Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3230382e302f32322d3232203d3e20323632363533.roa
File:                     3137372e3130352e3230382e302f32322d3232203d3e20323632363533.roa (raw, json)
Hash identifier:          SujuV2jRianL+TMfVUWzsOaiv1HfW50tojh+bHBO8ko=
Subject key identifier:   EC:83:92:F8:A9:EF:A3:35:D2:98:B0:04:CE:D6:4A:FD:1D:42:8E:02
Certificate issuer:       /CN=0B0A3C6FABDCD0FAE6752207265CB464EA99F1C1
Certificate serial:       6C3715853AB7BFE08691E35BBA942C9D32CBC887
Authority key identifier: 0B:0A:3C:6F:AB:DC:D0:FA:E6:75:22:07:26:5C:B4:64:EA:99:F1:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B0A3C6FABDCD0FAE6752207265CB464EA99F1C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3230382e302f32322d3232203d3e20323632363533.roa
Signing time:             Tue 19 Nov 2024 10:57:55 +0000
ROA not before:           Tue 19 Nov 2024 10:52:55 +0000
ROA not after:            Tue 18 Nov 2025 10:57:55 +0000
asID:                     262653
IP address blocks:        177.105.208.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/0B0A3C6FABDCD0FAE6752207265CB464EA99F1C1.crl
                          rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/0B0A3C6FABDCD0FAE6752207265CB464EA99F1C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B0A3C6FABDCD0FAE6752207265CB464EA99F1C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:37:15:85:3a:b7:bf:e0:86:91:e3:5b:ba:94:2c:9d:32:cb:c8:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B0A3C6FABDCD0FAE6752207265CB464EA99F1C1
        Validity
            Not Before: Nov 19 10:52:55 2024 GMT
            Not After : Nov 18 10:57:55 2025 GMT
        Subject: CN=EC8392F8A9EFA335D298B004CED64AFD1D428E02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c9:d6:3f:48:3b:f0:f5:7b:ea:6f:71:96:72:
                    b1:c4:94:2e:19:d5:4e:26:ba:aa:eb:76:77:b7:3c:
                    1b:4b:32:2b:64:c3:10:bf:26:67:d1:10:52:3c:2b:
                    64:ec:dd:7c:da:bc:54:91:1c:85:d5:aa:15:d9:af:
                    ed:1b:be:2e:97:4f:4d:a9:c0:f3:fb:bb:be:68:f7:
                    8b:43:e4:2f:5f:36:ff:6d:c2:f4:de:75:dd:d4:17:
                    c8:6e:cd:1d:7f:d3:8b:d7:cd:6a:d4:a0:21:45:25:
                    00:7a:16:85:15:91:bc:53:d9:77:56:86:9b:2b:8e:
                    54:85:50:15:a9:21:67:5f:67:bc:aa:a3:f9:4b:b1:
                    d4:61:c0:fa:b9:a3:15:ef:ec:4a:50:f9:3a:8a:6c:
                    cb:35:13:4d:3b:5a:e6:69:58:96:ae:fb:6e:8f:ec:
                    0c:2a:f8:32:69:aa:c7:00:de:97:fc:53:ae:12:bd:
                    9f:30:51:75:bd:16:54:33:f6:37:fa:af:a7:76:b0:
                    db:67:e1:b4:bc:e3:b0:75:e2:71:fa:65:d6:d9:31:
                    07:58:c3:dd:f6:5f:59:c9:e4:f0:fb:6a:bb:51:e4:
                    0e:3a:1c:d9:1f:be:fb:f1:45:d7:72:f0:05:22:ee:
                    1c:9f:6a:86:76:63:7c:ff:fe:90:d8:e1:f4:cd:18:
                    c0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:83:92:F8:A9:EF:A3:35:D2:98:B0:04:CE:D6:4A:FD:1D:42:8E:02
            X509v3 Authority Key Identifier:
