Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/3137302e3233392e3134302e302f32322d3332203d3e20323636333533.roa
File:                     3137302e3233392e3134302e302f32322d3332203d3e20323636333533.roa (raw, json)
Hash identifier:          QEHkiAb0m19rApRJvUNCPxj1BUPWh/MglTaaPeB1ZzY=
Subject key identifier:   F2:3B:36:EC:90:46:FE:D5:63:D6:4E:4E:45:21:09:AC:C0:12:EE:F0
Certificate issuer:       /CN=0D926321475D43A8FD9B5E1376B9FCE55D3EAAC9
Certificate serial:       77B4AFBF446F0E3F9AAF56B9CD05A8056AD3BCAF
Authority key identifier: 0D:92:63:21:47:5D:43:A8:FD:9B:5E:13:76:B9:FC:E5:5D:3E:AA:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D926321475D43A8FD9B5E1376B9FCE55D3EAAC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/3137302e3233392e3134302e302f32322d3332203d3e20323636333533.roa
Signing time:             Tue 26 Nov 2024 13:02:55 +0000
ROA not before:           Tue 26 Nov 2024 12:57:55 +0000
ROA not after:            Tue 25 Nov 2025 13:02:55 +0000
asID:                     266353
IP address blocks:        170.239.140.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/0D926321475D43A8FD9B5E1376B9FCE55D3EAAC9.crl
                          rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/0D926321475D43A8FD9B5E1376B9FCE55D3EAAC9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D926321475D43A8FD9B5E1376B9FCE55D3EAAC9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b4:af:bf:44:6f:0e:3f:9a:af:56:b9:cd:05:a8:05:6a:d3:bc:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D926321475D43A8FD9B5E1376B9FCE55D3EAAC9
        Validity
            Not Before: Nov 26 12:57:55 2024 GMT
            Not After : Nov 25 13:02:55 2025 GMT
        Subject: CN=3082010A0282010100AD5A321EFE4CCA3534061EF27AA1DD07E66DC3FE23D3B5C976BE069D260EBEA28D0D11C7DEFD3F24FA72041212318FCA40459063CF4551A40A4F3BDDB78118F6C4FA6EBCB13C7CF6BCC1796F07212FB6C79A678B01CB739425ABF026B1B5CB984FDA708778EC78D215B3C53B0E08AA1FFED694A38D247595C4C79799740DB670FC610C109E4431C13250F03F33F2F3D1E599B34FB5C49780327E41A4CEFCF9C1DC8CD3BA4FA24A4E7504EBCAAD1EBBE31675C44C92BD4B30E0B2D60BD25C3357B27E84CAA6B0A14392495441357A2CD9082348A2809CF7C7DDB39BA574D891B88A80E27B70C6662DE0E39D7C4A4213784FD01C38E0A6B073A43B4CD11BD75BD30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5a:32:1e:fe:4c:ca:35:34:06:1e:f2:7a:a1:
                    dd:07:e6:6d:c3:fe:23:d3:b5:c9:76:be:06:9d:26:
                    0e:be:a2:8d:0d:11:c7:de:fd:3f:24:fa:72:04:12:
                    12:31:8f:ca:40:45:90:63:cf:45:51:a4:0a:4f:3b:
                    dd:b7:81:18:f6:c4:fa:6e:bc:b1:3c:7c:f6:bc:c1:
                    79:6f:07:21:2f:b6:c7:9a:67:8b:01:cb:73:94:25:
                    ab:f0:26:b1:b5:cb:98:4f:da:70:87:78:ec:78:d2:
                    15:b3:c5:3b:0e:08:aa:1f:fe:d6:94:a3:8d:24:75:
                    95:c4:c7:97:99:74:0d:b6:70:fc:61:0c:10:9e:44:
                    31:c1:32:50:f0:3f:33:f2:f3:d1:e5:99:b3:4f:b5:
                    c4:97:80:32:7e:41:a4:ce:fc:f9:c1:dc:8c:d3:ba:
                    4f:a2:4a:4e:75:04:eb:ca:ad:1e:bb:e3:16:75:c4:
                    4c:92:bd:4b:30:e0:b2:d6:0b:d2:5c:33:57:b2:7e:
                    84:ca:a6:b0:a1:43:92:49:54:41:35:7a:2c:d9:08:
                    23:48:a2:80:9c:f7:c7:dd:b3:9b:a5:74:d8:91:b8:
                    8a:80:e2:7b:70:c6:66:2d:e0:e3:9d:7c:4a:42:13:
                    78:4f:d0:1c:38:e0:a6:b0:73:a4:3b:4c:d1:1b:d7:
                    5b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:3B:36:EC:90:46:FE:D5:63:D6:4E:4E:45:21:09:AC:C0:12:EE:F0
            X509v3 Authority Key Identifier:
                keyid:0D:92:63:21:47:5D:43:A8:FD:9B:5E:13:76:B9:FC:E5:5D:3E:AA:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/0D926321475D43A8FD9B5E1376B9FCE55D3EAAC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D926321475D43A8FD9B5E1376B9FCE55D3EAAC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3PY3oimPZrDoQfBGhmZBhdeTjTuYZha8PyTm3yM6njNp/0/3137302e3233392e3134302e302f32322d3332203d3e20323636333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:d8:22:e4:25:d3:51:4f:99:2b:a2:fb:fe:ca:c7:30:21:04:
         38:5a:81:c6:97:27:8c:31:d7:cc:6e:c0:b1:a3:98:78:ee:61:
         34:ef:46:d1:57:fc:34:77:78:ba:22:f5:02:d7:ac:cc:01:58:
         bf:60:11:3c:08:81:5e:5a:69:40:e0:67:97:89:5d:de:dc:c9:
         64:b0:f7:23:d0:17:5a:71:3f:34:5f:10:b9:10:05:be:05:a8:
         ab:a3:d3:2e:40:3d:6d:bb:3c:77:68:c1:68:59:74:93:c6:c5:
         05:93:23:b7:47:79:dc:72:6e:4e:7d:e1:ea:ea:c0:11:86:c4:
         e4:50:b5:d8:0b:8d:c9:b2:09:d7:42:e6:fc:b4:79:66:c8:03:
         79:93:71:f5:f7:1b:39:0f:b6:dc:3a:69:f6:bf:59:0d:c6:4a:
         74:3c:f9:87:b0:55:97:7b:ef:69:44:48:dc:6b:b0:38:a7:e3:
         61:81:8a:4e:16:77:dc:f6:fd:70:07:aa:e8:a8:88:1b:d3:d8:
         c6:f4:fa:e6:f3:71:14:f5:76:fc:ce:43:72:67:a0:c3:26:05:
         20:dd:72:c8:d0:a1:5d:56:01:09:99:6b:dd:bc:9f:21:1d:5d:
         cd:28:c9:f2:dc:77:c1:1a:18:87:0c:73:56:8e:65:1d:f6:6f:
         cf:88:b3:0e
