Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3137372e3130342e3232322e302f32332d3233203d3e20323632363338.roa
File:                     3137372e3130342e3232322e302f32332d3233203d3e20323632363338.roa (raw, json)
Hash identifier:          O6zGmjxdGoTL0xQkFcNyznx9cCqTVrf+Y9oNRR657N8=
Subject key identifier:   BE:1E:E9:09:72:79:BB:66:AA:85:E4:C6:21:AD:97:AB:DB:EA:9E:F9
Certificate issuer:       /CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
Certificate serial:       7E1255C18B698DEA8319E4832B02AA5B00BD3509
Authority key identifier: E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3137372e3130342e3232322e302f32332d3233203d3e20323632363338.roa
Signing time:             Thu 08 Aug 2024 18:51:55 +0000
ROA not before:           Thu 08 Aug 2024 18:46:55 +0000
ROA not after:            Thu 07 Aug 2025 18:51:55 +0000
asID:                     262638
IP address blocks:        177.104.222.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl
                          rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:12:55:c1:8b:69:8d:ea:83:19:e4:83:2b:02:aa:5b:00:bd:35:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
        Validity
            Not Before: Aug  8 18:46:55 2024 GMT
            Not After : Aug  7 18:51:55 2025 GMT
        Subject: CN=BE1EE9097279BB66AA85E4C621AD97ABDBEA9EF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f6:ab:5c:3b:8f:2e:27:bd:b1:95:84:20:c6:
                    f0:7b:63:ff:4b:06:b6:07:4d:bc:0f:b2:34:e9:82:
                    bf:8a:8e:f7:9b:64:03:f2:cd:35:2c:0b:04:ba:51:
                    1a:40:df:bd:d4:31:66:e3:7c:d7:91:a6:0f:c4:ae:
                    ce:6c:ac:38:e3:50:67:62:0a:49:78:d3:81:01:54:
                    73:b7:dc:60:65:20:3f:57:39:59:eb:7b:b4:48:5e:
                    fc:0c:c8:31:31:45:0d:45:68:1a:9c:ca:07:8d:30:
                    7f:1f:2c:96:dd:47:b1:43:0d:98:b1:25:2b:1e:f4:
                    ba:27:3f:fb:a1:d5:71:98:50:62:70:c8:dc:6a:a9:
                    af:4c:74:ba:f7:9b:1e:38:45:9b:7e:99:a3:8b:03:
                    bf:ea:53:63:19:b0:ae:da:6e:f6:22:c9:59:17:6a:
                    68:a3:24:60:70:56:4b:0b:ee:3d:65:97:a5:0b:ac:
                    9d:97:68:52:5c:f5:61:1d:81:85:bb:e1:12:9d:81:
                    11:ef:09:55:47:b0:74:7d:ff:61:3a:fd:64:30:f6:
                    77:29:26:91:2e:6c:6d:b1:ea:81:67:af:ce:64:1a:
                    8b:fc:19:0f:54:52:20:b7:e2:99:00:19:37:7d:38:
                    89:66:08:3c:8a:32:40:36:a3:6c:10:29:56:13:25:
                    b2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1E:E9:09:72:79:BB:66:AA:85:E4:C6:21:AD:97:AB:DB:EA:9E:F9
            X509v3 Authority Key Identifier:
                keyid:E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3137372e3130342e3232322e302f32332d3233203d3e20323632363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:d9:e6:9b:bc:1a:8b:67:b6:89:46:f4:e7:ed:d9:70:e9:50:
         13:68:5f:3d:92:50:49:be:44:f4:2a:3e:c9:7b:c5:cc:19:84:
         d9:78:0c:a5:1d:a5:0d:53:fe:4a:86:54:9b:08:6a:0b:cd:13:
         3b:d9:90:5e:83:80:99:86:dd:7c:06:7d:97:65:eb:45:42:85:
         48:6f:7f:0a:b8:3f:38:3c:d8:a4:e4:a5:44:c4:5a:aa:0f:9b:
         64:c3:fd:2e:22:d1:32:2c:37:18:8b:a3:03:dd:b8:ae:3e:e0:
         41:dc:79:df:3a:40:9f:fc:e5:fe:98:5a:de:d6:bc:c4:b3:fe:
         14:e3:d0:12:ea:6e:4e:80:57:6e:72:70:17:6e:50:7f:f3:08:
         ec:5d:be:20:4a:8f:af:a8:9a:fc:95:bf:bd:ab:ea:fa:4e:48:
         8f:0f:ba:89:55:10:a7:6d:4f:a3:fd:fd:db:f9:c4:c2:ea:71:
         b5:a6:ec:07:9d:7a:79:38:bc:0c:04:09:f9:d8:d6:68:84:e0:
         9b:c1:25:dc:48:33:f0:0b:4c:2a:41:33:55:21:bd:a5:56:9d:
         60:ad:e8:e8:97:5f:08:ec:79:ea:47:a3:14:ce:45:b2:af:82:
         87:8c:84:e2:91:5c:ff:51:b4:3d:34:fd:aa:a8:1e:b1:98:53:
         46:a1:91:27
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUfhJVwYtpjeqDGeSDKwKqWwC9NQkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTYxMTVDNEIwRERGMzU2NkQ4N0YzNzgzREQ4NzMwNDk3
RTNDQ0UwNTAeFw0yNDA4MDgxODQ2NTVaFw0yNTA4MDcxODUxNTVaMDMxMTAvBgNV
BAMTKEJFMUVFOTA5NzI3OUJCNjZBQTg1RTRDNjIxQUQ5N0FCREJFQTlFRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm9qtcO48uJ72xlYQgxvB7Y/9L
BrYHTbwPsjTpgr+KjvebZAPyzTUsCwS6URpA373UMWbjfNeRpg/Ers5srDjjUGdi
Ckl404EBVHO33GBlID9XOVnre7RIXvwMyDExRQ1FaBqcygeNMH8fLJbdR7FDDZix
JSse9LonP/uh1XGYUGJwyNxqqa9MdLr3mx44RZt+maOLA7/qU2MZsK7abvYiyVkX
amijJGBwVksL7j1ll6ULrJ2XaFJc9WEdgYW74RKdgRHvCVVHsHR9/2E6/WQw9ncp
JpEubG2x6oFnr85kGov8GQ9UUiC34pkAGTd9OIlmCDyKMkA2o2wQKVYTJbItAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUvh7pCXJ5u2aqheTGIa2Xq9vqnvkwHwYDVR0j
BBgwFoAU5hFcSw3fNWbYfzeD3YcwSX48zgUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby91ZGNwd1BlTEN5eVpIWDJEUGlvbWtrdkM2dlRzUFhTS3FndWRNRGhKVWlh
LzEvRTYxMTVDNEIwRERGMzU2NkQ4N0YzNzgzREQ4NzMwNDk3RTNDQ0UwNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FNjExNUM0QjBEREYzNTY2RDg3
RjM3ODNERDg3MzA0OTdFM0NDRTA1LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby91
ZGNwd1BlTEN5eVpIWDJEUGlvbWtrdkM2dlRzUFhTS3FndWRNRGhKVWlhLzEvMzEz
NzM3MmUzMTMwMzQyZTMyMzIzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYz
MjM2MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAbFo3jANBgkqhkiG9w0BAQsFAAOCAQEAT9nmm7wa
i2e2iUb05+3ZcOlQE2hfPZJQSb5E9Co+yXvFzBmE2XgMpR2lDVP+SoZUmwhqC80T
O9mQXoOAmYbdfAZ9l2XrRUKFSG9/Crg/ODzYpOSlRMRaqg+bZMP9LiLRMiw3GIuj
A924rj7gQdx53zpAn/zl/pha3ta8xLP+FOPQEupuToBXbnJwF25Qf/MI7F2+IEqP
r6ia/JW/vavq+k5Ijw+6iVUQp21Po/392/nEwupxtabsB516eTi8DAQJ+djWaITg
m8El3Egz8AtMKkEzVSG9pVadYK3o6JdfCOx56kejFM5Fsq+Ch4yE4pFc/1G0PTT9
qqgesZhTRqGRJw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:07 2024 by rpki-client on console-ams.rpki-client.org