Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3137372e34372e3235322e302f32332d3233203d3e20323632343738.roa
File:                     3137372e34372e3235322e302f32332d3233203d3e20323632343738.roa (raw, json)
Hash identifier:          dSRsBn+pS5Wakk7KXvm3wQITw8ujBBaUJ5GqH6FBymk=
Subject key identifier:   12:6A:37:30:F4:76:09:DF:36:01:40:ED:D4:D2:8D:94:C1:8F:31:58
Certificate issuer:       /CN=3003122391B162B39EE7A7E7BD630BF0F3B7F06A
Certificate serial:       2F9B0B5F8CF4A9FEE722C21E45CB8CAE48A5709B
Authority key identifier: 30:03:12:23:91:B1:62:B3:9E:E7:A7:E7:BD:63:0B:F0:F3:B7:F0:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3137372e34372e3235322e302f32332d3233203d3e20323632343738.roa
Signing time:             Fri 05 Apr 2024 02:36:24 +0000
ROA not before:           Fri 05 Apr 2024 02:31:24 +0000
ROA not after:            Fri 04 Apr 2025 02:36:24 +0000
asID:                     262478
IP address blocks:        177.47.252.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.crl
                          rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 21:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:9b:0b:5f:8c:f4:a9:fe:e7:22:c2:1e:45:cb:8c:ae:48:a5:70:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3003122391B162B39EE7A7E7BD630BF0F3B7F06A
        Validity
            Not Before: Apr  5 02:31:24 2024 GMT
            Not After : Apr  4 02:36:24 2025 GMT
        Subject: CN=126A3730F47609DF360140EDD4D28D94C18F3158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1e:9f:58:4d:ef:96:bd:5d:56:5e:8d:69:34:
                    cf:25:a6:c5:9e:50:2c:b0:49:2c:86:8c:ee:84:a6:
                    57:60:a5:fe:93:0e:04:e6:71:7f:8d:0b:cd:85:41:
                    7b:66:42:08:99:77:13:b7:7f:e9:94:d1:9b:09:a4:
                    11:d4:39:a0:1f:62:f4:7d:c9:99:c4:6a:c4:a2:44:
                    8b:62:6f:f0:f4:15:f0:35:88:9c:a8:ca:0b:9f:2f:
                    21:c7:a9:f3:b0:40:e3:65:9a:57:fc:23:fa:c2:99:
                    dd:4a:d3:c7:ac:50:d6:5c:08:24:ef:31:ff:5f:58:
                    aa:79:91:3f:81:52:cd:f6:bb:0e:00:5b:ef:5f:7d:
                    05:a2:0e:90:14:1a:87:a0:23:10:70:6a:a5:97:29:
                    de:b4:04:bb:d4:8f:05:2a:58:96:f9:78:a0:e7:db:
                    7c:05:f8:cc:28:19:e5:45:00:fa:42:0f:55:bc:78:
                    c5:ab:4d:73:1d:e8:5c:f6:ed:68:47:fb:bb:f3:52:
                    88:d5:56:df:eb:f8:88:84:4c:a3:89:d6:b3:a4:46:
                    5f:21:81:82:10:73:f2:57:0b:cb:71:ba:2e:7a:93:
                    82:06:91:f3:50:b9:c7:99:3f:96:c2:96:90:fc:99:
                    c2:5f:19:46:05:9a:0b:b0:a9:5b:3a:7e:6a:6a:84:
                    48:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:6A:37:30:F4:76:09:DF:36:01:40:ED:D4:D2:8D:94:C1:8F:31:58
            X509v3 Authority Key Identifier:
