Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137352e302f32342d3234203d3e20323632343835.roa
File:                     3137302e3233382e3137352e302f32342d3234203d3e20323632343835.roa (raw, json)
Hash identifier:          XrPrfTp3Mic53LPai+zXhgCkaHMOenIOmUbYcPQ43X4=
Subject key identifier:   EF:FD:2D:21:32:D9:CD:0C:29:FF:4D:14:21:56:61:E5:DC:84:86:9E
Certificate issuer:       /CN=4774D086E10F29F42B699F993DE4061E0FDF8862
Certificate serial:       53D343D1FD59474158A4D3855ADBC6322CBB6607
Authority key identifier: 47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137352e302f32342d3234203d3e20323632343835.roa
Signing time:             Sat 27 Jul 2024 21:13:22 +0000
ROA not before:           Sat 27 Jul 2024 21:08:22 +0000
ROA not after:            Sat 26 Jul 2025 21:13:22 +0000
asID:                     262485
IP address blocks:        170.238.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl
                          rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d3:43:d1:fd:59:47:41:58:a4:d3:85:5a:db:c6:32:2c:bb:66:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4774D086E10F29F42B699F993DE4061E0FDF8862
        Validity
            Not Before: Jul 27 21:08:22 2024 GMT
            Not After : Jul 26 21:13:22 2025 GMT
        Subject: CN=EFFD2D2132D9CD0C29FF4D14215661E5DC84869E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:59:b2:8f:2d:85:7b:73:f4:48:d8:cc:d2:45:
                    da:40:ed:92:43:c5:5e:74:8f:f0:19:b1:80:22:bc:
                    8a:87:ad:88:9f:9b:57:32:21:a1:e2:e6:b6:73:60:
                    a6:93:b6:08:45:18:20:09:33:35:a4:59:dc:c9:89:
                    dd:ae:96:b6:4d:7e:be:0d:dc:0c:49:31:c2:1f:3f:
                    67:c5:da:ed:03:c0:df:fe:08:72:f0:a1:7b:ea:77:
                    53:72:e6:dc:17:5a:ed:bc:1b:3a:99:a9:93:49:25:
                    8e:fa:37:af:f4:e7:ae:c8:63:a3:99:18:3a:a7:3c:
                    ff:e0:8c:44:f6:62:f2:a7:92:47:86:fa:22:3b:4c:
                    e9:8a:0a:82:58:d3:31:c3:e4:12:57:88:2e:6b:58:
                    2d:43:e2:52:00:4b:c3:b0:75:fb:d0:ec:21:c2:30:
                    64:8d:40:8c:52:9e:30:93:f6:c5:f9:df:7f:63:b0:
                    24:f5:fe:c7:54:07:80:70:57:9c:04:20:17:71:bd:
                    57:37:67:fd:26:cf:e6:a5:cf:34:f5:4c:bc:fd:df:
                    c0:df:a5:40:19:81:dc:64:23:61:51:25:ba:ba:ab:
                    86:6e:5f:be:da:65:d8:7f:48:be:73:fb:fd:71:64:
                    56:91:7e:54:67:fa:06:40:45:0f:82:32:07:97:52:
                    32:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FD:2D:21:32:D9:CD:0C:29:FF:4D:14:21:56:61:E5:DC:84:86:9E
            X509v3 Authority Key Identifier:
                keyid:47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137352e302f32342d3234203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:4b:b3:f5:25:f8:02:c9:27:7e:3b:41:40:bd:ce:91:78:5a:
