Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137302e3234362e3130362e302f32342d3234203d3e20323632333532.roa
File:                     3137302e3234362e3130362e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          VWyIhtTf1DR6o+zqrgOlHjzfSdjWIi1bKleJj6/XX8E=
Subject key identifier:   CE:37:69:B9:E9:F5:B1:B7:99:94:36:5E:DB:A8:5E:41:56:26:40:96
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       0FE605B9C7D34B86CBE9A86FCD9FF129424F1E06
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137302e3234362e3130362e302f32342d3234203d3e20323632333532.roa
Signing time:             Tue 10 Sep 2024 14:21:27 +0000
ROA not before:           Tue 10 Sep 2024 14:16:27 +0000
ROA not after:            Tue 09 Sep 2025 14:21:27 +0000
asID:                     262352
IP address blocks:        170.246.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:e6:05:b9:c7:d3:4b:86:cb:e9:a8:6f:cd:9f:f1:29:42:4f:1e:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Sep 10 14:16:27 2024 GMT
            Not After : Sep  9 14:21:27 2025 GMT
        Subject: CN=CE3769B9E9F5B1B79994365EDBA85E4156264096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:02:c9:a2:a3:95:83:db:b9:19:85:64:35:11:
                    a0:0e:09:26:fb:23:64:d6:14:a1:36:be:28:e4:8d:
                    c6:59:55:e7:59:95:b9:dc:01:00:5d:ac:86:03:1a:
                    c9:3c:ca:90:71:f2:92:86:98:85:2b:b1:56:80:9f:
                    f0:39:a1:8b:97:3b:5b:8a:53:03:f2:fd:fa:03:4e:
                    d1:cf:3f:f9:2b:0c:cd:e5:75:24:de:18:f3:4e:55:
                    04:2b:7d:5f:59:0e:e3:8f:78:02:38:7d:06:0e:83:
                    3b:6b:db:c7:c8:89:bb:6f:9b:57:3a:fa:80:f0:a5:
                    60:14:03:a7:f5:f0:22:66:5c:b6:33:c7:dd:89:37:
                    b0:89:34:19:63:93:7a:b7:88:65:e8:e0:37:7d:01:
                    86:b6:c6:7f:50:76:dc:78:c0:b8:f7:24:9a:2f:23:
                    c8:64:b6:0b:f9:73:c7:57:95:c2:55:7b:9d:55:f0:
                    6f:a5:81:f9:38:b7:15:2a:92:a8:31:f6:4c:de:27:
                    82:43:ee:2e:3d:76:f7:e1:b3:fb:7b:e5:00:55:52:
                    ae:b2:46:99:05:8c:df:af:ac:9f:19:c0:a8:ff:47:
                    73:2e:14:3e:a6:1c:31:9e:41:a3:e5:ab:0b:1b:a9:
                    c6:b4:d8:9e:be:1d:ae:75:b4:e9:bb:61:06:98:5f:
                    ce:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:37:69:B9:E9:F5:B1:B7:99:94:36:5E:DB:A8:5E:41:56:26:40:96
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137302e3234362e3130362e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:9a:e0:d7:26:47:0d:2d:6c:41:f2:6a:c8:53:64:70:77:6d:
         da:83:ee:2d:ab:63:aa:d2:37:c5:8c:a2:b9:b5:05:1d:e1:1c:
