Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137322e302f32322d3232203d3e20323632343835.roa
File:                     3137302e3233382e3137322e302f32322d3232203d3e20323632343835.roa (raw, json)
Hash identifier:          KR/9ApspM02dp9fQm4tyRIdGYazTn1kkFxRmiWpum7k=
Subject key identifier:   06:AA:5B:65:CF:07:61:78:2E:83:D5:DF:D8:3B:AF:D1:2A:E0:D4:D0
Certificate issuer:       /CN=4774D086E10F29F42B699F993DE4061E0FDF8862
Certificate serial:       2C4D05991AA4AC7D4C4D9A135710CD4C12808627
Authority key identifier: 47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137322e302f32322d3232203d3e20323632343835.roa
Signing time:             Sat 27 Jul 2024 21:13:24 +0000
ROA not before:           Sat 27 Jul 2024 21:08:24 +0000
ROA not after:            Sat 26 Jul 2025 21:13:24 +0000
asID:                     262485
IP address blocks:        170.238.172.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl
                          rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:4d:05:99:1a:a4:ac:7d:4c:4d:9a:13:57:10:cd:4c:12:80:86:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4774D086E10F29F42B699F993DE4061E0FDF8862
        Validity
            Not Before: Jul 27 21:08:24 2024 GMT
            Not After : Jul 26 21:13:24 2025 GMT
        Subject: CN=06AA5B65CF0761782E83D5DFD83BAFD12AE0D4D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2c:f3:88:a7:44:68:c8:82:54:db:80:e2:dd:
                    9f:72:e9:7b:f6:ac:65:ce:0e:68:1d:22:c6:d4:87:
                    92:b3:a4:20:1d:5a:13:5d:82:c5:1b:9d:a5:c1:b3:
                    8f:50:13:84:30:f3:c9:16:a0:4d:0b:a9:e8:d1:7d:
                    34:a3:c5:25:7e:13:5d:61:e6:ee:ec:14:67:4b:82:
                    a1:d2:3a:28:58:02:51:0d:a2:16:a4:c8:83:73:47:
                    21:10:f8:29:26:a1:b7:1c:76:62:1c:00:59:e5:e0:
                    1b:97:f9:d6:ed:8e:03:a1:b8:0f:0d:e0:29:fd:bc:
                    9a:4f:88:1a:ee:a3:f9:62:00:83:92:91:84:4b:e8:
                    ed:85:0b:9e:51:83:c0:1a:06:6c:d9:72:9f:b3:f1:
                    e6:d0:83:71:05:a6:38:45:57:f5:70:7b:a2:35:45:
                    91:45:e0:3e:be:26:32:06:7f:cf:6d:22:df:2a:8b:
                    00:f8:07:86:14:25:0d:f7:73:41:53:34:78:58:46:
                    11:13:bb:79:8f:91:b4:0c:5f:52:72:c1:b4:42:5d:
                    67:a8:db:50:27:f4:d9:0f:0e:d5:00:48:73:68:ec:
                    cc:c8:86:f9:db:e8:63:9f:22:cf:a5:e9:ff:56:9d:
                    ec:07:f2:3d:fa:26:a8:42:06:fc:9b:37:be:fc:2c:
                    63:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AA:5B:65:CF:07:61:78:2E:83:D5:DF:D8:3B:AF:D1:2A:E0:D4:D0
            X509v3 Authority Key Identifier:
                keyid:47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137322e302f32322d3232203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:f2:ed:61:72:7b:87:6a:b7:24:96:ce:b0:c3:cb:79:87:d8:
         43:a2:b2:3f:44:09:17:9c:08:73:f9:ef:88:a2:52:b2:28:09:
         ba:fa:51:a7:fa:04:49:30:51:e3:9c:f3:89:f5:1b:8f:33:83:
         fd:11:f1:d2:7e:77:dd:db:db:f3:d9:44:90:36:8d:a9:9b:20:
         35:af:f4:e5:af:f3:f2:0f:83:7a:bd:0f:b0:bb:83:33:dc:59:
         e0:4f:a0:2c:6f:1c:84:93:06:80:b5:86:44:f3:d9:4c:e2:9b:
         28:8f:94:d0:e9:b1:3b:62:f4:3b:87:31:85:a1:91:e4:cd:9d:
         83:87:7d:52:bd:ba:fc:e5:6f:ce:3f:04:6e:d4:f3:7e:03:bf:
         da:0a:d2:93:f3:91:0e:82:55:e8:a1:a0:9b:71:27:ee:1a:1c:
         72:37:2b:0a:a0:94:1a:b8:2b:95:09:90:9f:b1:88:92:01:09:
         ea:ac:59:d4:fe:15:ea:6c:02:0d:3f:c7:88:15:9a:13:63:8b:
         55:1e:bf:99:23:a8:2c:68:6e:8f:c1:87:3d:b9:5f:b3:54:7d:
         bc:07:6d:ff:85:75:6c:ec:be:39:23:c4:08:38:fd:bc:ce:08:
         e7:d6:6d:e5:a3:26:44:1f:8a:5a:bd:bd:48:a4:e0:d5:53:85:
         05:b7:61:8c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIULE0FmRqkrH1MTZoTVxDNTBKAhicwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc3NEQwODZFMTBGMjlGNDJCNjk5Rjk5M0RFNDA2MUUw
RkRGODg2MjAeFw0yNDA3MjcyMTA4MjRaFw0yNTA3MjYyMTEzMjRaMDMxMTAvBgNV
BAMTKDA2QUE1QjY1Q0YwNzYxNzgyRTgzRDVERkQ4M0JBRkQxMkFFMEQ0RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbLPOIp0RoyIJU24Di3Z9y6Xv2
rGXODmgdIsbUh5KzpCAdWhNdgsUbnaXBs49QE4Qw88kWoE0LqejRfTSjxSV+E11h
5u7sFGdLgqHSOihYAlENohakyINzRyEQ+CkmobccdmIcAFnl4BuX+dbtjgOhuA8N
4Cn9vJpPiBruo/liAIOSkYRL6O2FC55Rg8AaBmzZcp+z8ebQg3EFpjhFV/Vwe6I1
RZFF4D6+JjIGf89tIt8qiwD4B4YUJQ33c0FTNHhYRhETu3mPkbQMX1JywbRCXWeo
21An9NkPDtUASHNo7MzIhvnb6GOfIs+l6f9WnewH8j36JqhCBvybN778LGM5AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUBqpbZc8HYXgug9Xf2Duv0Srg1NAwHwYDVR0j
BBgwFoAUR3TQhuEPKfQraZ+ZPeQGHg/fiGIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWV3eG1vMkROWEc2Unhnd1JnUkFqQ05CbmhxR1RONkU0OVVKWG9kQTJy
NTgvMC80Nzc0RDA4NkUxMEYyOUY0MkI2OTlGOTkzREU0MDYxRTBGREY4ODYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3NzREMDg2RTEwRjI5RjQy
QjY5OUY5OTNERTQwNjFFMEZERjg4NjIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVld3htbzJETlhHNlJ4Z3dSZ1JBakNOQm5ocUdUTjZFNDlVSlhvZEEycjU4LzAv
MzEzNzMwMmUzMjMzMzgyZTMxMzczMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMjM0MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqrurDANBgkqhkiG9w0BAQsFAAOCAQEALPLt
YXJ7h2q3JJbOsMPLeYfYQ6KyP0QJF5wIc/nviKJSsigJuvpRp/oESTBR45zzifUb
jzOD/RHx0n533dvb89lEkDaNqZsgNa/05a/z8g+Der0PsLuDM9xZ4E+gLG8chJMG
gLWGRPPZTOKbKI+U0OmxO2L0O4cxhaGR5M2dg4d9Ur26/OVvzj8EbtTzfgO/2grS
k/ORDoJV6KGgm3En7hoccjcrCqCUGrgrlQmQn7GIkgEJ6qxZ1P4V6mwCDT/HiBWa
E2OLVR6/mSOoLGhuj8GHPblfs1R9vAdt/4V1bOy+OSPECDj9vM4I59Zt5aMmRB+K
Wr29SKTg1VOFBbdhjA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:08 2024 by rpki-client on console-ams.rpki-client.org