Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/3137372e3232312e33322e302f32302d3234203d3e203532393635.roa
File:                     3137372e3232312e33322e302f32302d3234203d3e203532393635.roa (raw, json)
Hash identifier:          djhnSTXQSKtZlR0DOU0PTwf1rVTl4rTI8Vk2/grWS/w=
Subject key identifier:   FB:B5:E6:63:BE:E7:14:A8:20:09:31:E9:6D:C9:83:AA:7C:88:BC:6F
Certificate issuer:       /CN=B1FAF030A01493504761E684192B146956A636E6
Certificate serial:       69152ED08972C239BFD8B927D0D144F0F9CA8434
Authority key identifier: B1:FA:F0:30:A0:14:93:50:47:61:E6:84:19:2B:14:69:56:A6:36:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1FAF030A01493504761E684192B146956A636E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/3137372e3232312e33322e302f32302d3234203d3e203532393635.roa
Signing time:             Fri 30 Aug 2024 17:20:04 +0000
ROA not before:           Fri 30 Aug 2024 17:15:04 +0000
ROA not after:            Fri 29 Aug 2025 17:20:04 +0000
asID:                     52965
IP address blocks:        177.221.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/B1FAF030A01493504761E684192B146956A636E6.crl
                          rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/B1FAF030A01493504761E684192B146956A636E6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1FAF030A01493504761E684192B146956A636E6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:58:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:15:2e:d0:89:72:c2:39:bf:d8:b9:27:d0:d1:44:f0:f9:ca:84:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1FAF030A01493504761E684192B146956A636E6
        Validity
            Not Before: Aug 30 17:15:04 2024 GMT
            Not After : Aug 29 17:20:04 2025 GMT
        Subject: CN=FBB5E663BEE714A8200931E96DC983AA7C88BC6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8a:07:31:3f:b8:32:c6:0b:4f:27:78:9b:6d:
                    3b:d0:03:54:e5:59:46:a5:cb:58:89:ee:83:4d:ef:
                    79:72:9e:cc:11:fa:5d:95:91:62:3a:61:0e:11:a9:
                    59:f4:31:c9:0c:1f:ce:fe:f8:ce:8b:1f:71:c7:53:
                    de:8e:87:3f:65:3b:ec:e5:60:29:11:5d:c2:e1:07:
                    af:1b:8d:bd:79:dd:71:f9:76:da:70:5c:c4:ef:65:
                    ad:3d:2f:47:60:38:a2:08:4c:62:4a:cf:33:26:52:
                    b8:25:b3:18:2e:6d:05:83:3b:92:ec:66:e6:e9:76:
                    9b:5f:e8:de:5f:78:a5:8e:a9:02:13:f6:50:87:34:
                    32:23:ed:5c:ec:c7:93:8e:d9:44:5b:41:01:76:12:
                    97:a2:c8:3a:c1:a1:01:28:f3:c4:42:14:c9:62:94:
                    ea:37:64:69:e7:51:78:16:20:5f:10:63:7b:e6:64:
                    68:27:50:38:80:2c:9d:de:c9:fd:7f:3c:30:d6:a7:
                    3f:dc:56:1c:5c:2f:51:dd:61:a4:c5:f8:04:42:3d:
                    e6:b2:e5:2c:5e:a9:12:87:11:dd:09:1b:03:c0:1a:
                    ca:bd:00:de:b4:68:d0:b7:c2:5c:e6:a7:23:a5:ab:
                    8b:f2:cf:64:a8:96:94:92:19:77:6d:da:cd:25:d5:
                    f6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B5:E6:63:BE:E7:14:A8:20:09:31:E9:6D:C9:83:AA:7C:88:BC:6F
            X509v3 Authority Key Identifier:
