1F:4A:B3:9C:78:F0:8A:78:01:EE:D7:E7:A3:1B:2D:F1:80:42:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3137372e3135352e3139322e302f32332d3233203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:4b:20:b5:b2:14:2a:8d:3d:f4:53:b3:58:d0:de:04:12:7f:
         f0:7b:41:b5:88:83:09:81:a6:38:bd:b3:9f:1e:4a:c1:a6:cb:
         e9:53:10:56:a4:f4:68:3f:25:7d:2e:0b:1a:fe:71:f4:66:2b:
         d8:a3:c0:0d:51:9c:cd:d2:cd:87:c7:08:fc:86:e9:0b:5d:62:
         e2:09:c3:7f:bd:3a:fd:ad:65:7c:85:c4:6b:4a:0d:66:98:38:
         11:1d:af:67:42:4e:b3:8f:0d:bc:6a:ae:e5:1b:33:8d:84:48:
         97:3f:9a:5b:25:eb:95:19:d6:59:be:3a:9c:7b:30:9a:18:ec:
         b2:22:12:62:50:29:0f:c0:0a:ed:dd:ee:ed:98:f4:39:d1:47:
         7d:ed:9a:8a:ea:ab:b0:49:4d:28:41:0b:f1:29:a8:e1:a7:73:
         ac:51:84:7c:55:3e:50:ec:8d:60:3b:21:62:25:31:dd:55:b1:
         37:b3:dd:1a:5a:41:6b:6f:98:9f:87:44:10:c8:4a:15:e9:99:
         4a:f2:77:84:3c:61:16:33:d3:64:90:c0:94:e3:00:71:65:d3:
         03:94:c7:4a:56:6b:97:09:96:04:88:91:4e:72:3d:0a:ea:45:
         19:80:05:fe:cf:1b:44:9b:5b:17:ee:3f:9d:e5:79:86:dc:bf:
         d0:fa:ba:dd
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUSt/9DSm4VFqE12sgaZK31zcLbyYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0MxRjRBQjM5Qzc4RjA4QTc4MDFFRUQ3RTdBMzFCMkRG
MTgwNDJFODAeFw0yNDA5MDMyMDA0MDBaFw0yNTA5MDIyMDA5MDBaMDMxMTAvBgNV
BAMTKEY2QzVCRjIxQkU2NDJCOUQwNjdBQURBRkIzRkUzQThBNzBDMEQ0QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8E9KfnmeGGqH2sKBiefDVhS7m
xzhVfMRyqfs7KLs7oW0lhq+SERr1JZciD2ZH1ESE608s6JetzYYJkLcfX9M3ZVKV
7UM8uPvs8uwi8UXsf9aoRwbeTn/v+KTV8ghQDfwL643/dZywXiGXTqtGoGXEC1uQ
vs6F656G9BJdr+4Xt1JrGVE98Go15i4EaIKzb1P97rO46yqj5MIFrUL6XG6tG2wD
Ay2IwB4KvEY+mdhjiH0ncREH1jhCILB4GJn6IzukSJRetG7eNlIqEK2qTW5wzfXB
FKi4ybWXMD29uJYQ4aKnQ9gbrDxWxqqMrvdzRabHn/NUaLX2R4ZPw0V2PsRxAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU9sW/Ib5kK50Geq2vs/46inDA1KIwHwYDVR0j
BBgwFoAUzB9Ks5x48Ip4Ae7X56MbLfGAQugwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUZGWDVzRUp5UTdVZU5SeXRwdTdjODFLdDhYZ0RwN1NyTk1tU0xVZlEx
OGYvMC9DQzFGNEFCMzlDNzhGMDhBNzgwMUVFRDdFN0EzMUIyREYxODA0MkU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDMUY0QUIzOUM3OEYwOEE3
ODAxRUVEN0U3QTMxQjJERjE4MDQyRTguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGRlg1c0VKeVE3VWVOUnl0cHU3YzgxS3Q4WGdEcDdTck5NbVNMVWZRMThmLzAv
MzEzNzM3MmUzMTM1MzUyZTMxMzkzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM4MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbGbwDANBgkqhkiG9w0BAQsFAAOCAQEASUsg
tbIUKo099FOzWNDeBBJ/8HtBtYiDCYGmOL2znx5KwabL6VMQVqT0aD8lfS4LGv5x
9GYr2KPADVGczdLNh8cI/IbpC11i4gnDf706/a1lfIXEa0oNZpg4ER2vZ0JOs48N
vGqu5RszjYRIlz+aWyXrlRnWWb46nHswmhjssiISYlApD8AK7d3u7Zj0OdFHfe2a
iuqrsElNKEEL8Smo4adzrFGEfFU+UOyNYDshYiUx3VWxN7PdGlpBa2+Yn4dEEMhK
FemZSvJ3hDxhFjPTZJDAlOMAcWXTA5THSlZrlwmWBIiRTnI9CupFGYAF/s8bRJtb
F+4/neV5hty/0Pq63Q==
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:57 2024 by rpki-client on console-fra.rpki-client.org