Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/3137302e3234342e3130302e302f32322d3234203d3e20323635313839.roa
File:                     3137302e3234342e3130302e302f32322d3234203d3e20323635313839.roa (raw, json)
Hash identifier:          kvW+krQFHWCHHkwYWhzDnnKbppRJ+y9sAZ1a/ngT9cw=
Subject key identifier:   01:EE:A8:E9:E7:EC:87:31:DF:3C:06:49:8C:DF:FE:D8:55:22:83:1D
Certificate issuer:       /CN=37F55E9132B65DF93AC7E8F542B2A3115CFE1A79
Certificate serial:       43169E3947E300BD7B8AA877A009BD5E992EA95C
Authority key identifier: 37:F5:5E:91:32:B6:5D:F9:3A:C7:E8:F5:42:B2:A3:11:5C:FE:1A:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/3137302e3234342e3130302e302f32322d3234203d3e20323635313839.roa
Signing time:             Thu 04 Apr 2024 07:44:48 +0000
ROA not before:           Thu 04 Apr 2024 07:39:48 +0000
ROA not after:            Thu 03 Apr 2025 07:44:48 +0000
asID:                     265189
IP address blocks:        170.244.100.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.crl
                          rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:16:9e:39:47:e3:00:bd:7b:8a:a8:77:a0:09:bd:5e:99:2e:a9:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37F55E9132B65DF93AC7E8F542B2A3115CFE1A79
        Validity
            Not Before: Apr  4 07:39:48 2024 GMT
            Not After : Apr  3 07:44:48 2025 GMT
        Subject: CN=01EEA8E9E7EC8731DF3C06498CDFFED85522831D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a3:4f:34:2f:01:14:68:19:bb:e7:4d:59:55:
                    be:6b:4f:80:46:b5:d2:a5:c8:1c:ac:79:a7:c6:d4:
                    ee:9e:94:d4:7c:9d:e4:30:33:b3:cd:eb:81:4e:03:
                    92:18:7c:98:90:9a:ff:3b:59:f6:29:cc:c7:36:76:
                    d0:62:76:52:c4:25:31:21:cb:a1:8b:a4:19:3f:90:
                    4a:36:05:7e:b7:2d:83:18:ef:3f:ae:28:0d:67:51:
                    0b:4b:e4:4e:f2:62:d3:e5:c8:a4:78:f7:12:03:7f:
                    fb:b1:ce:2c:33:e3:19:73:c3:ec:9b:ca:36:27:12:
                    ca:8b:a5:c7:ee:64:ab:3d:4b:c7:0e:4d:3e:4d:5b:
                    04:26:ab:45:36:72:bf:8c:52:6f:31:f0:24:db:c6:
                    73:6d:08:37:48:54:d3:06:20:b4:d4:27:ce:b7:84:
                    f4:d6:0e:8f:ce:4d:67:da:bd:6f:df:58:1e:c8:53:
                    b7:79:ba:06:71:8d:54:ad:a1:94:2a:a6:35:5a:42:
                    f8:5a:82:1b:5d:12:b7:ea:4c:ce:42:66:3a:51:84:
                    92:8c:ac:b0:2d:52:23:07:d5:13:4b:6d:75:31:2f:
                    ac:66:24:2d:b8:8d:9b:93:c5:3d:8d:1b:64:c6:e0:
                    a4:15:c9:2e:fd:73:ce:fd:ce:fe:4b:31:0a:d3:a0:
                    8c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:EE:A8:E9:E7:EC:87:31:DF:3C:06:49:8C:DF:FE:D8:55:22:83:1D
            X509v3 Authority Key Identifier:
                keyid:37:F5:5E:91:32:B6:5D:F9:3A:C7:E8:F5:42:B2:A3:11:5C:FE:1A:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/3137302e3234342e3130302e302f32322d3234203d3e20323635313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:31:0c:8b:73:72:26:36:90:6d:01:95:18:de:78:40:58:fd:
         9e:ee:75:2d:76:10:52:ed:b5:eb:1f:3e:49:73:61:58:6e:4f:
         4f:aa:c0:e4:90:dc:a2:34:05:8f:a9:c1:ef:7e:bd:7a:6a:ba:
         db:af:1b:99:ef:70:90:e8:e4:45:04:3b:79:65:25:d3:26:2c:
         49:98:a4:21:56:d3:38:42:fa:a1:7b:8d:16:90:d4:53:86:8c:
         6e:85:b0:2f:9a:8d:0a:4f:5f:c9:12:93:54:96:47:0d:3e:fb:
         87:73:db:44:fa:e0:8b:74:25:3c:8e:3e:98:a7:61:33:4d:bd:
         9d:93:2a:06:41:00:4c:3b:9c:73:db:b9:99:12:5f:58:50:db:
         0e:62:c0:47:d8:4d:80:b5:1d:48:d1:9c:7a:06:67:b9:ff:31:
         c1:12:9a:fb:34:be:ab:37:50:cc:a2:0b:0a:94:f7:dc:2c:1c:
         01:eb:9f:b9:d4:3a:0d:fb:dc:f0:7f:cd:d4:a9:81:2b:08:da:
         64:f0:0c:05:5e:39:be:3f:57:3f:8b:0f:31:5f:c6:e1:55:aa:
         87:52:46:d7:5f:62:27:07:91:27:52:1c:95:92:61:f7:48:b3:
         c2:4a:5e:b8:4f:28:cc:a5:28:88:0e:aa:9c:52:b2:7a:5f:8d:
         e1:da:be:7c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQxaeOUfjAL17iqh3oAm9XpkuqVwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzdGNTVFOTEzMkI2NURGOTNBQzdFOEY1NDJCMkEzMTE1
Q0ZFMUE3OTAeFw0yNDA0MDQwNzM5NDhaFw0yNTA0MDMwNzQ0NDhaMDMxMTAvBgNV
BAMTKDAxRUVBOEU5RTdFQzg3MzFERjNDMDY0OThDREZGRUQ4NTUyMjgzMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDao080LwEUaBm7501ZVb5rT4BG
tdKlyByseafG1O6elNR8neQwM7PN64FOA5IYfJiQmv87WfYpzMc2dtBidlLEJTEh
y6GLpBk/kEo2BX63LYMY7z+uKA1nUQtL5E7yYtPlyKR49xIDf/uxziwz4xlzw+yb
yjYnEsqLpcfuZKs9S8cOTT5NWwQmq0U2cr+MUm8x8CTbxnNtCDdIVNMGILTUJ863
hPTWDo/OTWfavW/fWB7IU7d5ugZxjVStoZQqpjVaQvhaghtdErfqTM5CZjpRhJKM
rLAtUiMH1RNLbXUxL6xmJC24jZuTxT2NG2TG4KQVyS79c879zv5LMQrToIwRAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUAe6o6efshzHfPAZJjN/+2FUigx0wHwYDVR0j
BBgwFoAUN/VekTK2Xfk6x+j1QrKjEVz+GnkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkJjeFBTVFJNM3VpZzF6c3AzZ3FzOVVic0tlTUU0dGc0eWh5bVRmeXRQ
dGUvMS8zN0Y1NUU5MTMyQjY1REY5M0FDN0U4RjU0MkIyQTMxMTVDRkUxQTc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM3RjU1RTkxMzJCNjVERjkz
QUM3RThGNTQyQjJBMzExNUNGRTFBNzkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZCY3hQU1RSTTN1aWcxenNwM2dxczlVYnNLZU1FNHRnNHloeW1UZnl0UHRlLzEv
MzEzNzMwMmUzMjM0MzQyZTMxMzAzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNTMxMzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqr0ZDANBgkqhkiG9w0BAQsFAAOCAQEAfTEM
i3NyJjaQbQGVGN54QFj9nu51LXYQUu216x8+SXNhWG5PT6rA5JDcojQFj6nB7369
emq6268bme9wkOjkRQQ7eWUl0yYsSZikIVbTOEL6oXuNFpDUU4aMboWwL5qNCk9f
yRKTVJZHDT77h3PbRPrgi3QlPI4+mKdhM029nZMqBkEATDucc9u5mRJfWFDbDmLA
R9hNgLUdSNGcegZnuf8xwRKa+zS+qzdQzKILCpT33CwcAeufudQ6Dfvc8H/N1KmB
KwjaZPAMBV45vj9XP4sPMV/G4VWqh1JG119iJweRJ1IclZJh90izwkpeuE8ozKUo
iA6qnFKyel+N4dq+fA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:14 2024 by rpki-client on console-ams.rpki-client.org