Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/3137372e3132362e3231392e302f32342d3234203d3e20323633353232.roa
File:                     3137372e3132362e3231392e302f32342d3234203d3e20323633353232.roa (raw, json)
Hash identifier:          qMSCqkLf4H1afveQT+K9ZeU0XO7KEU5AspcKwz5ooXE=
Subject key identifier:   28:8A:5C:F5:02:43:AB:1B:0A:E2:84:90:4A:C6:32:4C:1E:20:BD:EF
Certificate issuer:       /CN=ADE62729B7C2F675CBB616815CBA292A798BEB4B
Certificate serial:       5BE94EFF6913DDBE0ABEA3FF08398F738A035B3C
Authority key identifier: AD:E6:27:29:B7:C2:F6:75:CB:B6:16:81:5C:BA:29:2A:79:8B:EB:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/3137372e3132362e3231392e302f32342d3234203d3e20323633353232.roa
Signing time:             Thu 04 Apr 2024 16:11:26 +0000
ROA not before:           Thu 04 Apr 2024 16:06:26 +0000
ROA not after:            Thu 03 Apr 2025 16:11:26 +0000
asID:                     263522
IP address blocks:        177.126.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.crl
                          rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:e9:4e:ff:69:13:dd:be:0a:be:a3:ff:08:39:8f:73:8a:03:5b:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADE62729B7C2F675CBB616815CBA292A798BEB4B
        Validity
            Not Before: Apr  4 16:06:26 2024 GMT
            Not After : Apr  3 16:11:26 2025 GMT
        Subject: CN=288A5CF50243AB1B0AE284904AC6324C1E20BDEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:72:e7:46:0d:49:83:f6:6f:1d:c2:33:b4:76:
                    65:8e:c7:28:cf:b1:93:68:94:27:ba:2a:53:ea:56:
                    ac:8f:77:5a:7e:3d:a6:5a:d5:f9:08:6c:7f:56:c8:
                    12:15:ee:3d:84:07:81:e5:3f:fe:1f:64:ca:3e:e0:
                    f6:c9:b7:74:01:49:b6:8b:5d:ff:0e:75:9b:f3:ea:
                    78:c9:77:85:2c:53:d6:c5:92:c7:4c:10:eb:f6:04:
                    21:70:49:14:aa:dc:d7:97:17:ef:79:fa:e3:7a:0b:
                    5f:a8:32:3b:a6:6e:ab:4d:23:fb:08:c1:65:3d:76:
                    b2:6e:97:43:79:ed:ee:f4:a3:a5:eb:ed:d8:f3:68:
                    63:e1:e0:e2:41:54:ba:6c:ba:0e:4b:e6:a5:ca:26:
                    33:a5:43:d8:42:a5:ac:19:fc:8c:4b:6b:b0:7b:37:
                    2f:2f:64:bd:13:35:ba:ee:d6:ef:59:09:a3:87:a0:
                    f9:02:5e:88:76:dc:1e:d6:c2:16:5b:db:13:0e:d8:
                    76:7d:10:18:97:36:aa:99:31:43:e7:02:e1:d7:b1:
                    09:3b:12:8f:47:14:0f:d0:7c:61:18:8f:50:2f:9d:
                    3a:c0:08:8b:5b:eb:f7:e1:e7:54:c1:db:34:52:35:
                    b6:87:d7:77:74:22:5f:07:2e:ca:d3:54:6e:62:29:
                    2f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:8A:5C:F5:02:43:AB:1B:0A:E2:84:90:4A:C6:32:4C:1E:20:BD:EF
            X509v3 Authority Key Identifier:
                keyid:AD:E6:27:29:B7:C2:F6:75:CB:B6:16:81:5C:BA:29:2A:79:8B:EB:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/3137372e3132362e3231392e302f32342d3234203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:58:55:4c:5a:54:e1:f0:7d:df:64:ec:bd:ed:ac:77:32:07:
         2f:d6:c3:1c:e8:27:dc:cb:71:27:6d:85:15:8b:c9:f4:dd:6e:
         c1:e8:ef:0b:d3:63:b9:a6:06:53:7d:41:0c:27:56:10:e7:4e:
         0c:a5:26:b0:53:17:7a:b0:4c:f5:c6:e4:02:14:c5:55:bc:39:
         c3:0c:03:9e:11:2e:98:2c:c0:f2:54:3b:81:e3:bf:0f:f4:e0:
         a9:b8:4d:7b:af:58:63:d4:44:6c:98:00:36:d2:28:65:c5:08:
         35:05:84:4d:40:6c:22:5c:20:22:99:52:8d:55:9a:e6:21:d1:
         35:eb:30:b2:98:fb:f8:26:5c:9b:16:d9:9d:1c:25:3a:ea:1c:
         7c:b7:32:25:80:af:fe:5b:e1:f2:8d:f1:55:d6:4e:39:aa:b0:
         64:e7:fe:c9:8c:b7:0b:91:0f:9c:5d:7f:f6:c8:00:7a:02:0d:
         ee:a3:30:2d:bb:38:df:fd:6c:7d:f6:1a:8f:08:48:3d:06:49:
         ec:dc:b7:78:28:78:a6:36:c9:ae:75:cc:37:9d:fb:86:2d:e7:
         0b:36:b7:89:a5:6e:d4:5e:31:55:6d:8f:d2:82:16:78:20:ea:
         b3:58:2b:6a:11:5e:19:8b:41:6c:96:26:05:45:39:0a:04:ed:
         93:9a:9f:75
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUW+lO/2kT3b4KvqP/CDmPc4oDWzwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURFNjI3MjlCN0MyRjY3NUNCQjYxNjgxNUNCQTI5MkE3
OThCRUI0QjAeFw0yNDA0MDQxNjA2MjZaFw0yNTA0MDMxNjExMjZaMDMxMTAvBgNV
BAMTKDI4OEE1Q0Y1MDI0M0FCMUIwQUUyODQ5MDRBQzYzMjRDMUUyMEJERUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6cudGDUmD9m8dwjO0dmWOxyjP
sZNolCe6KlPqVqyPd1p+PaZa1fkIbH9WyBIV7j2EB4HlP/4fZMo+4PbJt3QBSbaL
Xf8OdZvz6njJd4UsU9bFksdMEOv2BCFwSRSq3NeXF+95+uN6C1+oMjumbqtNI/sI
wWU9drJul0N57e70o6Xr7djzaGPh4OJBVLpsug5L5qXKJjOlQ9hCpawZ/IxLa7B7
Ny8vZL0TNbru1u9ZCaOHoPkCXoh23B7WwhZb2xMO2HZ9EBiXNqqZMUPnAuHXsQk7
Eo9HFA/QfGEYj1AvnTrACItb6/fh51TB2zRSNbaH13d0Il8HLsrTVG5iKS9RAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUKIpc9QJDqxsK4oSQSsYyTB4gve8wHwYDVR0j
BBgwFoAUreYnKbfC9nXLthaBXLopKnmL60swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR244Vk54aVlNUUpSOGZkcTZFVU1LWlJKdlFFdGJGWTRLV2lkdG5lZURR
SDYvMS9BREU2MjcyOUI3QzJGNjc1Q0JCNjE2ODE1Q0JBMjkyQTc5OEJFQjRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FERTYyNzI5QjdDMkY2NzVD
QkI2MTY4MTVDQkEyOTJBNzk4QkVCNEIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duOFZOeGlZTVFKUjhmZHE2RVVNS1pSSnZRRXRiRlk0S1dpZHRuZWVEUUg2LzEv
MzEzNzM3MmUzMTMyMzYyZTMyMzEzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM1MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALF+2zANBgkqhkiG9w0BAQsFAAOCAQEARFhV
TFpU4fB932Tsve2sdzIHL9bDHOgn3MtxJ22FFYvJ9N1uwejvC9NjuaYGU31BDCdW
EOdODKUmsFMXerBM9cbkAhTFVbw5wwwDnhEumCzA8lQ7geO/D/TgqbhNe69YY9RE
bJgANtIoZcUINQWETUBsIlwgIplSjVWa5iHRNeswspj7+CZcmxbZnRwlOuocfLcy
JYCv/lvh8o3xVdZOOaqwZOf+yYy3C5EPnF1/9sgAegIN7qMwLbs43/1sffYajwhI
PQZJ7Ny3eCh4pjbJrnXMN537hi3nCza3iaVu1F4xVW2P0oIWeCDqs1grahFeGYtB
bJYmBUU5CgTtk5qfdQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:33 2024 by rpki-client on console-fra.rpki-client.org