Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137302e38322e38342e302f32342d3234203d3e20323632363432.roa
File:                     3137302e38322e38342e302f32342d3234203d3e20323632363432.roa (raw, json)
Hash identifier:          SKdXwD3Kc9nNpXsTspzOAS8tTEyLVB3gdI3Iwih5Frw=
Subject key identifier:   DD:E9:1C:0E:9B:00:87:57:CC:E0:1A:F8:E5:5D:BF:66:33:18:9F:A4
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       572800698DF3983265667D3B5E4C9D3FFE7E6E89
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137302e38322e38342e302f32342d3234203d3e20323632363432.roa
Signing time:             Thu 04 Apr 2024 03:24:14 +0000
ROA not before:           Thu 04 Apr 2024 03:19:14 +0000
ROA not after:            Thu 03 Apr 2025 03:24:14 +0000
asID:                     262642
IP address blocks:        170.82.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:28:00:69:8d:f3:98:32:65:66:7d:3b:5e:4c:9d:3f:fe:7e:6e:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Apr  4 03:19:14 2024 GMT
            Not After : Apr  3 03:24:14 2025 GMT
        Subject: CN=DDE91C0E9B008757CCE01AF8E55DBF6633189FA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4d:e3:ae:f8:91:df:c6:f6:fa:11:e9:48:70:
                    72:dd:63:6d:fe:ba:20:d9:bf:13:12:8c:7b:df:b8:
                    00:5d:fb:5b:6e:68:ae:88:08:b6:89:c6:57:64:ee:
                    00:a4:d7:bf:a3:04:0e:eb:64:ee:56:36:a1:f7:01:
                    19:b9:d0:3c:0e:c3:83:83:a6:60:38:66:0d:bf:02:
                    0b:d0:21:86:f0:74:6f:86:9d:98:80:2c:e2:f7:5e:
                    f1:01:fe:ee:3c:1b:1b:08:78:96:f1:8d:fd:13:72:
                    f8:5f:5e:f2:8c:c1:48:53:24:16:e9:c5:f6:7d:35:
                    6e:4b:78:0e:2f:57:34:0c:71:22:b5:9b:63:81:56:
                    f6:ac:1c:21:f8:e2:02:8c:31:9a:53:de:05:82:53:
                    da:11:df:a6:d8:c1:33:55:3e:ac:01:f4:ff:2e:0b:
                    a0:a9:12:dd:7d:22:27:64:df:65:1a:b1:fe:6c:1d:
                    e7:64:80:7e:4d:9b:32:2b:16:90:b4:1b:e4:60:b3:
                    66:09:4c:b4:cd:9c:37:61:1d:51:12:23:e3:c5:de:
                    65:b4:99:94:42:dd:d3:8d:a6:06:9f:8b:40:48:49:
                    80:7e:a2:34:6d:66:5e:be:41:28:37:9a:84:70:78:
                    c3:c9:b8:44:f0:09:15:5d:2c:32:ad:c5:16:a3:c1:
                    fe:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E9:1C:0E:9B:00:87:57:CC:E0:1A:F8:E5:5D:BF:66:33:18:9F:A4
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/3137302e38322e38342e302f32342d3234203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:de:e3:09:53:8e:c5:1e:10:7d:4b:de:4e:95:c9:38:44:eb:
         ed:03:2c:13:96:b8:1b:1e:e5:5d:ab:89:72:bf:0e:9d:39:59:
         4a:f7:3e:71:79:5e:d2:02:1a:2b:0d:91:ba:44:2d:8c:3b:85:
         89:8b:02:24:e0:0e:20:73:2f:97:8d:b7:9f:67:c5:c5:a8:f5:
         2d:55:27:82:5a:1d:30:54:68:0b:c6:e1:37:c3:4f:5c:57:bb:
         fe:3a:2c:48:22:bf:c5:6a:7f:bc:8e:58:5c:78:6b:d5:67:5d:
         da:31:e1:d7:27:55:54:4e:71:8f:f2:84:5d:ef:b5:f2:6a:53:
         eb:1f:30:76:d2:02:73:96:87:2c:34:a4:3d:a9:da:cc:79:33:
         fd:04:2f:39:d6:79:20:fa:8f:bf:73:60:7a:1f:ae:99:5d:d3:
         59:e0:95:bf:25:27:1f:ee:c2:4b:f0:05:59:92:0f:bc:6f:28:
         bf:d3:77:18:fd:15:e8:21:0f:29:6e:67:e3:f7:26:82:7a:23:
         e6:8e:92:3c:30:f1:b7:87:46:6f:4b:de:a0:39:9e:0a:45:8b:
         20:41:4b:05:80:2e:6d:3c:e4:a2:02:61:83:fa:af:b3:80:a5:
         9c:9b:e0:9f:85:1b:fb:74:59:4d:90:dc:39:8a:60:9f:ba:3f:
         1f:e8:c6:dc
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVygAaY3zmDJlZn07XkydP/5+bokwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ4RDhEOTZGMUZGRUM1RjIwQzZGMUY3MzNFRTY5NTAz
RTcxNjc0NTAeFw0yNDA0MDQwMzE5MTRaFw0yNTA0MDMwMzI0MTRaMDMxMTAvBgNV
BAMTKERERTkxQzBFOUIwMDg3NTdDQ0UwMUFGOEU1NURCRjY2MzMxODlGQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnTeOu+JHfxvb6EelIcHLdY23+
uiDZvxMSjHvfuABd+1tuaK6ICLaJxldk7gCk17+jBA7rZO5WNqH3ARm50DwOw4OD
pmA4Zg2/AgvQIYbwdG+GnZiALOL3XvEB/u48GxsIeJbxjf0TcvhfXvKMwUhTJBbp
xfZ9NW5LeA4vVzQMcSK1m2OBVvasHCH44gKMMZpT3gWCU9oR36bYwTNVPqwB9P8u
C6CpEt19Iidk32Uasf5sHedkgH5NmzIrFpC0G+Rgs2YJTLTNnDdhHVESI+PF3mW0
mZRC3dONpgafi0BISYB+ojRtZl6+QSg3moRweMPJuETwCRVdLDKtxRajwf7/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU3ekcDpsAh1fM4Br45V2/ZjMYn6QwHwYDVR0j
BBgwFoAUxI2NlvH/7F8gxvH3M+5pUD5xZ0UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjlHd2FpakNzZGExTm1EWG5jWGlkeDJyTGZiTWFtd3VKVXlUNFNvczUy
YWYvMS9DNDhEOEQ5NkYxRkZFQzVGMjBDNkYxRjczM0VFNjk1MDNFNzE2NzQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M0OEQ4RDk2RjFGRkVDNUYy
MEM2RjFGNzMzRUU2OTUwM0U3MTY3NDUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY5R3dhaWpDc2RhMU5tRFhuY1hpZHgyckxmYk1hbXd1SlV5VDRTb3M1MmFmLzEv
MzEzNzMwMmUzODMyMmUzODM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzYzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqlJUMA0GCSqGSIb3DQEBCwUAA4IBAQAm3uMJU47F
HhB9S95Olck4ROvtAywTlrgbHuVdq4lyvw6dOVlK9z5xeV7SAhorDZG6RC2MO4WJ
iwIk4A4gcy+XjbefZ8XFqPUtVSeCWh0wVGgLxuE3w09cV7v+OixIIr/Fan+8jlhc
eGvVZ13aMeHXJ1VUTnGP8oRd77XyalPrHzB20gJzlocsNKQ9qdrMeTP9BC851nkg
+o+/c2B6H66ZXdNZ4JW/JScf7sJL8AVZkg+8byi/03cY/RXoIQ8pbmfj9yaCeiPm
jpI8MPG3h0ZvS96gOZ4KRYsgQUsFgC5tPOSiAmGD+q+zgKWcm+CfhRv7dFlNkNw5
imCfuj8f6Mbc
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:18 2024 by rpki-client on console-ams.rpki-client.org