Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/3136302e3233382e3232362e302f32332d3233203d3e20323636353531.roa
File:                     3136302e3233382e3232362e302f32332d3233203d3e20323636353531.roa (raw, json)
Hash identifier:          m2N52QSwgeSoDbHFG/FEaoTjUrzekGHlrv7HW8s953o=
Subject key identifier:   BE:27:57:34:F4:9F:D9:9C:57:12:B2:40:16:80:FD:EF:5C:36:3E:A1
Certificate issuer:       /CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
Certificate serial:       3F6E0012740B3B0E288B7B636A33831F10A2C7D5
Authority key identifier: F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/3136302e3233382e3232362e302f32332d3233203d3e20323636353531.roa
Signing time:             Thu 15 Aug 2024 17:11:58 +0000
ROA not before:           Thu 15 Aug 2024 17:06:58 +0000
ROA not after:            Thu 14 Aug 2025 17:11:58 +0000
asID:                     266551
IP address blocks:        160.238.226.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl
                          rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:25:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:6e:00:12:74:0b:3b:0e:28:8b:7b:63:6a:33:83:1f:10:a2:c7:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
        Validity
            Not Before: Aug 15 17:06:58 2024 GMT
            Not After : Aug 14 17:11:58 2025 GMT
        Subject: CN=BE275734F49FD99C5712B2401680FDEF5C363EA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:73:ba:97:b9:af:e6:48:64:db:3a:c3:f3:40:
                    1d:b8:6b:32:e2:97:00:c6:68:f4:6b:11:4a:85:ae:
                    e8:1b:81:70:87:c5:f4:ab:d1:c4:37:5c:5f:9a:52:
                    31:80:43:a5:47:c0:e0:98:7b:12:ab:b2:08:2d:ba:
                    fd:60:ee:45:17:d5:8d:c8:b6:a0:e0:67:d0:b6:d0:
                    70:b3:82:5f:3a:bd:c8:bc:38:db:b6:31:47:e5:fb:
                    07:21:49:ba:50:07:e5:59:39:61:ed:37:63:51:59:
                    1f:a8:19:03:58:24:e2:8d:94:0c:a8:a8:ac:d9:88:
                    79:dc:94:8f:ab:53:89:fb:ea:0b:03:23:39:1f:01:
                    94:7a:95:77:11:e4:5e:01:f2:83:22:e5:cb:47:ac:
                    31:9b:81:18:80:80:16:21:08:62:8f:d8:46:87:17:
                    69:fb:a3:14:3b:05:0c:37:9b:fa:d4:55:d7:ea:47:
                    30:37:ae:bc:bb:59:28:d2:ad:48:64:3f:12:85:96:
                    07:aa:a1:8c:43:c7:80:69:3e:15:df:95:ef:28:9e:
                    ae:5e:55:c0:67:eb:79:18:18:18:f6:00:15:c9:44:
                    64:db:f3:80:6e:f1:70:50:45:9e:9a:8e:c0:75:25:
                    e6:84:9f:05:e0:06:c6:a3:3e:8e:a4:d2:a8:d3:ba:
                    d1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:27:57:34:F4:9F:D9:9C:57:12:B2:40:16:80:FD:EF:5C:36:3E:A1
            X509v3 Authority Key Identifier:
                keyid:F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/3136302e3233382e3232362e302f32332d3233203d3e20323636353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:95:27:39:61:bd:24:53:46:38:fc:e9:9e:11:f3:f2:91:90:
         ed:d5:02:64:20:e2:ae:c4:c2:b3:a0:8b:74:65:e9:80:96:bf:
         4f:ca:9b:f0:9b:5b:2d:ab:4e:6b:9e:0c:b2:56:f0:f6:ea:eb:
         d7:c3:37:66:09:48:d1:90:28:a7:02:a7:f1:0e:35:f7:56:e5:
         4f:f3:e4:f1:b4:aa:22:9c:2d:9b:89:be:da:be:a1:aa:23:59:
         ec:87:81:7a:4f:78:bf:00:61:5e:c9:0c:d6:7e:2c:75:ce:c7:
         75:fe:e6:a3:24:b1:b1:d2:c6:43:58:fa:c9:47:7d:80:91:db:
         be:eb:b0:d8:98:1c:6f:93:cd:cc:60:2e:9b:25:38:3e:42:5d:
         df:df:70:fd:53:b4:7c:97:52:39:01:d6:35:c3:4f:03:67:b0:
         64:ed:54:ed:78:ca:72:d0:b7:b0:f3:34:08:e7:e9:e1:70:66:
         92:8c:8b:e2:e5:57:9c:10:c1:cd:c7:f4:7a:dc:8b:0c:91:df:
         b2:c1:71:3a:be:13:c5:26:02:08:73:a0:1c:e7:21:77:f5:a9:
         76:4f:eb:40:fa:d7:9a:eb:0b:6d:fa:c5:30:d3:e5:06:17:37:
         69:61:5c:bf:86:3a:46:a6:33:e6:01:94:fa:2d:74:60:f1:88:
         5a:e9:61:ac
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUP24AEnQLOw4oi3tjajODHxCix9UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjUyNkQyRkQ5QTNFQzI2RUQ2RTNFQUQ2MTFFNTk0RTZC
RTBBMkU5OTAeFw0yNDA4MTUxNzA2NThaFw0yNTA4MTQxNzExNThaMDMxMTAvBgNV
BAMTKEJFMjc1NzM0RjQ5RkQ5OUM1NzEyQjI0MDE2ODBGREVGNUMzNjNFQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6c7qXua/mSGTbOsPzQB24azLi
lwDGaPRrEUqFrugbgXCHxfSr0cQ3XF+aUjGAQ6VHwOCYexKrsggtuv1g7kUX1Y3I
tqDgZ9C20HCzgl86vci8ONu2MUfl+wchSbpQB+VZOWHtN2NRWR+oGQNYJOKNlAyo
qKzZiHnclI+rU4n76gsDIzkfAZR6lXcR5F4B8oMi5ctHrDGbgRiAgBYhCGKP2EaH
F2n7oxQ7BQw3m/rUVdfqRzA3rry7WSjSrUhkPxKFlgeqoYxDx4BpPhXfle8onq5e
VcBn63kYGBj2ABXJRGTb84Bu8XBQRZ6ajsB1JeaEnwXgBsajPo6k0qjTutGjAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUvidXNPSf2ZxXErJAFoD971w2PqEwHwYDVR0j
BBgwFoAU9SbS/Zo+wm7W4+rWEeWU5r4KLpkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1dhc0haOU1tTUd3NGRZY3FIR2hOV0ZIYW04VVdRZTVCdWZuRzRMSkRw
MmovMC9GNTI2RDJGRDlBM0VDMjZFRDZFM0VBRDYxMUU1OTRFNkJFMEEyRTk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y1MjZEMkZEOUEzRUMyNkVE
NkUzRUFENjExRTU5NEU2QkUwQTJFOTkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdXYXNIWjlNbU1HdzRkWWNxSEdoTldGSGFtOFVXUWU1QnVmbkc0TEpEcDJqLzAv
MzEzNjMwMmUzMjMzMzgyZTMyMzIzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNjM1MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAaDu4jANBgkqhkiG9w0BAQsFAAOCAQEAd5Un
OWG9JFNGOPzpnhHz8pGQ7dUCZCDirsTCs6CLdGXpgJa/T8qb8JtbLatOa54Mslbw
9urr18M3ZglI0ZAopwKn8Q4191blT/Pk8bSqIpwtm4m+2r6hqiNZ7IeBek94vwBh
XskM1n4sdc7Hdf7moySxsdLGQ1j6yUd9gJHbvuuw2Jgcb5PNzGAumyU4PkJd399w
/VO0fJdSOQHWNcNPA2ewZO1U7XjKctC3sPM0COfp4XBmkoyL4uVXnBDBzcf0etyL
DJHfssFxOr4TxSYCCHOgHOchd/Wpdk/rQPrXmusLbfrFMNPlBhc3aWFcv4Y6RqYz
5gGU+i10YPGIWulhrA==
-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:49 2024 by rpki-client on console-fra.rpki-client.org