Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/3137372e3132352e3230342e302f32322d3234203d3e20323632333436.roa
File:                     3137372e3132352e3230342e302f32322d3234203d3e20323632333436.roa (raw, json)
Hash identifier:          jokGSTWUAhA10ALtGfqvf6xVRPayWVwXe/H8aZXO1/k=
Subject key identifier:   A8:9D:EA:B5:FC:52:97:85:A3:CC:9B:58:7A:1B:E2:6E:81:F8:25:CB
Certificate issuer:       /CN=D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE
Certificate serial:       1BD952B3D432D24164CC5A86206052C2BADA7DAD
Authority key identifier: D6:BB:4A:91:FB:EF:B5:DE:B7:F9:10:E0:E5:34:65:EE:64:3D:EF:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/3137372e3132352e3230342e302f32322d3234203d3e20323632333436.roa
Signing time:             Mon 28 Oct 2024 17:08:52 +0000
ROA not before:           Mon 28 Oct 2024 17:03:52 +0000
ROA not after:            Mon 27 Oct 2025 17:08:52 +0000
asID:                     262346
IP address blocks:        177.125.204.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE.crl
                          rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:53:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d9:52:b3:d4:32:d2:41:64:cc:5a:86:20:60:52:c2:ba:da:7d:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE
        Validity
            Not Before: Oct 28 17:03:52 2024 GMT
            Not After : Oct 27 17:08:52 2025 GMT
        Subject: CN=A89DEAB5FC529785A3CC9B587A1BE26E81F825CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4b:20:74:e5:9c:b9:00:db:fd:fe:20:46:ee:
                    d1:8a:e3:5d:50:79:c3:7b:c7:1c:d4:9e:fb:c8:88:
                    fc:87:db:97:e6:39:3d:b8:02:43:e4:38:a4:96:46:
                    94:00:0b:73:51:73:99:59:b8:07:57:26:d2:f1:c2:
                    2f:b7:78:fc:3d:5a:c0:0f:d2:b2:d4:fc:a0:7d:80:
                    6c:56:06:f2:a9:e2:54:36:c4:b7:f5:fd:be:80:29:
                    00:37:79:2f:47:ea:ac:b7:4f:b2:1f:78:84:b1:fc:
                    7a:44:cb:fe:f9:7d:28:ca:bb:ba:28:dc:ef:4a:22:
                    09:8b:d4:88:0a:e0:e5:3c:d0:e2:a5:c9:f1:65:0a:
                    14:a4:b6:6d:52:bb:c1:85:1b:cb:a8:1b:18:39:e0:
                    4b:f0:6d:21:76:11:75:dc:83:54:68:65:2d:08:a1:
                    b7:12:a4:3f:27:28:80:88:9b:e8:15:76:20:d1:af:
                    2b:39:b1:15:3f:c5:91:9d:f0:73:90:42:97:c5:fc:
                    6c:28:dd:e0:40:54:4b:17:ce:22:18:56:85:c9:ab:
                    d8:87:07:8b:a6:f4:1f:11:8a:86:79:7d:c0:64:20:
                    14:a4:50:44:82:09:3a:26:77:9b:bb:c7:d2:7c:f9:
                    35:6f:94:ec:73:08:26:da:40:a0:18:f6:93:80:7b:
                    42:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:9D:EA:B5:FC:52:97:85:A3:CC:9B:58:7A:1B:E2:6E:81:F8:25:CB
            X509v3 Authority Key Identifier:
                keyid:D6:BB:4A:91:FB:EF:B5:DE:B7:F9:10:E0:E5:34:65:EE:64:3D:EF:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BB4A91FBEFB5DEB7F910E0E53465EE643DEFEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/3137372e3132352e3230342e302f32322d3234203d3e20323632333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:5a:56:49:49:d1:0a:da:4c:de:84:15:b4:0e:bf:38:87:a2:
         5d:6e:36:95:7b:20:78:77:f6:22:07:2c:05:f7:b7:38:94:c2:
         fb:74:e4:8e:c1:19:c0:f7:4a:17:95:35:95:62:1e:99:8a:34:
         09:41:ee:15:e0:54:63:16:3e:6d:f8:db:8d:c5:15:9f:27:c2:
         a4:4a:a5:ef:7d:b2:84:e7:66:b6:f2:cb:d7:34:21:82:ce:eb:
         44:4b:64:02:9c:aa:1f:b3:d7:b2:3b:b4:bc:93:5d:b9:a2:b2:
         a6:21:61:d5:c2:e2:0d:1d:56:b2:9f:d7:9a:24:44:c8:75:5f:
         c3:28:af:9e:34:1f:ae:87:a3:d0:a4:48:c7:20:0b:ca:5a:82:
         94:e2:df:05:13:72:29:2a:81:1f:71:d3:d5:09:ba:b5:f0:e1:
         17:96:0c:77:2b:3d:47:21:c2:5c:20:db:03:d3:7e:91:0b:d5:
         5c:93:b9:b1:e1:5f:73:ea:b6:e2:01:8f:fe:70:a9:f0:ac:b1:
         46:da:cd:5c:d9:88:b5:90:1c:28:a0:51:90:5b:7e:aa:dc:e9:
         cc:42:08:de:0c:5f:4f:a6:93:c3:5e:32:c7:b2:da:43:89:b7:
         e8:ba:94:d2:10:f4:c7:32:bf:3c:88:67:24:68:54:99:a9:e2:
         48:e4:a3:a6
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUG9lSs9Qy0kFkzFqGIGBSwrrafa0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDZCQjRBOTFGQkVGQjVERUI3RjkxMEUwRTUzNDY1RUU2
NDNERUZFRTAeFw0yNDEwMjgxNzAzNTJaFw0yNTEwMjcxNzA4NTJaMDMxMTAvBgNV
BAMTKEE4OURFQUI1RkM1Mjk3ODVBM0NDOUI1ODdBMUJFMjZFODFGODI1Q0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNSyB05Zy5ANv9/iBG7tGK411Q
ecN7xxzUnvvIiPyH25fmOT24AkPkOKSWRpQAC3NRc5lZuAdXJtLxwi+3ePw9WsAP
0rLU/KB9gGxWBvKp4lQ2xLf1/b6AKQA3eS9H6qy3T7IfeISx/HpEy/75fSjKu7oo
3O9KIgmL1IgK4OU80OKlyfFlChSktm1Su8GFG8uoGxg54EvwbSF2EXXcg1RoZS0I
obcSpD8nKICIm+gVdiDRrys5sRU/xZGd8HOQQpfF/Gwo3eBAVEsXziIYVoXJq9iH
B4um9B8RioZ5fcBkIBSkUESCCTomd5u7x9J8+TVvlOxzCCbaQKAY9pOAe0JBAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUqJ3qtfxSl4WjzJtYehviboH4JcswHwYDVR0j
BBgwFoAU1rtKkfvvtd63+RDg5TRl7mQ97+4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkU2QTROQmJrVldIbmZHY0oxUVJVYWN6OE5oZTkyYnE3QmYxR3NodGNx
WlAvMC9ENkJCNEE5MUZCRUZCNURFQjdGOTEwRTBFNTM0NjVFRTY0M0RFRkVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2QkI0QTkxRkJFRkI1REVC
N0Y5MTBFMEU1MzQ2NUVFNjQzREVGRUUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZFNkE0TkJia1ZXSG5mR2NKMVFSVWFjejhOaGU5MmJxN0JmMUdzaHRjcVpQLzAv
MzEzNzM3MmUzMTMyMzUyZTMyMzAzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMjMzMzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArF9zDANBgkqhkiG9w0BAQsFAAOCAQEASlpW
SUnRCtpM3oQVtA6/OIeiXW42lXsgeHf2IgcsBfe3OJTC+3TkjsEZwPdKF5U1lWIe
mYo0CUHuFeBUYxY+bfjbjcUVnyfCpEql732yhOdmtvLL1zQhgs7rREtkApyqH7PX
sju0vJNduaKypiFh1cLiDR1Wsp/XmiREyHVfwyivnjQfroej0KRIxyALylqClOLf
BRNyKSqBH3HT1Qm6tfDhF5YMdys9RyHCXCDbA9N+kQvVXJO5seFfc+q24gGP/nCp
8KyxRtrNXNmItZAcKKBRkFt+qtzpzEII3gxfT6aTw14yx7LaQ4m36LqU0hD0xzK/
PIhnJGhUmaniSOSjpg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:18 2024 by rpki-client on console-ams.rpki-client.org