Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/1/3137302e3234362e3132382e302f32322d3234203d3e203238363432.roa
File:                     3137302e3234362e3132382e302f32322d3234203d3e203238363432.roa (raw, json)
Hash identifier:          dGjMnkFgik54j7f0V1vgTZQxOPMBsPXvOD8K7VkFwPM=
Subject key identifier:   04:D3:5A:11:D9:E2:5B:59:F9:83:D7:8E:80:67:86:B8:C1:E7:AD:43
Certificate issuer:       /CN=66335F04863CA1159D16D18E655231764F6FB821
Certificate serial:       5D3DFE9A01F58499BB39579FCD22E4A0310A3C61
Authority key identifier: 66:33:5F:04:86:3C:A1:15:9D:16:D1:8E:65:52:31:76:4F:6F:B8:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66335F04863CA1159D16D18E655231764F6FB821.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/1/3137302e3234362e3132382e302f32322d3234203d3e203238363432.roa
Signing time:             Fri 05 Apr 2024 00:34:01 +0000
ROA not before:           Fri 05 Apr 2024 00:29:01 +0000
ROA not after:            Fri 04 Apr 2025 00:34:01 +0000
asID:                     28642
IP address blocks:        170.246.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/1/66335F04863CA1159D16D18E655231764F6FB821.crl
                          rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/1/66335F04863CA1159D16D18E655231764F6FB821.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66335F04863CA1159D16D18E655231764F6FB821.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:3d:fe:9a:01:f5:84:99:bb:39:57:9f:cd:22:e4:a0:31:0a:3c:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66335F04863CA1159D16D18E655231764F6FB821
        Validity
            Not Before: Apr  5 00:29:01 2024 GMT
            Not After : Apr  4 00:34:01 2025 GMT
        Subject: CN=04D35A11D9E25B59F983D78E806786B8C1E7AD43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:93:ca:28:5d:9d:cf:89:ac:92:2e:52:8c:61:
                    ea:c8:ff:ae:dd:41:cd:ce:39:ed:1c:d8:0e:a4:3a:
                    15:dc:95:88:3e:99:b0:bb:87:5f:ef:02:dd:eb:f5:
                    f4:f0:f2:dd:9e:b3:b1:89:4e:20:48:91:f3:8c:68:
                    49:0d:fe:3c:69:b6:33:3d:d6:bb:44:a4:db:82:1f:
                    35:53:10:7c:91:f3:ec:37:c0:70:c3:b9:f8:57:79:
                    ab:45:94:80:75:d6:a7:fd:63:ab:7b:3e:48:3f:20:
                    e4:b7:6b:c0:75:56:45:fb:f7:b4:17:85:31:47:51:
                    5a:c1:23:90:dd:ba:92:c1:48:51:56:fe:37:f5:9c:
                    f4:25:45:24:e4:9b:fb:09:58:0e:fe:ec:30:c4:6e:
                    f6:5b:97:03:a6:2d:3b:79:94:e0:37:f5:8e:52:43:
                    f2:c6:3f:13:c8:42:4b:8b:f1:a5:fc:be:25:81:c8:
                    a1:45:4f:eb:cc:9f:28:06:76:5c:bf:99:08:fb:1e:
                    10:1b:cf:4a:cc:44:fc:fb:07:3b:5d:0b:6b:9d:94:
                    a5:8f:a8:e9:25:25:ea:b2:59:11:8c:c0:70:c2:e4:
                    b8:5a:b4:d5:2b:56:66:d4:24:99:f6:aa:cd:58:87:
                    b0:80:a1:63:45:87:ed:44:f4:e2:dd:d5:6c:d0:7a:
                    43:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D3:5A:11:D9:E2:5B:59:F9:83:D7:8E:80:67:86:B8:C1:E7:AD:43
            X509v3 Authority Key Identifier:
