Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/3230312e3138322e3139322e302f32322d3234203d3e20323637353330.roa
File:                     3230312e3138322e3139322e302f32322d3234203d3e20323637353330.roa (raw, json)
Hash identifier:          bHUnJngHmpVJJjxom6qG1W7Vtx6PSlvI3k4jpl0rsxU=
Subject key identifier:   E0:10:B9:BD:4A:49:3D:F4:D6:DA:22:E7:D3:94:D5:27:9D:78:AE:3F
Certificate issuer:       /CN=EC4AB1666D75B3BEABA78172ADB3839FE597A438
Certificate serial:       6FEF4D828E8303FB437C50DB660CEB7710B74A64
Authority key identifier: EC:4A:B1:66:6D:75:B3:BE:AB:A7:81:72:AD:B3:83:9F:E5:97:A4:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC4AB1666D75B3BEABA78172ADB3839FE597A438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/3230312e3138322e3139322e302f32322d3234203d3e20323637353330.roa
Signing time:             Wed 05 Jun 2024 19:13:25 +0000
ROA not before:           Wed 05 Jun 2024 19:08:25 +0000
ROA not after:            Wed 04 Jun 2025 19:13:25 +0000
asID:                     267530
IP address blocks:        201.182.192.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/EC4AB1666D75B3BEABA78172ADB3839FE597A438.crl
                          rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/EC4AB1666D75B3BEABA78172ADB3839FE597A438.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC4AB1666D75B3BEABA78172ADB3839FE597A438.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 22:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ef:4d:82:8e:83:03:fb:43:7c:50:db:66:0c:eb:77:10:b7:4a:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC4AB1666D75B3BEABA78172ADB3839FE597A438
        Validity
            Not Before: Jun  5 19:08:25 2024 GMT
            Not After : Jun  4 19:13:25 2025 GMT
        Subject: CN=E010B9BD4A493DF4D6DA22E7D394D5279D78AE3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0c:fc:01:0c:1c:ce:58:9e:3b:15:5e:1d:32:
                    2a:98:86:d0:45:c4:99:df:cb:a9:5e:83:96:ed:2a:
                    86:c7:03:69:f8:39:65:b0:d9:ea:65:84:9f:89:78:
                    bd:85:69:6c:a9:ab:08:df:18:29:e8:4b:18:8b:77:
                    ca:6e:56:0d:af:2b:f4:4e:72:a5:a0:47:bc:47:cc:
                    18:c5:c2:a0:c5:e5:25:45:aa:f6:79:a9:f8:40:1b:
                    a3:2f:3a:6c:8f:55:68:6b:05:50:27:5b:da:5a:61:
                    fe:05:d2:aa:17:7c:22:2b:70:cc:70:e5:97:df:c1:
                    9b:5c:4e:0c:b4:c6:33:fd:6e:c2:56:e6:98:95:9e:
                    33:9b:c8:87:4b:08:bf:4b:e2:f4:08:79:21:78:f0:
                    87:90:25:19:33:82:09:51:a1:00:ff:76:56:81:bb:
                    b4:a3:f9:53:1d:ac:50:80:4d:b0:10:d8:39:10:7c:
                    73:a9:82:1d:28:19:ab:a5:6c:6a:13:a6:19:fd:67:
                    c3:27:ad:13:06:55:8c:be:90:ec:d4:3b:7d:68:e5:
                    bb:3f:5e:f7:1e:21:5c:d3:7b:6b:86:a3:e5:50:b8:
                    b6:e6:06:c7:05:49:c4:e1:c9:7a:b2:57:35:95:ad:
                    89:69:0a:0b:f3:d5:d5:fa:c8:52:75:ad:75:99:3d:
                    e4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:10:B9:BD:4A:49:3D:F4:D6:DA:22:E7:D3:94:D5:27:9D:78:AE:3F
            X509v3 Authority Key Identifier:
                keyid:EC:4A:B1:66:6D:75:B3:BE:AB:A7:81:72:AD:B3:83:9F:E5:97:A4:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/EC4AB1666D75B3BEABA78172ADB3839FE597A438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC4AB1666D75B3BEABA78172ADB3839FE597A438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/3230312e3138322e3139322e302f32322d3234203d3e20323637353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:10:63:79:3e:01:30:0a:64:28:dc:32:4b:54:0d:c9:e0:ce:
         b7:0f:96:ef:c8:e3:5e:84:7d:6a:37:c6:4b:10:bd:9a:73:54:
         4f:d6:ef:9b:55:58:0f:89:28:e2:76:df:13:a0:18:55:42:70:
         76:57:51:d5:fb:5f:34:18:93:2a:fb:83:ca:e7:19:94:7a:61:
         0f:4a:62:a1:c2:b5:bb:89:ad:8b:e1:eb:09:02:ef:af:2a:e8:
         ff:b8:49:72:97:29:0d:90:ad:4d:e0:c9:88:79:84:e9:81:66:
         5e:96:75:ac:ac:21:e5:7d:af:21:1d:d5:87:6a:86:74:2a:ad:
         75:1c:9b:c4:5a:a7:6f:b5:79:cb:b9:30:ee:33:b0:bc:09:4d:
         3e:86:db:67:e9:42:41:e8:a6:8d:c3:95:b9:c8:de:c7:59:ba:
         97:88:6b:07:58:23:4f:1d:72:0c:c4:4f:e4:c3:9e:35:30:5f:
         42:14:4e:49:1f:ef:7b:c6:51:a4:cc:4c:2b:a8:76:60:b1:f4:
         5c:e3:ea:71:6a:a4:f4:94:49:42:db:bf:fd:4c:04:f8:1b:6f:
         f2:65:af:42:f0:ca:1e:44:b8:f4:d9:cb:0e:1e:82:22:a5:04:
         eb:20:51:3e:68:f7:61:5e:68:10:aa:bc:19:25:0c:fb:a9:f6:
         de:04:7d:d3
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUb+9Ngo6DA/tDfFDbZgzrdxC3SmQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM0QUIxNjY2RDc1QjNCRUFCQTc4MTcyQURCMzgzOUZF
NTk3QTQzODAeFw0yNDA2MDUxOTA4MjVaFw0yNTA2MDQxOTEzMjVaMDMxMTAvBgNV
BAMTKEUwMTBCOUJENEE0OTNERjRENkRBMjJFN0QzOTRENTI3OUQ3OEFFM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGDPwBDBzOWJ47FV4dMiqYhtBF
xJnfy6leg5btKobHA2n4OWWw2eplhJ+JeL2FaWypqwjfGCnoSxiLd8puVg2vK/RO
cqWgR7xHzBjFwqDF5SVFqvZ5qfhAG6MvOmyPVWhrBVAnW9paYf4F0qoXfCIrcMxw
5ZffwZtcTgy0xjP9bsJW5piVnjObyIdLCL9L4vQIeSF48IeQJRkzgglRoQD/dlaB
u7Sj+VMdrFCATbAQ2DkQfHOpgh0oGaulbGoTphn9Z8MnrRMGVYy+kOzUO31o5bs/
XvceIVzTe2uGo+VQuLbmBscFScThyXqyVzWVrYlpCgvz1dX6yFJ1rXWZPeSJAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU4BC5vUpJPfTW2iLn05TVJ514rj8wHwYDVR0j
BBgwFoAU7EqxZm11s76rp4FyrbODn+WXpDgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNThCQ0d2czZVQjZvNWoyaTE3MTJQNzhtVDIyWUxFUFZnakVuNUU0Mndr
ZFAvMC9FQzRBQjE2NjZENzVCM0JFQUJBNzgxNzJBREIzODM5RkU1OTdBNDM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VDNEFCMTY2NkQ3NUIzQkVB
QkE3ODE3MkFEQjM4MzlGRTU5N0E0MzguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU4QkNHdnM2VUI2bzVqMmkxNzEyUDc4bVQyMllMRVBWZ2pFbjVFNDJ3a2RQLzAv
MzIzMDMxMmUzMTM4MzIyZTMxMzkzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNzM1MzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAsm2wDANBgkqhkiG9w0BAQsFAAOCAQEAbRBj
eT4BMApkKNwyS1QNyeDOtw+W78jjXoR9ajfGSxC9mnNUT9bvm1VYD4ko4nbfE6AY
VUJwdldR1ftfNBiTKvuDyucZlHphD0piocK1u4mti+HrCQLvryro/7hJcpcpDZCt
TeDJiHmE6YFmXpZ1rKwh5X2vIR3Vh2qGdCqtdRybxFqnb7V5y7kw7jOwvAlNPobb
Z+lCQeimjcOVucjex1m6l4hrB1gjTx1yDMRP5MOeNTBfQhROSR/ve8ZRpMxMK6h2
YLH0XOPqcWqk9JRJQtu//UwE+Btv8mWvQvDKHkS49NnLDh6CIqUE6yBRPmj3YV5o
EKq8GSUM+6n23gR90w==
-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:33 2024 by rpki-client on console-fra.rpki-client.org