                keyid:30:03:12:23:91:B1:62:B3:9E:E7:A7:E7:BD:63:0B:F0:F3:B7:F0:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3003122391B162B39EE7A7E7BD630BF0F3B7F06A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/1/3137372e34372e3235322e302f32332d3233203d3e20323632343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:4b:79:5e:2a:c5:8a:93:95:2e:18:46:71:76:a5:3e:d5:43:
         72:2b:7c:f5:0c:42:98:e3:66:d2:1f:5a:6e:a9:bb:f4:e6:d1:
         20:fd:e7:0b:f0:d1:3e:50:82:3c:62:1f:5e:0d:93:bf:12:00:
         1c:6a:d1:8a:40:40:67:a8:16:3b:e1:fa:73:75:fd:70:a3:73:
         ef:85:b1:2f:fa:5d:db:71:33:25:27:98:2d:c1:5c:ce:74:18:
         4a:77:19:05:4e:b3:ab:9a:b0:71:4b:70:ee:90:9d:3c:66:d7:
         15:75:3c:e3:aa:b4:9e:28:7f:ab:b2:40:98:c0:33:f8:9e:5b:
         3a:da:6b:3a:88:14:c2:db:5d:b8:8c:23:97:0a:fa:cf:74:01:
         0a:e6:d3:db:77:fe:17:46:f6:3c:d3:14:7b:f6:c9:18:9f:4a:
         55:7c:50:18:6f:e5:24:da:1e:24:fa:20:3d:83:15:32:fc:c9:
         01:47:5c:d3:23:23:41:f3:f3:c6:7d:70:e3:50:cb:c6:67:ce:
         5e:33:9e:03:78:c6:b3:62:69:52:7c:3a:34:e7:b5:a9:7a:02:
         d9:58:38:ae:d5:89:ce:69:b2:bc:a7:5e:a3:e3:a6:c9:9d:ff:
         35:0a:2e:23:14:bf:30:e7:9b:17:0d:de:15:56:cc:d6:5b:7d:
         f9:de:5f:9e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUL5sLX4z0qf7nIsIeRcuMrkilcJswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzAwMzEyMjM5MUIxNjJCMzlFRTdBN0U3QkQ2MzBCRjBG
M0I3RjA2QTAeFw0yNDA0MDUwMjMxMjRaFw0yNTA0MDQwMjM2MjRaMDMxMTAvBgNV
BAMTKDEyNkEzNzMwRjQ3NjA5REYzNjAxNDBFREQ0RDI4RDk0QzE4RjMxNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzHp9YTe+WvV1WXo1pNM8lpsWe
UCywSSyGjO6Epldgpf6TDgTmcX+NC82FQXtmQgiZdxO3f+mU0ZsJpBHUOaAfYvR9
yZnEasSiRItib/D0FfA1iJyoygufLyHHqfOwQONlmlf8I/rCmd1K08esUNZcCCTv
Mf9fWKp5kT+BUs32uw4AW+9ffQWiDpAUGoegIxBwaqWXKd60BLvUjwUqWJb5eKDn
23wF+MwoGeVFAPpCD1W8eMWrTXMd6Fz27WhH+7vzUojVVt/r+IiETKOJ1rOkRl8h
gYIQc/JXC8txui56k4IGkfNQuceZP5bClpD8mcJfGUYFmguwqVs6fmpqhEh9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUEmo3MPR2Cd82AUDt1NKNlMGPMVgwHwYDVR0j
BBgwFoAUMAMSI5GxYrOe56fnvWML8PO38GowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVdXeE5UWmR1NGpQOTRTZDY3cGRTa2ZMQ2R3TndVd3k1MXozQXhza2lL
OEEvMS8zMDAzMTIyMzkxQjE2MkIzOUVFN0E3RTdCRDYzMEJGMEYzQjdGMDZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMwMDMxMjIzOTFCMTYyQjM5
RUU3QTdFN0JENjMwQkYwRjNCN0YwNkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VXV3hOVFpkdTRqUDk0U2Q2N3BkU2tmTENkd053VXd5NTF6M0F4c2tpSzhBLzEv
MzEzNzM3MmUzNDM3MmUzMjM1MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzNDM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxL/wwDQYJKoZIhvcNAQELBQADggEBALVLeV4q
xYqTlS4YRnF2pT7VQ3IrfPUMQpjjZtIfWm6pu/Tm0SD95wvw0T5QgjxiH14Nk78S
ABxq0YpAQGeoFjvh+nN1/XCjc++FsS/6XdtxMyUnmC3BXM50GEp3GQVOs6uasHFL
cO6QnTxm1xV1POOqtJ4of6uyQJjAM/ieWzraazqIFMLbXbiMI5cK+s90AQrm09t3
/hdG9jzTFHv2yRifSlV8UBhv5STaHiT6ID2DFTL8yQFHXNMjI0Hz88Z9cONQy8Zn
zl4zngN4xrNiaVJ8OjTntal6AtlYOK7Vic5psrynXqPjpsmd/zUKLiMUvzDnmxcN
3hVWzNZbffneX54=
-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:44 2024 by rpki-client on console-fra.rpki-client.org