                keyid:66:33:5F:04:86:3C:A1:15:9D:16:D1:8E:65:52:31:76:4F:6F:B8:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/1/66335F04863CA1159D16D18E655231764F6FB821.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66335F04863CA1159D16D18E655231764F6FB821.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/1/3137302e3234362e3132382e302f32322d3234203d3e203238363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:21:99:e6:d2:76:52:f9:ce:b0:53:aa:be:0b:20:10:e7:b3:
         25:5b:46:11:cd:74:91:e4:4e:04:b3:32:a5:bf:a8:e5:56:b3:
         de:67:01:e5:4e:dd:dd:d9:c9:45:4c:33:8a:df:a5:81:14:59:
         5a:0b:78:25:bc:c6:c9:bf:42:8a:9c:dd:42:1a:6a:9f:c2:bf:
         8c:76:46:1d:74:0c:6a:d5:f9:43:fa:e3:de:89:07:5e:1c:e3:
         cc:f2:59:be:3a:10:1a:b8:94:f0:06:c1:a7:03:96:6f:45:50:
         0e:a4:69:72:87:af:f7:1e:93:28:4e:f8:23:b2:3e:9e:2f:51:
         6e:88:92:13:00:4b:08:0f:67:67:19:c0:9c:46:a2:94:15:e8:
         04:f5:49:bf:0f:04:85:dc:9d:06:9c:9b:c6:90:2d:13:19:04:
         ea:0e:b6:34:bd:58:f8:9c:ab:97:fa:8c:7d:f5:4d:00:eb:81:
         ac:c0:7e:41:00:1f:8a:e6:20:49:68:0a:e1:60:de:f5:1e:5e:
         3c:e3:4e:71:3e:91:2e:04:0e:48:df:bb:ed:00:d6:2b:1f:9d:
         44:cd:45:24:c7:e7:d9:96:79:6c:a9:23:48:ff:a9:a1:ea:88:
         fc:72:17:12:87:25:ae:24:5f:5c:33:ca:a0:d8:fd:8a:28:51:
         3b:dc:fc:5c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXT3+mgH1hJm7OVefzSLkoDEKPGEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYzMzVGMDQ4NjNDQTExNTlEMTZEMThFNjU1MjMxNzY0
RjZGQjgyMTAeFw0yNDA0MDUwMDI5MDFaFw0yNTA0MDQwMDM0MDFaMDMxMTAvBgNV
BAMTKDA0RDM1QTExRDlFMjVCNTlGOTgzRDc4RTgwNjc4NkI4QzFFN0FENDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJk8ooXZ3PiaySLlKMYerI/67d
Qc3OOe0c2A6kOhXclYg+mbC7h1/vAt3r9fTw8t2es7GJTiBIkfOMaEkN/jxptjM9
1rtEpNuCHzVTEHyR8+w3wHDDufhXeatFlIB11qf9Y6t7Pkg/IOS3a8B1VkX797QX
hTFHUVrBI5DdupLBSFFW/jf1nPQlRSTkm/sJWA7+7DDEbvZblwOmLTt5lOA39Y5S
Q/LGPxPIQkuL8aX8viWByKFFT+vMnygGdly/mQj7HhAbz0rMRPz7BztdC2udlKWP
qOklJeqyWRGMwHDC5LhatNUrVmbUJJn2qs1Yh7CAoWNFh+1E9OLd1WzQekPhAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBNNaEdniW1n5g9eOgGeGuMHnrUMwHwYDVR0j
BBgwFoAUZjNfBIY8oRWdFtGOZVIxdk9vuCEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVhRdkdOMlhabVd0b0d4a24zc1JzblhYQ1M2U3haSEZRcngzaEdhNjlF
QWQvMS82NjMzNUYwNDg2M0NBMTE1OUQxNkQxOEU2NTUyMzE3NjRGNkZCODIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY2MzM1RjA0ODYzQ0ExMTU5
RDE2RDE4RTY1NTIzMTc2NEY2RkI4MjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVYUXZHTjJYWm1XdG9HeGtuM3NSc25YWENTNlN4WkhGUXJ4M2hHYTY5RUFkLzEv
MzEzNzMwMmUzMjM0MzYyZTMxMzIzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzgzNjM0MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq9oAwDQYJKoZIhvcNAQELBQADggEBAEghmebS
dlL5zrBTqr4LIBDnsyVbRhHNdJHkTgSzMqW/qOVWs95nAeVO3d3ZyUVMM4rfpYEU
WVoLeCW8xsm/Qoqc3UIaap/Cv4x2Rh10DGrV+UP6496JB14c48zyWb46EBq4lPAG
wacDlm9FUA6kaXKHr/cekyhO+COyPp4vUW6IkhMASwgPZ2cZwJxGopQV6AT1Sb8P
BIXcnQacm8aQLRMZBOoOtjS9WPicq5f6jH31TQDrgazAfkEAH4rmIEloCuFg3vUe
XjzjTnE+kS4EDkjfu+0A1isfnUTNRSTH59mWeWypI0j/qaHqiPxyFxKHJa4kX1wz
yqDY/YooUTvc/Fw=
-----END CERTIFICATE-----
Generated at Tue Nov 26 07:51:03 2024 by rpki-client on console-fra.rpki-client.org