Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/3137372e3135342e32352e302f32342d3234203d3e20323632393435.roa
File:                     3137372e3135342e32352e302f32342d3234203d3e20323632393435.roa (raw, json)
Hash identifier:          fNGQ+dOxTYKTgfMp1opHGskx6UONJhvCjOK4f5Tp4tw=
Subject key identifier:   33:4C:D5:72:8D:97:E9:A6:FC:A3:B2:B4:02:B3:54:A8:B6:62:8B:0F
Certificate issuer:       /CN=F5053681E4FFFE993EC674A211C8BBC7FB338987
Certificate serial:       0570E3A85A64F7485DC4A9C7D62A6C56EC0AF07D
Authority key identifier: F5:05:36:81:E4:FF:FE:99:3E:C6:74:A2:11:C8:BB:C7:FB:33:89:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/3137372e3135342e32352e302f32342d3234203d3e20323632393435.roa
Signing time:             Wed 03 Apr 2024 18:33:04 +0000
ROA not before:           Wed 03 Apr 2024 18:28:04 +0000
ROA not after:            Wed 02 Apr 2025 18:33:04 +0000
asID:                     262945
IP address blocks:        177.154.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.crl
                          rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:70:e3:a8:5a:64:f7:48:5d:c4:a9:c7:d6:2a:6c:56:ec:0a:f0:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5053681E4FFFE993EC674A211C8BBC7FB338987
        Validity
            Not Before: Apr  3 18:28:04 2024 GMT
            Not After : Apr  2 18:33:04 2025 GMT
        Subject: CN=334CD5728D97E9A6FCA3B2B402B354A8B6628B0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:da:a4:02:e5:8e:89:24:b4:cc:d2:0a:c0:8c:
                    ed:f7:a6:be:b2:19:ce:aa:df:21:c8:02:70:d3:21:
                    29:a1:21:46:9e:b5:5d:7c:40:97:32:2e:5c:ff:df:
                    ef:b9:87:c4:8a:33:72:d0:53:cc:13:f9:f1:c7:a4:
                    00:db:4a:c8:b0:0c:0f:ca:01:79:b1:7b:bd:c5:13:
                    72:91:c1:ad:ec:51:87:3b:86:e0:0e:81:cb:6e:b6:
                    c6:62:3b:0f:08:c4:4b:78:de:af:12:de:8a:c8:6b:
                    5a:d2:3d:d5:fb:d7:b9:94:e1:c0:a8:38:88:0c:4e:
                    f5:e4:af:f9:6a:ae:c9:f0:58:02:83:ba:0b:8b:c8:
                    b8:4a:67:f5:14:82:61:d7:8b:cf:71:c4:19:3a:69:
                    01:be:c7:8b:cb:17:af:ed:b7:b7:61:73:72:18:3b:
                    5c:ae:60:97:4b:42:8f:2d:af:0d:07:25:e3:55:b3:
                    95:c2:36:c0:89:c6:49:58:d9:a8:bb:b3:dd:b4:ab:
                    89:24:07:97:ff:c8:47:31:49:b1:a4:54:02:21:f3:
                    af:60:53:50:20:50:a7:2a:b5:c2:17:7d:43:f5:b2:
                    34:f9:84:28:b5:83:e8:93:c9:d8:a8:0e:13:c4:a9:
                    0f:25:cc:b3:da:4b:a9:32:62:7a:53:2c:a8:d7:e4:
                    88:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:4C:D5:72:8D:97:E9:A6:FC:A3:B2:B4:02:B3:54:A8:B6:62:8B:0F
            X509v3 Authority Key Identifier:
