Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/1/3136302e32302e3137362e302f32322d3234203d3e20323731313130.roa
File:                     3136302e32302e3137362e302f32322d3234203d3e20323731313130.roa (raw, json)
Hash identifier:          p5QWZ2ctGhlyimfVgmnqQXmd5M+TVO7gr+XRYaCPhUI=
Subject key identifier:   F2:7C:5F:DB:9E:9E:09:2A:56:91:5A:4A:05:94:56:17:5A:23:38:26
Certificate issuer:       /CN=0D490435D8A32B7A9A3A7692BF04488233375E36
Certificate serial:       3A4D13BA5182BF8186BDEE992ABD4259F088A04F
Authority key identifier: 0D:49:04:35:D8:A3:2B:7A:9A:3A:76:92:BF:04:48:82:33:37:5E:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D490435D8A32B7A9A3A7692BF04488233375E36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/1/3136302e32302e3137362e302f32322d3234203d3e20323731313130.roa
Signing time:             Thu 04 Apr 2024 03:01:15 +0000
ROA not before:           Thu 04 Apr 2024 02:56:15 +0000
ROA not after:            Thu 03 Apr 2025 03:01:15 +0000
asID:                     271110
IP address blocks:        160.20.176.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/1/0D490435D8A32B7A9A3A7692BF04488233375E36.crl
                          rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/1/0D490435D8A32B7A9A3A7692BF04488233375E36.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D490435D8A32B7A9A3A7692BF04488233375E36.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:4d:13:ba:51:82:bf:81:86:bd:ee:99:2a:bd:42:59:f0:88:a0:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D490435D8A32B7A9A3A7692BF04488233375E36
        Validity
            Not Before: Apr  4 02:56:15 2024 GMT
            Not After : Apr  3 03:01:15 2025 GMT
        Subject: CN=F27C5FDB9E9E092A56915A4A059456175A233826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:34:70:fc:d9:c0:d3:cf:f1:25:ee:c2:c6:9c:
                    2a:15:13:72:87:0b:e7:da:b7:71:30:c2:41:41:3e:
                    f3:e8:b0:6e:fb:b8:e8:d2:4a:26:2a:e2:90:a5:3a:
                    d5:58:72:5d:4f:d3:36:c0:4b:2e:d4:ca:42:f1:ed:
                    1d:91:48:1f:84:88:37:7f:ad:5b:31:d8:e9:80:e7:
                    f9:34:06:da:bf:dd:b4:a0:48:4b:fe:71:27:b2:27:
                    37:1e:43:32:ec:6c:57:6d:a3:a5:5c:82:4d:2e:72:
                    e6:92:72:c7:d5:17:0c:c2:de:ff:d2:67:2f:1c:bc:
                    66:9c:d5:31:ad:8c:15:7e:09:62:29:01:b0:b7:b4:
                    08:4f:d4:ee:39:a5:6b:b0:3f:28:ac:b4:70:4e:ee:
                    99:6d:99:f6:52:b1:81:0f:17:20:03:87:19:0f:a1:
                    ff:14:63:b0:db:22:bf:23:43:cb:0f:22:fd:4b:a8:
                    a3:41:01:40:f0:fa:5e:6c:88:e5:fb:3b:91:5a:91:
                    aa:33:81:ed:49:05:77:34:62:92:69:a5:c4:e5:11:
                    13:16:94:08:a4:6c:b9:9f:bf:cd:32:eb:8e:98:da:
                    bd:01:4b:9c:60:3d:4b:37:69:b6:79:d2:50:b0:39:
                    05:61:24:43:c2:03:ac:68:bf:9b:1d:ef:d7:b4:be:
                    2c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:7C:5F:DB:9E:9E:09:2A:56:91:5A:4A:05:94:56:17:5A:23:38:26
            X509v3 Authority Key Identifier:
                keyid:0D:49:04:35:D8:A3:2B:7A:9A:3A:76:92:BF:04:48:82:33:37:5E:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/1/0D490435D8A32B7A9A3A7692BF04488233375E36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D490435D8A32B7A9A3A7692BF04488233375E36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/1/3136302e32302e3137362e302f32322d3234203d3e20323731313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:e6:f9:61:d7:2f:03:7f:f1:0c:1b:f5:29:7f:ef:72:9d:3c:
         76:51:75:16:41:cf:7d:db:46:2f:ad:32:8c:51:2b:99:57:87:
         f3:05:9f:1d:05:57:47:e9:c1:d5:29:c9:72:4b:d4:77:99:0a:
         5f:ec:96:5d:76:db:a6:d8:da:3b:b7:84:68:fb:6b:92:95:b7:
         49:0a:27:a8:a7:bb:ca:da:24:26:55:3f:c8:5a:47:fc:8e:f1:
         b0:7d:80:90:94:88:e1:54:c7:96:0e:37:00:b9:72:47:5e:71:
         7f:89:b3:2e:ac:95:ae:cf:73:2f:44:67:dc:5f:99:91:97:0c:
         59:00:a8:72:96:ac:99:8e:6f:ea:a5:6a:0b:89:d0:2b:bc:71:
         e1:97:62:ee:52:8a:f8:33:aa:54:16:61:4f:21:1f:ed:23:4b:
         87:4d:16:8d:0a:e6:4f:49:fc:44:01:22:c9:3d:5d:b9:42:db:
         d6:63:4e:90:ee:97:41:72:d9:58:10:15:ca:74:5c:30:bc:54:
         2c:15:d7:6d:fb:f5:1d:cd:73:cd:f4:97:5f:00:35:25:97:9b:
         0c:8c:0f:ae:3d:98:8f:f7:07:51:d5:1d:0f:28:c9:f4:57:c1:
         b3:c3:2d:5a:93:24:cb:c6:a3:f0:7b:f1:2b:de:f7:e2:fe:29:
         73:a5:72:39
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOk0TulGCv4GGve6ZKr1CWfCIoE8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ0OTA0MzVEOEEzMkI3QTlBM0E3NjkyQkYwNDQ4ODIz
MzM3NUUzNjAeFw0yNDA0MDQwMjU2MTVaFw0yNTA0MDMwMzAxMTVaMDMxMTAvBgNV
BAMTKEYyN0M1RkRCOUU5RTA5MkE1NjkxNUE0QTA1OTQ1NjE3NUEyMzM4MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPNHD82cDTz/El7sLGnCoVE3KH
C+fat3EwwkFBPvPosG77uOjSSiYq4pClOtVYcl1P0zbASy7UykLx7R2RSB+EiDd/
rVsx2OmA5/k0Btq/3bSgSEv+cSeyJzceQzLsbFdto6Vcgk0ucuaScsfVFwzC3v/S
Zy8cvGac1TGtjBV+CWIpAbC3tAhP1O45pWuwPyistHBO7pltmfZSsYEPFyADhxkP
of8UY7DbIr8jQ8sPIv1LqKNBAUDw+l5siOX7O5Fakaozge1JBXc0YpJppcTlERMW
lAikbLmfv80y646Y2r0BS5xgPUs3abZ50lCwOQVhJEPCA6xov5sd79e0vix7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU8nxf256eCSpWkVpKBZRWF1ojOCYwHwYDVR0j
BBgwFoAUDUkENdijK3qaOnaSvwRIgjM3XjYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNW9tVXRDYVVSRjNhdHVIdXhDNnNEVnNTNUVhRFVxY0daZVg4aFNvQXVx
bWkvMS8wRDQ5MDQzNUQ4QTMyQjdBOUEzQTc2OTJCRjA0NDg4MjMzMzc1RTM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBENDkwNDM1RDhBMzJCN0E5
QTNBNzY5MkJGMDQ0ODgyMzMzNzVFMzYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVvbVV0Q2FVUkYzYXR1SHV4QzZzRFZzUzVFYURVcWNHWmVYOGhTb0F1cW1pLzEv
MzEzNjMwMmUzMjMwMmUzMTM3MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzEzMTMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKgFLAwDQYJKoZIhvcNAQELBQADggEBAG/m+WHX
LwN/8Qwb9Sl/73KdPHZRdRZBz33bRi+tMoxRK5lXh/MFnx0FV0fpwdUpyXJL1HeZ
Cl/sll1226bY2ju3hGj7a5KVt0kKJ6inu8raJCZVP8haR/yO8bB9gJCUiOFUx5YO
NwC5ckdecX+Jsy6sla7Pcy9EZ9xfmZGXDFkAqHKWrJmOb+qlaguJ0Cu8ceGXYu5S
ivgzqlQWYU8hH+0jS4dNFo0K5k9J/EQBIsk9XblC29ZjTpDul0Fy2VgQFcp0XDC8
VCwV12379R3Nc830l18ANSWXmwyMD649mI/3B1HVHQ8oyfRXwbPDLVqTJMvGo/B7
8Sve9+L+KXOlcjk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:16 2024 by rpki-client on console-ams.rpki-client.org