Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/1/3137302e3234362e36302e302f32322d3234203d3e20323636303239.roa
File:                     3137302e3234362e36302e302f32322d3234203d3e20323636303239.roa (raw, json)
Hash identifier:          mITMXOA07shdgNXytDCB31gwnRy0haUxiNDTBQWd/wI=
Subject key identifier:   0D:B9:B7:73:9D:48:72:8F:F9:F6:92:6C:35:17:14:5A:A9:75:BE:7A
Certificate issuer:       /CN=805C6FE75C34FDC115E99EA4D436A5282E5055B6
Certificate serial:       716074CC2F9F9CC4BD3EA1D79D3770DD238A6090
Authority key identifier: 80:5C:6F:E7:5C:34:FD:C1:15:E9:9E:A4:D4:36:A5:28:2E:50:55:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/805C6FE75C34FDC115E99EA4D436A5282E5055B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/1/3137302e3234362e36302e302f32322d3234203d3e20323636303239.roa
Signing time:             Thu 04 Apr 2024 10:14:56 +0000
ROA not before:           Thu 04 Apr 2024 10:09:56 +0000
ROA not after:            Thu 03 Apr 2025 10:14:56 +0000
asID:                     266029
IP address blocks:        170.246.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/1/805C6FE75C34FDC115E99EA4D436A5282E5055B6.crl
                          rsync://rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/1/805C6FE75C34FDC115E99EA4D436A5282E5055B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/805C6FE75C34FDC115E99EA4D436A5282E5055B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:08:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:60:74:cc:2f:9f:9c:c4:bd:3e:a1:d7:9d:37:70:dd:23:8a:60:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=805C6FE75C34FDC115E99EA4D436A5282E5055B6
        Validity
            Not Before: Apr  4 10:09:56 2024 GMT
            Not After : Apr  3 10:14:56 2025 GMT
        Subject: CN=0DB9B7739D48728FF9F6926C3517145AA975BE7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:28:24:32:28:b2:c1:a0:91:5f:31:ab:fa:9f:
                    d6:df:74:8c:98:1a:18:c1:3d:8c:65:0a:9b:01:f1:
                    61:62:0a:bc:3c:72:4c:f3:64:b9:b8:19:93:b0:2a:
                    f6:86:22:5b:98:86:f4:9e:f9:4f:ba:42:a0:61:7c:
                    7a:a3:e8:46:0f:03:bd:b5:9b:61:ab:42:00:8e:ff:
                    e8:5b:9c:7b:6d:4c:59:d7:7b:3e:97:13:2f:9b:66:
                    26:ac:71:64:0c:af:49:fe:c4:b2:52:a8:de:b5:b5:
                    06:8f:a0:b9:7d:ac:03:0f:76:d0:31:41:f2:35:89:
                    f2:9b:5b:99:45:99:64:bc:f3:df:40:c7:80:42:90:
                    d9:88:66:63:96:e3:12:e0:ad:0e:18:af:d3:12:c0:
                    83:00:a5:56:b1:3d:f1:d4:13:ff:71:ed:0c:75:e7:
                    a0:81:c2:18:9d:bf:7a:2a:41:9b:6e:fb:10:dc:d8:
                    e7:bc:94:d1:eb:e6:a3:2d:1f:78:98:e4:eb:f3:20:
                    e8:1c:0e:3b:a2:d8:73:3d:e7:c9:80:88:1e:eb:af:
                    38:c7:ed:72:83:06:e0:df:f2:13:29:ae:f9:4f:90:
                    57:d9:97:e7:1f:ff:74:f4:e7:56:4e:f1:90:43:4d:
                    9f:c1:0a:57:26:51:65:0f:a9:a4:86:e4:04:15:16:
                    c1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B9:B7:73:9D:48:72:8F:F9:F6:92:6C:35:17:14:5A:A9:75:BE:7A
            X509v3 Authority Key Identifier:
                keyid:80:5C:6F:E7:5C:34:FD:C1:15:E9:9E:A4:D4:36:A5:28:2E:50:55:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/1/805C6FE75C34FDC115E99EA4D436A5282E5055B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/805C6FE75C34FDC115E99EA4D436A5282E5055B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tW37snQ9KvPMp9SHZT5mbErHDwtRnmDAUe7XC2LuTFJ/1/3137302e3234362e36302e302f32322d3234203d3e20323636303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:b0:f7:b1:90:7c:ea:9a:e4:7e:b5:18:d4:2a:1a:4f:a6:ce:
         14:6d:e7:e6:fd:3b:41:7e:c8:8e:90:1e:54:0d:ed:fc:1c:39:
         61:e8:5e:c0:f4:3c:58:cb:da:f5:49:b2:a0:e4:22:d5:17:e3:
         57:16:44:16:a0:b0:c3:7d:6f:b0:1a:47:97:18:20:02:40:61:
         1a:8d:6f:12:21:a4:a7:a9:d2:f6:1f:dc:d6:e1:c3:89:4d:56:
         d9:92:47:86:e2:79:4b:61:24:b3:34:a6:50:a5:23:06:aa:b3:
         c1:7c:c6:76:68:f8:c7:7b:b9:da:8e:c1:b7:7a:6d:66:bc:59:
         cc:67:7a:1b:49:e5:34:5f:0a:87:81:96:64:6c:46:66:a2:49:
         db:b5:b6:c2:25:50:6f:6d:12:f0:11:a5:d0:0e:70:03:4c:93:
         05:2b:0c:e0:a7:cb:fb:81:3c:75:e0:3e:3d:c4:4d:f3:fc:d7:
         87:6a:3d:fd:ac:43:ae:05:f8:3a:42:19:33:44:4b:c5:47:ee:
         7b:56:3e:59:da:9a:0e:24:5c:76:70:7f:bc:c4:06:99:0d:66:
         c4:63:3d:cd:48:88:37:1a:ca:7e:0a:a1:8c:3b:c9:1e:8f:e4:
         9b:6d:53:b1:d5:b7:75:16:29:ae:4d:67:28:32:5e:b5:67:41:
         76:f0:b6:0c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcWB0zC+fnMS9PqHXnTdw3SOKYJAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODA1QzZGRTc1QzM0RkRDMTE1RTk5RUE0RDQzNkE1Mjgy
RTUwNTVCNjAeFw0yNDA0MDQxMDA5NTZaFw0yNTA0MDMxMDE0NTZaMDMxMTAvBgNV
BAMTKDBEQjlCNzczOUQ0ODcyOEZGOUY2OTI2QzM1MTcxNDVBQTk3NUJFN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAKCQyKLLBoJFfMav6n9bfdIyY
GhjBPYxlCpsB8WFiCrw8ckzzZLm4GZOwKvaGIluYhvSe+U+6QqBhfHqj6EYPA721
m2GrQgCO/+hbnHttTFnXez6XEy+bZiascWQMr0n+xLJSqN61tQaPoLl9rAMPdtAx
QfI1ifKbW5lFmWS8899Ax4BCkNmIZmOW4xLgrQ4Yr9MSwIMApVaxPfHUE/9x7Qx1
56CBwhidv3oqQZtu+xDc2Oe8lNHr5qMtH3iY5OvzIOgcDjui2HM958mAiB7rrzjH
7XKDBuDf8hMprvlPkFfZl+cf/3T051ZO8ZBDTZ/BClcmUWUPqaSG5AQVFsHHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUDbm3c51Ico/59pJsNRcUWql1vnowHwYDVR0j
BBgwFoAUgFxv51w0/cEV6Z6k1DalKC5QVbYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnRXMzdzblE5S3ZQTXA5U0haVDVtYkVySER3dFJubURBVWU3WEMyTHVU
RkovMS84MDVDNkZFNzVDMzRGREMxMTVFOTlFQTRENDM2QTUyODJFNTA1NUI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgwNUM2RkU3NUMzNEZEQzEx
NUU5OUVBNEQ0MzZBNTI4MkU1MDU1QjYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ0VzM3c25ROUt2UE1wOVNIWlQ1bWJFckhEd3RSbm1EQVVlN1hDMkx1VEZKLzEv
MzEzNzMwMmUzMjM0MzYyZTM2MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzYzMDMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq9jwwDQYJKoZIhvcNAQELBQADggEBACOw97GQ
fOqa5H61GNQqGk+mzhRt5+b9O0F+yI6QHlQN7fwcOWHoXsD0PFjL2vVJsqDkItUX
41cWRBagsMN9b7AaR5cYIAJAYRqNbxIhpKep0vYf3Nbhw4lNVtmSR4bieUthJLM0
plClIwaqs8F8xnZo+Md7udqOwbd6bWa8WcxnehtJ5TRfCoeBlmRsRmaiSdu1tsIl
UG9tEvARpdAOcANMkwUrDOCny/uBPHXgPj3ETfP814dqPf2sQ64F+DpCGTNES8VH
7ntWPlnamg4kXHZwf7zEBpkNZsRjPc1IiDcayn4KoYw7yR6P5JttU7HVt3UWKa5N
ZygyXrVnQXbwtgw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:06 2024 by rpki-client on console-fra.rpki-client.org