         dc:9b:8d:bd:d9:3a:42:14:d4:3b:cd:38:97:9b:57:e5:0d:e0:
         de:84:e7:9c:e0:7f:23:c6:3b:4f:eb:ea:2b:bc:22:f5:cd:f6:
         db:47:e0:70:dd:d2:dc:fe:88:3a:7a:23:3c:bf:83:3c:26:e5:
         e6:c0:66:c1:24:af:57:92:6e:96:f9:e4:58:01:4c:28:fb:f1:
         1a:52:49:35:3e:3c:e9:cd:ee:00:bb:e0:5c:09:9a:ec:73:a0:
         d0:89:de:40:80:4c:60:d6:68:8f:68:1c:24:be:49:bd:56:84:
         35:c8:3f:ab:74:17:f6:95:9f:f2:83:0a:ab:8a:1a:17:3d:d9:
         38:b5:b1:a4:02:b5:bc:f8:28:cf:69:e8:f9:be:cd:c5:2b:d5:
         0e:0a:fc:3e:b7:47:93:45:da:0d:54:ff:71:bd:87:e9:ad:f4:
         fc:a4:67:71:4b:46:8f:e3:ce:22:8e:a8:a2:3b:a7:1a:f6:e8:
         2b:80:42:a0:db:06:8d:f5:16:6c:22:04:2d:ea:6b:79:d4:b7:
         51:48:aa:43:f1:92:81:49:9d:57:0d:7d:36:b4:c7:59:63:7b:
         e8:17:d2:b5:ab:eb:0a:00:dd:50:c6:99:4c:c1:a8:3e:10:5b:
         dc:39:24:40
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUU9ND0f1ZR0FYpNOFWtvGMiy7ZgcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc3NEQwODZFMTBGMjlGNDJCNjk5Rjk5M0RFNDA2MUUw
RkRGODg2MjAeFw0yNDA3MjcyMTA4MjJaFw0yNTA3MjYyMTEzMjJaMDMxMTAvBgNV
BAMTKEVGRkQyRDIxMzJEOUNEMEMyOUZGNEQxNDIxNTY2MUU1REM4NDg2OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaWbKPLYV7c/RI2MzSRdpA7ZJD
xV50j/AZsYAivIqHrYifm1cyIaHi5rZzYKaTtghFGCAJMzWkWdzJid2ulrZNfr4N
3AxJMcIfP2fF2u0DwN/+CHLwoXvqd1Ny5twXWu28GzqZqZNJJY76N6/0567IY6OZ
GDqnPP/gjET2YvKnkkeG+iI7TOmKCoJY0zHD5BJXiC5rWC1D4lIAS8OwdfvQ7CHC
MGSNQIxSnjCT9sX5339jsCT1/sdUB4BwV5wEIBdxvVc3Z/0mz+alzzT1TLz938Df
pUAZgdxkI2FRJbq6q4ZuX77aZdh/SL5z+/1xZFaRflRn+gZARQ+CMgeXUjLPAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU7/0tITLZzQwp/00UIVZh5dyEhp4wHwYDVR0j
BBgwFoAUR3TQhuEPKfQraZ+ZPeQGHg/fiGIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWV3eG1vMkROWEc2Unhnd1JnUkFqQ05CbmhxR1RONkU0OVVKWG9kQTJy
NTgvMC80Nzc0RDA4NkUxMEYyOUY0MkI2OTlGOTkzREU0MDYxRTBGREY4ODYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3NzREMDg2RTEwRjI5RjQy
QjY5OUY5OTNERTQwNjFFMEZERjg4NjIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVld3htbzJETlhHNlJ4Z3dSZ1JBakNOQm5ocUdUTjZFNDlVSlhvZEEycjU4LzAv
MzEzNzMwMmUzMjMzMzgyZTMxMzczNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM0MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKrurzANBgkqhkiG9w0BAQsFAAOCAQEAmEuz
9SX4AsknfjtBQL3OkXha3JuNvdk6QhTUO804l5tX5Q3g3oTnnOB/I8Y7T+vqK7wi
9c3220fgcN3S3P6IOnojPL+DPCbl5sBmwSSvV5JulvnkWAFMKPvxGlJJNT486c3u
ALvgXAma7HOg0IneQIBMYNZoj2gcJL5JvVaENcg/q3QX9pWf8oMKq4oaFz3ZOLWx
pAK1vPgoz2no+b7NxSvVDgr8PrdHk0XaDVT/cb2H6a30/KRncUtGj+POIo6oojun
GvboK4BCoNsGjfUWbCIELepredS3UUiqQ/GSgUmdVw19NrTHWWN76BfStavrCgDd
UMaZTMGoPhBb3DkkQA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:06:04 2024 by rpki-client on console-fra.rpki-client.org