Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/3137302e37382e3234302e302f32322d3234203d3e20323634313238.roa
File:                     3137302e37382e3234302e302f32322d3234203d3e20323634313238.roa (raw, json)
Hash identifier:          hHMn2W//K8yas4kv8qmVVSriMQfCE/lOLdkyiHB0liI=
Subject key identifier:   7E:B6:4D:98:B1:80:A7:AD:4D:CA:9E:78:6A:C9:3B:C8:C2:2C:CA:C9
Certificate issuer:       /CN=E3C11484C8B4CD3F766170F9E324672A733D9604
Certificate serial:       31FF508E964FC9454D64A6CAB4D5513588FDE3EB
Authority key identifier: E3:C1:14:84:C8:B4:CD:3F:76:61:70:F9:E3:24:67:2A:73:3D:96:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3C11484C8B4CD3F766170F9E324672A733D9604.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/3137302e37382e3234302e302f32322d3234203d3e20323634313238.roa
Signing time:             Thu 04 Apr 2024 10:20:23 +0000
ROA not before:           Thu 04 Apr 2024 10:15:23 +0000
ROA not after:            Thu 03 Apr 2025 10:20:23 +0000
asID:                     264128
IP address blocks:        170.78.240.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/E3C11484C8B4CD3F766170F9E324672A733D9604.crl
                          rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/E3C11484C8B4CD3F766170F9E324672A733D9604.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3C11484C8B4CD3F766170F9E324672A733D9604.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:ff:50:8e:96:4f:c9:45:4d:64:a6:ca:b4:d5:51:35:88:fd:e3:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3C11484C8B4CD3F766170F9E324672A733D9604
        Validity
            Not Before: Apr  4 10:15:23 2024 GMT
            Not After : Apr  3 10:20:23 2025 GMT
        Subject: CN=7EB64D98B180A7AD4DCA9E786AC93BC8C22CCAC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:23:7f:29:52:26:bb:d1:47:eb:47:43:55:0e:
                    8c:61:11:07:fd:f2:c3:fb:1d:c1:b0:c6:1e:a0:5b:
                    92:82:c7:8c:4d:57:1a:f7:b1:e4:dc:7b:21:43:60:
                    a6:fe:e9:c1:b7:e9:8f:76:9e:37:90:f5:0c:b4:4f:
                    22:1c:f3:6a:be:1b:08:4d:e8:e5:5c:aa:94:9c:c0:
                    93:d6:af:ef:3c:0e:75:8c:8f:2b:fb:ae:bf:31:c3:
                    44:bc:f9:d9:1c:d4:d7:5d:d7:db:51:79:cc:ca:13:
                    25:1e:95:07:bd:d6:a1:7c:5f:0f:cc:6b:ca:fe:bf:
                    77:5b:28:3f:63:35:ad:45:5c:15:e4:73:d1:ac:3d:
                    1a:96:b2:86:6a:4d:f2:30:38:ec:3e:28:7f:68:f9:
                    c4:41:5f:ac:fe:04:a5:f1:66:ca:c5:14:2d:8c:b9:
                    76:eb:c0:c4:ae:d7:05:ca:64:b3:e3:28:fa:8a:ab:
                    f5:2c:b6:ce:dd:0b:48:f3:69:27:bf:7e:45:01:74:
                    03:dc:7d:0f:09:0b:82:b2:52:58:9d:87:43:9e:d1:
                    3f:b6:21:49:98:f5:3f:c2:b6:89:e0:f9:9e:c3:50:
                    2d:4f:96:d7:e5:32:2c:db:aa:6b:4f:e2:f9:f9:69:
                    37:37:50:b0:ee:a2:b4:0d:36:21:32:b6:6c:72:d4:
                    7a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B6:4D:98:B1:80:A7:AD:4D:CA:9E:78:6A:C9:3B:C8:C2:2C:CA:C9
            X509v3 Authority Key Identifier:
