Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/3137372e3139302e3232342e302f32302d3332203d3e20323633343635.roa
File:                     3137372e3139302e3232342e302f32302d3332203d3e20323633343635.roa (raw, json)
Hash identifier:          pugPYIyMrC30NPoVL12+m3xp38Sq75tBlDocivxEfKI=
Subject key identifier:   C3:93:E4:FA:4A:05:80:F5:7D:A5:43:F8:24:DA:E4:04:59:0F:32:8F
Certificate issuer:       /CN=C11F7C20B2456BA36EBCC89270ACE976DACFC35C
Certificate serial:       4DD6E7056487CED9EA018E809F0D8AEAE1FC8655
Authority key identifier: C1:1F:7C:20:B2:45:6B:A3:6E:BC:C8:92:70:AC:E9:76:DA:CF:C3:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/3137372e3139302e3232342e302f32302d3332203d3e20323633343635.roa
Signing time:             Wed 17 Jul 2024 15:00:00 +0000
ROA not before:           Wed 17 Jul 2024 14:55:00 +0000
ROA not after:            Wed 16 Jul 2025 15:00:00 +0000
asID:                     263465
IP address blocks:        177.190.224.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.crl
                          rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 21:48:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d6:e7:05:64:87:ce:d9:ea:01:8e:80:9f:0d:8a:ea:e1:fc:86:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C11F7C20B2456BA36EBCC89270ACE976DACFC35C
        Validity
            Not Before: Jul 17 14:55:00 2024 GMT
            Not After : Jul 16 15:00:00 2025 GMT
        Subject: CN=C393E4FA4A0580F57DA543F824DAE404590F328F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7d:e6:5b:49:95:2c:b3:34:ce:38:b6:49:69:
                    40:a4:aa:4f:58:3f:36:8d:52:64:29:56:06:5e:e3:
                    62:5b:be:5c:f1:ec:42:80:87:b2:f2:65:f3:36:f4:
                    c0:d1:20:e6:8c:e0:6b:4f:54:43:9c:30:19:df:d1:
                    88:f8:72:f9:60:95:5b:4e:dd:66:01:c7:c6:9d:ff:
                    64:8f:fd:df:53:50:9d:09:93:ed:a6:21:c7:8e:72:
                    de:0f:47:b1:c7:c6:6b:8a:9e:07:4e:5f:87:c3:eb:
                    fb:5a:35:9c:9b:1d:9e:4f:56:b9:cc:5a:80:13:76:
                    59:56:bc:76:b2:2d:75:dc:76:3a:2e:22:7f:3c:04:
                    26:a7:e9:ea:ec:b6:59:5b:2a:ef:27:4d:2d:65:0d:
                    42:c5:c9:48:aa:1d:e3:41:7c:33:ec:77:51:45:15:
                    d8:52:da:28:c7:5e:b7:3f:01:11:f2:2b:94:9e:30:
                    b5:d3:68:2d:9b:33:d1:e1:90:38:65:f9:49:6e:c2:
                    7f:6c:5b:ea:68:86:dc:49:d2:cb:84:34:60:53:de:
                    e1:c1:ed:01:bc:ad:7b:3c:89:ef:c8:7b:5f:12:3e:
                    4e:c9:8c:42:8b:79:36:53:e3:cb:68:5b:11:9d:e9:
                    a3:9d:4e:85:22:97:9f:9d:ad:8b:53:d8:2b:fd:47:
                    1f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:93:E4:FA:4A:05:80:F5:7D:A5:43:F8:24:DA:E4:04:59:0F:32:8F
            X509v3 Authority Key Identifier:
