Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137302e3234362e3130342e302f32342d3234203d3e20323632333532.roa
File:                     3137302e3234362e3130342e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          iw9TY47q6Dh3jgB/Lpb7JR0xzhrmQgEZOCNkcLanC9M=
Subject key identifier:   33:6D:53:32:BF:1E:CF:00:9C:C1:0E:F3:0C:65:78:89:22:20:70:0E
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       5BCA262A312AD45B1C3DDAD2C38D42FB64E99C9A
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137302e3234362e3130342e302f32342d3234203d3e20323632333532.roa
Signing time:             Tue 22 Oct 2024 20:05:00 +0000
ROA not before:           Tue 22 Oct 2024 20:00:00 +0000
ROA not after:            Tue 21 Oct 2025 20:05:00 +0000
asID:                     262352
IP address blocks:        170.246.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ca:26:2a:31:2a:d4:5b:1c:3d:da:d2:c3:8d:42:fb:64:e9:9c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Oct 22 20:00:00 2024 GMT
            Not After : Oct 21 20:05:00 2025 GMT
        Subject: CN=336D5332BF1ECF009CC10EF30C6578892220700E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:35:2b:a3:fd:78:a7:8a:74:e9:ae:27:5c:37:
                    ef:49:c0:4c:da:71:73:7c:fd:44:b1:ef:e0:88:64:
                    08:fe:80:f4:eb:65:3b:2e:c1:98:84:f1:38:04:d8:
                    aa:ba:a1:c9:99:0d:aa:ec:60:2d:6d:fa:45:ed:ea:
                    ce:03:45:9a:0a:11:36:15:05:63:6e:fc:a3:6f:ca:
                    f6:60:f9:20:00:6b:be:c3:bd:07:26:a1:7c:aa:35:
                    99:15:64:9b:e9:46:d6:0c:e1:36:2b:ae:a0:63:99:
                    ae:6f:22:42:be:6e:df:ae:79:fd:4c:af:0b:4d:fe:
                    7c:b6:09:2e:d7:dc:80:b8:85:93:aa:a7:36:cb:7b:
                    e5:b2:d2:20:d4:d1:94:c4:4f:cb:bf:9c:ba:0f:85:
                    78:c9:11:b2:82:b6:25:98:8a:01:a4:db:0a:ac:42:
                    4c:93:87:84:d5:a4:14:a1:35:93:e5:07:5b:52:17:
                    2f:5c:5d:9b:b2:bf:e7:50:7f:12:5f:ac:0e:74:c2:
                    0f:96:d5:be:e5:18:c6:05:9b:f5:62:c0:17:78:38:
                    e2:10:ba:89:17:09:25:75:65:59:39:e9:d6:0c:95:
                    c8:cc:32:95:67:1b:5f:32:57:18:44:b6:5a:ad:0b:
                    67:b7:aa:e3:da:eb:fe:30:20:a9:f8:a7:e9:11:eb:
                    9f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6D:53:32:BF:1E:CF:00:9C:C1:0E:F3:0C:65:78:89:22:20:70:0E
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137302e3234362e3130342e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:d1:93:dd:0a:02:30:21:37:62:10:ae:64:13:f8:ef:1a:c2:
         47:a1:de:f7:cb:87:72:2a:d4:45:c8:4f:aa:59:25:07:69:09:
         cc:eb:6b:1c:54:7d:cc:1c:e4:aa:1c:19:b9:f9:c1:5d:98:e6:
         34:f4:47:4e:aa:db:3a:ad:28:ef:0f:80:4d:85:29:09:7d:d3:
         7d:46:1e:22:65:03:52:1f:17:2d:0a:84:f9:d2:56:5d:62:86:
         06:09:9e:a8:c9:5d:6a:fa:ec:50:34:51:e8:93:7c:59:33:cb:
         9e:ea:7b:c8:4c:f2:8e:b0:36:33:47:e0:df:55:13:44:fe:e0:
         da:bc:fb:c2:71:fb:09:7b:23:15:52:72:4c:11:66:1c:6f:c7:
         20:b0:a9:b3:74:d0:f2:58:fa:dd:8d:f3:c6:b2:ba:fd:86:58:
         03:fb:fb:51:d7:a0:ce:b0:1e:b4:da:4c:34:13:8a:c0:df:45:
         83:16:0e:59:62:95:db:40:78:76:fe:07:69:f7:99:15:01:ea:
         af:f2:6e:9e:ec:f2:22:aa:f8:08:62:3d:17:e0:a4:05:68:25:
         c6:1f:01:f9:f1:c6:ca:e6:f0:dd:f9:69:93:14:d3:5d:0d:6b:
         e8:b8:b7:62:e1:28:eb:65:98:10:2a:93:de:d4:6a:83:be:8e:
         44:29:76:7c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUW8omKjEq1FscPdrSw41C+2TpnJowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE3MEM0MDg1QTIwQ0Q2QUE0NTFGQkNBQzJDQjhGMkND
REJBM0U5NzAeFw0yNDEwMjIyMDAwMDBaFw0yNTEwMjEyMDA1MDBaMDMxMTAvBgNV
BAMTKDMzNkQ1MzMyQkYxRUNGMDA5Q0MxMEVGMzBDNjU3ODg5MjIyMDcwMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqNSuj/XininTpridcN+9JwEza
cXN8/USx7+CIZAj+gPTrZTsuwZiE8TgE2Kq6ocmZDarsYC1t+kXt6s4DRZoKETYV
BWNu/KNvyvZg+SAAa77DvQcmoXyqNZkVZJvpRtYM4TYrrqBjma5vIkK+bt+uef1M
rwtN/ny2CS7X3IC4hZOqpzbLe+Wy0iDU0ZTET8u/nLoPhXjJEbKCtiWYigGk2wqs
QkyTh4TVpBShNZPlB1tSFy9cXZuyv+dQfxJfrA50wg+W1b7lGMYFm/ViwBd4OOIQ
uokXCSV1ZVk56dYMlcjMMpVnG18yVxhEtlqtC2e3quPa6/4wIKn4p+kR659NAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUM21TMr8ezwCcwQ7zDGV4iSIgcA4wHwYDVR0j
BBgwFoAUgXDECFogzWqkUfvKwsuPLM26PpcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby8xbjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1
LzUvODE3MEM0MDg1QTIwQ0Q2QUE0NTFGQkNBQzJDQjhGMkNDREJBM0U5Ny5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84MTcwQzQwODVBMjBDRDZBQTQ1
MUZCQ0FDMkNCOEYyQ0NEQkEzRTk3LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8x
bjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1LzUvMzEz
NzMwMmUzMjM0MzYyZTMxMzAzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYz
MjMzMzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAKr2aDANBgkqhkiG9w0BAQsFAAOCAQEAaNGT3QoC
MCE3YhCuZBP47xrCR6He98uHcirURchPqlklB2kJzOtrHFR9zBzkqhwZufnBXZjm
NPRHTqrbOq0o7w+ATYUpCX3TfUYeImUDUh8XLQqE+dJWXWKGBgmeqMldavrsUDRR
6JN8WTPLnup7yEzyjrA2M0fg31UTRP7g2rz7wnH7CXsjFVJyTBFmHG/HILCps3TQ
8lj63Y3zxrK6/YZYA/v7UdegzrAetNpMNBOKwN9FgxYOWWKV20B4dv4HafeZFQHq
r/JunuzyIqr4CGI9F+CkBWglxh8B+fHGyubw3flpkxTTXQ1r6Li3YuEo62WYECqT
3tRqg76ORCl2fA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:04 2024 by rpki-client on console-fra.rpki-client.org