         50:37:a0:be:04:f7:5f:c1:05:92:23:26:f8:0d:b0:49:77:d1:
         7c:22:4c:a9:34:17:3c:cf:1d:e8:e4:d1:27:a2:18:f3:c8:55:
         06:fe:42:c4:b2:6e:b9:19:66:87:9f:ee:23:bb:30:96:07:c2:
         00:06:92:da:61:9e:fe:79:c4:4e:38:82:4d:1a:fd:7a:84:df:
         b4:6d:83:9b:5c:b0:ed:77:d0:5d:f4:79:a6:db:43:e4:53:47:
         36:c1:c0:d2:2b:d0:d4:78:de:e8:01:0e:bd:da:aa:f2:6b:37:
         ff:63:00:13:93:a2:ef:d6:18:b0:3e:93:c7:1a:e5:94:a5:ed:
         f8:32:d8:f6:dc:f3:5a:36:19:2a:d7:84:ff:da:8f:9e:5d:14:
         e4:6a:30:db:46:73:9c:56:ce:c8:b3:3e:b6:2b:bd:41:30:1a:
         37:02:31:83:74:15:17:70:f2:8f:d6:71:d0:22:35:11:ad:73:
         9d:ba:19:12:1a:53:29:32:9c:c7:c3:bd:45:b2:13:cb:8e:cb:
         0c:f7:2a:7f:fc:a8:e3:8c:7e:59:08:ac:ae:29:10:a1:72:2c:
         a7:f0:73:9c
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUD+YFucfTS4bL6ahvzZ/xKUJPHgYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE3MEM0MDg1QTIwQ0Q2QUE0NTFGQkNBQzJDQjhGMkND
REJBM0U5NzAeFw0yNDA5MTAxNDE2MjdaFw0yNTA5MDkxNDIxMjdaMDMxMTAvBgNV
BAMTKENFMzc2OUI5RTlGNUIxQjc5OTk0MzY1RURCQTg1RTQxNTYyNjQwOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCAsmio5WD27kZhWQ1EaAOCSb7
I2TWFKE2vijkjcZZVedZlbncAQBdrIYDGsk8ypBx8pKGmIUrsVaAn/A5oYuXO1uK
UwPy/foDTtHPP/krDM3ldSTeGPNOVQQrfV9ZDuOPeAI4fQYOgztr28fIibtvm1c6
+oDwpWAUA6f18CJmXLYzx92JN7CJNBljk3q3iGXo4Dd9AYa2xn9Qdtx4wLj3JJov
I8hktgv5c8dXlcJVe51V8G+lgfk4txUqkqgx9kzeJ4JD7i49dvfhs/t75QBVUq6y
RpkFjN+vrJ8ZwKj/R3MuFD6mHDGeQaPlqwsbqca02J6+Ha51tOm7YQaYX84JAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUzjdpuen1sbeZlDZe26heQVYmQJYwHwYDVR0j
BBgwFoAUgXDECFogzWqkUfvKwsuPLM26PpcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby8xbjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1
LzUvODE3MEM0MDg1QTIwQ0Q2QUE0NTFGQkNBQzJDQjhGMkNDREJBM0U5Ny5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84MTcwQzQwODVBMjBDRDZBQTQ1
MUZCQ0FDMkNCOEYyQ0NEQkEzRTk3LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8x
bjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1LzUvMzEz
NzMwMmUzMjM0MzYyZTMxMzAzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYz
MjMzMzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAKr2ajANBgkqhkiG9w0BAQsFAAOCAQEABZrg1yZH
DS1sQfJqyFNkcHdt2oPuLatjqtI3xYyiubUFHeEcUDegvgT3X8EFkiMm+A2wSXfR
fCJMqTQXPM8d6OTRJ6IY88hVBv5CxLJuuRlmh5/uI7swlgfCAAaS2mGe/nnETjiC
TRr9eoTftG2Dm1yw7XfQXfR5pttD5FNHNsHA0ivQ1Hje6AEOvdqq8ms3/2MAE5Oi
79YYsD6TxxrllKXt+DLY9tzzWjYZKteE/9qPnl0U5Gow20ZznFbOyLM+tiu9QTAa
NwIxg3QVF3Dyj9Zx0CI1Ea1znboZEhpTKTKcx8O9RbITy47LDPcqf/yo44x+WQis
rikQoXIsp/BznA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:51 2024 by rpki-client on console-ams.rpki-client.org