                keyid:B1:FA:F0:30:A0:14:93:50:47:61:E6:84:19:2B:14:69:56:A6:36:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/B1FAF030A01493504761E684192B146956A636E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1FAF030A01493504761E684192B146956A636E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/3137372e3232312e33322e302f32302d3234203d3e203532393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4c:87:a6:c6:66:44:0f:c7:2f:b9:42:69:9c:16:e7:3e:48:7f:
         fb:7b:2b:aa:67:b7:53:96:e1:bb:48:84:c5:b3:a0:bb:fc:95:
         33:0c:ae:4e:12:23:05:b6:8c:ac:a2:f0:33:9c:0e:0f:99:de:
         70:f7:4a:ac:78:da:a4:65:b7:58:c5:8e:04:e5:8a:da:0d:8f:
         12:ad:95:78:11:ef:0a:c1:13:cc:b3:d6:c4:04:0c:f3:73:44:
         38:42:c9:47:6a:e1:02:24:c3:79:b9:58:7c:f9:b5:17:49:e3:
         99:59:e5:2c:ff:3a:16:08:31:eb:e3:d9:65:2e:11:aa:3a:0a:
         4c:7f:09:dd:38:8e:6d:a0:1d:55:57:50:7b:e1:5f:86:7d:ed:
         cf:d9:3d:38:5c:4a:1a:64:93:fe:ce:46:c3:d1:e9:3d:aa:ed:
         f0:7d:15:ad:70:df:4a:ae:4f:bd:d3:c8:55:2c:f3:5c:24:c3:
         58:8c:1b:39:24:33:bb:fa:5e:b7:0b:3a:7d:f0:9f:7f:5f:e1:
         aa:0b:1e:53:00:52:40:a3:d3:cb:f4:2c:ad:7b:e4:d7:67:35:
         5b:8f:df:18:43:a8:be:5f:78:f9:ce:2b:78:62:f5:71:9b:2e:
         b0:63:a3:1d:a5:de:60:07:e3:6f:af:86:65:6c:7d:9c:8e:48:
         44:c0:f3:ef
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUaRUu0Ilywjm/2Lkn0NFE8PnKhDQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFGQUYwMzBBMDE0OTM1MDQ3NjFFNjg0MTkyQjE0Njk1
NkE2MzZFNjAeFw0yNDA4MzAxNzE1MDRaFw0yNTA4MjkxNzIwMDRaMDMxMTAvBgNV
BAMTKEZCQjVFNjYzQkVFNzE0QTgyMDA5MzFFOTZEQzk4M0FBN0M4OEJDNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYigcxP7gyxgtPJ3ibbTvQA1Tl
WUaly1iJ7oNN73lynswR+l2VkWI6YQ4RqVn0MckMH87++M6LH3HHU96Ohz9lO+zl
YCkRXcLhB68bjb153XH5dtpwXMTvZa09L0dgOKIITGJKzzMmUrglsxgubQWDO5Ls
Zubpdptf6N5feKWOqQIT9lCHNDIj7Vzsx5OO2URbQQF2EpeiyDrBoQEo88RCFMli
lOo3ZGnnUXgWIF8QY3vmZGgnUDiALJ3eyf1/PDDWpz/cVhxcL1HdYaTF+ARCPeay
5SxeqRKHEd0JGwPAGsq9AN60aNC3wlzmpyOlq4vyz2SolpSSGXdt2s0l1fbxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU+7XmY77nFKggCTHpbcmDqnyIvG8wHwYDVR0j
BBgwFoAUsfrwMKAUk1BHYeaEGSsUaVamNuYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR24yOHN4bVB0Z0VmcXBhSjZFdHdENHE0S3dZTWRXaDQxemIxdVpFOWFC
Q1gvMC9CMUZBRjAzMEEwMTQ5MzUwNDc2MUU2ODQxOTJCMTQ2OTU2QTYzNkU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxRkFGMDMwQTAxNDkzNTA0
NzYxRTY4NDE5MkIxNDY5NTZBNjM2RTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duMjhzeG1QdGdFZnFwYUo2RXR3RDRxNEt3WU1kV2g0MXpiMXVaRTlhQkNYLzAv
MzEzNzM3MmUzMjMyMzEyZTMzMzIyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNTMy
MzkzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEsd0gMA0GCSqGSIb3DQEBCwUAA4IBAQBMh6bGZkQP
xy+5QmmcFuc+SH/7eyuqZ7dTluG7SITFs6C7/JUzDK5OEiMFtoysovAznA4Pmd5w
90qseNqkZbdYxY4E5YraDY8SrZV4Ee8KwRPMs9bEBAzzc0Q4QslHauECJMN5uVh8
+bUXSeOZWeUs/zoWCDHr49llLhGqOgpMfwndOI5toB1VV1B74V+Gfe3P2T04XEoa
ZJP+zkbD0ek9qu3wfRWtcN9Krk+908hVLPNcJMNYjBs5JDO7+l63Czp98J9/X+Gq
Cx5TAFJAo9PL9Cyte+TXZzVbj98YQ6i+X3j5zit4YvVxmy6wY6Mdpd5gB+Nvr4Zl
bH2cjkhEwPPv
-----END CERTIFICATE-----
Generated at Tue Nov 26 04:53:00 2024 by rpki-client on console-ams.rpki-client.org