Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FvwnQAPcNkYHx9evPfZYT4bB9QUjmr7V9VmmxE1cby6b/1/3137372e3132342e3136342e302f32322d3234203d3e203532363239.roa
File:                     3137372e3132342e3136342e302f32322d3234203d3e203532363239.roa (raw, json)
Hash identifier:          LcvvvXiPqO+tjuvCctWVVkwfKjPv7FAbC8iazdt7qlM=
Subject key identifier:   28:06:44:A8:80:09:92:DF:14:E0:BD:DB:69:ED:A3:1E:BA:AC:94:D3
Certificate issuer:       /CN=BC2048B4061177E159F3686DA1C8E9312A5B0B36
Certificate serial:       4DDDD9D6C1D8596112253FA057DC840390B80D99
Authority key identifier: BC:20:48:B4:06:11:77:E1:59:F3:68:6D:A1:C8:E9:31:2A:5B:0B:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC2048B4061177E159F3686DA1C8E9312A5B0B36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FvwnQAPcNkYHx9evPfZYT4bB9QUjmr7V9VmmxE1cby6b/1/3137372e3132342e3136342e302f32322d3234203d3e203532363239.roa
Signing time:             Thu 04 Apr 2024 23:13:51 +0000
ROA not before:           Thu 04 Apr 2024 23:08:51 +0000
ROA not after:            Thu 03 Apr 2025 23:13:51 +0000
asID:                     52629
IP address blocks:        177.124.164.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FvwnQAPcNkYHx9evPfZYT4bB9QUjmr7V9VmmxE1cby6b/1/BC2048B4061177E159F3686DA1C8E9312A5B0B36.crl
                          rsync://rpki-repo.registro.br/repo/FvwnQAPcNkYHx9evPfZYT4bB9QUjmr7V9VmmxE1cby6b/1/BC2048B4061177E159F3686DA1C8E9312A5B0B36.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC2048B4061177E159F3686DA1C8E9312A5B0B36.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:dd:d9:d6:c1:d8:59:61:12:25:3f:a0:57:dc:84:03:90:b8:0d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC2048B4061177E159F3686DA1C8E9312A5B0B36
        Validity
            Not Before: Apr  4 23:08:51 2024 GMT
            Not After : Apr  3 23:13:51 2025 GMT
        Subject: CN=280644A8800992DF14E0BDDB69EDA31EBAAC94D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8b:c3:be:82:e7:cb:19:98:75:e2:c6:9c:ca:
                    a3:b4:12:1b:16:e7:5e:f6:b2:a9:c3:b8:37:10:47:
                    f4:fb:0a:14:18:74:00:4e:83:90:b6:4e:1d:62:09:
                    17:10:89:73:87:a7:a8:a6:25:c4:a9:60:a6:d2:c3:
                    ce:ab:72:75:8e:85:f7:da:bf:e1:f5:fa:fe:23:31:
                    0f:05:21:94:16:a6:98:82:30:ca:6a:36:aa:4f:25:
                    b6:25:35:48:bf:a1:0c:76:82:60:a9:a6:c9:c7:53:
                    c4:0f:48:00:5b:48:22:1c:00:69:9c:2c:6c:f4:90:
                    79:bb:9b:eb:f0:16:8b:f8:89:45:9c:56:15:ce:bb:
                    69:41:31:da:40:e0:e2:3e:72:2c:18:32:3c:7c:7c:
                    6b:ef:fa:c7:3e:b1:7e:e8:5c:76:2d:b0:8f:31:f3:
                    c0:e6:e3:c9:5d:ce:12:d9:f4:7d:96:2f:8e:ce:df:
                    cf:1d:b2:95:ae:d0:a8:bf:d6:7f:20:99:90:b5:48:
                    14:96:11:45:3c:9f:40:ae:c3:64:89:15:d9:31:1f:
                    4f:75:af:c9:97:a7:e7:27:3d:90:13:90:4c:d2:dd:
                    ca:c0:a8:9a:24:91:8e:c7:6b:13:4a:b6:6a:39:f9:
                    d5:94:a8:d5:6f:d1:59:12:7b:9f:5e:9d:25:f9:42:
                    54:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:06:44:A8:80:09:92:DF:14:E0:BD:DB:69:ED:A3:1E:BA:AC:94:D3
            X509v3 Authority Key Identifier:
                keyid:BC:20:48:B4:06:11:77:E1:59:F3:68:6D:A1:C8:E9:31:2A:5B:0B:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FvwnQAPcNkYHx9evPfZYT4bB9QUjmr7V9VmmxE1cby6b/1/BC2048B4061177E159F3686DA1C8E9312A5B0B36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC2048B4061177E159F3686DA1C8E9312A5B0B36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FvwnQAPcNkYHx9evPfZYT4bB9QUjmr7V9VmmxE1cby6b/1/3137372e3132342e3136342e302f32322d3234203d3e203532363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:ed:b5:32:2e:f0:fe:e7:b0:27:60:2d:20:65:02:a2:9b:48:
         d2:09:22:99:7f:48:ca:d2:9d:8d:8f:a3:fa:a1:2e:f6:09:7a:
         f6:df:99:dc:95:55:40:53:e4:a0:bd:a0:95:8c:67:29:b6:4f:
         39:04:b8:08:49:dc:ba:ee:78:a3:2c:fd:fc:e5:64:37:7b:f3:
         21:f5:42:23:cb:72:a6:5f:26:15:08:97:e2:4e:08:62:4c:a6:
         ad:f3:f2:21:00:ce:b2:e3:f8:08:e7:0c:73:67:0c:4d:f8:53:
         bf:58:78:73:fa:1f:2c:ea:d0:71:31:7a:38:53:df:c3:25:3b:
         b7:18:f6:1e:a7:f9:84:ba:69:19:dd:c7:09:92:50:59:05:94:
         13:33:67:39:f5:e3:a9:3b:95:2a:61:f8:a4:17:7c:26:7b:b8:
         85:b3:f8:eb:2c:db:0d:34:63:61:f5:9c:c3:9b:24:ac:b0:51:
         45:ac:58:6e:af:c8:2d:a9:95:ac:1e:56:d7:b9:89:e3:1c:23:
         13:cb:e4:84:b2:d4:9c:1e:04:ab:ff:24:68:9f:f0:d7:35:9e:
         61:87:6f:93:da:08:54:a0:4a:a9:4a:94:d6:75:26:d3:99:c7:
         b1:22:f2:cd:07:4c:1c:06:1a:14:6e:24:0d:dc:e2:ce:82:89:
         73:f2:ed:c1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTd3Z1sHYWWESJT+gV9yEA5C4DZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkMyMDQ4QjQwNjExNzdFMTU5RjM2ODZEQTFDOEU5MzEy
QTVCMEIzNjAeFw0yNDA0MDQyMzA4NTFaFw0yNTA0MDMyMzEzNTFaMDMxMTAvBgNV
BAMTKDI4MDY0NEE4ODAwOTkyREYxNEUwQkREQjY5RURBMzFFQkFBQzk0RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmi8O+gufLGZh14sacyqO0EhsW
5172sqnDuDcQR/T7ChQYdABOg5C2Th1iCRcQiXOHp6imJcSpYKbSw86rcnWOhffa
v+H1+v4jMQ8FIZQWppiCMMpqNqpPJbYlNUi/oQx2gmCppsnHU8QPSABbSCIcAGmc
LGz0kHm7m+vwFov4iUWcVhXOu2lBMdpA4OI+ciwYMjx8fGvv+sc+sX7oXHYtsI8x
88Dm48ldzhLZ9H2WL47O388dspWu0Ki/1n8gmZC1SBSWEUU8n0Cuw2SJFdkxH091
r8mXp+cnPZATkEzS3crAqJokkY7HaxNKtmo5+dWUqNVv0VkSe59enSX5QlSPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKAZEqIAJkt8U4L3bae2jHrqslNMwHwYDVR0j
BBgwFoAUvCBItAYRd+FZ82htocjpMSpbCzYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnZ3blFBUGNOa1lIeDlldlBmWllUNGJCOVFVam1yN1Y5Vm1teEUxY2J5
NmIvMS9CQzIwNDhCNDA2MTE3N0UxNTlGMzY4NkRBMUM4RTkzMTJBNUIwQjM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JDMjA0OEI0MDYxMTc3RTE1
OUYzNjg2REExQzhFOTMxMkE1QjBCMzYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z2d25RQVBjTmtZSHg5ZXZQZlpZVDRiQjlRVWptcjdWOVZtbXhFMWNieTZiLzEv
MzEzNzM3MmUzMTMyMzQyZTMxMzYzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1
MzIzNjMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxfKQwDQYJKoZIhvcNAQELBQADggEBAIHttTIu
8P7nsCdgLSBlAqKbSNIJIpl/SMrSnY2Po/qhLvYJevbfmdyVVUBT5KC9oJWMZym2
TzkEuAhJ3LrueKMs/fzlZDd78yH1QiPLcqZfJhUIl+JOCGJMpq3z8iEAzrLj+Ajn
DHNnDE34U79YeHP6Hyzq0HExejhT38MlO7cY9h6n+YS6aRndxwmSUFkFlBMzZzn1
46k7lSph+KQXfCZ7uIWz+Oss2w00Y2H1nMObJKywUUWsWG6vyC2plaweVte5ieMc
IxPL5ISy1JweBKv/JGif8Nc1nmGHb5PaCFSgSqlKlNZ1JtOZx7Ei8s0HTBwGGhRu
JA3c4s6CiXPy7cE=
-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:45 2024 by rpki-client on console-fra.rpki-client.org