Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/3136302e3233382e3232362e302f32342d3234203d3e20323636353531.roa
File:                     3136302e3233382e3232362e302f32342d3234203d3e20323636353531.roa (raw, json)
Hash identifier:          YW1zrGlGgOW76jL6C/JaUMLJHB+u4gwUnqhNvzqhW4c=
Subject key identifier:   0F:66:1A:AE:3F:AF:71:A8:D7:86:68:6E:94:89:D2:D6:55:A5:75:A8
Certificate issuer:       /CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
Certificate serial:       6736C838F754CFFA454169763D7A1134F727DD1A
Authority key identifier: F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/3136302e3233382e3232362e302f32342d3234203d3e20323636353531.roa
Signing time:             Thu 15 Aug 2024 17:11:57 +0000
ROA not before:           Thu 15 Aug 2024 17:06:57 +0000
ROA not after:            Thu 14 Aug 2025 17:11:57 +0000
asID:                     266551
IP address blocks:        160.238.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl
                          rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:25:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:36:c8:38:f7:54:cf:fa:45:41:69:76:3d:7a:11:34:f7:27:dd:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
        Validity
            Not Before: Aug 15 17:06:57 2024 GMT
            Not After : Aug 14 17:11:57 2025 GMT
        Subject: CN=0F661AAE3FAF71A8D786686E9489D2D655A575A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d4:da:c2:ce:ff:6c:b4:de:7d:fe:c2:38:74:
                    ea:95:d9:92:0d:4e:17:32:6d:d2:8f:48:1a:3e:5e:
                    bf:28:c6:00:b5:5f:26:28:4f:a7:c8:8d:03:8e:eb:
                    50:53:05:79:fa:0f:73:14:c9:99:7e:1a:90:e2:2f:
                    e7:df:a8:50:a4:79:6a:2f:3c:bc:f1:32:cd:03:84:
                    a1:03:bb:1f:97:2c:be:72:00:f3:b6:81:74:fa:fb:
                    10:6f:93:8e:61:2b:b9:f6:b7:2d:1c:98:a7:cf:f7:
                    2c:df:d7:1d:66:f7:60:62:66:9f:96:e5:77:cd:b5:
                    58:d7:a7:c7:c8:60:f3:0a:2b:87:3a:e5:03:e7:c1:
                    21:92:eb:5f:99:4f:15:f9:d3:32:af:1b:ee:a2:a3:
                    b7:d9:36:71:06:44:6c:cd:5f:3c:fa:44:36:59:16:
                    fe:b4:14:12:87:b2:b7:ed:6a:14:9c:fd:14:07:b6:
                    ad:bd:b5:e0:df:01:1c:e9:51:8d:86:7b:c0:cd:75:
                    2b:91:b7:ea:77:65:ec:c9:cb:96:75:4c:b5:ff:3b:
                    11:d0:ba:96:a8:60:83:66:82:45:0a:ae:5a:f7:ef:
                    01:1d:ee:80:ac:5a:f0:86:4d:df:9c:a2:b8:b3:3a:
                    f1:4f:53:a7:1f:94:78:14:14:dc:9d:40:85:80:d5:
                    bf:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:66:1A:AE:3F:AF:71:A8:D7:86:68:6E:94:89:D2:D6:55:A5:75:A8
            X509v3 Authority Key Identifier:
                keyid:F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/3136302e3233382e3232362e302f32342d3234203d3e20323636353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:fd:a1:c7:06:0e:87:c5:9c:5a:1f:43:9b:62:90:f0:2d:0c:
         8a:56:41:a7:aa:bb:f7:ce:d2:0f:16:65:75:1c:ee:77:94:5a:
         96:55:66:e9:7c:0e:14:08:bd:d1:a5:03:4b:5c:63:79:15:2d:
         13:6a:cb:90:57:d5:0f:30:1f:ee:a3:8a:31:cc:e0:d5:47:6a:
         03:50:e6:72:f0:88:99:bb:61:74:4b:ee:8b:d2:75:5e:1f:fd:
         a6:d4:0a:ae:18:ad:6b:53:8a:69:34:c5:19:2f:32:f2:a6:51:
         2b:af:af:75:df:2c:8b:99:26:87:b5:04:3b:b8:60:f3:ac:6b:
         88:e9:7c:cb:ec:85:b9:ef:ed:cd:18:c5:2d:96:d6:80:21:00:
         9a:dc:f7:28:31:6d:a6:3f:4a:cd:22:63:31:a3:68:55:30:71:
         60:cd:fd:f3:7f:2e:b0:83:8b:12:d8:f3:6e:da:23:9b:6e:37:
         6e:9f:10:74:82:87:50:aa:1c:59:9a:83:3e:88:b1:b4:24:14:
         c2:89:a1:e2:44:bf:89:40:34:2b:d2:c4:9f:f5:3c:ea:f9:95:
         a0:56:64:3d:fe:09:de:8c:30:3f:56:1c:a6:7b:56:af:80:e6:
         ff:b0:37:a0:72:b2:43:9c:38:db:b6:32:1d:a5:78:70:86:3a:
         82:2d:f2:21
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUZzbIOPdUz/pFQWl2PXoRNPcn3RowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjUyNkQyRkQ5QTNFQzI2RUQ2RTNFQUQ2MTFFNTk0RTZC
RTBBMkU5OTAeFw0yNDA4MTUxNzA2NTdaFw0yNTA4MTQxNzExNTdaMDMxMTAvBgNV
BAMTKDBGNjYxQUFFM0ZBRjcxQThENzg2Njg2RTk0ODlEMkQ2NTVBNTc1QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX1NrCzv9stN59/sI4dOqV2ZIN
ThcybdKPSBo+Xr8oxgC1XyYoT6fIjQOO61BTBXn6D3MUyZl+GpDiL+ffqFCkeWov
PLzxMs0DhKEDux+XLL5yAPO2gXT6+xBvk45hK7n2ty0cmKfP9yzf1x1m92BiZp+W
5XfNtVjXp8fIYPMKK4c65QPnwSGS61+ZTxX50zKvG+6io7fZNnEGRGzNXzz6RDZZ
Fv60FBKHsrftahSc/RQHtq29teDfARzpUY2Ge8DNdSuRt+p3ZezJy5Z1TLX/OxHQ
upaoYINmgkUKrlr37wEd7oCsWvCGTd+corizOvFPU6cflHgUFNydQIWA1b9ZAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUD2Yarj+vcajXhmhulInS1lWldagwHwYDVR0j
BBgwFoAU9SbS/Zo+wm7W4+rWEeWU5r4KLpkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1dhc0haOU1tTUd3NGRZY3FIR2hOV0ZIYW04VVdRZTVCdWZuRzRMSkRw
MmovMC9GNTI2RDJGRDlBM0VDMjZFRDZFM0VBRDYxMUU1OTRFNkJFMEEyRTk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y1MjZEMkZEOUEzRUMyNkVE
NkUzRUFENjExRTU5NEU2QkUwQTJFOTkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdXYXNIWjlNbU1HdzRkWWNxSEdoTldGSGFtOFVXUWU1QnVmbkc0TEpEcDJqLzAv
MzEzNjMwMmUzMjMzMzgyZTMyMzIzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNjM1MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKDu4jANBgkqhkiG9w0BAQsFAAOCAQEAfv2h
xwYOh8WcWh9Dm2KQ8C0MilZBp6q7987SDxZldRzud5RallVm6XwOFAi90aUDS1xj
eRUtE2rLkFfVDzAf7qOKMczg1UdqA1DmcvCImbthdEvui9J1Xh/9ptQKrhita1OK
aTTFGS8y8qZRK6+vdd8si5kmh7UEO7hg86xriOl8y+yFue/tzRjFLZbWgCEAmtz3
KDFtpj9KzSJjMaNoVTBxYM39838usIOLEtjzbtojm243bp8QdIKHUKocWZqDPoix
tCQUwomh4kS/iUA0K9LEn/U86vmVoFZkPf4J3owwP1YcpntWr4Dm/7A3oHKyQ5w4
27YyHaV4cIY6gi3yIQ==
-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:49 2024 by rpki-client on console-fra.rpki-client.org