Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/3137372e3232312e35362e302f32342d3234203d3e20323633363631.roa
File:                     3137372e3232312e35362e302f32342d3234203d3e20323633363631.roa (raw, json)
Hash identifier:          ItKzCGac6md6S3E+aLts7znN8GHGbSsM+SSt2yv4uaI=
Subject key identifier:   31:E5:F7:EB:20:57:25:87:5B:B2:99:92:B8:86:97:0F:BA:07:2B:CF
Certificate issuer:       /CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
Certificate serial:       6700FB4A5EC2B4306547D3CB0F91167EAC258186
Authority key identifier: 8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/3137372e3232312e35362e302f32342d3234203d3e20323633363631.roa
Signing time:             Thu 04 Apr 2024 01:38:26 +0000
ROA not before:           Thu 04 Apr 2024 01:33:26 +0000
ROA not after:            Thu 03 Apr 2025 01:38:26 +0000
asID:                     263661
IP address blocks:        177.221.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.crl
                          rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:00:fb:4a:5e:c2:b4:30:65:47:d3:cb:0f:91:16:7e:ac:25:81:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
        Validity
            Not Before: Apr  4 01:33:26 2024 GMT
            Not After : Apr  3 01:38:26 2025 GMT
        Subject: CN=31E5F7EB205725875BB29992B886970FBA072BCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0e:56:77:a0:95:72:37:c6:6f:c6:45:64:a7:
                    3e:c9:f5:72:3b:a1:17:ae:b5:b0:e4:35:86:42:1e:
                    a4:79:2b:1c:2f:0f:a0:61:32:b3:52:43:cc:8f:96:
                    82:28:30:04:db:be:6d:25:44:59:db:45:61:d0:5f:
                    f5:7b:9e:48:af:90:25:4c:61:22:a4:2d:4e:5e:70:
                    f0:46:de:e1:85:0d:af:1c:bc:6e:b1:24:57:30:15:
                    ea:60:92:30:a9:d4:6d:1b:73:b7:62:cc:ed:ff:f1:
                    8e:e4:81:be:f2:05:39:5e:4f:e3:40:bf:16:e9:c0:
                    84:55:89:c8:27:52:1d:2f:7a:59:0e:e2:e9:f3:90:
                    08:3e:80:68:73:a6:3f:f3:ee:0a:73:af:5e:84:c1:
                    5d:51:99:b9:5d:e2:e3:f4:3a:89:0a:9c:a8:a8:14:
                    ae:98:cf:45:6d:ba:9b:74:b1:6d:8c:12:d4:d3:d4:
                    5e:93:a1:89:06:9e:f1:7c:74:26:47:60:33:f0:fd:
                    58:f8:f1:9b:ad:1a:28:de:af:aa:10:51:0e:9d:fa:
                    2e:60:20:60:af:8b:64:ce:51:b7:65:e9:e4:d3:c8:
                    f7:17:29:4b:6d:65:66:86:85:15:bb:d8:9e:33:59:
                    0c:aa:56:58:96:b6:af:ac:b4:bb:d4:71:6d:02:06:
                    bd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E5:F7:EB:20:57:25:87:5B:B2:99:92:B8:86:97:0F:BA:07:2B:CF
            X509v3 Authority Key Identifier:
                keyid:8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/3137372e3232312e35362e302f32342d3234203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:b0:b5:38:f3:e5:23:8c:64:8b:34:69:3e:1c:5d:4f:69:ca:
         44:bd:2e:ea:cf:ec:97:f7:fd:a7:20:8f:75:d4:62:89:69:34:
         69:43:ad:37:94:de:6c:23:5f:cd:85:d9:d8:fa:81:26:5c:dd:
         44:d0:15:20:f9:05:7c:50:13:6e:fb:3e:57:29:ed:ea:2d:84:
         a1:3b:47:61:f8:16:92:cd:d5:f5:a8:4d:ff:c1:df:ee:95:a6:
         61:f0:1d:4e:f9:5c:0f:e2:95:aa:f3:60:c4:7f:78:c9:3b:9b:
         61:d1:8d:20:39:d4:ad:1c:41:07:3c:60:17:2c:2e:b1:d3:c9:
         97:0f:c7:ed:1d:73:e5:d0:9c:db:8e:18:70:46:dd:c5:83:64:
         e2:c4:da:e7:92:ee:ec:28:07:49:5d:36:2b:67:09:76:3e:34:
         9e:a8:af:d7:86:11:66:c1:7f:21:37:80:75:ce:30:05:4c:3e:
         4b:31:91:08:91:ff:f8:d0:54:d4:a5:f2:8f:b4:7d:f4:f9:f2:
         24:7a:fd:af:f3:47:27:31:a0:d8:c4:5a:47:fc:a1:6d:56:72:
         88:64:e8:4e:30:e9:cf:ee:f6:9f:40:58:8e:44:a8:49:15:c4:
         b6:3a:25:9e:27:f0:c7:52:4b:eb:10:14:4c:65:77:cb:d3:44:
         bf:eb:6a:c2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZwD7Sl7CtDBlR9PLD5EWfqwlgYYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU4MjJCREE2N0I3MjA3MDlDM0ZEQzBBQTFDRTBCOUM1
MzdGMkE2NTAeFw0yNDA0MDQwMTMzMjZaFw0yNTA0MDMwMTM4MjZaMDMxMTAvBgNV
BAMTKDMxRTVGN0VCMjA1NzI1ODc1QkIyOTk5MkI4ODY5NzBGQkEwNzJCQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7DlZ3oJVyN8ZvxkVkpz7J9XI7
oReutbDkNYZCHqR5KxwvD6BhMrNSQ8yPloIoMATbvm0lRFnbRWHQX/V7nkivkCVM
YSKkLU5ecPBG3uGFDa8cvG6xJFcwFepgkjCp1G0bc7dizO3/8Y7kgb7yBTleT+NA
vxbpwIRVicgnUh0velkO4unzkAg+gGhzpj/z7gpzr16EwV1Rmbld4uP0OokKnKio
FK6Yz0Vtupt0sW2MEtTT1F6ToYkGnvF8dCZHYDPw/Vj48ZutGijer6oQUQ6d+i5g
IGCvi2TOUbdl6eTTyPcXKUttZWaGhRW72J4zWQyqVliWtq+stLvUcW0CBr0fAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMeX36yBXJYdbspmSuIaXD7oHK88wHwYDVR0j
BBgwFoAUjoIr2me3IHCcP9wKoc4LnFN/KmUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVptemhGZms1a0thdzFLcDdMbUpCMUczeTh6WnA4aUo2dzc2Nk15ZWFu
dWovMi84RTgyMkJEQTY3QjcyMDcwOUMzRkRDMEFBMUNFMEI5QzUzN0YyQTY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFODIyQkRBNjdCNzIwNzA5
QzNGREMwQUExQ0UwQjlDNTM3RjJBNjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VabXpoRmZrNWtLYXcxS3A3TG1KQjFHM3k4elpwOGlKNnc3NjZNeWVhbnVqLzIv
MzEzNzM3MmUzMjMyMzEyZTM1MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzNjM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACx3TgwDQYJKoZIhvcNAQELBQADggEBAEKwtTjz
5SOMZIs0aT4cXU9pykS9LurP7Jf3/acgj3XUYolpNGlDrTeU3mwjX82F2dj6gSZc
3UTQFSD5BXxQE277Plcp7eothKE7R2H4FpLN1fWoTf/B3+6VpmHwHU75XA/ilarz
YMR/eMk7m2HRjSA51K0cQQc8YBcsLrHTyZcPx+0dc+XQnNuOGHBG3cWDZOLE2ueS
7uwoB0ldNitnCXY+NJ6or9eGEWbBfyE3gHXOMAVMPksxkQiR//jQVNSl8o+0ffT5
8iR6/a/zRycxoNjEWkf8oW1Wcohk6E4w6c/u9p9AWI5EqEkVxLY6JZ4n8MdSS+sQ
FExld8vTRL/rasI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:49 2024 by rpki-client on console-ams.rpki-client.org