Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/3137302e38322e3235352e302f32342d3234203d3e20323636343630.roa
File:                     3137302e38322e3235352e302f32342d3234203d3e20323636343630.roa (raw, json)
Hash identifier:          BGZ28sJisFfoFWKxffNkUxehjdofhVTruRFjVJtIWMU=
Subject key identifier:   22:81:DC:32:D5:3E:DD:0F:28:56:8A:67:41:CD:6E:50:B8:18:4B:7F
Certificate issuer:       /CN=466BB256CC5A7F7C0E206E5D0FC94B894B488172
Certificate serial:       3CA58D73E6993F4A306E98A44977627B6F6A24C7
Authority key identifier: 46:6B:B2:56:CC:5A:7F:7C:0E:20:6E:5D:0F:C9:4B:89:4B:48:81:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/466BB256CC5A7F7C0E206E5D0FC94B894B488172.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/3137302e38322e3235352e302f32342d3234203d3e20323636343630.roa
Signing time:             Sat 15 Jun 2024 18:02:14 +0000
ROA not before:           Sat 15 Jun 2024 17:57:14 +0000
ROA not after:            Sat 14 Jun 2025 18:02:14 +0000
asID:                     266460
IP address blocks:        170.82.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/466BB256CC5A7F7C0E206E5D0FC94B894B488172.crl
                          rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/466BB256CC5A7F7C0E206E5D0FC94B894B488172.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/466BB256CC5A7F7C0E206E5D0FC94B894B488172.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 09:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a5:8d:73:e6:99:3f:4a:30:6e:98:a4:49:77:62:7b:6f:6a:24:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466BB256CC5A7F7C0E206E5D0FC94B894B488172
        Validity
            Not Before: Jun 15 17:57:14 2024 GMT
            Not After : Jun 14 18:02:14 2025 GMT
        Subject: CN=2281DC32D53EDD0F28568A6741CD6E50B8184B7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e2:73:fb:14:f0:ef:84:66:1a:23:58:9b:9a:
                    ea:52:c1:cb:e4:96:70:a5:2d:ab:bc:21:29:d9:f9:
                    33:6b:da:1b:d6:1d:0c:ba:5d:6f:9f:22:28:a4:84:
                    d0:b7:f0:99:13:0d:8a:95:6e:23:df:f2:1a:f9:b6:
                    f5:9a:0b:4c:5f:8c:4e:e2:e9:69:6d:2a:c5:dd:28:
                    36:a3:42:ab:22:93:31:58:28:35:00:22:91:e5:1d:
                    f9:27:b7:c0:1b:12:71:03:b4:1c:66:21:62:96:7c:
                    b3:cb:3c:e7:77:45:9b:cd:7d:66:82:32:2b:54:b6:
                    f6:a9:fd:58:1c:11:1c:34:07:f6:95:9b:80:03:d4:
                    85:70:04:59:76:a4:b5:45:03:11:b3:95:1c:74:b8:
                    a3:88:dd:ba:93:86:ca:9f:49:36:82:4f:fd:45:45:
                    77:ae:5b:da:3b:05:da:c1:e3:6d:69:3c:62:02:bf:
                    f1:4f:17:8a:19:c4:de:4c:30:7b:02:34:0c:93:a6:
                    e6:84:98:a4:2c:30:b0:ff:a4:61:26:a5:75:19:11:
                    fc:67:5f:ca:08:15:73:4e:4d:a9:19:7c:4b:f2:f2:
                    61:34:e8:2c:07:5e:3e:23:c2:5d:bc:c7:0d:a6:18:
                    20:12:3a:4f:2b:01:f0:ef:61:24:22:c4:92:ac:f1:
                    b5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:81:DC:32:D5:3E:DD:0F:28:56:8A:67:41:CD:6E:50:B8:18:4B:7F
            X509v3 Authority Key Identifier:
                keyid:46:6B:B2:56:CC:5A:7F:7C:0E:20:6E:5D:0F:C9:4B:89:4B:48:81:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/466BB256CC5A7F7C0E206E5D0FC94B894B488172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/466BB256CC5A7F7C0E206E5D0FC94B894B488172.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/3137302e38322e3235352e302f32342d3234203d3e20323636343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:c8:1c:ba:50:cf:af:47:58:a7:cf:22:a0:4d:30:83:3e:73:
         36:5f:8b:c2:6c:d2:5b:f2:49:58:ed:fd:52:ac:c5:6f:ee:7f:
         5a:ac:81:49:30:99:09:d5:35:a5:7a:a0:57:a9:4f:2c:a6:76:
         d8:9c:2d:c8:90:43:6c:24:07:50:e4:ee:1f:80:6f:90:bc:7e:
         76:8a:4e:12:7d:a4:66:c2:ea:2c:a9:57:bc:aa:b9:ad:f0:94:
         5d:99:27:97:66:3b:17:e8:5f:00:aa:ef:ae:5e:8f:fc:7d:00:
         67:92:ef:69:9d:f5:6e:92:f8:d1:8a:35:e7:12:be:cf:93:af:
         9e:ca:39:f3:ce:79:81:6c:33:9e:a9:2a:01:20:c0:7b:72:6f:
         05:cb:68:a5:57:3d:3e:d5:09:64:8d:bd:75:41:ca:98:1c:bd:
         fa:7c:ce:f0:07:8c:41:bf:07:d1:fb:d4:10:99:d4:5b:a9:72:
         0c:f5:75:82:79:c3:f9:6e:76:16:68:15:08:f4:0b:d1:a5:aa:
         c6:7e:a3:ec:f3:ed:8c:7c:34:0b:e0:48:e2:f6:14:77:5a:95:
         6b:f4:8b:b3:0a:ba:40:37:d8:eb:1c:88:9a:79:bf:0e:d6:9a:
         02:6a:b7:cf:26:60:bc:6b:d0:1d:49:81:35:5e:77:d1:01:4a:
         30:cf:34:fc
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPKWNc+aZP0owbpikSXdie29qJMcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDY2QkIyNTZDQzVBN0Y3QzBFMjA2RTVEMEZDOTRCODk0
QjQ4ODE3MjAeFw0yNDA2MTUxNzU3MTRaFw0yNTA2MTQxODAyMTRaMDMxMTAvBgNV
BAMTKDIyODFEQzMyRDUzRUREMEYyODU2OEE2NzQxQ0Q2RTUwQjgxODRCN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc4nP7FPDvhGYaI1ibmupSwcvk
lnClLau8ISnZ+TNr2hvWHQy6XW+fIiikhNC38JkTDYqVbiPf8hr5tvWaC0xfjE7i
6WltKsXdKDajQqsikzFYKDUAIpHlHfknt8AbEnEDtBxmIWKWfLPLPOd3RZvNfWaC
MitUtvap/VgcERw0B/aVm4AD1IVwBFl2pLVFAxGzlRx0uKOI3bqThsqfSTaCT/1F
RXeuW9o7BdrB421pPGICv/FPF4oZxN5MMHsCNAyTpuaEmKQsMLD/pGEmpXUZEfxn
X8oIFXNOTakZfEvy8mE06CwHXj4jwl28xw2mGCASOk8rAfDvYSQixJKs8bXDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUIoHcMtU+3Q8oVopnQc1uULgYS38wHwYDVR0j
BBgwFoAURmuyVsxaf3wOIG5dD8lLiUtIgXIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEppUHBjZDRZR1FmRHluaHNQNVN1WDE3UkhVRFZwVGRyZEs2ZmZFckZo
VmUvMC80NjZCQjI1NkNDNUE3RjdDMEUyMDZFNUQwRkM5NEI4OTRCNDg4MTcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ2NkJCMjU2Q0M1QTdGN0Mw
RTIwNkU1RDBGQzk0Qjg5NEI0ODgxNzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRKaVBwY2Q0WUdRZkR5bmhzUDVTdVgxN1JIVURWcFRkcmRLNmZmRXJGaFZlLzAv
MzEzNzMwMmUzODMyMmUzMjM1MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzNDM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACqUv8wDQYJKoZIhvcNAQELBQADggEBAF/IHLpQ
z69HWKfPIqBNMIM+czZfi8Js0lvySVjt/VKsxW/uf1qsgUkwmQnVNaV6oFepTyym
dticLciQQ2wkB1Dk7h+Ab5C8fnaKThJ9pGbC6iypV7yqua3wlF2ZJ5dmOxfoXwCq
765ej/x9AGeS72md9W6S+NGKNecSvs+Tr57KOfPOeYFsM56pKgEgwHtybwXLaKVX
PT7VCWSNvXVBypgcvfp8zvAHjEG/B9H71BCZ1Fupcgz1dYJ5w/ludhZoFQj0C9Gl
qsZ+o+zz7Yx8NAvgSOL2FHdalWv0i7MKukA32OsciJp5vw7WmgJqt88mYLxr0B1J
gTVed9EBSjDPNPw=
-----END CERTIFICATE-----
Generated at Fri Sep 27 09:15:42 2024 by rpki-client on console-fra.rpki-client.org