Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/1/3137302e38332e3230382e302f32322d3232203d3e203532353933.roa
File:                     3137302e38332e3230382e302f32322d3232203d3e203532353933.roa (raw, json)
Hash identifier:          bilS3tlOxVEo6JKEozcvnjVJxpMPazLy+Qzp4XMAv7A=
Subject key identifier:   C8:B0:4B:E4:CF:B8:4B:02:19:52:26:A3:FC:B3:22:51:56:F5:C6:4D
Certificate issuer:       /CN=71F86B10A77D1BB0176438DDC470DFE2D19A6F14
Certificate serial:       1EAE320792991D57A217EEE368F6C72BF84FA448
Authority key identifier: 71:F8:6B:10:A7:7D:1B:B0:17:64:38:DD:C4:70:DF:E2:D1:9A:6F:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71F86B10A77D1BB0176438DDC470DFE2D19A6F14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/1/3137302e38332e3230382e302f32322d3232203d3e203532353933.roa
Signing time:             Wed 03 Apr 2024 22:00:32 +0000
ROA not before:           Wed 03 Apr 2024 21:55:32 +0000
ROA not after:            Wed 02 Apr 2025 22:00:32 +0000
asID:                     52593
IP address blocks:        170.83.208.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/1/71F86B10A77D1BB0176438DDC470DFE2D19A6F14.crl
                          rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/1/71F86B10A77D1BB0176438DDC470DFE2D19A6F14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71F86B10A77D1BB0176438DDC470DFE2D19A6F14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:06:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ae:32:07:92:99:1d:57:a2:17:ee:e3:68:f6:c7:2b:f8:4f:a4:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F86B10A77D1BB0176438DDC470DFE2D19A6F14
        Validity
            Not Before: Apr  3 21:55:32 2024 GMT
            Not After : Apr  2 22:00:32 2025 GMT
        Subject: CN=C8B04BE4CFB84B02195226A3FCB3225156F5C64D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:99:61:40:16:8c:a9:1b:c3:ad:04:30:a7:b7:
                    ae:a4:62:80:86:cd:5b:55:d3:3a:59:68:f8:5c:95:
                    a5:c2:59:b3:c4:e0:39:97:20:35:9a:6a:d0:14:e3:
                    df:06:21:68:08:f1:42:18:73:29:19:30:a7:74:d4:
                    d4:66:3c:5f:d0:d6:da:64:fd:10:56:1b:1f:61:d4:
                    76:1b:44:ee:67:d5:77:d6:ed:ed:d6:98:8f:59:f2:
                    3a:ae:45:4b:ab:8a:ae:23:93:f2:17:cf:64:e3:13:
                    c0:75:2a:7a:dc:79:20:c7:5d:ab:b7:66:7d:84:7d:
                    60:30:c9:bf:95:53:b4:1e:9a:54:ad:32:fa:cf:91:
                    36:76:d0:f0:63:67:0e:f0:ba:ed:ac:58:96:ec:82:
                    a8:a8:56:bf:2e:0e:67:10:41:5c:98:df:ab:86:7d:
                    54:b2:be:0a:9e:1a:c7:e4:ae:54:a5:dd:6a:03:22:
                    93:38:34:c3:cd:cd:84:3b:03:61:79:e2:cd:bc:24:
                    97:63:69:02:41:f2:70:e5:f7:08:dc:4b:10:f2:c7:
                    f6:cd:4b:8b:ca:1a:23:80:76:4b:d0:0a:d0:da:6c:
                    a5:de:ae:c5:57:91:ae:52:99:09:fa:df:49:ec:dd:
                    ba:8a:b4:c2:ce:4e:79:a6:64:0c:37:ab:a6:47:58:
                    cc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B0:4B:E4:CF:B8:4B:02:19:52:26:A3:FC:B3:22:51:56:F5:C6:4D
            X509v3 Authority Key Identifier:
                keyid:71:F8:6B:10:A7:7D:1B:B0:17:64:38:DD:C4:70:DF:E2:D1:9A:6F:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/1/71F86B10A77D1BB0176438DDC470DFE2D19A6F14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71F86B10A77D1BB0176438DDC470DFE2D19A6F14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MSVXq2ApoPiZRqZaPC3rq76nYLTUKg7T9KZQaZXwMH7/1/3137302e38332e3230382e302f32322d3232203d3e203532353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:e4:64:49:ca:bd:41:24:94:99:7a:01:dc:a5:69:ce:b7:86:
         1b:1e:e1:9c:4e:c5:ce:6d:2c:99:05:0e:ce:31:c7:f7:25:94:
         e0:82:2a:cf:b9:cb:38:72:f2:de:a6:b6:9a:d1:a3:12:bf:27:
         cf:bc:aa:b3:55:9d:6e:ff:80:50:3e:bc:59:44:f1:ac:66:4a:
         b0:29:da:39:df:dc:c2:85:50:a6:a9:0b:97:df:29:86:7b:bb:
         af:80:9a:06:56:42:d7:63:01:cb:c8:5c:62:c3:de:e4:91:17:
         a2:70:15:be:22:16:16:00:63:be:20:4a:32:39:9b:d2:91:60:
         2a:84:9a:e9:25:f2:69:22:79:f4:f6:7c:ce:f4:b8:4d:a0:4d:
         fa:b0:44:1f:5a:cf:35:80:43:37:4c:68:11:f2:14:42:03:57:
         53:13:06:ac:e9:b6:70:22:e3:df:bd:57:ba:2d:e5:1b:f8:3e:
         a1:17:a0:4f:8b:ba:dd:ba:06:7c:db:9e:d6:9d:1a:69:b0:65:
         ba:66:be:8e:5b:30:5e:21:7b:69:b7:83:a3:84:3f:c7:5b:96:
         2f:5f:1f:58:f9:ad:da:3e:ab:48:6a:36:c8:1f:4e:69:bd:62:
         52:f6:c1:8b:6b:ed:0e:d4:23:81:27:32:b6:ae:6b:12:08:4f:
         69:6c:33:5f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHq4yB5KZHVeiF+7jaPbHK/hPpEgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFGODZCMTBBNzdEMUJCMDE3NjQzOEREQzQ3MERGRTJE
MTlBNkYxNDAeFw0yNDA0MDMyMTU1MzJaFw0yNTA0MDIyMjAwMzJaMDMxMTAvBgNV
BAMTKEM4QjA0QkU0Q0ZCODRCMDIxOTUyMjZBM0ZDQjMyMjUxNTZGNUM2NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwmWFAFoypG8OtBDCnt66kYoCG
zVtV0zpZaPhclaXCWbPE4DmXIDWaatAU498GIWgI8UIYcykZMKd01NRmPF/Q1tpk
/RBWGx9h1HYbRO5n1XfW7e3WmI9Z8jquRUuriq4jk/IXz2TjE8B1KnrceSDHXau3
Zn2EfWAwyb+VU7QemlStMvrPkTZ20PBjZw7wuu2sWJbsgqioVr8uDmcQQVyY36uG
fVSyvgqeGsfkrlSl3WoDIpM4NMPNzYQ7A2F54s28JJdjaQJB8nDl9wjcSxDyx/bN
S4vKGiOAdkvQCtDabKXersVXka5SmQn630ns3bqKtMLOTnmmZAw3q6ZHWMzvAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUyLBL5M+4SwIZUiaj/LMiUVb1xk0wHwYDVR0j
BBgwFoAUcfhrEKd9G7AXZDjdxHDf4tGabxQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOE1TVlhxMkFwb1BpWlJxWmFQQzNycTc2bllMVFVLZzdUOUtaUWFaWHdN
SDcvMS83MUY4NkIxMEE3N0QxQkIwMTc2NDM4RERDNDcwREZFMkQxOUE2RjE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcxRjg2QjEwQTc3RDFCQjAx
NzY0MzhEREM0NzBERkUyRDE5QTZGMTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhNU1ZYcTJBcG9QaVpScVphUEMzcnE3Nm5ZTFRVS2c3VDlLWlFhWlh3TUg3LzEv
MzEzNzMwMmUzODMzMmUzMjMwMzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTMy
MzUzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqlPQMA0GCSqGSIb3DQEBCwUAA4IBAQCr5GRJyr1B
JJSZegHcpWnOt4YbHuGcTsXObSyZBQ7OMcf3JZTggirPucs4cvLepraa0aMSvyfP
vKqzVZ1u/4BQPrxZRPGsZkqwKdo539zChVCmqQuX3ymGe7uvgJoGVkLXYwHLyFxi
w97kkReicBW+IhYWAGO+IEoyOZvSkWAqhJrpJfJpInn09nzO9LhNoE36sEQfWs81
gEM3TGgR8hRCA1dTEwas6bZwIuPfvVe6LeUb+D6hF6BPi7rdugZ8257WnRppsGW6
Zr6OWzBeIXtpt4OjhD/HW5YvXx9Y+a3aPqtIajbIH05pvWJS9sGLa+0O1COBJzK2
rmsSCE9pbDNf
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:38 2024 by rpki-client on console-ams.rpki-client.org