                keyid:C1:1F:7C:20:B2:45:6B:A3:6E:BC:C8:92:70:AC:E9:76:DA:CF:C3:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11F7C20B2456BA36EBCC89270ACE976DACFC35C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F2jESFm3yC1XuN2fxY6PPfBMQHspRDkgMKwcwTyjWU2K/0/3137372e3139302e3232342e302f32302d3332203d3e20323633343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4c:e4:5d:b3:45:8e:7c:95:13:82:c8:bd:2c:e5:4d:6f:26:b6:
         72:39:4a:12:ff:e5:42:16:45:6f:3d:94:7a:24:a2:04:6c:78:
         96:9c:88:80:c8:ce:d6:73:14:5f:b6:f1:ce:57:6f:66:4e:b3:
         bd:ae:60:a7:ee:c7:f0:f2:5c:8e:8d:ce:64:7a:a2:23:00:30:
         7f:62:85:01:8c:2f:72:7d:da:53:d6:ac:6f:d2:b7:0b:78:0a:
         5b:15:d5:2b:85:29:22:fd:33:d8:f1:11:d2:54:83:7d:fa:d9:
         e6:7f:9c:66:3f:0c:18:b3:7b:83:06:97:c0:3b:5b:33:90:82:
         9a:7b:f4:82:9f:95:e7:a4:91:ce:fd:93:90:9c:85:7b:b8:53:
         91:4d:00:d1:dd:8d:97:cd:df:e5:06:4f:95:f1:8e:00:60:57:
         3c:0d:ee:72:bd:e1:82:ce:e3:de:51:94:e5:82:66:2e:66:fa:
         3d:51:ba:19:ea:60:0c:fb:24:65:74:d9:be:65:12:be:7a:27:
         f1:a5:ca:eb:c2:07:ce:3b:e5:59:a7:77:7f:0e:32:37:26:60:
         23:d1:47:a0:2f:71:f8:48:9a:9d:b3:dc:d7:5e:1a:53:09:11:
         51:7b:e3:32:6c:34:f2:03:86:1e:87:e3:39:7c:df:9b:f3:30:
         cd:f1:a4:3c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUTdbnBWSHztnqAY6Anw2K6uH8hlUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzExRjdDMjBCMjQ1NkJBMzZFQkNDODkyNzBBQ0U5NzZE
QUNGQzM1QzAeFw0yNDA3MTcxNDU1MDBaFw0yNTA3MTYxNTAwMDBaMDMxMTAvBgNV
BAMTKEMzOTNFNEZBNEEwNTgwRjU3REE1NDNGODI0REFFNDA0NTkwRjMyOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxfeZbSZUsszTOOLZJaUCkqk9Y
PzaNUmQpVgZe42Jbvlzx7EKAh7LyZfM29MDRIOaM4GtPVEOcMBnf0Yj4cvlglVtO
3WYBx8ad/2SP/d9TUJ0Jk+2mIceOct4PR7HHxmuKngdOX4fD6/taNZybHZ5PVrnM
WoATdllWvHayLXXcdjouIn88BCan6erstllbKu8nTS1lDULFyUiqHeNBfDPsd1FF
FdhS2ijHXrc/ARHyK5SeMLXTaC2bM9HhkDhl+Uluwn9sW+pohtxJ0suENGBT3uHB
7QG8rXs8ie/Ie18SPk7JjEKLeTZT48toWxGd6aOdToUil5+drYtT2Cv9Rx99AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUw5Pk+koFgPV9pUP4JNrkBFkPMo8wHwYDVR0j
BBgwFoAUwR98ILJFa6NuvMiScKzpdtrPw1wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjJqRVNGbTN5QzFYdU4yZnhZNlBQZkJNUUhzcFJEa2dNS3djd1R5aldV
MksvMC9DMTFGN0MyMEIyNDU2QkEzNkVCQ0M4OTI3MEFDRTk3NkRBQ0ZDMzVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxMUY3QzIwQjI0NTZCQTM2
RUJDQzg5MjcwQUNFOTc2REFDRkMzNUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0YyakVTRm0zeUMxWHVOMmZ4WTZQUGZCTVFIc3BSRGtnTUt3Y3dUeWpXVTJLLzAv
MzEzNzM3MmUzMTM5MzAyZTMyMzIzNDJlMzAyZjMyMzAyZDMzMzIyMDNkM2UyMDMy
MzYzMzM0MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBLG+4DANBgkqhkiG9w0BAQsFAAOCAQEATORd
s0WOfJUTgsi9LOVNbya2cjlKEv/lQhZFbz2UeiSiBGx4lpyIgMjO1nMUX7bxzldv
Zk6zva5gp+7H8PJcjo3OZHqiIwAwf2KFAYwvcn3aU9asb9K3C3gKWxXVK4UpIv0z
2PER0lSDffrZ5n+cZj8MGLN7gwaXwDtbM5CCmnv0gp+V56SRzv2TkJyFe7hTkU0A
0d2Nl83f5QZPlfGOAGBXPA3ucr3hgs7j3lGU5YJmLmb6PVG6GepgDPskZXTZvmUS
vnon8aXK68IHzjvlWad3fw4yNyZgI9FHoC9x+EianbPc114aUwkRUXvjMmw08gOG
HofjOXzfm/MwzfGkPA==
-----END CERTIFICATE-----
Generated at Fri Nov 29 21:26:30 2024 by rpki-client on console-fra.rpki-client.org