Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/3137302e3234352e3137352e302f32342d3234203d3e20323733343637.roa
File:                     3137302e3234352e3137352e302f32342d3234203d3e20323733343637.roa (raw, json)
Hash identifier:          YU+aT9fwKJ/oeVM0Qln7gOZvdRwNid4hxOOVLcVBVo0=
Subject key identifier:   4E:88:A5:15:F8:A8:35:CF:F8:6B:12:E4:67:E1:A2:3D:35:DC:89:51
Certificate issuer:       /CN=E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C
Certificate serial:       288EB30D3AA7299F8D4345835DD074744E65D820
Authority key identifier: E7:AC:6B:C8:D1:9C:D3:58:DA:07:D7:08:3C:E6:4B:37:AD:95:D2:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/3137302e3234352e3137352e302f32342d3234203d3e20323733343637.roa
Signing time:             Fri 24 May 2024 13:27:23 +0000
ROA not before:           Fri 24 May 2024 13:22:23 +0000
ROA not after:            Fri 23 May 2025 13:27:23 +0000
asID:                     273467
IP address blocks:        170.245.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.crl
                          rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:8e:b3:0d:3a:a7:29:9f:8d:43:45:83:5d:d0:74:74:4e:65:d8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C
        Validity
            Not Before: May 24 13:22:23 2024 GMT
            Not After : May 23 13:27:23 2025 GMT
        Subject: CN=4E88A515F8A835CFF86B12E467E1A23D35DC8951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4d:1c:12:50:ff:11:9f:0a:6f:0f:e2:bf:00:
                    7a:3e:21:94:62:5b:b7:f1:10:82:ac:3d:14:fa:c7:
                    2a:6e:ae:0a:dc:6a:e3:a9:91:76:da:74:c2:13:23:
                    bf:be:14:3b:90:e0:84:c9:74:12:be:2c:a5:09:27:
                    83:46:2d:19:eb:ae:54:24:66:5b:41:a8:e8:e7:5d:
                    a5:4b:1f:20:8e:66:72:b5:d9:4f:40:e1:d4:e2:85:
                    a8:c8:ac:1f:3d:82:a4:bd:c9:6a:60:a2:67:06:b0:
                    e5:21:3e:ec:9f:0d:5d:98:ba:fa:3d:b1:8d:5a:c3:
                    2e:00:e8:b8:d4:a7:84:54:3d:f9:3d:55:1e:58:51:
                    88:12:db:5d:63:9c:60:1e:00:8f:d1:66:25:2d:61:
                    9a:fe:92:12:9d:b5:0b:24:84:c6:67:7e:69:fc:eb:
                    a0:eb:23:02:2d:06:bb:9c:4d:27:59:1b:dd:8b:80:
                    41:87:b4:83:34:b7:7d:f0:54:55:ff:26:c5:56:91:
                    88:96:39:bf:21:4c:45:bb:c4:94:e1:a9:95:b2:c5:
                    27:a3:40:94:94:a6:f5:42:ef:ba:ad:20:f8:a6:ca:
                    6a:21:be:31:04:6e:f2:09:19:ed:e7:10:5a:91:90:
                    70:12:70:c0:64:e8:aa:84:f3:77:52:4f:68:91:f7:
                    86:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:88:A5:15:F8:A8:35:CF:F8:6B:12:E4:67:E1:A2:3D:35:DC:89:51
            X509v3 Authority Key Identifier:
                keyid:E7:AC:6B:C8:D1:9C:D3:58:DA:07:D7:08:3C:E6:4B:37:AD:95:D2:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7AC6BC8D19CD358DA07D7083CE64B37AD95D28C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CEvEBwNa8ps6CaoHVbj3Hbcw62iQez2TNru7s68vKGP/0/3137302e3234352e3137352e302f32342d3234203d3e20323733343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:e4:f8:ad:c9:2e:63:9b:12:94:22:ae:ac:34:ae:7b:65:bf:
         97:9f:c1:cf:12:26:98:e9:40:b8:85:d4:bb:6d:8b:84:5c:af:
         48:8a:06:df:bd:8b:0b:ab:cf:0d:49:48:19:c8:1f:a7:bf:f0:
         6d:1f:06:75:23:a5:6e:da:d5:19:79:51:99:ce:79:2c:bc:b2:
         db:73:bf:00:b7:ed:e8:f6:c5:78:5c:4c:07:c7:0a:14:8b:bf:
         f0:dd:12:10:92:f0:83:f4:2c:72:f4:04:76:03:03:c9:38:8c:
         23:72:60:28:80:77:bd:ce:e6:a0:ed:21:4d:ea:d0:82:3c:f6:
         91:18:1e:e4:ba:0a:8d:47:21:50:80:4f:5c:51:57:53:a9:bb:
         09:c7:d8:d6:c2:ae:16:23:b2:37:eb:d7:49:36:a1:c4:0d:fd:
         64:d0:42:a1:e2:df:e0:a9:b5:48:bc:42:8d:f9:c0:f4:49:34:
         d9:45:3f:0b:98:91:19:e5:9b:21:d6:0b:d6:d4:7e:71:7b:8a:
         17:63:30:ef:d6:d2:f9:0f:4b:79:2d:2f:b1:ae:d7:97:28:8d:
         a0:08:75:50:cb:62:d1:a3:50:a0:28:4d:a1:ae:93:9e:2f:4e:
         c9:06:58:89:dd:ce:8c:e6:a6:b2:21:03:e2:f9:84:b0:a8:58:
         7d:79:87:fc
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUKI6zDTqnKZ+NQ0WDXdB0dE5l2CAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTdBQzZCQzhEMTlDRDM1OERBMDdENzA4M0NFNjRCMzdB
RDk1RDI4QzAeFw0yNDA1MjQxMzIyMjNaFw0yNTA1MjMxMzI3MjNaMDMxMTAvBgNV
BAMTKDRFODhBNTE1RjhBODM1Q0ZGODZCMTJFNDY3RTFBMjNEMzVEQzg5NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRTRwSUP8RnwpvD+K/AHo+IZRi
W7fxEIKsPRT6xypurgrcauOpkXbadMITI7++FDuQ4ITJdBK+LKUJJ4NGLRnrrlQk
ZltBqOjnXaVLHyCOZnK12U9A4dTihajIrB89gqS9yWpgomcGsOUhPuyfDV2Yuvo9
sY1awy4A6LjUp4RUPfk9VR5YUYgS211jnGAeAI/RZiUtYZr+khKdtQskhMZnfmn8
66DrIwItBrucTSdZG92LgEGHtIM0t33wVFX/JsVWkYiWOb8hTEW7xJThqZWyxSej
QJSUpvVC77qtIPimymohvjEEbvIJGe3nEFqRkHAScMBk6KqE83dST2iR94YbAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUToilFfioNc/4axLkZ+GiPTXciVEwHwYDVR0j
BBgwFoAU56xryNGc01jaB9cIPOZLN62V0owwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkNFdkVCd05hOHBzNkNhb0hWYmozSGJjdzYyaVFlejJUTnJ1N3M2OHZL
R1AvMC9FN0FDNkJDOEQxOUNEMzU4REEwN0Q3MDgzQ0U2NEIzN0FEOTVEMjhDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3QUM2QkM4RDE5Q0QzNThE
QTA3RDcwODNDRTY0QjM3QUQ5NUQyOEMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZDRXZFQndOYThwczZDYW9IVmJqM0hiY3c2MmlRZXoyVE5ydTdzNjh2S0dQLzAv
MzEzNzMwMmUzMjM0MzUyZTMxMzczNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMzM0MzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKr1rzANBgkqhkiG9w0BAQsFAAOCAQEAEeT4
rckuY5sSlCKurDSue2W/l5/BzxImmOlAuIXUu22LhFyvSIoG372LC6vPDUlIGcgf
p7/wbR8GdSOlbtrVGXlRmc55LLyy23O/ALft6PbFeFxMB8cKFIu/8N0SEJLwg/Qs
cvQEdgMDyTiMI3JgKIB3vc7moO0hTerQgjz2kRge5LoKjUchUIBPXFFXU6m7CcfY
1sKuFiOyN+vXSTahxA39ZNBCoeLf4Km1SLxCjfnA9Ek02UU/C5iRGeWbIdYL1tR+
cXuKF2Mw79bS+Q9LeS0vsa7XlyiNoAh1UMti0aNQoChNoa6Tni9OyQZYid3OjOam
siED4vmEsKhYfXmH/A==
-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:32 2024 by rpki-client on console-ams.rpki-client.org