Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/3137302e3234362e3138362e302f32332d3332203d3e20323634383830.roa
File:                     3137302e3234362e3138362e302f32332d3332203d3e20323634383830.roa (raw, json)
Hash identifier:          ZTRzD+PstYDDrPZ+Hc6Xq5vgB8mysa4kUf/2KhtlX9w=
Subject key identifier:   69:79:25:C9:5D:58:22:74:59:B6:5C:F8:1B:EC:07:C4:71:4C:2F:B7
Certificate issuer:       /CN=8D83B817FCC1F4634AF5642C22AD7FC9F62AD597
Certificate serial:       3AF049063E10B9A9A3637BA2914D5F49FCC3010D
Authority key identifier: 8D:83:B8:17:FC:C1:F4:63:4A:F5:64:2C:22:AD:7F:C9:F6:2A:D5:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D83B817FCC1F4634AF5642C22AD7FC9F62AD597.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/3137302e3234362e3138362e302f32332d3332203d3e20323634383830.roa
Signing time:             Thu 25 Jul 2024 19:37:56 +0000
ROA not before:           Thu 25 Jul 2024 19:32:56 +0000
ROA not after:            Thu 24 Jul 2025 19:37:56 +0000
asID:                     264880
IP address blocks:        170.246.186.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/8D83B817FCC1F4634AF5642C22AD7FC9F62AD597.crl
                          rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/8D83B817FCC1F4634AF5642C22AD7FC9F62AD597.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D83B817FCC1F4634AF5642C22AD7FC9F62AD597.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 21:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:f0:49:06:3e:10:b9:a9:a3:63:7b:a2:91:4d:5f:49:fc:c3:01:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D83B817FCC1F4634AF5642C22AD7FC9F62AD597
        Validity
            Not Before: Jul 25 19:32:56 2024 GMT
            Not After : Jul 24 19:37:56 2025 GMT
        Subject: CN=697925C95D58227459B65CF81BEC07C4714C2FB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:41:68:ea:9c:41:23:6d:bd:aa:e7:ff:b2:70:
                    da:25:d5:e9:54:ef:1e:6d:6d:27:a7:d4:9a:b4:83:
                    70:b0:4a:84:8b:ef:9d:d3:b6:5f:f4:77:28:a5:ad:
                    a1:81:fd:15:3f:02:d1:de:07:bb:6d:c5:7a:71:63:
                    0f:8e:f0:ed:17:f2:92:61:40:93:0f:07:8e:08:38:
                    a8:db:61:8c:20:67:01:91:cf:1b:9f:98:df:e5:49:
                    2c:7b:2b:2d:84:f0:45:7a:de:01:ff:89:4f:c5:a8:
                    cc:57:68:8c:58:6b:11:fb:fe:dd:17:49:f5:94:84:
                    a3:25:34:78:50:b6:ed:94:78:1e:67:7f:2f:02:6d:
                    86:75:93:10:31:25:ec:9b:6b:9b:20:62:5d:b8:e0:
                    a4:13:34:ba:01:7e:5e:02:7d:ba:b6:00:bb:e1:83:
                    56:91:30:6c:04:93:8d:af:77:b5:2f:7d:ac:89:c8:
                    28:24:f5:9c:ab:2d:8f:62:ed:00:da:7a:2e:a8:8f:
                    51:e6:78:88:e5:d8:46:4d:8d:60:35:44:c2:97:d6:
                    6d:03:59:ea:8d:0f:19:cc:25:1b:6f:88:a6:1b:9d:
                    0c:1d:64:2c:1d:aa:4f:ad:87:44:19:bb:60:65:40:
                    e7:d9:27:68:82:67:bd:22:df:09:58:42:9c:9c:25:
                    59:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:79:25:C9:5D:58:22:74:59:B6:5C:F8:1B:EC:07:C4:71:4C:2F:B7
            X509v3 Authority Key Identifier:
                keyid:8D:83:B8:17:FC:C1:F4:63:4A:F5:64:2C:22:AD:7F:C9:F6:2A:D5:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/8D83B817FCC1F4634AF5642C22AD7FC9F62AD597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D83B817FCC1F4634AF5642C22AD7FC9F62AD597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/3137302e3234362e3138362e302f32332d3332203d3e20323634383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:86:70:6d:18:99:5a:08:8a:4e:e5:b7:dd:cf:40:f7:cc:93:
         f5:33:09:5c:a6:34:83:c7:a2:d3:6e:9e:44:e1:72:ef:29:7e:
         65:37:40:a1:0c:8a:90:f5:a3:30:e7:42:55:5f:44:25:7f:9c:
         50:d9:c0:b0:df:d7:f9:2b:24:e5:dc:51:f5:a6:dd:77:95:f6:
         f4:11:29:75:9a:71:4d:0b:a6:f6:44:78:52:96:a4:ef:e7:72:
         a9:bd:88:9c:98:8c:92:f8:e3:8d:d6:0a:4f:2f:d7:37:e4:30:
         9e:1f:ff:a4:7d:2d:e3:9b:27:2f:d4:5f:ab:f1:3e:34:12:e2:
         32:8b:84:f1:09:95:a8:58:ac:2e:29:d9:e4:4b:42:da:a2:d9:
         be:b7:3a:1d:e3:d0:e6:94:3c:ce:7b:7c:27:b5:26:04:d1:22:
         8a:86:45:e0:ac:9f:37:02:94:61:1b:b8:40:ce:32:42:16:17:
         64:38:3f:51:32:5e:6c:8c:ac:ee:38:e9:13:e3:85:e2:ff:9d:
         9c:e9:56:87:99:6a:62:3f:97:e6:62:55:a7:f2:1e:b9:38:da:
         8a:55:68:90:db:ea:a7:d3:2c:a0:b9:0b:c2:7a:8f:ae:a7:cb:
         f2:14:84:ff:82:e5:c9:45:54:21:5d:ba:4f:78:bf:95:c6:3d:
         b6:3f:30:49
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUOvBJBj4QuamjY3uikU1fSfzDAQ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQ4M0I4MTdGQ0MxRjQ2MzRBRjU2NDJDMjJBRDdGQzlG
NjJBRDU5NzAeFw0yNDA3MjUxOTMyNTZaFw0yNTA3MjQxOTM3NTZaMDMxMTAvBgNV
BAMTKDY5NzkyNUM5NUQ1ODIyNzQ1OUI2NUNGODFCRUMwN0M0NzE0QzJGQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzQWjqnEEjbb2q5/+ycNol1elU
7x5tbSen1Jq0g3CwSoSL753Ttl/0dyilraGB/RU/AtHeB7ttxXpxYw+O8O0X8pJh
QJMPB44IOKjbYYwgZwGRzxufmN/lSSx7Ky2E8EV63gH/iU/FqMxXaIxYaxH7/t0X
SfWUhKMlNHhQtu2UeB5nfy8CbYZ1kxAxJeyba5sgYl244KQTNLoBfl4Cfbq2ALvh
g1aRMGwEk42vd7UvfayJyCgk9ZyrLY9i7QDaei6oj1HmeIjl2EZNjWA1RMKX1m0D
WeqNDxnMJRtviKYbnQwdZCwdqk+th0QZu2BlQOfZJ2iCZ70i3wlYQpycJVlhAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUaXklyV1YInRZtlz4G+wHxHFML7cwHwYDVR0j
BBgwFoAUjYO4F/zB9GNK9WQsIq1/yfYq1ZcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0FzM0JkNW9vc0Z0TmhRdER0eFR3WHp0a3dQQWhjRTFKZnE5clNCN2J1
Q2gvMC84RDgzQjgxN0ZDQzFGNDYzNEFGNTY0MkMyMkFEN0ZDOUY2MkFENTk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhEODNCODE3RkNDMUY0NjM0
QUY1NjQyQzIyQUQ3RkM5RjYyQUQ1OTcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNBczNCZDVvb3NGdE5oUXREdHhUd1h6dGt3UEFoY0UxSmZxOXJTQjdidUNoLzAv
MzEzNzMwMmUzMjM0MzYyZTMxMzgzNjJlMzAyZjMyMzMyZDMzMzIyMDNkM2UyMDMy
MzYzNDM4MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAar2ujANBgkqhkiG9w0BAQsFAAOCAQEAs4Zw
bRiZWgiKTuW33c9A98yT9TMJXKY0g8ei026eROFy7yl+ZTdAoQyKkPWjMOdCVV9E
JX+cUNnAsN/X+Ssk5dxR9abdd5X29BEpdZpxTQum9kR4Upak7+dyqb2InJiMkvjj
jdYKTy/XN+Qwnh//pH0t45snL9Rfq/E+NBLiMouE8QmVqFisLinZ5EtC2qLZvrc6
HePQ5pQ8znt8J7UmBNEiioZF4KyfNwKUYRu4QM4yQhYXZDg/UTJebIys7jjpE+OF
4v+dnOlWh5lqYj+X5mJVp/IeuTjailVokNvqp9MsoLkLwnqPrqfL8hSE/4LlyUVU
IV26T3i/lcY9tj8wSQ==
-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:31 2024 by rpki-client on console-ams.rpki-client.org