Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6rURXW28mb1xr5KVUJgH6oLF4cHjkWRTP7Ku3CMp4KA7/1/3138312e3137342e3234302e302f32322d3332203d3e20323731343531.roa
File:                     3138312e3137342e3234302e302f32322d3332203d3e20323731343531.roa (raw, json)
Hash identifier:          vI4I5Wuhxmn5yQN36vWZqQngCDKZVBkx4Gk2fWrc7bg=
Subject key identifier:   80:DB:6B:12:02:CE:D8:93:49:67:43:78:F2:0A:9F:81:A6:3C:C5:C2
Certificate issuer:       /CN=3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9
Certificate serial:       6CF02757126FDAE419A8BAF8A3BA0DEF15EBFC51
Authority key identifier: 3A:7A:08:E1:E3:3E:38:B8:2F:E4:69:E9:4F:06:C3:17:4B:5F:8C:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rURXW28mb1xr5KVUJgH6oLF4cHjkWRTP7Ku3CMp4KA7/1/3138312e3137342e3234302e302f32322d3332203d3e20323731343531.roa
Signing time:             Thu 04 Apr 2024 11:17:28 +0000
ROA not before:           Thu 04 Apr 2024 11:12:28 +0000
ROA not after:            Thu 03 Apr 2025 11:17:28 +0000
asID:                     271451
IP address blocks:        181.174.240.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6rURXW28mb1xr5KVUJgH6oLF4cHjkWRTP7Ku3CMp4KA7/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.crl
                          rsync://rpki-repo.registro.br/repo/6rURXW28mb1xr5KVUJgH6oLF4cHjkWRTP7Ku3CMp4KA7/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f0:27:57:12:6f:da:e4:19:a8:ba:f8:a3:ba:0d:ef:15:eb:fc:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9
        Validity
            Not Before: Apr  4 11:12:28 2024 GMT
            Not After : Apr  3 11:17:28 2025 GMT
        Subject: CN=80DB6B1202CED89349674378F20A9F81A63CC5C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9b:a9:a4:fd:01:c3:1e:48:dd:78:44:8d:6e:
                    58:47:f0:77:b3:ab:ef:89:ed:f0:92:ba:c3:4b:21:
                    9d:fc:95:3f:43:24:f2:79:d0:33:21:88:b4:e1:d8:
                    3f:26:e7:46:7b:2f:d2:6e:7d:95:a9:77:95:dc:65:
                    fb:8f:09:9c:08:12:a1:71:9a:d0:01:cd:a2:0f:f6:
                    a3:3a:65:de:4c:20:f3:a0:8e:ca:50:dc:d2:a5:57:
                    95:7a:f7:8e:1b:41:83:17:7e:fe:fb:56:1b:d8:4c:
                    d1:0b:a7:1e:08:00:0f:16:af:b7:c7:ef:61:00:31:
                    8e:6f:71:48:68:1b:6f:c9:d2:1c:02:58:03:a4:6c:
                    5e:ba:cd:0b:4c:56:25:9e:ef:78:70:e5:38:4d:53:
                    39:36:a7:f3:34:d4:f6:71:2a:f5:28:c2:99:06:4d:
                    62:e7:90:fd:79:7d:be:b5:ff:c7:7a:be:fa:96:21:
                    5b:43:3b:36:c2:02:03:3e:84:5a:62:9d:ac:dd:0a:
                    25:99:c1:e6:a9:e1:4e:30:01:db:45:d8:f2:5d:e9:
                    5f:1e:d3:f4:06:dc:46:0c:02:4c:c0:fd:82:f0:86:
                    bb:68:11:c8:cf:4f:36:56:76:44:df:d0:f0:04:62:
                    4f:c7:43:77:3d:8f:1f:bc:54:c6:04:64:7f:58:2e:
                    1c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:DB:6B:12:02:CE:D8:93:49:67:43:78:F2:0A:9F:81:A6:3C:C5:C2
            X509v3 Authority Key Identifier:
                keyid:3A:7A:08:E1:E3:3E:38:B8:2F:E4:69:E9:4F:06:C3:17:4B:5F:8C:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rURXW28mb1xr5KVUJgH6oLF4cHjkWRTP7Ku3CMp4KA7/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A7A08E1E33E38B82FE469E94F06C3174B5F8CF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rURXW28mb1xr5KVUJgH6oLF4cHjkWRTP7Ku3CMp4KA7/1/3138312e3137342e3234302e302f32322d3332203d3e20323731343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:e2:04:28:a5:91:45:70:79:eb:97:e6:1d:ec:b8:0e:a8:8d:
         51:7c:48:ea:8a:c9:b6:66:5c:99:df:f7:72:5e:6d:d5:68:ad:
         d0:2d:70:5a:2f:bc:6f:e1:76:5c:5c:56:fb:7f:e4:fa:42:c9:
         75:03:e0:de:39:3e:f7:26:52:98:fa:fa:48:1b:6d:22:6c:a2:
         fe:75:04:a5:4d:56:f6:f1:ab:88:fe:3f:7a:60:0f:18:b0:8e:
         67:52:3b:d7:3e:e3:e8:bf:9d:2b:eb:4a:d7:2e:d4:cc:39:ce:
         df:9b:4d:01:ae:a1:a2:0a:c7:20:96:aa:8a:93:8d:1b:36:7b:
         c4:0b:d3:04:9b:62:08:5b:ee:05:84:8c:c7:21:e9:6b:da:7b:
         d2:3c:19:db:7a:7e:15:09:05:20:db:7b:ed:94:dd:37:7a:a1:
         f3:27:60:6a:ff:69:27:9f:4e:72:ee:30:c0:90:29:b5:a4:82:
         15:25:ae:8f:73:5d:d1:32:73:81:fe:44:64:80:ac:4d:e1:c0:
         2f:25:f5:d3:0b:ca:75:41:b3:ec:66:cf:ee:d1:9c:c5:19:2f:
         f6:93:ca:fa:91:c6:4d:07:ec:af:39:13:a6:ef:00:43:de:02:
         a8:80:8d:e4:40:e4:f4:27:1f:7f:6e:f3:3a:b3:86:0e:2b:76:
         0a:52:89:95
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUbPAnVxJv2uQZqLr4o7oN7xXr/FEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0E3QTA4RTFFMzNFMzhCODJGRTQ2OUU5NEYwNkMzMTc0
QjVGOENGOTAeFw0yNDA0MDQxMTEyMjhaFw0yNTA0MDMxMTE3MjhaMDMxMTAvBgNV
BAMTKDgwREI2QjEyMDJDRUQ4OTM0OTY3NDM3OEYyMEE5RjgxQTYzQ0M1QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCym6mk/QHDHkjdeESNblhH8Hez
q++J7fCSusNLIZ38lT9DJPJ50DMhiLTh2D8m50Z7L9JufZWpd5XcZfuPCZwIEqFx
mtABzaIP9qM6Zd5MIPOgjspQ3NKlV5V6944bQYMXfv77VhvYTNELpx4IAA8Wr7fH
72EAMY5vcUhoG2/J0hwCWAOkbF66zQtMViWe73hw5ThNUzk2p/M01PZxKvUowpkG
TWLnkP15fb61/8d6vvqWIVtDOzbCAgM+hFpinazdCiWZweap4U4wAdtF2PJd6V8e
0/QG3EYMAkzA/YLwhrtoEcjPTzZWdkTf0PAEYk/HQ3c9jx+8VMYEZH9YLhwvAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUgNtrEgLO2JNJZ0N48gqfgaY8xcIwHwYDVR0j
BBgwFoAUOnoI4eM+OLgv5GnpTwbDF0tfjPkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnJVUlhXMjhtYjF4cjVLVlVKZ0g2b0xGNGNIamtXUlRQN0t1M0NNcDRL
QTcvMS8zQTdBMDhFMUUzM0UzOEI4MkZFNDY5RTk0RjA2QzMxNzRCNUY4Q0Y5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBN0EwOEUxRTMzRTM4Qjgy
RkU0NjlFOTRGMDZDMzE3NEI1RjhDRjkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZyVVJYVzI4bWIxeHI1S1ZVSmdINm9MRjRjSGprV1JUUDdLdTNDTXA0S0E3LzEv
MzEzODMxMmUzMTM3MzQyZTMyMzQzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzczMTM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArWu8DANBgkqhkiG9w0BAQsFAAOCAQEAR+IE
KKWRRXB565fmHey4DqiNUXxI6orJtmZcmd/3cl5t1Wit0C1wWi+8b+F2XFxW+3/k
+kLJdQPg3jk+9yZSmPr6SBttImyi/nUEpU1W9vGriP4/emAPGLCOZ1I71z7j6L+d
K+tK1y7UzDnO35tNAa6hogrHIJaqipONGzZ7xAvTBJtiCFvuBYSMxyHpa9p70jwZ
23p+FQkFINt77ZTdN3qh8ydgav9pJ59Ocu4wwJAptaSCFSWuj3Nd0TJzgf5EZICs
TeHALyX10wvKdUGz7GbP7tGcxRkv9pPK+pHGTQfsrzkTpu8AQ94CqICN5EDk9Ccf
f27zOrOGDit2ClKJlQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:52 2024 by rpki-client on console-fra.rpki-client.org