Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137322e302f32342d3234203d3e20323632343835.roa
File:                     3137302e3233382e3137322e302f32342d3234203d3e20323632343835.roa (raw, json)
Hash identifier:          mwZBxuZUTGxds/WwQycil+ThvgBxN/KLv+oI4sPtxTA=
Subject key identifier:   5B:5C:9D:C1:56:46:55:91:43:42:14:92:62:F4:32:8E:ED:C7:82:14
Certificate issuer:       /CN=4774D086E10F29F42B699F993DE4061E0FDF8862
Certificate serial:       6FB6F85C325E3AF8652BC12CD11569B36A138514
Authority key identifier: 47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137322e302f32342d3234203d3e20323632343835.roa
Signing time:             Sat 27 Jul 2024 21:13:23 +0000
ROA not before:           Sat 27 Jul 2024 21:08:23 +0000
ROA not after:            Sat 26 Jul 2025 21:13:23 +0000
asID:                     262485
IP address blocks:        170.238.172.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl
                          rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b6:f8:5c:32:5e:3a:f8:65:2b:c1:2c:d1:15:69:b3:6a:13:85:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4774D086E10F29F42B699F993DE4061E0FDF8862
        Validity
            Not Before: Jul 27 21:08:23 2024 GMT
            Not After : Jul 26 21:13:23 2025 GMT
        Subject: CN=5B5C9DC1564655914342149262F4328EEDC78214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:da:ca:b9:2d:3c:da:e1:1f:c7:ee:94:78:cd:
                    a1:c7:7e:3f:bd:d6:f5:34:54:12:38:10:63:a3:ca:
                    50:0a:a0:9e:c8:7b:47:76:29:e0:06:3e:b1:ae:b3:
                    50:2d:d4:29:72:9e:4e:3c:1f:df:dc:60:2d:dd:65:
                    0f:f7:e5:91:5b:d0:a5:12:31:c0:c9:d7:b3:d0:aa:
                    b5:73:2a:d0:c7:96:46:4d:a0:88:16:05:44:08:0d:
                    0c:30:e5:94:e9:33:94:13:4b:74:1c:f4:5f:15:fd:
                    e3:5d:b3:2d:14:ba:34:54:b5:00:bf:6f:26:3a:58:
                    d3:93:e4:96:77:1d:b1:5f:e1:d2:be:a0:0d:5c:78:
                    1d:82:00:21:a2:18:cc:d4:02:be:3d:40:c3:ee:18:
                    1e:11:ef:89:4b:35:15:57:6e:23:43:27:7d:53:cd:
                    e9:07:36:07:4d:e7:07:e3:af:91:52:28:3c:4c:28:
                    26:26:3a:ad:22:dc:48:02:54:32:a4:7a:29:4b:35:
                    0e:58:f1:b6:97:72:88:41:11:f9:f8:8f:2c:de:4e:
                    58:28:cd:d7:72:30:4f:e2:65:f5:ca:f1:cf:e1:0a:
                    b1:74:58:9d:c2:be:cc:a3:7f:61:60:a1:af:76:59:
                    30:2a:95:b1:23:14:18:96:5a:a8:1c:95:46:2a:e3:
                    78:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5C:9D:C1:56:46:55:91:43:42:14:92:62:F4:32:8E:ED:C7:82:14
            X509v3 Authority Key Identifier:
                keyid:47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137322e302f32342d3234203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:29:00:06:e4:b1:e3:b2:2a:54:fc:32:a5:2a:cb:d5:f2:29:
         49:33:34:ff:7c:0b:92:a5:f8:8a:c5:19:8e:27:8b:09:70:71:
         26:d3:f0:53:8c:26:2b:8d:78:cf:8f:b6:a3:8e:90:ca:32:a0:
         b6:ff:26:8b:5f:df:af:71:4f:b8:da:1b:97:a9:ae:a6:a0:23:
         0e:62:59:b8:37:e8:9f:ee:cd:e3:6a:54:d2:01:23:54:3a:0e:
         b1:a2:d0:6b:cd:4d:d2:cc:32:a8:97:e7:91:5b:99:59:6d:ab:
         a4:3b:19:33:4d:2b:98:e7:1a:ad:40:ad:be:97:56:4f:3c:5b:
         fe:5f:82:b7:84:d3:c7:86:ff:19:07:e9:db:0e:2b:f4:60:a7:
         58:3e:e3:8a:b8:89:b5:08:0d:1a:77:24:1e:e8:a3:ff:f8:60:
         ad:f6:cb:b5:73:af:db:da:34:c9:3f:48:d0:f8:8d:70:14:b6:
         b7:e4:9b:07:33:a7:f1:5f:a8:57:97:2d:7e:11:2a:1e:c3:9b:
         42:3a:ad:93:e2:e2:d8:f0:39:73:e8:52:25:49:ed:01:8b:2c:
         05:fb:84:55:6b:5c:4d:c3:05:a5:24:b9:4f:aa:2d:66:b0:58:
         4b:3e:ed:46:24:86:2a:e1:b5:a3:f5:20:bf:af:16:c7:0f:e1:
         1e:ba:cf:6e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUb7b4XDJeOvhlK8Es0RVps2oThRQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc3NEQwODZFMTBGMjlGNDJCNjk5Rjk5M0RFNDA2MUUw
RkRGODg2MjAeFw0yNDA3MjcyMTA4MjNaFw0yNTA3MjYyMTEzMjNaMDMxMTAvBgNV
BAMTKDVCNUM5REMxNTY0NjU1OTE0MzQyMTQ5MjYyRjQzMjhFRURDNzgyMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI2sq5LTza4R/H7pR4zaHHfj+9
1vU0VBI4EGOjylAKoJ7Ie0d2KeAGPrGus1At1Clynk48H9/cYC3dZQ/35ZFb0KUS
McDJ17PQqrVzKtDHlkZNoIgWBUQIDQww5ZTpM5QTS3Qc9F8V/eNdsy0UujRUtQC/
byY6WNOT5JZ3HbFf4dK+oA1ceB2CACGiGMzUAr49QMPuGB4R74lLNRVXbiNDJ31T
zekHNgdN5wfjr5FSKDxMKCYmOq0i3EgCVDKkeilLNQ5Y8baXcohBEfn4jyzeTlgo
zddyME/iZfXK8c/hCrF0WJ3Cvsyjf2Fgoa92WTAqlbEjFBiWWqgclUYq43hdAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUW1ydwVZGVZFDQhSSYvQyju3HghQwHwYDVR0j
BBgwFoAUR3TQhuEPKfQraZ+ZPeQGHg/fiGIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWV3eG1vMkROWEc2Unhnd1JnUkFqQ05CbmhxR1RONkU0OVVKWG9kQTJy
NTgvMC80Nzc0RDA4NkUxMEYyOUY0MkI2OTlGOTkzREU0MDYxRTBGREY4ODYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3NzREMDg2RTEwRjI5RjQy
QjY5OUY5OTNERTQwNjFFMEZERjg4NjIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVld3htbzJETlhHNlJ4Z3dSZ1JBakNOQm5ocUdUTjZFNDlVSlhvZEEycjU4LzAv
MzEzNzMwMmUzMjMzMzgyZTMxMzczMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM0MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKrurDANBgkqhkiG9w0BAQsFAAOCAQEAmykA
BuSx47IqVPwypSrL1fIpSTM0/3wLkqX4isUZjieLCXBxJtPwU4wmK414z4+2o46Q
yjKgtv8mi1/fr3FPuNobl6mupqAjDmJZuDfon+7N42pU0gEjVDoOsaLQa81N0swy
qJfnkVuZWW2rpDsZM00rmOcarUCtvpdWTzxb/l+Ct4TTx4b/GQfp2w4r9GCnWD7j
iriJtQgNGnckHuij//hgrfbLtXOv29o0yT9I0PiNcBS2t+SbBzOn8V+oV5ctfhEq
HsObQjqtk+Li2PA5c+hSJUntAYssBfuEVWtcTcMFpSS5T6otZrBYSz7tRiSGKuG1
o/Ugv68Wxw/hHrrPbg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:08 2024 by rpki-client on console-ams.rpki-client.org