                keyid:E3:C1:14:84:C8:B4:CD:3F:76:61:70:F9:E3:24:67:2A:73:3D:96:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/E3C11484C8B4CD3F766170F9E324672A733D9604.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3C11484C8B4CD3F766170F9E324672A733D9604.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/3137302e37382e3234302e302f32322d3234203d3e20323634313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:68:37:a8:4f:bc:e5:ac:e6:f5:79:6a:33:3d:33:8f:98:61:
         0a:65:be:42:2b:a4:f3:20:4e:7b:60:e2:f2:28:ed:a6:26:ca:
         fd:25:99:4a:04:cf:9a:c0:17:da:d6:17:e7:5c:8c:ce:3a:bb:
         af:1b:6c:1d:75:13:88:cf:27:10:da:b9:1a:8e:24:0d:09:7d:
         2a:e0:62:2c:4a:de:f7:85:05:0f:f1:a7:21:69:61:78:09:b0:
         a1:4e:98:2e:88:20:23:f8:83:5d:9e:8c:4a:bc:2a:2c:de:b9:
         c4:6b:af:b5:82:9b:75:6a:c0:5f:46:8d:4e:25:7d:4b:02:96:
         60:e3:83:0c:76:ff:ae:db:ac:3b:62:c5:3c:44:5c:c6:2a:8f:
         4e:85:02:8a:0e:35:c2:59:ea:2e:64:3c:0c:67:7b:5d:e9:8f:
         43:a8:8b:e6:1d:78:9f:54:d9:b6:42:65:c4:6e:89:9f:32:d1:
         09:73:53:56:ff:7e:6c:d3:03:b0:2e:d1:08:54:e9:9c:f2:76:
         0f:3d:04:5f:bf:5b:ee:65:09:09:d9:1b:57:56:a7:13:30:08:
         61:a1:c5:95:99:db:95:dc:d0:0d:e9:6b:8f:d6:28:ca:c6:ff:
         65:ff:9b:b1:51:88:cf:cb:ac:53:c6:64:da:c1:e5:30:2e:41:
         38:0d:2d:71
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMf9QjpZPyUVNZKbKtNVRNYj94+swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNDMTE0ODRDOEI0Q0QzRjc2NjE3MEY5RTMyNDY3MkE3
MzNEOTYwNDAeFw0yNDA0MDQxMDE1MjNaFw0yNTA0MDMxMDIwMjNaMDMxMTAvBgNV
BAMTKDdFQjY0RDk4QjE4MEE3QUQ0RENBOUU3ODZBQzkzQkM4QzIyQ0NBQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEI38pUia70UfrR0NVDoxhEQf9
8sP7HcGwxh6gW5KCx4xNVxr3seTceyFDYKb+6cG36Y92njeQ9Qy0TyIc82q+GwhN
6OVcqpScwJPWr+88DnWMjyv7rr8xw0S8+dkc1Ndd19tReczKEyUelQe91qF8Xw/M
a8r+v3dbKD9jNa1FXBXkc9GsPRqWsoZqTfIwOOw+KH9o+cRBX6z+BKXxZsrFFC2M
uXbrwMSu1wXKZLPjKPqKq/Usts7dC0jzaSe/fkUBdAPcfQ8JC4KyUlidh0Oe0T+2
IUmY9T/Ctong+Z7DUC1PltflMizbqmtP4vn5aTc3ULDuorQNNiEytmxy1HqtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUfrZNmLGAp61Nyp54ask7yMIsyskwHwYDVR0j
BBgwFoAU48EUhMi0zT92YXD54yRnKnM9lgQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdvbVJSRmNUZ1FWeExmU3NoYWpRTG4xdEtiblZxN3kyN3pjRXlSSGVY
RUgvMS9FM0MxMTQ4NEM4QjRDRDNGNzY2MTcwRjlFMzI0NjcyQTczM0Q5NjA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzQzExNDg0QzhCNENEM0Y3
NjYxNzBGOUUzMjQ2NzJBNzMzRDk2MDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHb21SUkZjVGdRVnhMZlNzaGFqUUxuMXRLYm5WcTd5Mjd6Y0V5UkhlWEVILzEv
MzEzNzMwMmUzNzM4MmUzMjM0MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzQzMTMyMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqTvAwDQYJKoZIhvcNAQELBQADggEBAF5oN6hP
vOWs5vV5ajM9M4+YYQplvkIrpPMgTntg4vIo7aYmyv0lmUoEz5rAF9rWF+dcjM46
u68bbB11E4jPJxDauRqOJA0JfSrgYixK3veFBQ/xpyFpYXgJsKFOmC6IICP4g12e
jEq8KizeucRrr7WCm3VqwF9GjU4lfUsClmDjgwx2/67brDtixTxEXMYqj06FAooO
NcJZ6i5kPAxne13pj0Ooi+YdeJ9U2bZCZcRuiZ8y0QlzU1b/fmzTA7Au0QhU6Zzy
dg89BF+/W+5lCQnZG1dWpxMwCGGhxZWZ25Xc0A3pa4/WKMrG/2X/m7FRiM/LrFPG
ZNrB5TAuQTgNLXE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:07 2024 by rpki-client on console-fra.rpki-client.org