Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/3230302e3233352e3132382e302f31372d3234203d3e20323731363430.roa
File:                     3230302e3233352e3132382e302f31372d3234203d3e20323731363430.roa (raw, json)
Hash identifier:          TJj969nseftrhfRdNxetCZXdN9i0Ue+AnLTWOt/S7LU=
Subject key identifier:   AD:6E:71:9B:82:EF:DF:15:A6:E4:EC:AD:A1:33:05:43:0E:62:31:8D
Certificate issuer:       /CN=AC174F1C160ECD0876FC5577CFE25B27E134FB13
Certificate serial:       764C39EBA6577ED514F424A762225C8671F23A14
Authority key identifier: AC:17:4F:1C:16:0E:CD:08:76:FC:55:77:CF:E2:5B:27:E1:34:FB:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC174F1C160ECD0876FC5577CFE25B27E134FB13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/3230302e3233352e3132382e302f31372d3234203d3e20323731363430.roa
Signing time:             Mon 15 Apr 2024 17:24:15 +0000
ROA not before:           Mon 15 Apr 2024 17:19:15 +0000
ROA not after:            Mon 14 Apr 2025 17:24:15 +0000
asID:                     271640
IP address blocks:        200.235.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/AC174F1C160ECD0876FC5577CFE25B27E134FB13.crl
                          rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/AC174F1C160ECD0876FC5577CFE25B27E134FB13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC174F1C160ECD0876FC5577CFE25B27E134FB13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:53:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:4c:39:eb:a6:57:7e:d5:14:f4:24:a7:62:22:5c:86:71:f2:3a:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC174F1C160ECD0876FC5577CFE25B27E134FB13
        Validity
            Not Before: Apr 15 17:19:15 2024 GMT
            Not After : Apr 14 17:24:15 2025 GMT
        Subject: CN=AD6E719B82EFDF15A6E4ECADA13305430E62318D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b6:e1:0c:57:7b:c0:5f:91:c3:10:00:5e:ca:
                    5f:6c:05:7a:b2:24:b7:0c:f1:dc:2a:4e:1b:41:98:
                    b2:62:0c:c6:6e:c4:8f:8c:bb:a7:fc:d1:05:04:1b:
                    da:2e:bf:0e:1e:16:70:06:00:d8:a9:64:1c:7a:88:
                    b2:f5:70:b6:66:69:31:c5:80:8d:48:22:70:4c:30:
                    e9:92:3c:a1:f9:49:af:41:2d:6c:65:8a:cd:32:4b:
                    43:e8:dd:93:b4:3d:e8:ac:04:63:b4:81:5a:a8:23:
                    58:9a:27:10:8c:b8:0b:bc:ab:fc:42:50:3d:0b:46:
                    eb:29:2f:5c:70:4d:b3:c0:19:99:b6:90:1b:ce:73:
                    1e:02:54:0b:c7:16:a1:96:9b:93:4a:0b:21:e4:a6:
                    f9:f6:f5:1d:2d:aa:2c:07:da:17:48:e7:ef:39:2e:
                    0f:7d:49:5c:41:bb:c7:ae:85:2f:ef:4a:bf:b3:b1:
                    b6:d8:00:a1:48:43:d1:35:5e:b3:a1:3e:6c:23:62:
                    5d:60:3f:31:1d:f8:5b:5d:cb:ef:17:77:82:8e:77:
                    b0:8f:fb:61:7f:cb:79:c1:c9:30:11:77:4a:55:10:
                    ee:ad:1a:83:02:5d:98:0a:91:fa:62:db:4c:d1:96:
                    4a:f2:e4:c2:c8:29:b3:bd:4d:1f:6f:2e:40:46:77:
                    43:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6E:71:9B:82:EF:DF:15:A6:E4:EC:AD:A1:33:05:43:0E:62:31:8D
            X509v3 Authority Key Identifier:
                keyid:AC:17:4F:1C:16:0E:CD:08:76:FC:55:77:CF:E2:5B:27:E1:34:FB:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/AC174F1C160ECD0876FC5577CFE25B27E134FB13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC174F1C160ECD0876FC5577CFE25B27E134FB13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kpcT7mdsbbms6nLucrJDMXoNikb2bEtVm2pUywRgTP8/0/3230302e3233352e3132382e302f31372d3234203d3e20323731363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.235.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         47:11:17:64:93:38:30:58:fb:24:93:92:7b:75:fa:bf:6b:63:
         a9:8e:b5:bb:00:f9:b0:68:84:6e:2b:a3:b5:22:6c:fe:ab:79:
         93:56:ba:96:9e:f8:8c:7c:3a:b3:93:5b:19:f1:03:66:11:f9:
         43:ff:1c:6a:4d:ff:40:8f:4d:ad:c0:69:63:43:20:e2:b6:bb:
         da:42:2d:bb:2c:ab:c4:f8:8a:fd:b5:57:a7:1d:89:07:01:36:
         29:0d:5c:d1:38:f0:42:67:ec:fc:ff:58:c2:a9:42:13:04:32:
         f3:7e:dd:00:85:6c:20:b0:df:0f:01:43:db:fe:da:13:02:35:
         6e:18:69:13:2e:57:be:7d:9d:a1:d9:d2:14:39:2b:24:23:b2:
         92:d0:74:fa:66:e7:e4:51:fb:92:57:f3:be:0e:3c:83:84:d3:
         93:db:93:12:22:e7:6a:04:fb:f6:0a:07:e4:29:4b:44:e5:77:
         8b:7c:82:77:41:a9:8e:dd:e9:1f:52:bf:21:d7:f2:a6:b7:d5:
         26:dc:75:ad:f3:57:a0:89:70:72:74:75:cf:47:d6:03:bb:6f:
         5c:f9:53:a9:59:0c:73:6d:17:0b:94:60:c5:11:c2:16:12:d6:
         36:5d:a7:2f:03:18:b5:57:d9:41:95:8f:de:11:a8:53:ef:88:
         62:1d:fc:2a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUdkw566ZXftUU9CSnYiJchnHyOhQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUMxNzRGMUMxNjBFQ0QwODc2RkM1NTc3Q0ZFMjVCMjdF
MTM0RkIxMzAeFw0yNDA0MTUxNzE5MTVaFw0yNTA0MTQxNzI0MTVaMDMxMTAvBgNV
BAMTKEFENkU3MTlCODJFRkRGMTVBNkU0RUNBREExMzMwNTQzMEU2MjMxOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCltuEMV3vAX5HDEABeyl9sBXqy
JLcM8dwqThtBmLJiDMZuxI+Mu6f80QUEG9ouvw4eFnAGANipZBx6iLL1cLZmaTHF
gI1IInBMMOmSPKH5Sa9BLWxlis0yS0Po3ZO0PeisBGO0gVqoI1iaJxCMuAu8q/xC
UD0LRuspL1xwTbPAGZm2kBvOcx4CVAvHFqGWm5NKCyHkpvn29R0tqiwH2hdI5+85
Lg99SVxBu8euhS/vSr+zsbbYAKFIQ9E1XrOhPmwjYl1gPzEd+Ftdy+8Xd4KOd7CP
+2F/y3nByTARd0pVEO6tGoMCXZgKkfpi20zRlkry5MLIKbO9TR9vLkBGd0PXAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUrW5xm4Lv3xWm5OytoTMFQw5iMY0wHwYDVR0j
BBgwFoAUrBdPHBYOzQh2/FV3z+JbJ+E0+xMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmtwY1Q3bWRzYmJtczZuTHVjckpETVhvTmlrYjJiRXRWbTJwVXl3UmdU
UDgvMC9BQzE3NEYxQzE2MEVDRDA4NzZGQzU1NzdDRkUyNUIyN0UxMzRGQjEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDMTc0RjFDMTYwRUNEMDg3
NkZDNTU3N0NGRTI1QjI3RTEzNEZCMTMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZrcGNUN21kc2JibXM2bkx1Y3JKRE1Yb05pa2IyYkV0Vm0ycFV5d1JnVFA4LzAv
MzIzMDMwMmUzMjMzMzUyZTMxMzIzODJlMzAyZjMxMzcyZDMyMzQyMDNkM2UyMDMy
MzczMTM2MzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEB8jrgDANBgkqhkiG9w0BAQsFAAOCAQEARxEX
ZJM4MFj7JJOSe3X6v2tjqY61uwD5sGiEbiujtSJs/qt5k1a6lp74jHw6s5NbGfED
ZhH5Q/8cak3/QI9NrcBpY0Mg4ra72kItuyyrxPiK/bVXpx2JBwE2KQ1c0TjwQmfs
/P9YwqlCEwQy837dAIVsILDfDwFD2/7aEwI1bhhpEy5Xvn2dodnSFDkrJCOyktB0
+mbn5FH7klfzvg48g4TTk9uTEiLnagT79goH5ClLROV3i3yCd0Gpjt3pH1K/Idfy
prfVJtx1rfNXoIlwcnR1z0fWA7tvXPlTqVkMc20XC5RgxRHCFhLWNl2nLwMYtVfZ
QZWP3hGoU++IYh38Kg==
-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:46 2024 by rpki-client on console-ams.rpki-client.org