Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233362e302f32342d3234203d3e20323636303230.roa
File:                     3137302e3234352e3233362e302f32342d3234203d3e20323636303230.roa (raw, json)
Hash identifier:          AJ/KXBH0F3Lo+FaEuMWX0v5Ko4hHoAW3z9BgaWSvLvw=
Subject key identifier:   E1:8A:97:20:E6:5A:DC:9C:62:04:8A:F5:29:7A:12:EF:EA:A6:61:5C
Certificate issuer:       /CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF
Certificate serial:       484A9446C70C00FE3CB33152F3199D45DE554151
Authority key identifier: 2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233362e302f32342d3234203d3e20323636303230.roa
Signing time:             Wed 08 Jan 2025 02:08:11 +0000
ROA not before:           Wed 08 Jan 2025 02:03:11 +0000
ROA not after:            Wed 07 Jan 2026 02:08:11 +0000
asID:                     266020
IP address blocks:        170.245.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl
                          rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 00:36:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:4a:94:46:c7:0c:00:fe:3c:b3:31:52:f3:19:9d:45:de:55:41:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF
        Validity
            Not Before: Jan  8 02:03:11 2025 GMT
            Not After : Jan  7 02:08:11 2026 GMT
        Subject: CN=E18A9720E65ADC9C62048AF5297A12EFEAA6615C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:10:27:c3:f5:24:e7:94:cb:4b:5c:01:14:37:
                    cd:f9:fa:da:5b:17:5a:7f:f4:f7:55:79:64:bb:15:
                    70:5d:b1:bb:4d:30:cb:f2:0a:67:11:7b:38:3d:fc:
                    5c:15:5e:76:58:2d:33:8e:72:eb:5b:51:cb:00:41:
                    f5:4a:c7:7b:a4:3d:3e:33:4e:c9:58:09:3c:85:fb:
                    25:54:9a:f8:f2:e5:07:48:f2:1d:44:95:35:b3:4e:
                    99:32:4d:24:70:67:7e:af:bb:16:37:6b:e4:ae:73:
                    a6:eb:c0:23:c2:8b:1c:2d:de:96:35:30:7e:f9:69:
                    66:8f:d3:05:fc:27:ce:ec:51:ca:dd:ac:59:5e:df:
                    4e:ef:46:b3:f8:0d:14:b9:fc:b1:2e:15:00:f5:1c:
                    c4:24:f1:44:1a:72:0b:da:e1:24:c6:10:b2:03:c2:
                    c4:d3:af:e2:07:ce:46:d4:2a:b5:db:04:a2:e8:94:
                    72:8a:89:f0:0a:17:a3:dc:26:85:94:b4:5e:d2:38:
                    35:44:46:b7:60:df:71:36:c4:14:44:3e:26:c8:72:
                    79:55:e8:60:c5:f2:d9:43:3a:31:72:86:98:16:f1:
                    eb:d3:db:66:44:c7:30:b7:1b:7d:26:d6:b3:93:5d:
                    96:08:51:cd:4b:7f:00:61:10:00:8e:b1:6c:62:e3:
                    e7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8A:97:20:E6:5A:DC:9C:62:04:8A:F5:29:7A:12:EF:EA:A6:61:5C
            X509v3 Authority Key Identifier:
                keyid:2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233362e302f32342d3234203d3e20323636303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:12:6e:16:ce:07:cd:cf:3a:1c:8f:e1:58:9d:bd:9c:f5:a8:
         ec:26:ec:a7:31:2c:ef:76:d6:eb:47:75:b7:7a:f5:e1:e9:de:
         8f:60:c9:e5:18:1d:a6:32:c8:00:c4:38:d2:4e:25:f9:47:93:
         d6:6c:b1:1e:0e:e5:34:7f:cb:bd:d4:66:e6:5c:42:3f:8b:87:
         4c:6d:da:c0:76:d9:7f:9b:f7:45:9e:b2:18:6f:49:f1:f3:1a:
         f5:6a:ec:96:24:85:33:61:db:40:41:43:ea:c8:92:02:25:bd:
         40:1a:dd:fd:f9:7a:0a:ae:98:a8:89:5d:dc:8a:45:53:0b:63:
         18:55:b1:58:eb:dd:b3:70:f1:41:c5:1b:40:87:03:c6:25:ec:
         2a:2e:ed:9d:97:db:9f:65:94:86:f4:3e:fe:e7:e8:ca:99:54:
         e8:2a:94:b3:e9:67:6f:72:1c:b1:e6:20:86:00:d4:ee:1c:7f:
         ee:e1:06:4c:19:ff:0c:56:4e:97:f2:20:16:a9:0f:5d:ca:f0:
         d3:05:1f:50:4e:1a:9c:4c:d9:14:93:38:a7:c1:7b:88:1c:aa:
         37:a1:cf:46:c2:dc:5c:ba:f6:13:79:35:5e:1d:6c:81:c3:40:
         5e:54:34:46:7d:34:7a:f1:54:f5:a2:37:42:03:cf:b6:ab:e7:
         6e:d9:a0:b9
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUSEqURscMAP48szFS8xmdRd5VQVEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJCMzEyQjMwNTFGN0VDNEUzMDIxQ0UyMTk1NkQwQTJB
NTBGNzZFRjAeFw0yNTAxMDgwMjAzMTFaFw0yNjAxMDcwMjA4MTFaMDMxMTAvBgNV
BAMTKEUxOEE5NzIwRTY1QURDOUM2MjA0OEFGNTI5N0ExMkVGRUFBNjYxNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRECfD9STnlMtLXAEUN835+tpb
F1p/9PdVeWS7FXBdsbtNMMvyCmcRezg9/FwVXnZYLTOOcutbUcsAQfVKx3ukPT4z
TslYCTyF+yVUmvjy5QdI8h1ElTWzTpkyTSRwZ36vuxY3a+Suc6brwCPCixwt3pY1
MH75aWaP0wX8J87sUcrdrFle307vRrP4DRS5/LEuFQD1HMQk8UQacgva4STGELID
wsTTr+IHzkbUKrXbBKLolHKKifAKF6PcJoWUtF7SODVERrdg33E2xBREPibIcnlV
6GDF8tlDOjFyhpgW8evT22ZExzC3G30m1rOTXZYIUc1LfwBhEACOsWxi4+c3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU4YqXIOZa3JxiBIr1KXoS7+qmYVwwHwYDVR0j
BBgwFoAUK7MSswUffsTjAhziGVbQoqUPdu8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0FUeXFEdXBkcXA2Vzd3VUhkM3o0SFBIUWdyNlZTSGVoWllkdFRWckVB
RU4vMC8yQkIzMTJCMzA1MUY3RUM0RTMwMjFDRTIxOTU2RDBBMkE1MEY3NkVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCQjMxMkIzMDUxRjdFQzRF
MzAyMUNFMjE5NTZEMEEyQTUwRjc2RUYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNBVHlxRHVwZHFwNlc3d1VIZDN6NEhQSFFncjZWU0hlaFpZZHRUVnJFQUVOLzAv
MzEzNzMwMmUzMjM0MzUyZTMyMzMzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNjMwMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKr17DANBgkqhkiG9w0BAQsFAAOCAQEAkxJu
Fs4Hzc86HI/hWJ29nPWo7CbspzEs73bW60d1t3r14enej2DJ5RgdpjLIAMQ40k4l
+UeT1myxHg7lNH/LvdRm5lxCP4uHTG3awHbZf5v3RZ6yGG9J8fMa9WrsliSFM2Hb
QEFD6siSAiW9QBrd/fl6Cq6YqIld3IpFUwtjGFWxWOvds3DxQcUbQIcDxiXsKi7t
nZfbn2WUhvQ+/ufoyplU6CqUs+lnb3IcseYghgDU7hx/7uEGTBn/DFZOl/IgFqkP
Xcrw0wUfUE4anEzZFJM4p8F7iByqN6HPRsLcXLr2E3k1Xh1sgcNAXlQ0Rn00evFU
9aI3QgPPtqvnbtmguQ==
-----END CERTIFICATE-----
Generated at Wed Apr 9 10:53:15 2025 by rpki-client