                keyid:0B:0A:3C:6F:AB:DC:D0:FA:E6:75:22:07:26:5C:B4:64:EA:99:F1:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/0B0A3C6FABDCD0FAE6752207265CB464EA99F1C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B0A3C6FABDCD0FAE6752207265CB464EA99F1C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3230382e302f32322d3232203d3e20323632363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:40:37:3f:43:fc:04:3e:f6:99:ec:df:65:43:6e:85:75:f8:
         1e:15:7d:ba:8d:20:a6:fe:7a:53:8f:f2:12:46:4a:59:42:29:
         39:6f:c5:26:e1:31:af:68:8e:a0:f8:37:6d:1c:3b:2a:d8:62:
         1b:3b:ee:c9:10:d6:d4:44:4d:f5:f3:4b:92:55:23:2b:55:05:
         b6:4e:20:90:36:58:4d:3d:48:1f:db:8f:3f:2b:85:5a:31:86:
         80:4b:49:70:28:df:1b:7b:bf:15:8f:dd:ca:9c:68:57:f4:de:
         fa:6b:0f:e0:f1:46:e2:fa:75:3f:67:e5:77:a1:5f:e8:64:14:
         0d:a4:83:ad:ff:81:09:94:d2:42:9c:8d:0a:30:ca:cf:e9:88:
         01:36:4b:e1:16:5a:c2:3f:67:83:e0:41:e7:b1:64:3f:7c:fe:
         02:05:95:4b:16:28:6e:8d:de:c5:4d:38:65:12:d2:17:95:42:
         65:4e:aa:49:38:96:0a:e8:81:fe:68:c8:7f:7b:4b:82:5a:1f:
         68:47:99:cb:4e:f7:0e:6d:3f:eb:4e:0f:fd:38:8a:a9:d8:01:
         85:52:01:dd:0c:4e:c1:79:1c:2f:ba:96:ea:5f:12:90:b3:ef:
         3e:9e:b0:99:d9:a8:e5:5a:08:5f:c7:0b:91:c0:ae:ae:0f:42:
         e3:aa:6c:83
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUbDcVhTq3v+CGkeNbupQsnTLLyIcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEIwQTNDNkZBQkRDRDBGQUU2NzUyMjA3MjY1Q0I0NjRF
QTk5RjFDMTAeFw0yNDExMTkxMDUyNTVaFw0yNTExMTgxMDU3NTVaMDMxMTAvBgNV
BAMTKEVDODM5MkY4QTlFRkEzMzVEMjk4QjAwNENFRDY0QUZEMUQ0MjhFMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaydY/SDvw9Xvqb3GWcrHElC4Z
1U4muqrrdne3PBtLMitkwxC/JmfREFI8K2Ts3XzavFSRHIXVqhXZr+0bvi6XT02p
wPP7u75o94tD5C9fNv9twvTedd3UF8huzR1/04vXzWrUoCFFJQB6FoUVkbxT2XdW
hpsrjlSFUBWpIWdfZ7yqo/lLsdRhwPq5oxXv7EpQ+TqKbMs1E007WuZpWJau+26P
7Awq+DJpqscA3pf8U64SvZ8wUXW9FlQz9jf6r6d2sNtn4bS847B14nH6ZdbZMQdY
w932X1nJ5PD7artR5A46HNkfvvvxRddy8AUi7hyfaoZ2Y3z//pDY4fTNGMC7AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU7IOS+KnvozXSmLAEztZK/R1CjgIwHwYDVR0j
BBgwFoAUCwo8b6vc0PrmdSIHJly0ZOqZ8cEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkRHZVE2U1N0ZFRDeTlUc012Tjc5bWlRclRIQ1NSdlhnMnMya0x0RDgx
ZnovMC8wQjBBM0M2RkFCRENEMEZBRTY3NTIyMDcyNjVDQjQ2NEVBOTlGMUMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCMEEzQzZGQUJEQ0QwRkFF
Njc1MjIwNzI2NUNCNDY0RUE5OUYxQzEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pER2VRNlNTdGRUQ3k5VHNNdk43OW1pUXJUSENTUnZYZzJzMmtMdEQ4MWZ6LzAv
MzEzNzM3MmUzMTMwMzUyZTMyMzAzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMjM2MzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArFp0DANBgkqhkiG9w0BAQsFAAOCAQEAR0A3
P0P8BD72mezfZUNuhXX4HhV9uo0gpv56U4/yEkZKWUIpOW/FJuExr2iOoPg3bRw7
KthiGzvuyRDW1ERN9fNLklUjK1UFtk4gkDZYTT1IH9uPPyuFWjGGgEtJcCjfG3u/
FY/dypxoV/Te+msP4PFG4vp1P2fld6Ff6GQUDaSDrf+BCZTSQpyNCjDKz+mIATZL
4RZawj9ng+BB57FkP3z+AgWVSxYobo3exU04ZRLSF5VCZU6qSTiWCuiB/mjIf3tL
glofaEeZy073Dm0/604P/TiKqdgBhVIB3QxOwXkcL7qW6l8SkLPvPp6wmdmo5VoI
X8cLkcCurg9C46psgw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:23 2024 by rpki-client on console-ams.rpki-client.org