Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/3137372e3135342e32342e302f32342d3234203d3e20323632393435.roa
File:                     3137372e3135342e32342e302f32342d3234203d3e20323632393435.roa (raw, json)
Hash identifier:          zv5H6rG+7TweUsD3LKlW2QvOXqds1cPkzX7rzKyoa0s=
Subject key identifier:   71:DE:22:FC:26:C3:BE:34:57:03:DC:54:24:ED:FE:3F:72:2A:16:4F
Certificate issuer:       /CN=F5053681E4FFFE993EC674A211C8BBC7FB338987
Certificate serial:       0C9EEDA2BE31E363DAEB9E7CC917DEC6B25CC92D
Authority key identifier: F5:05:36:81:E4:FF:FE:99:3E:C6:74:A2:11:C8:BB:C7:FB:33:89:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/3137372e3135342e32342e302f32342d3234203d3e20323632393435.roa
Signing time:             Wed 03 Apr 2024 18:33:04 +0000
ROA not before:           Wed 03 Apr 2024 18:28:04 +0000
ROA not after:            Wed 02 Apr 2025 18:33:04 +0000
asID:                     262945
IP address blocks:        177.154.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.crl
                          rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:9e:ed:a2:be:31:e3:63:da:eb:9e:7c:c9:17:de:c6:b2:5c:c9:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5053681E4FFFE993EC674A211C8BBC7FB338987
        Validity
            Not Before: Apr  3 18:28:04 2024 GMT
            Not After : Apr  2 18:33:04 2025 GMT
        Subject: CN=71DE22FC26C3BE345703DC5424EDFE3F722A164F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:81:f8:b3:d0:d9:f1:aa:cd:6b:96:49:77:f5:
                    ef:3e:b1:2a:54:1f:cf:d7:95:45:b3:7e:96:78:4d:
                    ad:d8:4b:dd:3c:b2:a9:38:01:b3:1f:91:0a:5e:57:
                    64:74:76:be:b7:c7:af:24:40:b0:21:a6:d0:0e:dd:
                    57:51:cc:0e:78:6a:aa:32:a0:6e:52:ad:c5:a9:75:
                    57:76:f6:15:54:2f:c4:18:cc:8d:ca:00:12:4e:8d:
                    b2:2f:d7:e2:d8:dd:e0:29:87:5e:11:d1:03:78:1a:
                    19:80:9c:2f:ce:53:6e:71:a9:2a:a5:ac:75:82:c6:
                    3b:a2:75:47:bf:ad:77:54:a8:ae:66:7b:b8:cf:c9:
                    9c:f0:53:5e:bf:80:c8:14:db:89:35:cc:2e:ef:25:
                    a3:e1:3d:d1:12:da:17:d7:78:4e:d0:c4:91:92:a3:
                    d7:86:ae:1c:6c:f4:0d:a5:10:42:4d:ef:51:d4:dd:
                    c7:c1:d3:79:85:6b:59:a2:88:5f:4e:18:9a:b7:8c:
                    cf:a0:b8:82:ab:ef:44:c6:d8:18:28:d5:d4:1c:d7:
                    c2:25:af:1d:44:77:25:5f:f6:04:7b:e0:1f:32:3c:
                    9a:8f:73:03:da:e1:be:34:05:3e:be:a1:d5:f8:6f:
                    4d:c7:e1:08:20:21:26:3c:b5:4a:d7:cf:d2:29:aa:
                    8b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DE:22:FC:26:C3:BE:34:57:03:DC:54:24:ED:FE:3F:72:2A:16:4F
            X509v3 Authority Key Identifier:
                keyid:F5:05:36:81:E4:FF:FE:99:3E:C6:74:A2:11:C8:BB:C7:FB:33:89:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/3137372e3135342e32342e302f32342d3234203d3e20323632393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:ca:d9:87:7a:68:96:7e:51:ae:66:a6:9c:b1:01:10:77:14:
         82:91:f2:ff:95:4d:48:51:06:16:07:f6:09:f8:fc:7f:dc:a4:
         f6:25:98:17:4b:76:14:df:cc:3f:28:f9:26:80:5f:49:41:37:
         2d:22:7f:11:d2:f5:f3:85:af:90:7c:da:b5:30:0e:4c:85:29:
         7c:9a:8e:13:c6:71:6b:fc:ef:e8:9b:dc:aa:8f:91:36:39:85:
         b0:5b:b1:c1:b3:99:d1:ee:b0:c7:3b:a3:a9:fc:04:ec:02:11:
         15:8e:98:5d:33:92:8f:06:f7:cd:f3:3d:6b:6f:ad:a8:01:33:
         97:06:93:d3:f3:54:32:58:14:66:d6:68:62:44:35:ea:ed:65:
         e2:72:82:b4:95:8c:05:76:97:dd:06:53:8a:87:16:5b:fd:7f:
         05:bc:d6:7e:d4:1b:4b:11:5f:c9:e5:d1:9e:c8:e2:f9:0b:ef:
         dd:71:b5:f3:77:35:54:ee:02:4f:57:5c:2e:08:4f:25:65:0c:
         01:06:2b:13:b9:39:5c:17:a6:bc:67:11:7b:ef:70:d3:fb:e3:
         1b:05:d7:8f:da:1b:4c:e3:ee:14:96:c2:90:ee:f4:0f:b5:88:
         db:61:ee:1f:90:b3:2b:1e:25:ad:6c:c6:6b:38:fd:18:47:92:
         52:2b:4a:52
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDJ7tor4x42Pa6558yRfexrJcyS0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjUwNTM2ODFFNEZGRkU5OTNFQzY3NEEyMTFDOEJCQzdG
QjMzODk4NzAeFw0yNDA0MDMxODI4MDRaFw0yNTA0MDIxODMzMDRaMDMxMTAvBgNV
BAMTKDcxREUyMkZDMjZDM0JFMzQ1NzAzREM1NDI0RURGRTNGNzIyQTE2NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvgfiz0Nnxqs1rlkl39e8+sSpU
H8/XlUWzfpZ4Ta3YS908sqk4AbMfkQpeV2R0dr63x68kQLAhptAO3VdRzA54aqoy
oG5SrcWpdVd29hVUL8QYzI3KABJOjbIv1+LY3eAph14R0QN4GhmAnC/OU25xqSql
rHWCxjuidUe/rXdUqK5me7jPyZzwU16/gMgU24k1zC7vJaPhPdES2hfXeE7QxJGS
o9eGrhxs9A2lEEJN71HU3cfB03mFa1miiF9OGJq3jM+guIKr70TG2Bgo1dQc18Il
rx1EdyVf9gR74B8yPJqPcwPa4b40BT6+odX4b03H4QggISY8tUrXz9IpqouNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcd4i/CbDvjRXA9xUJO3+P3IqFk8wHwYDVR0j
BBgwFoAU9QU2geT//pk+xnSiEci7x/sziYcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFBXTVQ3clByS25pUkUxQm84eXVZRjhrbXdVSktlenZ6RzY4Q2JWcVdD
UGovMS9GNTA1MzY4MUU0RkZGRTk5M0VDNjc0QTIxMUM4QkJDN0ZCMzM4OTg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y1MDUzNjgxRTRGRkZFOTkz
RUM2NzRBMjExQzhCQkM3RkIzMzg5ODcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hQV01UN3JQcktuaVJFMUJvOHl1WUY4a213VUpLZXp2ekc2OENiVnFXQ1BqLzEv
MzEzNzM3MmUzMTM1MzQyZTMyMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzOTM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxmhgwDQYJKoZIhvcNAQELBQADggEBAJHK2Yd6
aJZ+Ua5mppyxARB3FIKR8v+VTUhRBhYH9gn4/H/cpPYlmBdLdhTfzD8o+SaAX0lB
Ny0ifxHS9fOFr5B82rUwDkyFKXyajhPGcWv87+ib3KqPkTY5hbBbscGzmdHusMc7
o6n8BOwCERWOmF0zko8G983zPWtvragBM5cGk9PzVDJYFGbWaGJENertZeJygrSV
jAV2l90GU4qHFlv9fwW81n7UG0sRX8nl0Z7I4vkL791xtfN3NVTuAk9XXC4ITyVl
DAEGKxO5OVwXprxnEXvvcNP74xsF14/aG0zj7hSWwpDu9A+1iNth7h+QsyseJa1s
xms4/RhHklIrSlI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:46 2024 by rpki-client on console-fra.rpki-client.org