Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/3137302e3234342e3138332e302f32342d3234203d3e20323636353036.roa
File:                     3137302e3234342e3138332e302f32342d3234203d3e20323636353036.roa (raw, json)
Hash identifier:          fySuX4a+69FrXWrgtkaMIE1XOvpRh6e6H8hiQaFUBFQ=
Subject key identifier:   C4:9B:76:8F:30:59:32:75:9D:8D:3C:F3:1C:A8:DC:1B:90:55:94:30
Certificate issuer:       /CN=6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED
Certificate serial:       39E7A7E45D76C2AC5551405E65268164282F4BCF
Authority key identifier: 6F:34:AD:D4:B9:F7:BD:1B:2A:72:2E:1E:11:B9:51:FC:7A:CA:20:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/3137302e3234342e3138332e302f32342d3234203d3e20323636353036.roa
Signing time:             Wed 03 Apr 2024 20:16:11 +0000
ROA not before:           Wed 03 Apr 2024 20:11:11 +0000
ROA not after:            Wed 02 Apr 2025 20:16:11 +0000
asID:                     266506
IP address blocks:        170.244.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.crl
                          rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e7:a7:e4:5d:76:c2:ac:55:51:40:5e:65:26:81:64:28:2f:4b:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED
        Validity
            Not Before: Apr  3 20:11:11 2024 GMT
            Not After : Apr  2 20:16:11 2025 GMT
        Subject: CN=C49B768F305932759D8D3CF31CA8DC1B90559430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:57:96:04:4b:1c:3c:a9:ee:fe:28:58:19:a4:
                    a8:96:57:35:20:1a:5c:9c:ca:15:f8:2b:e2:24:83:
                    24:31:09:a0:4b:06:c1:79:f1:17:bc:ad:20:47:43:
                    34:2b:23:a3:86:00:02:93:d9:41:22:75:4b:74:3b:
                    cc:20:62:69:3b:66:93:8e:66:c3:ba:b3:d2:e3:81:
                    73:6b:03:5c:7f:a0:af:88:d0:2d:c9:6c:02:39:5e:
                    14:cb:a2:e8:ca:7e:5a:a2:a0:26:4b:ca:d4:85:c1:
                    43:51:9c:75:e6:ff:7c:2a:a7:a2:47:fb:e3:91:f5:
                    0c:9e:82:ef:99:01:a0:07:f2:02:34:2c:2b:8b:cb:
                    29:3e:31:e4:77:f4:e1:b3:b6:56:f9:e7:83:2e:c9:
                    a1:b3:9e:bf:f5:ed:85:f4:fa:b1:51:60:36:d5:c6:
                    ea:ea:43:75:8a:51:0c:b5:77:b3:df:4e:e0:8e:8b:
                    ca:7d:94:c1:10:9e:9b:1a:5f:fb:bd:f2:62:cf:c6:
                    56:dd:78:62:23:c8:6f:aa:4b:77:a2:36:f5:e2:d3:
                    69:24:47:d4:3e:89:9c:fc:2a:6e:55:4b:9f:05:87:
                    3f:d7:ae:7c:d6:2d:c4:e6:57:39:00:ba:60:22:ce:
                    97:91:1d:fb:a9:de:39:ce:ab:f4:f6:8d:ca:7b:14:
                    bf:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:9B:76:8F:30:59:32:75:9D:8D:3C:F3:1C:A8:DC:1B:90:55:94:30
            X509v3 Authority Key Identifier:
                keyid:6F:34:AD:D4:B9:F7:BD:1B:2A:72:2E:1E:11:B9:51:FC:7A:CA:20:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F34ADD4B9F7BD1B2A722E1E11B951FC7ACA20ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tFukkqxtwQUPnwww6SZdzBZH6NxixA58k1DGEPo8r6t/1/3137302e3234342e3138332e302f32342d3234203d3e20323636353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         db:2c:d1:3d:7a:e5:d4:c4:35:40:c4:16:17:b3:42:be:a8:59:
         b1:4f:80:88:f3:f6:da:16:74:10:5a:3d:62:f8:f3:59:a2:df:
         0f:05:e7:25:3d:b3:eb:b4:b0:d6:c8:ee:84:dc:3a:49:aa:c3:
         0d:07:de:8d:a1:18:24:51:3f:27:77:0f:9d:dc:88:91:f2:8f:
         a3:6e:92:07:61:16:1f:86:51:b6:16:cf:24:0a:aa:b1:a4:8d:
         6f:2c:65:0a:d8:37:b5:3c:ca:22:06:00:63:28:37:ec:00:67:
         3f:62:9d:cc:b7:b2:de:a3:71:44:53:00:10:0e:d5:f8:31:ee:
         fc:e9:da:a1:75:82:e1:0d:f0:21:0e:ae:df:38:09:7d:db:7b:
         c4:c1:ab:de:26:68:ea:55:93:de:d2:9b:0f:24:e0:e3:c5:00:
         36:f7:e3:d9:e2:ee:c7:1d:00:9a:78:88:53:c9:97:cd:0f:35:
         8b:48:55:fe:76:20:6e:e7:4a:26:ce:57:3a:cb:e8:68:35:3c:
         1e:a2:25:94:86:fb:b6:ca:01:0c:2b:03:ef:77:8d:bc:11:21:
         3c:56:02:db:63:b5:3c:11:b2:37:b9:23:0e:79:b5:58:7d:82:
         78:f4:dc:ff:99:5b:46:9e:04:84:b2:40:58:78:74:bd:91:28:
         f5:3d:aa:84
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUOeen5F12wqxVUUBeZSaBZCgvS88wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkYzNEFERDRCOUY3QkQxQjJBNzIyRTFFMTFCOTUxRkM3
QUNBMjBFRDAeFw0yNDA0MDMyMDExMTFaFw0yNTA0MDIyMDE2MTFaMDMxMTAvBgNV
BAMTKEM0OUI3NjhGMzA1OTMyNzU5RDhEM0NGMzFDQThEQzFCOTA1NTk0MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD+V5YESxw8qe7+KFgZpKiWVzUg
GlycyhX4K+IkgyQxCaBLBsF58Re8rSBHQzQrI6OGAAKT2UEidUt0O8wgYmk7ZpOO
ZsO6s9LjgXNrA1x/oK+I0C3JbAI5XhTLoujKflqioCZLytSFwUNRnHXm/3wqp6JH
++OR9Qyegu+ZAaAH8gI0LCuLyyk+MeR39OGztlb554MuyaGznr/17YX0+rFRYDbV
xurqQ3WKUQy1d7PfTuCOi8p9lMEQnpsaX/u98mLPxlbdeGIjyG+qS3eiNvXi02kk
R9Q+iZz8Km5VS58Fhz/XrnzWLcTmVzkAumAizpeRHfup3jnOq/T2jcp7FL8NAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUxJt2jzBZMnWdjTzzHKjcG5BVlDAwHwYDVR0j
BBgwFoAUbzSt1Ln3vRsqci4eEblR/HrKIO0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnRGdWtrcXh0d1FVUG53d3c2U1pkekJaSDZOeGl4QTU4azFER0VQbzhy
NnQvMS82RjM0QURENEI5RjdCRDFCMkE3MjJFMUUxMUI5NTFGQzdBQ0EyMEVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGMzRBREQ0QjlGN0JEMUIy
QTcyMkUxRTExQjk1MUZDN0FDQTIwRUQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ0RnVra3F4dHdRVVBud3d3NlNaZHpCWkg2TnhpeEE1OGsxREdFUG84cjZ0LzEv
MzEzNzMwMmUzMjM0MzQyZTMxMzgzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNjM1MzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKr0tzANBgkqhkiG9w0BAQsFAAOCAQEA2yzR
PXrl1MQ1QMQWF7NCvqhZsU+AiPP22hZ0EFo9YvjzWaLfDwXnJT2z67Sw1sjuhNw6
SarDDQfejaEYJFE/J3cPndyIkfKPo26SB2EWH4ZRthbPJAqqsaSNbyxlCtg3tTzK
IgYAYyg37ABnP2KdzLey3qNxRFMAEA7V+DHu/OnaoXWC4Q3wIQ6u3zgJfdt7xMGr
3iZo6lWT3tKbDyTg48UANvfj2eLuxx0AmniIU8mXzQ81i0hV/nYgbudKJs5XOsvo
aDU8HqIllIb7tsoBDCsD73eNvBEhPFYC22O1PBGyN7kjDnm1WH2CePTc/5lbRp4E
hLJAWHh0vZEo9T2qhA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:33 2024 by rpki-client on console-ams.rpki-client.org