Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEFHUByyEiofbi8fxZvMGSo2P4SH6uEZ2ngSUxsV5x1q/0/3137372e3132382e39362e302f32312d3234203d3e20323632333638.roa
File:                     3137372e3132382e39362e302f32312d3234203d3e20323632333638.roa (raw, json)
Hash identifier:          y7JUTd1iuKIOXvK8dqmT1RZbWPpU9utJZGFGA/d5Cqs=
Subject key identifier:   D6:F7:BD:78:33:16:20:42:35:F5:F4:DE:43:00:1C:2A:C0:D0:95:B8
Certificate issuer:       /CN=C4987A54317665CB0A5B8A3C7EEFB7BB9D25EA0B
Certificate serial:       79EB3E0E15DD2AF6647C1FEFDBCC39723B889ED1
Authority key identifier: C4:98:7A:54:31:76:65:CB:0A:5B:8A:3C:7E:EF:B7:BB:9D:25:EA:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4987A54317665CB0A5B8A3C7EEFB7BB9D25EA0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEFHUByyEiofbi8fxZvMGSo2P4SH6uEZ2ngSUxsV5x1q/0/3137372e3132382e39362e302f32312d3234203d3e20323632333638.roa
Signing time:             Wed 06 Nov 2024 20:29:03 +0000
ROA not before:           Wed 06 Nov 2024 20:24:03 +0000
ROA not after:            Wed 05 Nov 2025 20:29:03 +0000
asID:                     262368
IP address blocks:        177.128.96.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HEFHUByyEiofbi8fxZvMGSo2P4SH6uEZ2ngSUxsV5x1q/0/C4987A54317665CB0A5B8A3C7EEFB7BB9D25EA0B.crl
                          rsync://rpki-repo.registro.br/repo/HEFHUByyEiofbi8fxZvMGSo2P4SH6uEZ2ngSUxsV5x1q/0/C4987A54317665CB0A5B8A3C7EEFB7BB9D25EA0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4987A54317665CB0A5B8A3C7EEFB7BB9D25EA0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:eb:3e:0e:15:dd:2a:f6:64:7c:1f:ef:db:cc:39:72:3b:88:9e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4987A54317665CB0A5B8A3C7EEFB7BB9D25EA0B
        Validity
            Not Before: Nov  6 20:24:03 2024 GMT
            Not After : Nov  5 20:29:03 2025 GMT
        Subject: CN=D6F7BD783316204235F5F4DE43001C2AC0D095B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:42:a2:84:82:a3:ca:ea:19:0b:89:87:d3:ff:
                    f5:88:06:c4:2a:8e:e9:d8:56:ee:e4:e4:f9:a7:67:
                    50:d6:68:32:28:5d:cd:39:23:9a:55:5d:aa:15:b1:
                    d7:b3:fe:7a:6d:b1:40:18:8c:59:15:2b:bb:09:22:
                    96:f3:a3:53:d9:f5:d7:69:62:d8:7a:8f:31:3b:8f:
                    4a:f9:0f:be:27:92:ac:33:0e:68:aa:2c:7e:f7:e7:
                    21:60:18:b4:1b:7a:8d:77:76:71:dd:98:ac:9f:9c:
                    e4:e5:d4:60:ef:d2:b1:57:2b:32:2c:7b:60:d4:4c:
                    59:a9:1f:99:33:36:13:15:9f:aa:0e:2b:7b:c6:d7:
                    f7:22:db:b1:ba:30:3b:98:dd:97:b3:c6:31:da:90:
                    fb:e1:ab:db:f4:7f:f3:1b:60:11:18:86:45:d8:4c:
                    7c:a3:eb:f5:46:0c:ec:51:e9:b3:6f:91:e2:bb:13:
                    d5:c9:78:29:21:a4:da:c8:80:88:38:00:70:c3:36:
                    30:55:60:77:0d:04:c0:c6:c5:e7:c4:74:d1:ce:95:
                    15:ba:28:17:5a:90:53:a7:99:46:23:21:fc:1c:61:
                    79:7c:64:2b:d4:6d:95:3f:60:d5:ae:e0:c5:90:f6:
                    2e:72:07:b5:2e:46:d4:e2:5a:1e:57:7c:f8:4b:9f:
                    73:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F7:BD:78:33:16:20:42:35:F5:F4:DE:43:00:1C:2A:C0:D0:95:B8
            X509v3 Authority Key Identifier:
                keyid:C4:98:7A:54:31:76:65:CB:0A:5B:8A:3C:7E:EF:B7:BB:9D:25:EA:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEFHUByyEiofbi8fxZvMGSo2P4SH6uEZ2ngSUxsV5x1q/0/C4987A54317665CB0A5B8A3C7EEFB7BB9D25EA0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4987A54317665CB0A5B8A3C7EEFB7BB9D25EA0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEFHUByyEiofbi8fxZvMGSo2P4SH6uEZ2ngSUxsV5x1q/0/3137372e3132382e39362e302f32312d3234203d3e20323632333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1b:46:e2:ed:18:bf:1b:25:87:41:71:67:0a:35:ae:34:54:7d:
         7b:1c:45:ad:07:a6:ab:7f:4f:d4:70:47:a6:f5:46:35:7c:4b:
         71:fa:97:50:5d:62:b8:40:41:90:84:f3:8b:d1:b1:df:73:2d:
         c8:19:e2:bd:60:ad:ad:5f:81:ef:94:18:50:5b:99:c0:b7:8d:
         23:ec:bd:1a:3f:5a:a6:ff:54:11:0b:51:26:8a:23:7e:8d:aa:
         f2:83:06:24:36:81:44:23:a0:54:29:a0:cf:8c:50:3f:77:58:
         e2:d6:6f:e8:f7:3e:81:e0:06:63:07:43:95:e7:35:5c:ac:5b:
         b8:3d:f1:55:14:ee:84:d1:51:6a:19:b6:29:01:bc:97:d3:8d:
         be:22:b1:61:2e:5b:5c:6c:d4:7a:42:5d:38:a5:11:0d:07:d0:
         83:c7:7e:d3:1d:de:79:ab:fe:29:a0:31:7b:0c:5f:80:07:a9:
         ef:f2:f2:85:fd:fa:35:fd:18:b0:b1:f2:91:e0:1b:2f:01:9a:
         24:c9:11:50:34:d4:0f:66:d0:1f:e6:86:0c:20:bc:57:26:00:
         15:39:da:4d:44:e7:7e:bf:0a:10:26:36:d3:5d:73:87:b4:95:
         df:d1:b1:2c:91:01:a4:29:bd:fa:b4:e1:de:25:c3:14:f0:e8:
         65:f1:df:45
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUees+DhXdKvZkfB/v28w5cjuIntEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ5ODdBNTQzMTc2NjVDQjBBNUI4QTNDN0VFRkI3QkI5
RDI1RUEwQjAeFw0yNDExMDYyMDI0MDNaFw0yNTExMDUyMDI5MDNaMDMxMTAvBgNV
BAMTKEQ2RjdCRDc4MzMxNjIwNDIzNUY1RjRERTQzMDAxQzJBQzBEMDk1QjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/QqKEgqPK6hkLiYfT//WIBsQq
junYVu7k5PmnZ1DWaDIoXc05I5pVXaoVsdez/nptsUAYjFkVK7sJIpbzo1PZ9ddp
Yth6jzE7j0r5D74nkqwzDmiqLH735yFgGLQbeo13dnHdmKyfnOTl1GDv0rFXKzIs
e2DUTFmpH5kzNhMVn6oOK3vG1/ci27G6MDuY3ZezxjHakPvhq9v0f/MbYBEYhkXY
THyj6/VGDOxR6bNvkeK7E9XJeCkhpNrIgIg4AHDDNjBVYHcNBMDGxefEdNHOlRW6
KBdakFOnmUYjIfwcYXl8ZCvUbZU/YNWu4MWQ9i5yB7UuRtTiWh5XfPhLn3PLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU1ve9eDMWIEI19fTeQwAcKsDQlbgwHwYDVR0j
BBgwFoAUxJh6VDF2ZcsKW4o8fu+3u50l6gswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEVGSFVCeXlFaW9mYmk4Znhadk1HU28yUDRTSDZ1RVoybmdTVXhzVjV4
MXEvMC9DNDk4N0E1NDMxNzY2NUNCMEE1QjhBM0M3RUVGQjdCQjlEMjVFQTBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M0OTg3QTU0MzE3NjY1Q0Iw
QTVCOEEzQzdFRUZCN0JCOUQyNUVBMEIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hFRkhVQnl5RWlvZmJpOGZ4WnZNR1NvMlA0U0g2dUVaMm5nU1V4c1Y1eDFxLzAv
MzEzNzM3MmUzMTMyMzgyZTM5MzYyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2
MzIzMzM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOxgGAwDQYJKoZIhvcNAQELBQADggEBABtG4u0Y
vxslh0FxZwo1rjRUfXscRa0Hpqt/T9RwR6b1RjV8S3H6l1BdYrhAQZCE84vRsd9z
LcgZ4r1gra1fge+UGFBbmcC3jSPsvRo/Wqb/VBELUSaKI36NqvKDBiQ2gUQjoFQp
oM+MUD93WOLWb+j3PoHgBmMHQ5XnNVysW7g98VUU7oTRUWoZtikBvJfTjb4isWEu
W1xs1HpCXTilEQ0H0IPHftMd3nmr/imgMXsMX4AHqe/y8oX9+jX9GLCx8pHgGy8B
miTJEVA01A9m0B/mhgwgvFcmABU52k1E536/ChAmNtNdc4e0ld/RsSyRAaQpvfq0
4d4lwxTw6GXx30U=
-----END CERTIFICATE-----
Generated at Mon Nov 25 10:55:54 2024 by rpki-client on console-ams.rpki-client.org