Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233362e302f32332d3233203d3e20323636303230.roa
File:                     3137302e3234352e3233362e302f32332d3233203d3e20323636303230.roa (raw, json)
Hash identifier:          boEhyCA6twI6r5mByC/pMegbi5k05urMFIBZHF7PCCw=
Subject key identifier:   31:7E:8B:60:54:59:10:9C:6E:B1:35:BA:09:43:E5:82:6D:C5:2D:BF
Certificate issuer:       /CN=A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554
Certificate serial:       17E9F95BE918E908C18FE551F9A208314B5EA44A
Authority key identifier: A7:83:EB:24:30:AF:A2:B9:12:F0:F1:C0:7E:5A:0C:2E:44:CD:65:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233362e302f32332d3233203d3e20323636303230.roa
Signing time:             Thu 21 Nov 2024 21:46:07 +0000
ROA not before:           Thu 21 Nov 2024 21:41:07 +0000
ROA not after:            Thu 20 Nov 2025 21:46:07 +0000
asID:                     266020
IP address blocks:        170.245.236.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.crl
                          rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 23:34:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e9:f9:5b:e9:18:e9:08:c1:8f:e5:51:f9:a2:08:31:4b:5e:a4:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554
        Validity
            Not Before: Nov 21 21:41:07 2024 GMT
            Not After : Nov 20 21:46:07 2025 GMT
        Subject: CN=317E8B605459109C6EB135BA0943E5826DC52DBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:18:74:d8:7c:dc:04:55:a9:aa:cc:ff:10:e7:
                    bd:96:b0:c7:34:bd:14:62:4b:6b:fa:b9:5f:45:d0:
                    ab:ac:a5:c7:b5:0f:14:a2:f0:46:fb:2d:7e:59:75:
                    4b:66:06:65:65:29:9d:45:f8:7a:42:a9:2d:22:8c:
                    10:78:29:23:33:4f:85:f5:12:9d:0b:dc:44:4d:87:
                    11:9c:59:dc:0a:27:a9:f6:a3:70:03:7c:f4:fc:4e:
                    4b:c6:9f:c3:f6:ff:5d:c4:9f:93:3c:34:62:77:dd:
                    5c:4f:f7:5c:71:b2:30:6d:9e:63:3e:0e:b6:61:43:
                    b7:5c:d7:1c:d4:9e:13:83:14:e9:0d:05:59:9f:de:
                    9c:88:b4:5c:c0:7d:f2:20:ed:14:e6:6d:cc:bd:8c:
                    ec:4b:11:cd:5c:30:f1:4e:ee:6c:fb:54:8a:87:79:
                    27:43:ea:1e:11:fb:84:fb:86:ad:5d:8b:74:3d:23:
                    05:88:ea:cc:23:3e:f0:4b:44:09:98:fc:2c:e2:85:
                    03:ec:e1:46:27:29:6e:dd:4a:cb:e9:6d:7b:e8:38:
                    a8:c7:a0:3f:87:e5:5b:ac:3d:31:7e:fa:43:43:74:
                    17:0d:87:c1:fe:1b:94:ab:87:9b:ea:cc:5d:56:81:
                    7a:39:67:ec:6b:b4:df:c5:9f:1f:83:c7:6e:cf:75:
                    82:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:7E:8B:60:54:59:10:9C:6E:B1:35:BA:09:43:E5:82:6D:C5:2D:BF
            X509v3 Authority Key Identifier:
                keyid:A7:83:EB:24:30:AF:A2:B9:12:F0:F1:C0:7E:5A:0C:2E:44:CD:65:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A783EB2430AFA2B912F0F1C07E5A0C2E44CD6554.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233362e302f32332d3233203d3e20323636303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:81:b6:fb:21:d6:75:40:32:aa:03:96:82:c6:ba:33:9c:6f:
         45:10:24:8a:ed:c1:69:c9:75:c1:70:5f:ec:9e:ab:b0:84:0c:
         9a:21:f6:1b:74:17:cf:50:31:10:76:2d:32:8d:4e:57:5c:83:
         e1:31:f4:80:73:ff:44:3f:48:da:4b:90:79:f9:1f:bd:6c:5d:
         f1:2e:f4:79:0e:e1:80:55:d3:09:b9:c6:0b:1c:07:d2:64:51:
         9c:43:17:a1:87:5d:f9:c9:1d:48:17:3c:5c:3a:90:cf:68:67:
         4c:57:68:52:a3:2d:01:28:5b:75:b7:f2:a1:38:5b:b8:60:51:
         e0:a7:2d:74:db:91:7e:ed:c1:66:48:8c:3b:21:34:c8:94:2e:
         44:62:f5:a4:b6:32:ff:a8:81:0e:47:19:00:17:2a:d3:46:5b:
         cf:82:c6:c1:4d:ca:35:6d:f5:ae:d7:ce:36:65:e5:8f:94:a3:
         0d:a6:7c:b5:4d:49:c7:0d:90:d2:90:cc:30:2a:45:14:d9:77:
         11:0d:e6:07:b6:94:79:42:0d:65:10:63:b4:4c:76:26:f1:6c:
         b1:c9:6f:fc:af:89:c0:fc:1a:16:83:62:b0:7b:42:f2:e3:88:
         6e:2d:10:0c:f4:16:10:63:65:26:08:02:85:69:0b:4f:63:37:
         5c:2d:74:a4
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUF+n5W+kY6QjBj+VR+aIIMUtepEowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTc4M0VCMjQzMEFGQTJCOTEyRjBGMUMwN0U1QTBDMkU0
NENENjU1NDAeFw0yNDExMjEyMTQxMDdaFw0yNTExMjAyMTQ2MDdaMDMxMTAvBgNV
BAMTKDMxN0U4QjYwNTQ1OTEwOUM2RUIxMzVCQTA5NDNFNTgyNkRDNTJEQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVGHTYfNwEVamqzP8Q572WsMc0
vRRiS2v6uV9F0Kuspce1DxSi8Eb7LX5ZdUtmBmVlKZ1F+HpCqS0ijBB4KSMzT4X1
Ep0L3ERNhxGcWdwKJ6n2o3ADfPT8TkvGn8P2/13En5M8NGJ33VxP91xxsjBtnmM+
DrZhQ7dc1xzUnhODFOkNBVmf3pyItFzAffIg7RTmbcy9jOxLEc1cMPFO7mz7VIqH
eSdD6h4R+4T7hq1di3Q9IwWI6swjPvBLRAmY/CzihQPs4UYnKW7dSsvpbXvoOKjH
oD+H5VusPTF++kNDdBcNh8H+G5Srh5vqzF1WgXo5Z+xrtN/Fnx+Dx27PdYKTAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUMX6LYFRZEJxusTW6CUPlgm3FLb8wHwYDVR0j
BBgwFoAUp4PrJDCvorkS8PHAfloMLkTNZVQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0FUeXFEdXBkcXA2Vzd3VUhkM3o0SFBIUWdyNlZTSGVoWllkdFRWckVB
RU4vMC9BNzgzRUIyNDMwQUZBMkI5MTJGMEYxQzA3RTVBMEMyRTQ0Q0Q2NTU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E3ODNFQjI0MzBBRkEyQjkx
MkYwRjFDMDdFNUEwQzJFNDRDRDY1NTQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNBVHlxRHVwZHFwNlc3d1VIZDN6NEhQSFFncjZWU0hlaFpZZHRUVnJFQUVOLzAv
MzEzNzMwMmUzMjM0MzUyZTMyMzMzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNjMwMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAar17DANBgkqhkiG9w0BAQsFAAOCAQEAUIG2
+yHWdUAyqgOWgsa6M5xvRRAkiu3Bacl1wXBf7J6rsIQMmiH2G3QXz1AxEHYtMo1O
V1yD4TH0gHP/RD9I2kuQefkfvWxd8S70eQ7hgFXTCbnGCxwH0mRRnEMXoYdd+ckd
SBc8XDqQz2hnTFdoUqMtAShbdbfyoThbuGBR4KctdNuRfu3BZkiMOyE0yJQuRGL1
pLYy/6iBDkcZABcq00Zbz4LGwU3KNW31rtfONmXlj5SjDaZ8tU1Jxw2Q0pDMMCpF
FNl3EQ3mB7aUeUINZRBjtEx2JvFssclv/K+JwPwaFoNisHtC8uOIbi0QDPQWEGNl
JggChWkLT2M3XC10pA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:11 2024 by rpki-client on console-fra.rpki-client.org