Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/3137372e38352e3232362e302f32342d3234203d3e20323632363136.roa
File:                     3137372e38352e3232362e302f32342d3234203d3e20323632363136.roa (raw, json)
Hash identifier:          4enyydg5tgw4OmXUhlDV+E8vrfSmGf4BPmMMgee92G0=
Subject key identifier:   03:1B:2F:6C:13:1B:94:B4:AD:E9:68:66:C9:DB:BC:B3:9D:AB:15:11
Certificate issuer:       /CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
Certificate serial:       5E2DF175D39F7BEDD5315EDF991AD1AFECB83373
Authority key identifier: 53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/3137372e38352e3232362e302f32342d3234203d3e20323632363136.roa
Signing time:             Thu 04 Apr 2024 04:35:40 +0000
ROA not before:           Thu 04 Apr 2024 04:30:40 +0000
ROA not after:            Thu 03 Apr 2025 04:35:40 +0000
asID:                     262616
IP address blocks:        177.85.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl
                          rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:2d:f1:75:d3:9f:7b:ed:d5:31:5e:df:99:1a:d1:af:ec:b8:33:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5374C98AB2B76D954AA6395E4C053F6BF4A93144
        Validity
            Not Before: Apr  4 04:30:40 2024 GMT
            Not After : Apr  3 04:35:40 2025 GMT
        Subject: CN=031B2F6C131B94B4ADE96866C9DBBCB39DAB1511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5b:d9:31:e2:74:e3:33:ad:46:de:b9:76:72:
                    fa:23:68:29:e4:43:fe:0c:f2:52:a7:68:0c:02:80:
                    18:a8:02:ea:33:98:33:a9:51:5c:b2:f5:3a:56:d1:
                    df:fa:0a:da:c8:e4:9f:53:f1:39:b0:c4:bb:74:30:
                    04:a7:55:c7:44:b3:6a:d4:64:75:b2:22:da:74:69:
                    ac:98:de:94:de:32:41:26:81:f7:6e:81:23:42:57:
                    4e:1f:23:dc:cd:f7:c8:38:36:f5:d0:5e:cc:e8:ec:
                    b4:89:3f:7d:47:73:df:32:2b:30:e2:d6:0a:6e:a2:
                    14:84:47:c0:98:74:d5:98:40:ab:46:41:9b:89:d0:
                    28:16:09:42:ce:11:8d:9a:1c:20:e9:0e:8e:9c:25:
                    5d:14:54:0a:41:8a:fa:45:78:07:19:eb:9c:cf:1a:
                    b7:56:ee:31:7c:50:04:81:9b:bf:fe:ab:d2:8a:30:
                    15:8e:bf:d4:eb:47:e2:be:25:8a:08:84:f1:26:7a:
                    63:52:ba:b3:41:6b:f5:9b:b7:0d:ef:43:19:bd:ea:
                    75:03:95:da:d4:d1:65:4c:39:5c:08:89:f9:1d:f7:
                    40:ab:5f:d0:cb:ba:bd:6b:bc:04:1b:75:b3:f8:8e:
                    c8:55:5a:66:14:5d:0c:d6:37:e5:6d:85:a4:4c:98:
                    a3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:1B:2F:6C:13:1B:94:B4:AD:E9:68:66:C9:DB:BC:B3:9D:AB:15:11
            X509v3 Authority Key Identifier:
