Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/3137302e38342e3130312e302f32342d3234203d3e20323635303130.roa
File:                     3137302e38342e3130312e302f32342d3234203d3e20323635303130.roa (raw, json)
Hash identifier:          E3ejvHsnSztYi1UrTIt5lb0MefAommisHIX/cTpLHlg=
Subject key identifier:   54:12:6A:43:A7:DB:5C:B1:49:DE:EE:BE:C9:64:3C:2D:95:E3:DE:EC
Certificate issuer:       /CN=D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7
Certificate serial:       79EE3B53DB0ADD75EF4B38B1E37DB294D700B517
Authority key identifier: D3:D9:C9:24:7C:2C:AC:69:2E:0C:68:1A:DC:FA:69:26:69:CB:CF:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/3137302e38342e3130312e302f32342d3234203d3e20323635303130.roa
Signing time:             Mon 27 May 2024 21:51:15 +0000
ROA not before:           Mon 27 May 2024 21:46:15 +0000
ROA not after:            Mon 26 May 2025 21:51:15 +0000
asID:                     265010
IP address blocks:        170.84.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.crl
                          rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ee:3b:53:db:0a:dd:75:ef:4b:38:b1:e3:7d:b2:94:d7:00:b5:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7
        Validity
            Not Before: May 27 21:46:15 2024 GMT
            Not After : May 26 21:51:15 2025 GMT
        Subject: CN=54126A43A7DB5CB149DEEEBEC9643C2D95E3DEEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:17:26:ea:9a:28:e5:60:98:26:ff:e7:51:23:
                    1d:7c:44:91:25:93:af:56:e8:66:3d:56:84:5c:70:
                    8d:90:84:53:4e:77:39:d5:fa:a5:14:6b:27:e8:87:
                    29:52:f1:dd:21:dc:6c:e7:cd:3d:c6:28:e2:2e:1a:
                    a0:37:14:aa:e2:ae:55:41:82:c0:c8:1a:df:a3:50:
                    00:5a:f7:cd:20:ae:2c:13:31:b9:a7:e8:f0:00:c8:
                    e2:7e:74:51:dc:91:a1:54:5f:02:06:57:f1:e1:be:
                    bf:1f:f2:7b:e0:4b:eb:88:b6:7c:02:89:bc:0c:c0:
                    7c:82:bc:73:4d:99:b2:28:02:70:67:96:74:a6:27:
                    e3:64:08:b0:fe:82:05:79:1b:71:a3:d0:8f:3c:4e:
                    51:46:a9:05:04:7e:e9:34:e2:8e:32:a4:51:02:15:
                    45:98:9a:4c:54:3c:cc:40:c7:d9:50:d7:e9:93:85:
                    7e:b4:50:d6:a2:33:c6:7b:a2:6f:1b:83:4b:50:5f:
                    a6:3f:3f:ff:62:7c:f6:f4:07:5f:6f:dc:8f:b7:92:
                    ab:3d:34:65:8c:d1:75:9f:2a:6e:5e:c6:8d:96:bf:
                    5a:75:20:9a:c9:31:1b:31:f1:7c:8b:0d:c4:18:e3:
                    5f:a7:d7:65:4a:29:74:bf:03:ec:b7:1a:fd:2f:8e:
                    d4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:12:6A:43:A7:DB:5C:B1:49:DE:EE:BE:C9:64:3C:2D:95:E3:DE:EC
            X509v3 Authority Key Identifier:
                keyid:D3:D9:C9:24:7C:2C:AC:69:2E:0C:68:1A:DC:FA:69:26:69:CB:CF:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/3137302e38342e3130312e302f32342d3234203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:a1:57:1e:54:93:b1:3f:43:44:8b:a5:05:b7:30:14:82:df:
         77:03:ac:13:85:ba:78:4b:e8:15:c5:19:c8:12:98:c5:e0:11:
         4a:79:ac:06:da:06:85:10:33:77:67:bb:81:c9:a1:b2:45:6f:
         8d:89:49:e1:38:34:69:18:6d:d7:d4:6c:e5:ce:59:b4:b2:06:
         ae:aa:21:5c:b0:ba:74:d8:c5:70:6b:ac:f9:63:7b:04:91:b9:
         ef:88:f8:e4:b7:56:71:1b:1c:f4:dd:cc:50:7b:d8:f8:7b:f2:
         75:ea:24:d8:ce:62:a7:3d:30:9e:34:61:3b:56:34:ee:6b:89:
         11:58:64:98:d2:90:89:5b:d3:ae:12:d8:d0:5c:cd:fd:06:42:
         58:5b:a3:72:d5:f8:d9:dd:39:98:3f:e9:20:e4:2c:d5:3f:4d:
         bf:1b:f2:65:08:d5:59:cd:21:11:47:fd:98:e7:fe:c1:9e:d0:
         21:59:88:16:67:67:b0:f0:d0:f6:8b:d3:c2:6e:be:e0:09:a4:
         01:e2:67:2a:73:66:44:b4:8b:ac:7a:39:a6:b2:7b:d1:e8:d0:
         fe:a4:4b:e1:e7:db:a7:c6:1a:0b:ba:7c:da:26:cb:a7:99:27:
         42:d1:25:51:20:08:0f:2a:d7:c2:77:b2:61:5e:cc:6e:07:e1:
         12:db:c9:a5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUee47U9sK3XXvSzix432ylNcAtRcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDNEOUM5MjQ3QzJDQUM2OTJFMEM2ODFBRENGQTY5MjY2
OUNCQ0ZENzAeFw0yNDA1MjcyMTQ2MTVaFw0yNTA1MjYyMTUxMTVaMDMxMTAvBgNV
BAMTKDU0MTI2QTQzQTdEQjVDQjE0OURFRUVCRUM5NjQzQzJEOTVFM0RFRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLFybqmijlYJgm/+dRIx18RJEl
k69W6GY9VoRccI2QhFNOdznV+qUUayfohylS8d0h3GznzT3GKOIuGqA3FKrirlVB
gsDIGt+jUABa980griwTMbmn6PAAyOJ+dFHckaFUXwIGV/Hhvr8f8nvgS+uItnwC
ibwMwHyCvHNNmbIoAnBnlnSmJ+NkCLD+ggV5G3Gj0I88TlFGqQUEfuk04o4ypFEC
FUWYmkxUPMxAx9lQ1+mThX60UNaiM8Z7om8bg0tQX6Y/P/9ifPb0B19v3I+3kqs9
NGWM0XWfKm5exo2Wv1p1IJrJMRsx8XyLDcQY41+n12VKKXS/A+y3Gv0vjtQfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUVBJqQ6fbXLFJ3u6+yWQ8LZXj3uwwHwYDVR0j
BBgwFoAU09nJJHwsrGkuDGga3PppJmnLz9cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0NoUWo1NExxUnJEeko4ZFNnVEhCdVd2V0pHZ0JaSkVRaXV2Sm9KZ1Z1
UncvMC9EM0Q5QzkyNDdDMkNBQzY5MkUwQzY4MUFEQ0ZBNjkyNjY5Q0JDRkQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzRDlDOTI0N0MyQ0FDNjky
RTBDNjgxQURDRkE2OTI2NjlDQkNGRDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNDaFFqNTRMcVJyRHpKOGRTZ1RIQnVXdldKR2dCWkpFUWl1dkpvSmdWdVJ3LzAv
MzEzNzMwMmUzODM0MmUzMTMwMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMDMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACqVGUwDQYJKoZIhvcNAQELBQADggEBAJehVx5U
k7E/Q0SLpQW3MBSC33cDrBOFunhL6BXFGcgSmMXgEUp5rAbaBoUQM3dnu4HJobJF
b42JSeE4NGkYbdfUbOXOWbSyBq6qIVywunTYxXBrrPljewSRue+I+OS3VnEbHPTd
zFB72Ph78nXqJNjOYqc9MJ40YTtWNO5riRFYZJjSkIlb064S2NBczf0GQlhbo3LV
+NndOZg/6SDkLNU/Tb8b8mUI1VnNIRFH/Zjn/sGe0CFZiBZnZ7Dw0PaL08JuvuAJ
pAHiZypzZkS0i6x6Oaaye9Ho0P6kS+Hn26fGGgu6fNomy6eZJ0LRJVEgCA8q18J3
smFezG4H4RLbyaU=
-----END CERTIFICATE-----
Generated at Sun Jun 16 00:16:48 2024 by rpki-client on console-fra.rpki-client.org