                keyid:F5:05:36:81:E4:FF:FE:99:3E:C6:74:A2:11:C8:BB:C7:FB:33:89:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5053681E4FFFE993EC674A211C8BBC7FB338987.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HPWMT7rPrKniRE1Bo8yuYF8kmwUJKezvzG68CbVqWCPj/1/3137372e3135342e32352e302f32342d3234203d3e20323632393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:db:c1:61:a6:e0:76:70:3e:29:c3:19:d3:8a:eb:57:60:20:
         f2:fd:fc:a8:a4:12:42:c2:65:40:03:e2:a9:8b:45:05:b9:c0:
         b1:56:90:68:10:66:0a:07:86:3d:cd:55:19:e5:87:33:f8:ec:
         24:91:12:44:54:53:17:ac:4a:73:be:75:cc:5e:73:f2:1d:60:
         19:42:61:4f:f3:5e:7f:8c:fa:18:20:45:a9:28:73:be:cf:98:
         29:b7:34:8b:12:d7:e6:91:9f:9f:fa:51:d3:64:d9:a0:09:a3:
         e1:69:d5:3f:8a:f5:38:d3:fd:a6:10:8a:78:d7:1d:5a:f5:58:
         41:ce:ac:cb:cc:bc:2b:14:ba:c1:99:f9:95:fd:69:47:52:f2:
         3d:d3:da:ce:32:02:73:24:ae:af:15:49:e6:9d:de:ea:57:f4:
         06:31:00:86:df:12:0b:87:b2:8a:ec:d2:c6:f5:37:88:eb:69:
         f7:62:83:01:d3:f4:0d:84:4e:12:03:5c:82:93:51:6f:9b:9d:
         fd:dd:1e:5b:2a:ad:e6:1d:52:fa:25:0c:93:3e:0e:2c:d3:a2:
         74:47:9d:86:58:a7:38:ed:66:e1:54:5c:d8:6b:a9:a6:60:84:
         82:28:e0:0a:d4:45:87:cf:4d:72:02:21:8e:4a:a5:cd:5b:80:
         1b:05:aa:a9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBXDjqFpk90hdxKnH1ipsVuwK8H0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjUwNTM2ODFFNEZGRkU5OTNFQzY3NEEyMTFDOEJCQzdG
QjMzODk4NzAeFw0yNDA0MDMxODI4MDRaFw0yNTA0MDIxODMzMDRaMDMxMTAvBgNV
BAMTKDMzNENENTcyOEQ5N0U5QTZGQ0EzQjJCNDAyQjM1NEE4QjY2MjhCMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ2qQC5Y6JJLTM0grAjO33pr6y
Gc6q3yHIAnDTISmhIUaetV18QJcyLlz/3++5h8SKM3LQU8wT+fHHpADbSsiwDA/K
AXmxe73FE3KRwa3sUYc7huAOgctutsZiOw8IxEt43q8S3orIa1rSPdX717mU4cCo
OIgMTvXkr/lqrsnwWAKDuguLyLhKZ/UUgmHXi89xxBk6aQG+x4vLF6/tt7dhc3IY
O1yuYJdLQo8trw0HJeNVs5XCNsCJxklY2ai7s920q4kkB5f/yEcxSbGkVAIh869g
U1AgUKcqtcIXfUP1sjT5hCi1g+iTydioDhPEqQ8lzLPaS6kyYnpTLKjX5Ii1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUM0zVco2X6ab8o7K0ArNUqLZiiw8wHwYDVR0j
BBgwFoAU9QU2geT//pk+xnSiEci7x/sziYcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFBXTVQ3clByS25pUkUxQm84eXVZRjhrbXdVSktlenZ6RzY4Q2JWcVdD
UGovMS9GNTA1MzY4MUU0RkZGRTk5M0VDNjc0QTIxMUM4QkJDN0ZCMzM4OTg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y1MDUzNjgxRTRGRkZFOTkz
RUM2NzRBMjExQzhCQkM3RkIzMzg5ODcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hQV01UN3JQcktuaVJFMUJvOHl1WUY4a213VUpLZXp2ekc2OENiVnFXQ1BqLzEv
MzEzNzM3MmUzMTM1MzQyZTMyMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzOTM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxmhkwDQYJKoZIhvcNAQELBQADggEBAHDbwWGm
4HZwPinDGdOK61dgIPL9/KikEkLCZUAD4qmLRQW5wLFWkGgQZgoHhj3NVRnlhzP4
7CSREkRUUxesSnO+dcxec/IdYBlCYU/zXn+M+hggRakoc77PmCm3NIsS1+aRn5/6
UdNk2aAJo+Fp1T+K9TjT/aYQinjXHVr1WEHOrMvMvCsUusGZ+ZX9aUdS8j3T2s4y
AnMkrq8VSead3upX9AYxAIbfEguHsors0sb1N4jrafdigwHT9A2EThIDXIKTUW+b
nf3dHlsqreYdUvolDJM+DizTonRHnYZYpzjtZuFUXNhrqaZghIIo4ArURYfPTXIC
IY5Kpc1bgBsFqqk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:46 2024 by rpki-client on console-fra.rpki-client.org