Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137372e32332e3235322e302f32322d3234203d3e203631363231.roa
File:                     3137372e32332e3235322e302f32322d3234203d3e203631363231.roa (raw, json)
Hash identifier:          LgPEPRtmQ1yzr0sGuabxuFiOPffY7+byOYXcfxqMR0U=
Subject key identifier:   5A:FF:98:BB:4E:3F:27:A1:FB:98:9D:A7:57:66:F1:DC:FD:AC:CE:79
Certificate issuer:       /CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
Certificate serial:       27448540AE2A89CF9B89939F7D0239F07DE54CC5
Authority key identifier: 3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137372e32332e3235322e302f32322d3234203d3e203631363231.roa
Signing time:             Wed 20 Nov 2024 02:38:13 +0000
ROA not before:           Wed 20 Nov 2024 02:33:13 +0000
ROA not after:            Wed 19 Nov 2025 02:38:13 +0000
asID:                     61621
IP address blocks:        177.23.252.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3C7BA9294464BE01B4C2A500708DD55CA879584D.crl
                          rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3C7BA9294464BE01B4C2A500708DD55CA879584D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 17:53:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:44:85:40:ae:2a:89:cf:9b:89:93:9f:7d:02:39:f0:7d:e5:4c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C7BA9294464BE01B4C2A500708DD55CA879584D
        Validity
            Not Before: Nov 20 02:33:13 2024 GMT
            Not After : Nov 19 02:38:13 2025 GMT
        Subject: CN=5AFF98BB4E3F27A1FB989DA75766F1DCFDACCE79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d5:50:b8:11:27:2c:51:e5:40:5f:a4:ca:3f:
                    9e:68:7c:c5:bb:4d:27:87:18:76:aa:37:08:a4:45:
                    27:ed:04:96:94:8a:ed:2b:f4:e3:2e:bb:19:c8:e1:
                    5c:6d:99:3f:28:e9:2c:be:6d:ad:2b:ad:e2:b1:23:
                    36:7a:67:c7:74:6c:ce:04:20:01:86:37:2b:f7:ca:
                    34:72:e6:98:da:39:0a:3b:fd:bf:87:b8:4e:41:c6:
                    55:01:63:b8:05:d7:f4:d4:7e:33:54:02:3a:6e:8b:
                    30:5c:e3:01:e9:31:e0:5d:64:0f:e6:18:25:ee:21:
                    5a:1e:b2:8a:2c:31:98:03:1d:68:f6:a2:61:70:ea:
                    25:42:22:7f:b6:80:4f:70:41:ae:7b:d5:a1:d0:5e:
                    d9:f8:fe:e5:59:a1:a5:88:6d:55:72:43:f6:c6:86:
                    a2:75:d4:64:d6:61:55:58:09:b0:94:7f:19:e2:2c:
                    7c:f4:d7:7a:93:73:21:b3:f5:1a:6d:f1:9a:96:7b:
                    09:8b:08:f4:ad:95:d0:c9:87:c1:56:78:08:46:19:
                    a8:45:ab:e9:21:67:d1:9f:c8:f4:bd:ec:e4:c4:85:
                    ca:05:42:4b:41:eb:73:fa:c6:d5:d6:6c:fe:43:69:
                    50:e5:ac:f7:21:92:b6:d6:63:dc:bb:21:7d:be:3f:
                    57:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FF:98:BB:4E:3F:27:A1:FB:98:9D:A7:57:66:F1:DC:FD:AC:CE:79
            X509v3 Authority Key Identifier:
                keyid:3C:7B:A9:29:44:64:BE:01:B4:C2:A5:00:70:8D:D5:5C:A8:79:58:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3C7BA9294464BE01B4C2A500708DD55CA879584D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C7BA9294464BE01B4C2A500708DD55CA879584D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/3137372e32332e3235322e302f32322d3234203d3e203631363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:2b:84:06:dc:f8:3e:42:7a:c4:f0:a2:df:4a:c3:8a:7a:2a:
         e9:7f:32:3b:f6:33:bf:f5:e9:e9:d6:04:d2:72:18:20:01:c2:
         10:21:02:20:9e:d9:f4:ea:aa:e8:8b:af:c2:96:d5:ed:45:ce:
         06:c8:2a:ea:29:c9:bb:dc:76:23:db:b3:92:41:d5:5c:c8:f7:
         88:80:3b:4c:ab:06:1e:56:95:b4:4f:46:7f:a5:32:be:5b:08:
         eb:5c:32:0e:55:5f:28:10:42:ba:fe:0b:45:df:5e:28:a7:91:
         d9:eb:a5:d0:b7:98:81:93:a8:9b:1b:68:47:12:d4:66:65:0b:
         02:89:22:86:90:36:af:18:f5:1a:5d:c6:b6:60:a0:6a:9d:41:
         e1:40:a4:ba:a0:13:83:85:cb:85:a0:40:66:60:a8:b1:25:50:
         78:c6:89:71:49:4c:80:46:d3:85:2e:8d:28:13:a8:9d:e8:98:
         8f:03:55:2f:6a:9b:07:f0:26:0f:43:59:b1:9c:ba:20:53:87:
         a4:1e:68:19:4a:9a:ea:a0:41:8d:0f:b8:5b:5d:e9:d4:64:04:
         14:a3:af:f1:25:28:e7:04:96:97:4d:64:03:95:a3:a5:53:05:
         01:e5:8c:72:f3:b5:1c:e6:9c:66:cb:d0:72:d2:06:30:08:3a:
         ad:75:d3:d2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJ0SFQK4qic+biZOffQI58H3lTMUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M3QkE5Mjk0NDY0QkUwMUI0QzJBNTAwNzA4REQ1NUNB
ODc5NTg0RDAeFw0yNDExMjAwMjMzMTNaFw0yNTExMTkwMjM4MTNaMDMxMTAvBgNV
BAMTKDVBRkY5OEJCNEUzRjI3QTFGQjk4OURBNzU3NjZGMURDRkRBQ0NFNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq1VC4EScsUeVAX6TKP55ofMW7
TSeHGHaqNwikRSftBJaUiu0r9OMuuxnI4VxtmT8o6Sy+ba0rreKxIzZ6Z8d0bM4E
IAGGNyv3yjRy5pjaOQo7/b+HuE5BxlUBY7gF1/TUfjNUAjpuizBc4wHpMeBdZA/m
GCXuIVoesoosMZgDHWj2omFw6iVCIn+2gE9wQa571aHQXtn4/uVZoaWIbVVyQ/bG
hqJ11GTWYVVYCbCUfxniLHz013qTcyGz9Rpt8ZqWewmLCPStldDJh8FWeAhGGahF
q+khZ9GfyPS97OTEhcoFQktB63P6xtXWbP5DaVDlrPchkrbWY9y7IX2+P1cdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUWv+Yu04/J6H7mJ2nV2bx3P2sznkwHwYDVR0j
BBgwFoAUPHupKURkvgG0wqUAcI3VXKh5WE0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHNCOVNvRjRqRmJpem5mNGR4S0RvZTdUc0x2MVFFTGszM2J4YlhrSEE5
UGcvMC8zQzdCQTkyOTQ0NjRCRTAxQjRDMkE1MDA3MDhERDU1Q0E4Nzk1ODRELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDN0JBOTI5NDQ2NEJFMDFC
NEMyQTUwMDcwOERENTVDQTg3OTU4NEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hzQjlTb0Y0akZiaXpuZjRkeEtEb2U3VHNMdjFRRUxrMzNieGJYa0hBOVBnLzAv
MzEzNzM3MmUzMjMzMmUzMjM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNjMx
MzYzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsRf8MA0GCSqGSIb3DQEBCwUAA4IBAQAOK4QG3Pg+
QnrE8KLfSsOKeirpfzI79jO/9enp1gTSchggAcIQIQIgntn06qroi6/CltXtRc4G
yCrqKcm73HYj27OSQdVcyPeIgDtMqwYeVpW0T0Z/pTK+WwjrXDIOVV8oEEK6/gtF
314op5HZ66XQt5iBk6ibG2hHEtRmZQsCiSKGkDavGPUaXca2YKBqnUHhQKS6oBOD
hcuFoEBmYKixJVB4xolxSUyARtOFLo0oE6id6JiPA1UvapsH8CYPQ1mxnLogU4ek
HmgZSprqoEGND7hbXenUZAQUo6/xJSjnBJaXTWQDlaOlUwUB5Yxy87Uc5pxmy9By
0gYwCDqtddPS
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:32 2024 by rpki-client on console-ams.rpki-client.org