Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/3137372e3232312e35362e302f32332d3233203d3e20323633363631.roa
File:                     3137372e3232312e35362e302f32332d3233203d3e20323633363631.roa (raw, json)
Hash identifier:          iHAiAdspWraYTyKpha4Tl5IaOmOIgQy7rpMWF11Xca0=
Subject key identifier:   AB:43:28:9B:A1:19:B0:BC:4F:C8:0D:90:7F:56:51:B7:40:88:0C:97
Certificate issuer:       /CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
Certificate serial:       424B07D4AE20BCA1AC9B1C53DBDC645754F4CDC4
Authority key identifier: 8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/3137372e3232312e35362e302f32332d3233203d3e20323633363631.roa
Signing time:             Thu 04 Apr 2024 01:38:31 +0000
ROA not before:           Thu 04 Apr 2024 01:33:31 +0000
ROA not after:            Thu 03 Apr 2025 01:38:31 +0000
asID:                     263661
IP address blocks:        177.221.56.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.crl
                          rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:4b:07:d4:ae:20:bc:a1:ac:9b:1c:53:db:dc:64:57:54:f4:cd:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
        Validity
            Not Before: Apr  4 01:33:31 2024 GMT
            Not After : Apr  3 01:38:31 2025 GMT
        Subject: CN=AB43289BA119B0BC4FC80D907F5651B740880C97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:99:40:f4:25:b8:79:91:f5:2b:7a:34:f6:45:
                    f4:36:73:44:85:18:5b:ae:13:23:e4:c1:2c:d1:81:
                    ca:09:69:3f:95:8f:10:5a:72:4f:a0:da:2b:eb:1b:
                    26:7d:cd:3a:c3:10:90:e7:30:1a:86:00:83:20:04:
                    94:71:cd:86:83:73:05:a5:75:1f:c1:e8:36:b1:29:
                    0b:65:d6:65:b5:5b:9c:00:7a:41:8b:86:3b:13:4c:
                    85:bd:ee:e7:cb:01:4f:24:3f:7f:fe:e3:14:54:6d:
                    a5:2d:de:0a:37:35:98:3d:33:a7:a3:59:d3:6c:2f:
                    28:38:5b:8b:c0:9c:f5:54:1f:2a:05:95:3e:b6:a5:
                    fe:c1:4b:25:80:14:dc:8a:33:03:24:ba:ce:4a:5c:
                    9c:68:63:66:21:fb:21:ac:98:f7:db:bc:9d:2a:9d:
                    67:00:a1:ef:d3:ae:6a:e5:75:72:75:a9:0c:e6:04:
                    ea:69:45:9e:4e:8f:b6:08:87:be:dd:84:75:ab:08:
                    ae:2b:b1:38:ad:bd:80:70:e6:72:10:0c:92:8e:d3:
                    33:92:db:7d:0a:a3:ab:9e:48:97:09:89:d5:0a:5d:
                    96:a8:78:c9:85:7a:7e:e9:ea:eb:e7:be:ad:a9:7b:
                    77:35:89:ad:4b:05:0d:59:33:7b:07:0d:f1:e6:f5:
                    03:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:43:28:9B:A1:19:B0:BC:4F:C8:0D:90:7F:56:51:B7:40:88:0C:97
            X509v3 Authority Key Identifier:
                keyid:8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/3137372e3232312e35362e302f32332d3233203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:98:9a:20:5d:bb:92:ba:3a:29:57:93:6e:11:ea:2a:bd:3b:
         8d:d2:2b:f2:38:af:e4:f0:c0:65:43:df:0a:99:26:e7:bc:1f:
         eb:52:89:c5:eb:8d:dc:5e:aa:f0:2c:f1:3f:78:bc:d7:d2:87:
         e6:1e:7a:4b:38:30:4e:75:cc:5e:00:cc:56:5f:14:da:ba:aa:
         e4:f2:92:57:c2:29:7e:da:58:d5:86:43:18:9e:6e:93:89:c3:
         12:53:cd:de:ef:a5:50:76:9a:40:9c:41:d6:99:3e:25:35:c6:
         f4:a4:e7:f9:c2:01:e5:87:f0:c9:12:57:19:da:5f:19:3d:50:
         60:77:e5:47:cf:3a:4c:2c:fe:55:06:cf:99:e9:e5:7e:04:8e:
         3b:8d:27:ae:d8:8a:3d:e7:7d:1b:14:1a:ed:41:ee:5f:de:11:
         c9:b3:84:f6:fe:1e:28:a8:66:55:59:b0:92:22:b4:c9:1e:2b:
         0b:ee:0c:3f:72:07:d2:17:e5:97:87:01:ea:c0:6c:5a:84:72:
         2c:8a:42:71:5c:e0:be:22:d6:ea:fb:9a:af:ad:7c:db:5a:d0:
         b6:11:6d:7a:c9:d2:eb:69:9c:74:d0:4b:a7:4b:9a:5b:33:72:
         a7:13:5e:e0:f3:a0:0a:a4:ed:72:15:88:d2:5e:ac:0b:54:a9:
         98:72:cf:51
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQksH1K4gvKGsmxxT29xkV1T0zcQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU4MjJCREE2N0I3MjA3MDlDM0ZEQzBBQTFDRTBCOUM1
MzdGMkE2NTAeFw0yNDA0MDQwMTMzMzFaFw0yNTA0MDMwMTM4MzFaMDMxMTAvBgNV
BAMTKEFCNDMyODlCQTExOUIwQkM0RkM4MEQ5MDdGNTY1MUI3NDA4ODBDOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4mUD0Jbh5kfUrejT2RfQ2c0SF
GFuuEyPkwSzRgcoJaT+VjxBack+g2ivrGyZ9zTrDEJDnMBqGAIMgBJRxzYaDcwWl
dR/B6DaxKQtl1mW1W5wAekGLhjsTTIW97ufLAU8kP3/+4xRUbaUt3go3NZg9M6ej
WdNsLyg4W4vAnPVUHyoFlT62pf7BSyWAFNyKMwMkus5KXJxoY2Yh+yGsmPfbvJ0q
nWcAoe/TrmrldXJ1qQzmBOppRZ5Oj7YIh77dhHWrCK4rsTitvYBw5nIQDJKO0zOS
230Ko6ueSJcJidUKXZaoeMmFen7p6uvnvq2pe3c1ia1LBQ1ZM3sHDfHm9QNBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUq0Mom6EZsLxPyA2Qf1ZRt0CIDJcwHwYDVR0j
BBgwFoAUjoIr2me3IHCcP9wKoc4LnFN/KmUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVptemhGZms1a0thdzFLcDdMbUpCMUczeTh6WnA4aUo2dzc2Nk15ZWFu
dWovMi84RTgyMkJEQTY3QjcyMDcwOUMzRkRDMEFBMUNFMEI5QzUzN0YyQTY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFODIyQkRBNjdCNzIwNzA5
QzNGREMwQUExQ0UwQjlDNTM3RjJBNjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VabXpoRmZrNWtLYXcxS3A3TG1KQjFHM3k4elpwOGlKNnc3NjZNeWVhbnVqLzIv
MzEzNzM3MmUzMjMyMzEyZTM1MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzMzNjM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGx3TgwDQYJKoZIhvcNAQELBQADggEBAEuYmiBd
u5K6OilXk24R6iq9O43SK/I4r+TwwGVD3wqZJue8H+tSicXrjdxeqvAs8T94vNfS
h+Yeeks4ME51zF4AzFZfFNq6quTyklfCKX7aWNWGQxiebpOJwxJTzd7vpVB2mkCc
QdaZPiU1xvSk5/nCAeWH8MkSVxnaXxk9UGB35UfPOkws/lUGz5np5X4EjjuNJ67Y
ij3nfRsUGu1B7l/eEcmzhPb+HiioZlVZsJIitMkeKwvuDD9yB9IX5ZeHAerAbFqE
ciyKQnFc4L4i1ur7mq+tfNta0LYRbXrJ0utpnHTQS6dLmlszcqcTXuDzoAqk7XIV
iNJerAtUqZhyz1E=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:01 2024 by rpki-client on console-fra.rpki-client.org