Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/3137302e3235342e3131362e302f32322d3234203d3e20323632333734.roa
File:                     3137302e3235342e3131362e302f32322d3234203d3e20323632333734.roa (raw, json)
Hash identifier:          cWVbnd6FSSGlgBpVAsduPDpzdpYxlK77Icebh/Q2hnc=
Subject key identifier:   8C:EE:64:57:73:92:35:66:DD:C4:BB:73:0C:62:F3:DC:2B:92:28:6F
Certificate issuer:       /CN=DB4CB9D69698BEBD07A155C70C762C9A217B4706
Certificate serial:       71E31B46385C43E7261AA0EBF0692ED5F5556223
Authority key identifier: DB:4C:B9:D6:96:98:BE:BD:07:A1:55:C7:0C:76:2C:9A:21:7B:47:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/3137302e3235342e3131362e302f32322d3234203d3e20323632333734.roa
Signing time:             Thu 04 Apr 2024 08:26:55 +0000
ROA not before:           Thu 04 Apr 2024 08:21:55 +0000
ROA not after:            Thu 03 Apr 2025 08:26:55 +0000
asID:                     262374
IP address blocks:        170.254.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.crl
                          rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:e3:1b:46:38:5c:43:e7:26:1a:a0:eb:f0:69:2e:d5:f5:55:62:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB4CB9D69698BEBD07A155C70C762C9A217B4706
        Validity
            Not Before: Apr  4 08:21:55 2024 GMT
            Not After : Apr  3 08:26:55 2025 GMT
        Subject: CN=8CEE645773923566DDC4BB730C62F3DC2B92286F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8e:d9:8b:51:5c:59:5d:c3:b6:93:04:3a:54:
                    df:d9:26:e7:f5:7e:db:c7:1c:9d:1e:ff:24:ae:74:
                    d5:19:27:59:ba:47:57:fe:5b:ec:22:cc:3c:12:b2:
                    3c:9b:63:33:b8:fd:38:e0:3e:77:63:93:40:ec:5d:
                    59:33:21:16:5e:00:19:90:e6:1a:5a:d1:ce:6c:b6:
                    f1:c5:89:d7:ef:cf:e1:6b:74:5f:db:23:50:2f:23:
                    ab:e3:5c:2e:8f:76:9d:d5:c1:b5:4d:9f:0c:44:e8:
                    e9:17:b6:ba:ac:1f:b5:0c:e7:4e:e2:aa:4c:d7:da:
                    f3:22:10:b4:e3:02:75:29:b1:b5:49:52:ab:14:33:
                    ba:3b:0d:93:ca:17:d0:d5:bf:2a:7c:6c:79:97:ba:
                    13:86:e2:fa:06:0d:ca:1f:20:48:d7:3c:12:4f:fc:
                    a3:c9:f8:10:76:e8:3e:18:3d:01:1e:42:b8:bf:59:
                    6c:db:c5:3c:e1:86:27:44:32:3d:db:b4:f9:ac:65:
                    19:ab:30:ce:d1:b8:9e:67:17:8d:9b:67:35:4e:ce:
                    37:12:01:3e:0c:2d:1c:78:ed:6f:38:8b:5d:c6:6e:
                    9a:13:d3:d5:95:b7:b0:b3:33:30:66:43:db:d0:ff:
                    57:3e:09:52:98:8b:54:17:c3:43:f4:21:6b:9b:da:
                    b2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:EE:64:57:73:92:35:66:DD:C4:BB:73:0C:62:F3:DC:2B:92:28:6F
            X509v3 Authority Key Identifier:
                keyid:DB:4C:B9:D6:96:98:BE:BD:07:A1:55:C7:0C:76:2C:9A:21:7B:47:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB4CB9D69698BEBD07A155C70C762C9A217B4706.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/1/3137302e3235342e3131362e302f32322d3234203d3e20323632333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:16:46:06:db:91:f2:b5:79:8b:99:b6:15:7e:42:88:b4:6b:
         83:3d:19:cc:d4:f5:60:06:3c:6f:aa:ff:85:6c:24:dc:53:68:
         ba:16:44:22:74:0d:83:50:5b:af:5d:22:61:1c:9e:f3:c0:94:
         af:0c:0c:e9:50:d3:bb:37:67:b8:78:a0:70:97:c5:c2:f7:8b:
         fb:de:89:52:09:80:33:99:f5:9f:7b:cd:84:0d:a8:e1:58:6d:
         51:7a:47:a6:76:25:cd:2e:dc:56:f2:ae:ae:21:ea:51:8c:cf:
         bd:78:00:3a:32:ea:a3:e0:06:c6:47:c8:f8:01:20:20:eb:09:
         83:3c:5f:4f:b0:c7:1a:0f:0c:16:09:e0:60:f7:ae:09:ea:14:
         f5:0f:e2:2b:5d:c8:4d:29:b2:cf:bf:10:84:d0:47:ef:a4:74:
         60:b3:61:ca:70:1e:b6:fb:2e:2a:1e:4c:52:6e:1f:50:bd:ac:
         5c:5d:4d:ef:81:c5:2e:b6:de:fd:e8:02:fb:c5:52:6a:0b:d2:
         c9:b0:c1:ee:41:f7:8a:e7:db:c1:f9:63:e2:91:c9:7a:1c:50:
         b8:b7:24:7d:85:d8:de:2b:13:3f:1e:42:b3:8c:76:6b:39:bd:
         b6:2f:ac:53:1e:35:80:e9:4b:69:6b:b0:4f:d7:76:76:75:73:
         66:36:5d:5c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUceMbRjhcQ+cmGqDr8Gku1fVVYiMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI0Q0I5RDY5Njk4QkVCRDA3QTE1NUM3MEM3NjJDOUEy
MTdCNDcwNjAeFw0yNDA0MDQwODIxNTVaFw0yNTA0MDMwODI2NTVaMDMxMTAvBgNV
BAMTKDhDRUU2NDU3NzM5MjM1NjZEREM0QkI3MzBDNjJGM0RDMkI5MjI4NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDljtmLUVxZXcO2kwQ6VN/ZJuf1
ftvHHJ0e/ySudNUZJ1m6R1f+W+wizDwSsjybYzO4/TjgPndjk0DsXVkzIRZeABmQ
5hpa0c5stvHFidfvz+FrdF/bI1AvI6vjXC6Pdp3VwbVNnwxE6OkXtrqsH7UM507i
qkzX2vMiELTjAnUpsbVJUqsUM7o7DZPKF9DVvyp8bHmXuhOG4voGDcofIEjXPBJP
/KPJ+BB26D4YPQEeQri/WWzbxTzhhidEMj3btPmsZRmrMM7RuJ5nF42bZzVOzjcS
AT4MLRx47W84i13GbpoT09WVt7CzMzBmQ9vQ/1c+CVKYi1QXw0P0IWub2rIhAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUjO5kV3OSNWbdxLtzDGLz3CuSKG8wHwYDVR0j
BBgwFoAU20y51paYvr0HoVXHDHYsmiF7RwYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGVraDVOd0pySmk4OWNLWTlvS3g0YVVLMXNoTFVCazk5ZE53RUh6N1c1
Sm4vMS9EQjRDQjlENjk2OThCRUJEMDdBMTU1QzcwQzc2MkM5QTIxN0I0NzA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCNENCOUQ2OTY5OEJFQkQw
N0ExNTVDNzBDNzYyQzlBMjE3QjQ3MDYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzhla2g1TndKckppODljS1k5b0t4NGFVSzFzaExVQms5OWROd0VIejdXNUpuLzEv
MzEzNzMwMmUzMjM1MzQyZTMxMzEzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMjMzMzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqr+dDANBgkqhkiG9w0BAQsFAAOCAQEAlBZG
BtuR8rV5i5m2FX5CiLRrgz0ZzNT1YAY8b6r/hWwk3FNouhZEInQNg1Bbr10iYRye
88CUrwwM6VDTuzdnuHigcJfFwveL+96JUgmAM5n1n3vNhA2o4VhtUXpHpnYlzS7c
VvKuriHqUYzPvXgAOjLqo+AGxkfI+AEgIOsJgzxfT7DHGg8MFgngYPeuCeoU9Q/i
K13ITSmyz78QhNBH76R0YLNhynAetvsuKh5MUm4fUL2sXF1N74HFLrbe/egC+8VS
agvSybDB7kH3iufbwflj4pHJehxQuLckfYXY3isTPx5Cs4x2azm9ti+sUx41gOlL
aWuwT9d2dnVzZjZdXA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:39 2024 by rpki-client on console-ams.rpki-client.org