Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/3137372e3232332e33322e302f32302d3234203d3e20323636353339.roa
File:                     3137372e3232332e33322e302f32302d3234203d3e20323636353339.roa (raw, json)
Hash identifier:          qlAb68WVBXQ8h/OfETAMcW9D7dD+56kHUGaMSe+bcvI=
Subject key identifier:   38:24:55:C2:8A:34:A3:95:03:B0:F8:99:6C:52:2D:7F:2F:14:12:64
Certificate issuer:       /CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
Certificate serial:       09B5DED09122AD40A7E9EE1C6F1DD88E3D666853
Authority key identifier: AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/3137372e3232332e33322e302f32302d3234203d3e20323636353339.roa
Signing time:             Mon 27 May 2024 18:18:52 +0000
ROA not before:           Mon 27 May 2024 18:13:52 +0000
ROA not after:            Mon 26 May 2025 18:18:52 +0000
asID:                     266539
IP address blocks:        177.223.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl
                          rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 17:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b5:de:d0:91:22:ad:40:a7:e9:ee:1c:6f:1d:d8:8e:3d:66:68:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
        Validity
            Not Before: May 27 18:13:52 2024 GMT
            Not After : May 26 18:18:52 2025 GMT
        Subject: CN=382455C28A34A39503B0F8996C522D7F2F141264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fa:13:75:45:f3:87:f9:b7:51:07:95:87:a9:
                    78:cb:44:94:79:aa:01:ab:c9:c0:7c:9f:0e:36:38:
                    15:93:5e:dd:7c:c5:fb:00:cb:45:8f:59:76:03:54:
                    e2:6a:ca:1e:7b:a7:a1:eb:0d:e6:cf:b9:b3:8f:d5:
                    1b:e1:77:ee:54:67:b4:a3:83:07:04:c4:f8:ca:9d:
                    1f:71:23:32:65:ea:b1:8e:9f:b5:79:e3:6b:4c:cd:
                    aa:32:31:39:0c:8c:80:ea:e9:fa:b9:0e:2f:a5:90:
                    1e:85:e6:f8:d2:4e:4b:e1:fb:49:73:b0:09:95:73:
                    b9:72:e3:cb:ee:b3:f8:bb:53:46:64:f9:b2:94:48:
                    50:6c:1c:09:06:4b:c8:b1:32:24:87:2e:67:da:88:
                    ab:f1:e6:67:40:e8:0f:01:ee:7c:03:47:94:5b:18:
                    2d:8c:79:ce:e5:47:20:34:9b:b2:0d:6a:cc:6f:fe:
                    49:69:c3:69:26:e8:d5:5d:10:16:88:87:a4:fb:30:
                    30:ee:d7:7c:60:fc:76:e6:e6:06:9a:d2:1d:85:f0:
                    fe:ce:5a:39:ae:b6:7f:73:3e:f8:0a:54:35:b0:29:
                    10:86:3f:d3:d9:fd:50:2e:1b:7b:d3:95:c5:9a:fb:
                    79:01:62:1d:28:8a:90:37:f1:c9:29:bd:e0:cb:01:
                    3d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:24:55:C2:8A:34:A3:95:03:B0:F8:99:6C:52:2D:7F:2F:14:12:64
            X509v3 Authority Key Identifier:
                keyid:AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/3137372e3232332e33322e302f32302d3234203d3e20323636353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3a:f4:6c:3b:32:c0:e1:04:1d:9c:41:66:f7:b0:f3:ef:3d:bd:
         83:dc:7e:67:2e:dd:1c:78:41:23:63:79:66:8d:f9:20:2f:71:
         76:c7:44:0c:9f:37:b4:2a:8a:f3:de:40:0f:ac:cd:15:7e:e5:
         8f:02:11:b3:91:b2:da:fe:1d:d0:7a:bf:ec:90:1f:f6:ba:22:
         1a:6e:24:93:df:b5:4c:03:2c:e0:58:48:b5:1d:94:67:13:dc:
         5e:98:cd:12:c6:9e:f0:04:d8:b4:96:85:35:21:41:f2:72:50:
         cb:b5:4c:62:21:bb:5f:75:71:dd:52:71:55:2b:05:4b:55:c8:
         6c:00:92:cb:ff:82:c6:a6:13:94:c4:38:6b:2f:6e:e2:43:df:
         55:28:c4:7e:4b:70:65:4b:80:7c:97:8c:ec:06:53:6f:76:3c:
         8d:07:51:53:08:44:24:e4:d7:7a:65:26:66:b7:57:40:a7:8d:
         bd:8f:33:52:37:14:07:80:88:53:55:4f:55:f6:b4:e5:ec:05:
         1f:99:0a:56:30:d1:3a:8c:48:10:44:c8:f8:34:38:21:13:5b:
         64:8e:e3:b0:6a:79:be:4d:44:0a:9e:67:76:c8:e9:b5:a9:85:
         f8:9c:69:a8:98:d9:59:79:b4:25:17:e8:ec:22:af:46:6f:8e:
         e1:47:72:55
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCbXe0JEirUCn6e4cbx3Yjj1maFMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUNFQ0FBRDI5QUFGNzUxMjZEOEQyRjU5NEZDNDNBQjBF
N0IzQTEwRDAeFw0yNDA1MjcxODEzNTJaFw0yNTA1MjYxODE4NTJaMDMxMTAvBgNV
BAMTKDM4MjQ1NUMyOEEzNEEzOTUwM0IwRjg5OTZDNTIyRDdGMkYxNDEyNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV+hN1RfOH+bdRB5WHqXjLRJR5
qgGrycB8nw42OBWTXt18xfsAy0WPWXYDVOJqyh57p6HrDebPubOP1Rvhd+5UZ7Sj
gwcExPjKnR9xIzJl6rGOn7V542tMzaoyMTkMjIDq6fq5Di+lkB6F5vjSTkvh+0lz
sAmVc7ly48vus/i7U0Zk+bKUSFBsHAkGS8ixMiSHLmfaiKvx5mdA6A8B7nwDR5Rb
GC2Mec7lRyA0m7INasxv/klpw2km6NVdEBaIh6T7MDDu13xg/Hbm5gaa0h2F8P7O
Wjmutn9zPvgKVDWwKRCGP9PZ/VAuG3vTlcWa+3kBYh0oipA38ckpveDLAT1XAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUOCRVwoo0o5UDsPiZbFItfy8UEmQwHwYDVR0j
BBgwFoAUrOyq0pqvdRJtjS9ZT8Q6sOezoQ0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG1mSmlVOHVSdmpvNWlKWVFwUnhLMWVaNms0eHhKNVcyc1FNRjgxSGYy
blovMi9BQ0VDQUFEMjlBQUY3NTEyNkQ4RDJGNTk0RkM0M0FCMEU3QjNBMTBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDRUNBQUQyOUFBRjc1MTI2
RDhEMkY1OTRGQzQzQUIwRTdCM0ExMEQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0htZkppVTh1UnZqbzVpSllRcFJ4SzFlWjZrNHh4SjVXMnNRTUY4MUhmMm5aLzIv
MzEzNzM3MmUzMjMyMzMyZTMzMzIyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM2
MzYzNTMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASx3yAwDQYJKoZIhvcNAQELBQADggEBADr0bDsy
wOEEHZxBZvew8+89vYPcfmcu3Rx4QSNjeWaN+SAvcXbHRAyfN7QqivPeQA+szRV+
5Y8CEbORstr+HdB6v+yQH/a6IhpuJJPftUwDLOBYSLUdlGcT3F6YzRLGnvAE2LSW
hTUhQfJyUMu1TGIhu191cd1ScVUrBUtVyGwAksv/gsamE5TEOGsvbuJD31UoxH5L
cGVLgHyXjOwGU292PI0HUVMIRCTk13plJma3V0Cnjb2PM1I3FAeAiFNVT1X2tOXs
BR+ZClYw0TqMSBBEyPg0OCETW2SO47Bqeb5NRAqeZ3bI6bWphficaaiY2Vl5tCUX
6Owir0ZvjuFHclU=
-----END CERTIFICATE-----
Generated at Mon Nov 25 15:50:07 2024 by rpki-client on console-ams.rpki-client.org