Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/3137302e3235342e39362e302f32322d3235203d3e20323635313032.roa
File:                     3137302e3235342e39362e302f32322d3235203d3e20323635313032.roa (raw, json)
Hash identifier:          ud/PeBE0fIpwUMUCEIYHCmI+iAx8M9GFvHUpz7+Ms3Y=
Subject key identifier:   11:0B:1C:CE:93:E8:7D:E1:EE:3F:7B:81:71:F9:9F:BD:76:32:57:EC
Certificate issuer:       /CN=B50F71D69739DBF5914AAB576A379411D64051AB
Certificate serial:       5023E854A7BD187EF2212634853B3974126F226D
Authority key identifier: B5:0F:71:D6:97:39:DB:F5:91:4A:AB:57:6A:37:94:11:D6:40:51:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B50F71D69739DBF5914AAB576A379411D64051AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/3137302e3235342e39362e302f32322d3235203d3e20323635313032.roa
Signing time:             Tue 19 Nov 2024 13:14:12 +0000
ROA not before:           Tue 19 Nov 2024 13:09:12 +0000
ROA not after:            Tue 18 Nov 2025 13:14:12 +0000
asID:                     265102
IP address blocks:        170.254.96.0/22 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/B50F71D69739DBF5914AAB576A379411D64051AB.crl
                          rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/B50F71D69739DBF5914AAB576A379411D64051AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B50F71D69739DBF5914AAB576A379411D64051AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:23:e8:54:a7:bd:18:7e:f2:21:26:34:85:3b:39:74:12:6f:22:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B50F71D69739DBF5914AAB576A379411D64051AB
        Validity
            Not Before: Nov 19 13:09:12 2024 GMT
            Not After : Nov 18 13:14:12 2025 GMT
        Subject: CN=110B1CCE93E87DE1EE3F7B8171F99FBD763257EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:68:80:35:c1:f1:f9:b4:96:97:57:27:a6:d7:
                    70:b0:a6:ad:b8:c7:13:e4:21:2b:22:9d:0b:06:ae:
                    ac:5f:79:5c:ff:95:e7:4a:4d:db:da:10:20:50:82:
                    4d:d7:4d:6d:2e:49:77:0a:34:2a:13:88:97:ba:5d:
                    10:2c:2d:be:9b:ad:35:5a:a9:71:24:e2:ae:e4:aa:
                    fd:de:20:8f:a2:7c:6b:35:90:27:2e:7b:c5:4c:f8:
                    ac:1a:f5:aa:3f:0c:b5:01:91:f7:41:64:5c:3c:8d:
                    38:62:ff:92:7f:51:2e:51:9a:4f:4d:24:18:30:63:
                    0a:9c:f8:60:34:dc:5b:27:d3:32:80:48:7f:ca:97:
                    99:bf:0b:41:88:e1:08:e4:53:99:66:79:15:e8:17:
                    01:7f:ef:30:a7:64:e8:5b:6d:02:a0:f8:db:4f:ad:
                    c3:91:f5:7c:6e:14:6b:9a:33:86:04:40:d0:67:84:
                    95:25:36:c4:e7:94:8a:fb:d1:c0:7e:bb:f6:8c:48:
                    3d:34:9a:fd:2b:60:1a:08:90:c5:56:8b:75:78:74:
                    dd:07:73:bc:cd:33:2c:d6:57:d4:06:ed:b4:75:a5:
                    bf:cd:4b:69:0e:8a:c4:7e:44:61:23:bd:c2:62:0c:
                    58:df:f6:91:ff:7c:13:4a:fc:83:f7:b7:7b:1c:13:
                    02:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0B:1C:CE:93:E8:7D:E1:EE:3F:7B:81:71:F9:9F:BD:76:32:57:EC
            X509v3 Authority Key Identifier:
                keyid:B5:0F:71:D6:97:39:DB:F5:91:4A:AB:57:6A:37:94:11:D6:40:51:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/B50F71D69739DBF5914AAB576A379411D64051AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B50F71D69739DBF5914AAB576A379411D64051AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EkPoBX3XbxbFZekirRqn8BXiDU8enSrfrwhWexXhPTN/0/3137302e3235342e39362e302f32322d3235203d3e20323635313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:d6:51:1b:2d:25:f1:0d:46:25:98:49:ae:0c:de:14:f7:34:
         45:53:27:65:fd:10:a6:e4:e9:76:56:73:2e:13:55:b2:d8:70:
         3c:47:08:ae:05:c1:45:78:d7:7b:9a:83:c8:e7:91:8e:6e:b1:
         07:0d:16:a4:d5:7a:13:dd:de:5a:44:c9:32:13:07:b3:1b:d6:
         d2:fa:79:af:4a:5c:58:a3:2d:1d:02:50:52:cf:79:e3:06:a1:
         bc:2e:c3:96:03:3a:9c:72:09:84:d6:45:d5:38:87:1d:b5:f8:
         24:58:78:52:82:1e:f3:f6:01:80:6a:9f:a2:8e:47:e8:54:a7:
         33:53:f9:1f:08:bb:e9:79:a5:84:a3:8e:3a:88:9c:4f:ab:0d:
         34:06:47:ba:3e:b1:08:36:39:33:09:57:a9:c9:3c:7c:17:0c:
         0c:c4:3b:27:55:a3:1d:76:67:b9:a9:bc:e0:9e:32:07:3c:3c:
         82:d0:d9:9b:21:f7:26:f4:38:1a:69:89:bd:61:80:90:a2:7c:
         d7:ae:bd:21:63:c0:12:22:40:7a:c5:42:06:57:55:0f:ba:1f:
         7e:7a:28:be:7b:80:02:67:9a:7e:64:d6:b5:8b:78:37:67:3b:
         af:82:40:83:64:95:3f:11:5b:a5:2e:83:7d:00:83:a8:57:65:
         9e:57:79:88
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUCPoVKe9GH7yISY0hTs5dBJvIm0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjUwRjcxRDY5NzM5REJGNTkxNEFBQjU3NkEzNzk0MTFE
NjQwNTFBQjAeFw0yNDExMTkxMzA5MTJaFw0yNTExMTgxMzE0MTJaMDMxMTAvBgNV
BAMTKDExMEIxQ0NFOTNFODdERTFFRTNGN0I4MTcxRjk5RkJENzYzMjU3RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2aIA1wfH5tJaXVyem13Cwpq24
xxPkISsinQsGrqxfeVz/ledKTdvaECBQgk3XTW0uSXcKNCoTiJe6XRAsLb6brTVa
qXEk4q7kqv3eII+ifGs1kCcue8VM+Kwa9ao/DLUBkfdBZFw8jThi/5J/US5Rmk9N
JBgwYwqc+GA03Fsn0zKASH/Kl5m/C0GI4QjkU5lmeRXoFwF/7zCnZOhbbQKg+NtP
rcOR9XxuFGuaM4YEQNBnhJUlNsTnlIr70cB+u/aMSD00mv0rYBoIkMVWi3V4dN0H
c7zNMyzWV9QG7bR1pb/NS2kOisR+RGEjvcJiDFjf9pH/fBNK/IP3t3scEwJ1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUEQsczpPofeHuP3uBcfmfvXYyV+wwHwYDVR0j
BBgwFoAUtQ9x1pc52/WRSqtXajeUEdZAUaswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEVrUG9CWDNYYnhiRlpla2lyUnFuOEJYaURVOGVuU3JmcndoV2V4WGhQ
VE4vMC9CNTBGNzFENjk3MzlEQkY1OTE0QUFCNTc2QTM3OTQxMUQ2NDA1MUFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1MEY3MUQ2OTczOURCRjU5
MTRBQUI1NzZBMzc5NDExRDY0MDUxQUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRFa1BvQlgzWGJ4YkZaZWtpclJxbjhCWGlEVThlblNyZnJ3aFdleFhoUFROLzAv
MzEzNzMwMmUzMjM1MzQyZTM5MzYyZTMwMmYzMjMyMmQzMjM1MjAzZDNlMjAzMjM2
MzUzMTMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq/mAwDQYJKoZIhvcNAQELBQADggEBAHfWURst
JfENRiWYSa4M3hT3NEVTJ2X9EKbk6XZWcy4TVbLYcDxHCK4FwUV413uag8jnkY5u
sQcNFqTVehPd3lpEyTITB7Mb1tL6ea9KXFijLR0CUFLPeeMGobwuw5YDOpxyCYTW
RdU4hx21+CRYeFKCHvP2AYBqn6KOR+hUpzNT+R8Iu+l5pYSjjjqInE+rDTQGR7o+
sQg2OTMJV6nJPHwXDAzEOydVox12Z7mpvOCeMgc8PILQ2Zsh9yb0OBppib1hgJCi
fNeuvSFjwBIiQHrFQgZXVQ+6H356KL57gAJnmn5k1rWLeDdnO6+CQINklT8RW6Uu
g30Ag6hXZZ5XeYg=
-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:30 2024 by rpki-client on console-ams.rpki-client.org