                keyid:53:74:C9:8A:B2:B7:6D:95:4A:A6:39:5E:4C:05:3F:6B:F4:A9:31:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5374C98AB2B76D954AA6395E4C053F6BF4A93144.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiYdJ5WwCTxwZu8WRXtNTychgTodQFkqzfxkonrqrdKM/1/3137372e38352e3232362e302f32342d3234203d3e20323632363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:08:5d:7a:bc:3c:53:d7:ab:5d:d3:48:96:db:5d:e6:c2:23:
         61:17:5a:fa:eb:a0:5c:2a:8b:df:e7:cb:df:41:97:c2:fc:ae:
         b6:ca:ee:42:25:b3:4f:e2:dc:45:8b:d4:16:8d:cf:86:d0:0d:
         23:06:f1:a5:4e:3a:77:a1:e9:dd:9a:fd:55:84:3c:bb:b0:d3:
         a1:5d:ed:80:45:ef:3f:fd:d5:da:c0:f2:3a:82:79:b7:fb:d2:
         fd:bf:9e:0f:ec:db:b6:94:aa:27:af:02:c4:e9:18:12:80:fd:
         61:ce:29:3a:fe:b4:69:52:c3:aa:31:cc:12:c7:d0:78:7e:6b:
         85:9e:e4:9c:21:91:6a:f8:f6:78:ec:3f:b7:7c:30:2e:92:bd:
         bd:d4:c8:7e:10:88:14:df:b6:73:bd:0a:95:9a:03:ea:43:fe:
         eb:eb:d7:fe:f6:84:aa:2a:a1:26:ad:42:26:87:37:86:fb:03:
         77:ba:86:17:5b:d1:94:d7:01:00:10:a7:28:2d:a3:2f:64:2a:
         79:84:99:1a:ae:26:cf:c9:a1:1f:30:e2:6b:9c:ed:6d:94:07:
         f2:a6:77:f8:5b:a1:8d:57:4c:69:a1:26:c2:58:81:aa:30:77:
         fc:fd:c7:32:f3:85:b4:9f:f8:e4:c2:ba:e8:05:73:0b:83:99:
         8e:77:13:87
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXi3xddOfe+3VMV7fmRrRr+y4M3MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTM3NEM5OEFCMkI3NkQ5NTRBQTYzOTVFNEMwNTNGNkJG
NEE5MzE0NDAeFw0yNDA0MDQwNDMwNDBaFw0yNTA0MDMwNDM1NDBaMDMxMTAvBgNV
BAMTKDAzMUIyRjZDMTMxQjk0QjRBREU5Njg2NkM5REJCQ0IzOURBQjE1MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAW9kx4nTjM61G3rl2cvojaCnk
Q/4M8lKnaAwCgBioAuozmDOpUVyy9TpW0d/6CtrI5J9T8TmwxLt0MASnVcdEs2rU
ZHWyItp0aayY3pTeMkEmgfdugSNCV04fI9zN98g4NvXQXszo7LSJP31Hc98yKzDi
1gpuohSER8CYdNWYQKtGQZuJ0CgWCULOEY2aHCDpDo6cJV0UVApBivpFeAcZ65zP
GrdW7jF8UASBm7/+q9KKMBWOv9TrR+K+JYoIhPEmemNSurNBa/Wbtw3vQxm96nUD
ldrU0WVMOVwIifkd90CrX9DLur1rvAQbdbP4jshVWmYUXQzWN+VthaRMmKMdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUAxsvbBMblLSt6Whmydu8s52rFREwHwYDVR0j
BBgwFoAUU3TJirK3bZVKpjleTAU/a/SpMUQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2lZZEo1V3dDVHh3WnU4V1JYdE5UeWNoZ1RvZFFGa3F6Znhrb25ycXJk
S00vMS81Mzc0Qzk4QUIyQjc2RDk1NEFBNjM5NUU0QzA1M0Y2QkY0QTkzMTQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUzNzRDOThBQjJCNzZEOTU0
QUE2Mzk1RTRDMDUzRjZCRjRBOTMxNDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dpWWRKNVd3Q1R4d1p1OFdSWHROVHljaGdUb2RRRmtxemZ4a29ucnFyZEtNLzEv
MzEzNzM3MmUzODM1MmUzMjMyMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxVeIwDQYJKoZIhvcNAQELBQADggEBAEUIXXq8
PFPXq13TSJbbXebCI2EXWvrroFwqi9/ny99Bl8L8rrbK7kIls0/i3EWL1BaNz4bQ
DSMG8aVOOneh6d2a/VWEPLuw06Fd7YBF7z/91drA8jqCebf70v2/ng/s27aUqiev
AsTpGBKA/WHOKTr+tGlSw6oxzBLH0Hh+a4We5JwhkWr49njsP7d8MC6Svb3UyH4Q
iBTftnO9CpWaA+pD/uvr1/72hKoqoSatQiaHN4b7A3e6hhdb0ZTXAQAQpygtoy9k
KnmEmRquJs/JoR8w4muc7W2UB/Kmd/hboY1XTGmhJsJYgaowd/z9xzLzhbSf+OTC
uugFcwuDmY53E4c=
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:41 2024 by rpki-client on console-ams.rpki-client.org