Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137302e3234362e3130372e302f32342d3234203d3e20323632333532.roa
File:                     3137302e3234362e3130372e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          UAV4CHN82MWv9oxyCJppiOsNNgF+FYH7eqxolAd42vE=
Subject key identifier:   73:F8:8B:6D:D3:DC:0B:6C:B7:70:17:42:D4:57:54:33:8F:45:BE:D5
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       4C2E528795E0BD05C1989DB4D587A8278BD49EFA
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137302e3234362e3130372e302f32342d3234203d3e20323632333532.roa
Signing time:             Thu 04 Apr 2024 15:23:26 +0000
ROA not before:           Thu 04 Apr 2024 15:18:26 +0000
ROA not after:            Thu 03 Apr 2025 15:23:26 +0000
asID:                     262352
IP address blocks:        170.246.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:2e:52:87:95:e0:bd:05:c1:98:9d:b4:d5:87:a8:27:8b:d4:9e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Apr  4 15:18:26 2024 GMT
            Not After : Apr  3 15:23:26 2025 GMT
        Subject: CN=73F88B6DD3DC0B6CB7701742D45754338F45BED5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4f:a7:83:6b:a6:a9:42:93:02:17:88:97:39:
                    75:da:b4:d8:48:9a:4e:ee:43:8c:d8:42:e8:c2:db:
                    d3:ab:cf:cd:f1:b5:75:58:9e:b9:5e:62:61:ea:6a:
                    29:cf:48:64:b9:6c:cd:54:e1:e3:b2:74:5c:88:8f:
                    d3:0a:2e:9f:23:e1:6b:0f:a7:ee:4f:2d:93:69:bf:
                    50:eb:7c:ca:f7:f6:32:93:be:a9:d8:ea:57:47:09:
                    e3:58:e6:9a:6a:af:eb:63:7e:bc:35:b4:66:0f:9d:
                    55:f1:15:7e:cb:d9:f1:65:ae:f0:aa:6d:be:0c:34:
                    eb:ce:b4:28:07:21:43:d2:93:cd:10:ef:da:e6:a1:
                    b8:ff:6c:2b:f2:8a:d9:07:f2:af:c2:9d:32:b5:44:
                    8f:af:a8:b4:d3:e6:e0:ee:7a:37:e8:88:1e:d7:2f:
                    5f:9e:21:a3:13:f5:d3:45:40:34:38:b2:5e:0a:a3:
                    6e:ed:4e:de:7b:f7:1f:f7:60:d8:7e:e9:23:f3:25:
                    ee:96:6a:87:fc:f4:fc:8c:b9:ca:36:04:0b:37:0e:
                    46:8f:00:c1:71:1b:e3:39:35:b4:c9:7c:50:ab:08:
                    b6:19:f1:95:9b:22:8d:7f:60:d3:00:06:a4:5f:e7:
                    76:2b:3a:42:f5:c9:d0:f5:25:f5:1d:0a:09:c6:7f:
                    b3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F8:8B:6D:D3:DC:0B:6C:B7:70:17:42:D4:57:54:33:8F:45:BE:D5
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/3137302e3234362e3130372e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:e2:2d:e3:74:1e:43:b1:16:30:c4:3a:ab:1c:b0:9d:46:d1:
         97:88:ce:ef:9d:8d:70:44:90:56:ec:af:3c:4d:2c:6a:0c:8d:
         f1:ee:d4:d3:9e:65:e0:01:d8:f5:70:70:ac:5d:3a:3d:73:ce:
         a7:b1:2d:fa:00:60:df:fd:7a:23:c5:32:27:20:f2:97:75:d4:
         ca:60:fd:af:de:27:6d:16:57:d1:da:5e:f5:55:b4:c5:52:ce:
         26:6a:90:70:24:a1:f3:96:b3:3a:5c:b7:9d:9b:db:63:f3:b5:
         a3:b1:8e:e2:91:39:d9:66:73:16:2a:fc:f4:eb:d2:00:7a:a6:
         9e:0e:02:5c:b9:bd:f0:e9:54:e3:65:cb:07:b4:d5:a3:e6:fb:
         92:54:72:d2:0e:53:f2:40:ef:84:63:40:4e:b9:eb:01:96:77:
         6e:c5:f9:99:a0:17:17:83:2f:f2:0f:d8:1d:85:5e:a1:bd:ea:
         a5:ea:03:6a:81:d4:f4:f3:9d:33:8d:a9:4e:2b:2f:9e:37:3e:
         cc:37:c5:d3:46:d5:4d:bf:89:16:fc:24:cb:58:d2:8c:ac:53:
         a9:d8:a7:f1:81:ab:c9:a0:49:db:94:7d:a2:78:03:19:17:82:
         09:07:5e:b3:a8:b0:31:ce:51:d1:53:95:ad:64:ec:4f:d6:56:
         de:a5:54:a8
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUTC5Sh5XgvQXBmJ201YeoJ4vUnvowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE3MEM0MDg1QTIwQ0Q2QUE0NTFGQkNBQzJDQjhGMkND
REJBM0U5NzAeFw0yNDA0MDQxNTE4MjZaFw0yNTA0MDMxNTIzMjZaMDMxMTAvBgNV
BAMTKDczRjg4QjZERDNEQzBCNkNCNzcwMTc0MkQ0NTc1NDMzOEY0NUJFRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgT6eDa6apQpMCF4iXOXXatNhI
mk7uQ4zYQujC29Orz83xtXVYnrleYmHqainPSGS5bM1U4eOydFyIj9MKLp8j4WsP
p+5PLZNpv1DrfMr39jKTvqnY6ldHCeNY5ppqr+tjfrw1tGYPnVXxFX7L2fFlrvCq
bb4MNOvOtCgHIUPSk80Q79rmobj/bCvyitkH8q/CnTK1RI+vqLTT5uDuejfoiB7X
L1+eIaMT9dNFQDQ4sl4Ko27tTt579x/3YNh+6SPzJe6Waof89PyMuco2BAs3DkaP
AMFxG+M5NbTJfFCrCLYZ8ZWbIo1/YNMABqRf53YrOkL1ydD1JfUdCgnGf7PzAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUc/iLbdPcC2y3cBdC1FdUM49FvtUwHwYDVR0j
BBgwFoAUgXDECFogzWqkUfvKwsuPLM26PpcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby8xbjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1
LzUvODE3MEM0MDg1QTIwQ0Q2QUE0NTFGQkNBQzJDQjhGMkNDREJBM0U5Ny5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84MTcwQzQwODVBMjBDRDZBQTQ1
MUZCQ0FDMkNCOEYyQ0NEQkEzRTk3LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8x
bjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1LzUvMzEz
NzMwMmUzMjM0MzYyZTMxMzAzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYz
MjMzMzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAKr2azANBgkqhkiG9w0BAQsFAAOCAQEAouIt43Qe
Q7EWMMQ6qxywnUbRl4jO752NcESQVuyvPE0sagyN8e7U055l4AHY9XBwrF06PXPO
p7Et+gBg3/16I8UyJyDyl3XUymD9r94nbRZX0dpe9VW0xVLOJmqQcCSh85azOly3
nZvbY/O1o7GO4pE52WZzFir89OvSAHqmng4CXLm98OlU42XLB7TVo+b7klRy0g5T
8kDvhGNATrnrAZZ3bsX5maAXF4Mv8g/YHYVeob3qpeoDaoHU9POdM42pTisvnjc+
zDfF00bVTb+JFvwky1jSjKxTqdin8YGryaBJ25R9ongDGReCCQdes6iwMc5R0VOV
rWTsT9ZW3qVUqA==
-----END CERTIFICATE-----
Generated at Fri Jun 28 09:50:52 2024 by rpki-client on console-ams.rpki-client.org