Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/3137302e38332e32302e302f32322d3234203d3e20323632353233.roa
File:                     3137302e38332e32302e302f32322d3234203d3e20323632353233.roa (raw, json)
Hash identifier:          7vnKULqMluihSM8URHeF0+CSZV7RnaX7UVQsr+TGGCI=
Subject key identifier:   57:73:1E:42:A1:31:5E:B5:CC:EA:2F:39:95:79:56:1B:C6:D0:30:15
Certificate issuer:       /CN=7E29AEC3299ADBB9DF46C4665623FD44CDD5C219
Certificate serial:       0DA9CC9914132C6DC82271504AAA5B6E9EAF66C5
Authority key identifier: 7E:29:AE:C3:29:9A:DB:B9:DF:46:C4:66:56:23:FD:44:CD:D5:C2:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/3137302e38332e32302e302f32322d3234203d3e20323632353233.roa
Signing time:             Mon 19 Aug 2024 07:16:10 +0000
ROA not before:           Mon 19 Aug 2024 07:11:10 +0000
ROA not after:            Mon 18 Aug 2025 07:16:10 +0000
asID:                     262523
IP address blocks:        170.83.20.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.crl
                          rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a9:cc:99:14:13:2c:6d:c8:22:71:50:4a:aa:5b:6e:9e:af:66:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E29AEC3299ADBB9DF46C4665623FD44CDD5C219
        Validity
            Not Before: Aug 19 07:11:10 2024 GMT
            Not After : Aug 18 07:16:10 2025 GMT
        Subject: CN=57731E42A1315EB5CCEA2F399579561BC6D03015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:aa:2d:6a:23:ac:2d:e9:8e:c8:0b:6d:1e:e2:
                    f5:ee:8f:9c:cd:34:c6:c3:be:4e:28:2c:ca:4c:e1:
                    ed:28:3e:2e:8b:e4:2e:7f:ac:14:ce:b8:61:57:eb:
                    92:20:84:a4:ae:16:19:24:95:59:84:ac:d2:5b:96:
                    d5:97:c6:44:f0:7b:73:67:26:3c:53:dc:f4:99:92:
                    82:14:9a:1d:90:ab:50:5e:12:94:70:32:f3:35:84:
                    c6:69:b5:fa:6c:8f:d3:21:ab:56:6c:b1:a6:bb:4d:
                    e8:0f:92:e8:05:87:7c:74:fc:cd:d9:7d:fb:76:0e:
                    91:69:4d:c6:f9:be:58:7f:43:ea:2d:6d:d2:43:49:
                    48:04:1d:68:29:82:c3:60:d8:cc:a8:77:85:59:8d:
                    ac:3e:35:a4:4e:b2:25:ed:f3:70:3e:2b:ad:3e:64:
                    b1:d0:34:16:db:b7:70:f3:52:b1:85:27:70:f7:cb:
                    b5:eb:f7:0f:2e:38:76:cc:e9:9a:16:17:a8:3e:48:
                    1b:cf:3d:b8:45:a1:e3:77:36:a5:45:c5:98:64:d2:
                    27:2c:42:2a:17:18:5a:9b:69:44:e4:45:63:8c:16:
                    92:fb:a6:c0:84:64:f2:08:d6:77:c2:cc:5a:86:c2:
                    93:9e:ad:db:61:70:53:3b:74:67:0a:08:c6:ba:20:
                    c5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:73:1E:42:A1:31:5E:B5:CC:EA:2F:39:95:79:56:1B:C6:D0:30:15
            X509v3 Authority Key Identifier:
                keyid:7E:29:AE:C3:29:9A:DB:B9:DF:46:C4:66:56:23:FD:44:CD:D5:C2:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E29AEC3299ADBB9DF46C4665623FD44CDD5C219.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CLaKGxy8JvCskfnx3a3SLkvkktCuQeEpVHxW9etuxmi/0/3137302e38332e32302e302f32322d3234203d3e20323632353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:a7:d9:9a:7d:79:b4:60:49:50:5f:5e:9f:d2:32:73:34:3d:
         da:b2:2c:08:4b:64:09:32:c3:c8:0c:78:5d:54:21:c4:d8:86:
         a2:f0:82:c2:a1:f7:92:da:4b:3a:ab:b2:30:be:90:ea:c5:2c:
         fa:4d:21:4f:f3:73:e1:b2:22:ab:4f:7e:98:ea:44:58:55:e1:
         03:65:63:16:97:a9:7d:c0:b0:dd:1f:2b:1f:c7:1c:02:ff:2e:
         a0:06:e8:aa:2b:c7:8f:6f:ea:59:56:fd:c0:91:e1:b7:d8:de:
         b4:00:72:8c:86:d7:82:df:87:e2:90:bd:1c:20:e6:d2:93:d8:
         f0:dc:a7:4e:07:f0:01:5c:58:b5:dc:31:3b:16:a8:98:10:8a:
         4b:b4:48:48:cd:40:b5:c5:a0:0c:d7:9c:16:d5:c2:8c:35:3a:
         3c:fc:99:d6:b7:8a:9e:48:b5:fd:5c:8c:e2:36:52:88:e2:86:
         0d:5f:43:fe:00:20:da:24:07:51:4a:5f:1c:55:1a:c2:3f:6d:
         12:34:db:65:98:8e:f8:f8:0c:ed:d2:67:45:5e:f2:58:ce:5d:
         37:f4:34:65:73:a5:e0:78:b3:7e:28:a5:1d:b9:ec:2d:3b:07:
         bd:8b:bd:36:21:1a:91:fd:a7:53:06:55:eb:6c:ee:98:cd:61:
         51:df:b7:9f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUDanMmRQTLG3IInFQSqpbbp6vZsUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0UyOUFFQzMyOTlBREJCOURGNDZDNDY2NTYyM0ZENDRD
REQ1QzIxOTAeFw0yNDA4MTkwNzExMTBaFw0yNTA4MTgwNzE2MTBaMDMxMTAvBgNV
BAMTKDU3NzMxRTQyQTEzMTVFQjVDQ0VBMkYzOTk1Nzk1NjFCQzZEMDMwMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYqi1qI6wt6Y7IC20e4vXuj5zN
NMbDvk4oLMpM4e0oPi6L5C5/rBTOuGFX65IghKSuFhkklVmErNJbltWXxkTwe3Nn
JjxT3PSZkoIUmh2Qq1BeEpRwMvM1hMZptfpsj9Mhq1Zssaa7TegPkugFh3x0/M3Z
fft2DpFpTcb5vlh/Q+otbdJDSUgEHWgpgsNg2Myod4VZjaw+NaROsiXt83A+K60+
ZLHQNBbbt3DzUrGFJ3D3y7Xr9w8uOHbM6ZoWF6g+SBvPPbhFoeN3NqVFxZhk0ics
QioXGFqbaUTkRWOMFpL7psCEZPII1nfCzFqGwpOerdthcFM7dGcKCMa6IMX3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUV3MeQqExXrXM6i85lXlWG8bQMBUwHwYDVR0j
BBgwFoAUfimuwyma27nfRsRmViP9RM3VwhkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUNMYUtHeHk4SnZDc2tmbngzYTNTTGt2a2t0Q3VRZUVwVkh4VzlldHV4
bWkvMC83RTI5QUVDMzI5OUFEQkI5REY0NkM0NjY1NjIzRkQ0NENERDVDMjE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdFMjlBRUMzMjk5QURCQjlE
RjQ2QzQ2NjU2MjNGRDQ0Q0RENUMyMTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVDTGFLR3h5OEp2Q3NrZm54M2EzU0xrdmtrdEN1UWVFcFZIeFc5ZXR1eG1pLzAv
MzEzNzMwMmUzODMzMmUzMjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMy
MzUzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqlMUMA0GCSqGSIb3DQEBCwUAA4IBAQBHp9mafXm0
YElQX16f0jJzND3asiwIS2QJMsPIDHhdVCHE2Iai8ILCofeS2ks6q7IwvpDqxSz6
TSFP83PhsiKrT36Y6kRYVeEDZWMWl6l9wLDdHysfxxwC/y6gBuiqK8ePb+pZVv3A
keG32N60AHKMhteC34fikL0cIObSk9jw3KdOB/ABXFi13DE7FqiYEIpLtEhIzUC1
xaAM15wW1cKMNTo8/JnWt4qeSLX9XIziNlKI4oYNX0P+ACDaJAdRSl8cVRrCP20S
NNtlmI74+Azt0mdFXvJYzl039DRlc6XgeLN+KKUduewtOwe9i702IRqR/adTBlXr
bO6YzWFR37ef
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:02 2024 by rpki-client on console-fra.rpki-client.org