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUd7Svv0RvDj+ar1a5zQWoBWrTvK8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ5MjYzMjE0NzVENDNBOEZEOUI1RTEzNzZCOUZDRTU1
RDNFQUFDOTAeFw0yNDExMjYxMjU3NTVaFw0yNTExMjUxMzAyNTVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUQ1QTMyMUVGRTRDQ0EzNTM0
MDYxRUYyN0FBMUREMDdFNjZEQzNGRTIzRDNCNUM5NzZCRTA2OUQyNjBFQkVBMjhE
MEQxMUM3REVGRDNGMjRGQTcyMDQxMjEyMzE4RkNBNDA0NTkwNjNDRjQ1NTFBNDBB
NEYzQkREQjc4MTE4RjZDNEZBNkVCQ0IxM0M3Q0Y2QkNDMTc5NkYwNzIxMkZCNkM3
OUE2NzhCMDFDQjczOTQyNUFCRjAyNkIxQjVDQjk4NEZEQTcwODc3OEVDNzhEMjE1
QjNDNTNCMEUwOEFBMUZGRUQ2OTRBMzhEMjQ3NTk1QzRDNzk3OTk3NDBEQjY3MEZD
NjEwQzEwOUU0NDMxQzEzMjUwRjAzRjMzRjJGM0QxRTU5OUIzNEZCNUM0OTc4MDMy
N0U0MUE0Q0VGQ0Y5QzFEQzhDRDNCQTRGQTI0QTRFNzUwNEVCQ0FBRDFFQkJFMzE2
NzVDNDRDOTJCRDRCMzBFMEIyRDYwQkQyNUMzMzU3QjI3RTg0Q0FBNkIwQTE0Mzky
NDk1NDQxMzU3QTJDRDkwODIzNDhBMjgwOUNGN0M3RERCMzlCQTU3NEQ4OTFCODhB
ODBFMjdCNzBDNjY2MkRFMEUzOUQ3QzRBNDIxMzc4NEZEMDFDMzhFMEE2QjA3M0E0
M0I0Q0QxMUJENzVCRDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArVoyHv5MyjU0Bh7yeqHdB+Ztw/4j07XJdr4GnSYOvqKNDRHH3v0/
JPpyBBISMY/KQEWQY89FUaQKTzvdt4EY9sT6bryxPHz2vMF5bwchL7bHmmeLActz
lCWr8CaxtcuYT9pwh3jseNIVs8U7DgiqH/7WlKONJHWVxMeXmXQNtnD8YQwQnkQx
wTJQ8D8z8vPR5ZmzT7XEl4AyfkGkzvz5wdyM07pPokpOdQTryq0eu+MWdcRMkr1L
MOCy1gvSXDNXsn6EyqawoUOSSVRBNXos2QgjSKKAnPfH3bObpXTYkbiKgOJ7cMZm
LeDjnXxKQhN4T9AcOOCmsHOkO0zRG9db0wIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FPI7NuyQRv7VY9ZOTkUhCazAEu7wMB8GA1UdIwQYMBaAFA2SYyFHXUOo/ZteE3a5
/OVdPqrJMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNQWTNvaW1QWnJEb1Fm
QkdobVpCaGRlVGpUdVlaaGE4UHlUbTN5TTZuak5wLzAvMEQ5MjYzMjE0NzVENDNB
OEZEOUI1RTEzNzZCOUZDRTU1RDNFQUFDOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8wRDkyNjMyMTQ3NUQ0M0E4RkQ5QjVFMTM3NkI5RkNFNTVEM0VB
QUM5LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zUFkzb2ltUFpyRG9RZkJHaG1a
QmhkZVRqVHVZWmhhOFB5VG0zeU02bmpOcC8wLzMxMzczMDJlMzIzMzM5MmUzMTM0
MzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2MzYzMzM1MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKq74wwDQYJKoZIhvcNAQELBQADggEBAHfYIuQl01FPmSui+/7KxzAhBDhagcaX
J4wx18xuwLGjmHjuYTTvRtFX/DR3eLoi9QLXrMwBWL9gETwIgV5aaUDgZ5eJXd7c
yWSw9yPQF1pxPzRfELkQBb4FqKuj0y5APW27PHdowWhZdJPGxQWTI7dHedxybk59
4erqwBGGxORQtdgLjcmyCddC5vy0eWbIA3mTcfX3GzkPttw6afa/WQ3GSnQ8+Yew
VZd772lESNxrsDin42GBik4Wd9z2/XAHquioiBvT2Mb0+ubzcRT1dvzOQ3JnoMMm
BSDdcsjQoV1WAQmZa928nyEdXc0oyfLcd8EaGIcMc1aOZR32b8+Isw4=
-----END CERTIFICATE-----
Generated at Tue Nov 26 14:16:48 2024 by rpki-client on console-ams.rpki-client.org