Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/3230302e3131352e3130342e302f32322d3232203d3e20323730323636.roa
File:                     3230302e3131352e3130342e302f32322d3232203d3e20323730323636.roa (raw, json)
Hash identifier:          D1uNpd5Ucz/RHWm1J8cwN9oFLlsIQXwIF0TxQPMZ1ac=
Subject key identifier:   DB:E1:15:36:17:E7:15:27:BB:4D:5C:C1:E4:F0:C0:B4:19:DE:96:DA
Certificate issuer:       /CN=870ECD744DA9DDF67A2979EDD029C3D444043EF8
Certificate serial:       4EFFD9A9097E22E655F970A9CF0A1C41D4C019CD
Authority key identifier: 87:0E:CD:74:4D:A9:DD:F6:7A:29:79:ED:D0:29:C3:D4:44:04:3E:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/3230302e3131352e3130342e302f32322d3232203d3e20323730323636.roa
Signing time:             Thu 04 Apr 2024 23:09:32 +0000
ROA not before:           Thu 04 Apr 2024 23:04:32 +0000
ROA not after:            Thu 03 Apr 2025 23:09:32 +0000
asID:                     270266
IP address blocks:        200.115.104.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.crl
                          rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ff:d9:a9:09:7e:22:e6:55:f9:70:a9:cf:0a:1c:41:d4:c0:19:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870ECD744DA9DDF67A2979EDD029C3D444043EF8
        Validity
            Not Before: Apr  4 23:04:32 2024 GMT
            Not After : Apr  3 23:09:32 2025 GMT
        Subject: CN=DBE1153617E71527BB4D5CC1E4F0C0B419DE96DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:71:63:b6:74:11:0e:d9:58:b4:32:2d:be:8a:
                    cf:9c:db:ee:d2:8d:e4:79:47:a9:c8:7e:73:88:b1:
                    3c:db:40:2f:98:97:e7:78:19:c5:da:aa:49:55:9e:
                    84:53:53:3d:7e:62:1c:e6:d7:4b:7b:69:e3:44:c5:
                    3a:31:e9:e7:c5:8a:b4:7d:42:48:d7:52:3b:a9:c6:
                    92:03:5c:7a:bb:1c:84:8c:d3:13:71:4d:27:97:cc:
                    4b:6c:f6:fe:8d:ac:02:bf:45:98:c4:3a:df:93:34:
                    c1:48:bb:bc:87:95:7b:4c:5e:48:dd:c7:2b:13:a9:
                    1d:f2:0f:be:ac:3a:3d:4f:18:c0:a0:e4:14:66:5e:
                    ce:02:16:58:55:3d:a0:92:bb:31:fc:ca:fe:6b:1b:
                    d1:6e:32:91:e8:3e:1f:da:be:81:29:f5:67:4d:58:
                    48:11:6b:23:3e:bd:2f:23:06:b1:96:fe:8f:3f:68:
                    27:0f:42:a6:81:7b:fb:55:f3:98:42:a3:8c:59:63:
                    92:4c:0e:87:a3:06:a3:6b:93:4c:c9:43:aa:51:1f:
                    9e:90:75:4f:37:45:df:4e:78:36:7a:0e:a5:7d:44:
                    1a:92:80:82:a8:d8:04:dd:ab:8b:24:0c:90:ff:48:
                    6d:1a:2f:c7:84:28:58:69:ff:40:27:f8:5d:9d:72:
                    e9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E1:15:36:17:E7:15:27:BB:4D:5C:C1:E4:F0:C0:B4:19:DE:96:DA
            X509v3 Authority Key Identifier:
                keyid:87:0E:CD:74:4D:A9:DD:F6:7A:29:79:ED:D0:29:C3:D4:44:04:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870ECD744DA9DDF67A2979EDD029C3D444043EF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XruQaHvLTMgWqYNbE6MzJuCzr4dGbVcUR4QKyPfWspy/1/3230302e3131352e3130342e302f32322d3232203d3e20323730323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:92:fd:69:fe:5c:8a:b2:00:ca:65:42:05:fe:fb:ed:ff:3e:
         ce:20:5f:30:30:ad:a6:4d:9f:2f:32:03:38:51:f5:7f:18:6c:
         da:76:ca:ad:44:a6:7d:03:52:fd:25:af:35:3e:45:a5:3f:45:
         23:24:7c:13:6d:99:df:73:d2:1c:47:e5:be:6f:78:ae:c8:bf:
         37:80:af:54:56:af:5c:3b:6a:ed:3d:0a:4f:37:32:04:a4:2f:
         c4:91:52:1a:91:a9:51:39:a7:34:d1:9f:98:80:9a:aa:d0:1c:
         4b:8c:fa:5c:9f:e9:46:9e:83:e8:e0:99:15:1e:9f:1d:c3:16:
         f8:00:90:56:3f:a1:72:79:0f:1e:86:a3:09:3e:50:9b:ed:40:
         e6:96:09:45:07:ab:be:e1:d9:74:f2:e1:6a:cb:b2:9a:97:2f:
         82:00:57:22:48:64:63:0b:5d:1a:3b:15:39:2f:c9:53:68:01:
         67:5a:51:6a:49:ac:f0:6a:f3:d1:7b:e5:23:30:9c:fa:fa:90:
         22:33:82:cb:5c:47:85:76:84:c1:fa:c4:30:ca:72:85:36:9a:
         5a:25:9d:bc:28:88:f5:eb:40:4e:f4:46:5a:9b:b1:46:49:e3:
         54:b7:8e:72:b2:b0:b5:f2:3d:2a:60:fa:5b:a2:45:6c:4e:b4:
         6d:32:7a:6d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUTv/ZqQl+IuZV+XCpzwocQdTAGc0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODcwRUNENzQ0REE5RERGNjdBMjk3OUVERDAyOUMzRDQ0
NDA0M0VGODAeFw0yNDA0MDQyMzA0MzJaFw0yNTA0MDMyMzA5MzJaMDMxMTAvBgNV
BAMTKERCRTExNTM2MTdFNzE1MjdCQjRENUNDMUU0RjBDMEI0MTlERTk2REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3cWO2dBEO2Vi0Mi2+is+c2+7S
jeR5R6nIfnOIsTzbQC+Yl+d4GcXaqklVnoRTUz1+Yhzm10t7aeNExTox6efFirR9
QkjXUjupxpIDXHq7HISM0xNxTSeXzEts9v6NrAK/RZjEOt+TNMFIu7yHlXtMXkjd
xysTqR3yD76sOj1PGMCg5BRmXs4CFlhVPaCSuzH8yv5rG9FuMpHoPh/avoEp9WdN
WEgRayM+vS8jBrGW/o8/aCcPQqaBe/tV85hCo4xZY5JMDoejBqNrk0zJQ6pRH56Q
dU83Rd9OeDZ6DqV9RBqSgIKo2ATdq4skDJD/SG0aL8eEKFhp/0An+F2dcukpAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU2+EVNhfnFSe7TVzB5PDAtBneltowHwYDVR0j
BBgwFoAUhw7NdE2p3fZ6KXnt0CnD1EQEPvgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1hydVFhSHZMVE1nV3FZTmJFNk16SnVDenI0ZEdiVmNVUjRRS3lQZldz
cHkvMS84NzBFQ0Q3NDREQTlEREY2N0EyOTc5RUREMDI5QzNENDQ0MDQzRUY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3MEVDRDc0NERBOURERjY3
QTI5NzlFREQwMjlDM0Q0NDQwNDNFRjguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdYcnVRYUh2TFRNZ1dxWU5iRTZNekp1Q3pyNGRHYlZjVVI0UUt5UGZXc3B5LzEv
MzIzMDMwMmUzMTMxMzUyZTMxMzAzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzczMDMyMzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAshzaDANBgkqhkiG9w0BAQsFAAOCAQEAjpL9
af5cirIAymVCBf777f8+ziBfMDCtpk2fLzIDOFH1fxhs2nbKrUSmfQNS/SWvNT5F
pT9FIyR8E22Z33PSHEflvm94rsi/N4CvVFavXDtq7T0KTzcyBKQvxJFSGpGpUTmn
NNGfmICaqtAcS4z6XJ/pRp6D6OCZFR6fHcMW+ACQVj+hcnkPHoajCT5Qm+1A5pYJ
RQervuHZdPLhasuympcvggBXIkhkYwtdGjsVOS/JU2gBZ1pRakms8Grz0XvlIzCc
+vqQIjOCy1xHhXaEwfrEMMpyhTaaWiWdvCiI9etATvRGWpuxRknjVLeOcrKwtfI9
KmD6W6JFbE60bTJ6bQ==
-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:56 2024 by rpki-client on console-fra.rpki-client.org