Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/3137302e3233332e33392e302f32342d3234203d3e20323635313831.roa
File:                     3137302e3233332e33392e302f32342d3234203d3e20323635313831.roa (raw, json)
Hash identifier:          aUt52ZtdKfw8Dn0CuNvg5uRRQNclHG720d3/AUT3ZkA=
Subject key identifier:   32:56:DF:33:FB:25:1C:60:C1:DD:00:B3:62:72:AE:3F:24:14:87:32
Certificate issuer:       /CN=6CD0AD4431CC221750D8F2C0EC9EF30543B7D244
Certificate serial:       6E9B8141ABBFC4E7BE173DED560488E93D25CE4C
Authority key identifier: 6C:D0:AD:44:31:CC:22:17:50:D8:F2:C0:EC:9E:F3:05:43:B7:D2:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/3137302e3233332e33392e302f32342d3234203d3e20323635313831.roa
Signing time:             Thu 04 Apr 2024 03:52:22 +0000
ROA not before:           Thu 04 Apr 2024 03:47:22 +0000
ROA not after:            Thu 03 Apr 2025 03:52:22 +0000
asID:                     265181
IP address blocks:        170.233.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.crl
                          rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 17:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:9b:81:41:ab:bf:c4:e7:be:17:3d:ed:56:04:88:e9:3d:25:ce:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD0AD4431CC221750D8F2C0EC9EF30543B7D244
        Validity
            Not Before: Apr  4 03:47:22 2024 GMT
            Not After : Apr  3 03:52:22 2025 GMT
        Subject: CN=3256DF33FB251C60C1DD00B36272AE3F24148732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7f:02:16:a9:6c:25:06:38:8b:cc:da:63:5f:
                    cf:3e:6c:4c:ab:5d:a2:9b:7a:ed:c6:53:f5:73:11:
                    cc:7d:bc:80:46:7a:2b:7f:33:5a:b6:ce:96:d2:42:
                    57:61:5f:71:2a:1e:d0:63:66:4d:bc:82:8e:ff:03:
                    fa:9d:50:7b:16:c2:cb:8a:a0:72:db:ea:12:88:b0:
                    2b:0e:89:95:82:bc:c6:e8:00:d9:8d:1f:60:0b:52:
                    49:b5:ba:25:dd:04:0d:ba:1c:07:0f:9f:61:b4:82:
                    53:a3:79:8a:60:a3:70:0f:e6:83:ff:e3:6f:3b:0b:
                    d3:f9:c2:9b:c8:8f:83:4d:9c:51:ef:3e:ef:5e:0e:
                    36:a8:1d:4a:b5:f7:36:dc:5a:fe:41:48:4e:91:b0:
                    09:8b:2a:04:ff:4c:db:e0:85:84:9f:12:10:c0:95:
                    15:c3:af:79:35:9d:47:66:08:3b:57:a3:98:d2:dc:
                    07:88:d2:10:30:cf:ee:5b:5d:c2:16:f5:9d:bf:c6:
                    7b:d9:03:4f:16:e3:51:cf:ea:79:3e:1b:1a:e6:49:
                    aa:a4:db:97:46:7a:dd:a6:48:95:dc:92:f2:64:78:
                    e1:5d:e9:fd:65:ac:b8:f9:bd:ba:1a:67:66:b9:a3:
                    b0:64:f6:fc:b4:67:58:8c:fd:6a:44:3d:db:93:fc:
                    61:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:56:DF:33:FB:25:1C:60:C1:DD:00:B3:62:72:AE:3F:24:14:87:32
            X509v3 Authority Key Identifier:
                keyid:6C:D0:AD:44:31:CC:22:17:50:D8:F2:C0:EC:9E:F3:05:43:B7:D2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6CD0AD4431CC221750D8F2C0EC9EF30543B7D244.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/1/3137302e3233332e33392e302f32342d3234203d3e20323635313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:99:47:6e:b0:e6:a5:bf:42:28:5a:c4:b4:fb:38:d0:b7:d0:
         1a:2b:88:03:b3:d0:74:ea:61:5a:c9:79:77:63:85:57:11:2e:
         05:8d:a8:4f:68:e2:f0:3f:b6:5a:0f:01:7c:4c:b9:f2:50:70:
         3c:ab:6d:1f:e1:c6:b5:a1:9f:46:83:3e:89:65:9b:ca:00:bb:
         cd:9b:3f:65:01:e7:2c:09:4e:42:ad:89:a0:8b:8c:86:11:46:
         67:69:f9:13:fe:4e:55:f6:9b:21:b4:30:03:4d:d7:d7:58:03:
         09:92:40:4a:51:b5:c0:ed:cb:9f:3b:52:ea:44:9c:84:0d:6b:
         52:82:37:a8:66:61:0d:cc:1e:59:91:e7:3d:e0:bc:aa:a7:1d:
         45:6f:8c:b6:6a:1f:b7:fe:c8:5d:d5:eb:86:43:de:58:8d:80:
         b0:b2:34:bc:aa:c1:7e:cc:40:19:ec:a8:4b:a6:13:6a:b6:34:
         65:45:05:f5:b9:53:1c:35:df:d2:95:2c:14:17:bf:ef:45:03:
         69:e5:7c:0c:d4:e8:20:36:03:ff:42:cf:d8:83:9f:2e:b0:45:
         c4:be:bd:98:60:ee:7a:7a:4f:21:df:e4:0c:93:d7:90:d4:24:
         be:ae:39:76:0e:84:9c:11:13:f6:f1:8f:fb:fb:b4:f7:25:d4:
         5b:87:b0:06
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbpuBQau/xOe+Fz3tVgSI6T0lzkwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkNEMEFENDQzMUNDMjIxNzUwRDhGMkMwRUM5RUYzMDU0
M0I3RDI0NDAeFw0yNDA0MDQwMzQ3MjJaFw0yNTA0MDMwMzUyMjJaMDMxMTAvBgNV
BAMTKDMyNTZERjMzRkIyNTFDNjBDMUREMDBCMzYyNzJBRTNGMjQxNDg3MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQfwIWqWwlBjiLzNpjX88+bEyr
XaKbeu3GU/VzEcx9vIBGeit/M1q2zpbSQldhX3EqHtBjZk28go7/A/qdUHsWwsuK
oHLb6hKIsCsOiZWCvMboANmNH2ALUkm1uiXdBA26HAcPn2G0glOjeYpgo3AP5oP/
4287C9P5wpvIj4NNnFHvPu9eDjaoHUq19zbcWv5BSE6RsAmLKgT/TNvghYSfEhDA
lRXDr3k1nUdmCDtXo5jS3AeI0hAwz+5bXcIW9Z2/xnvZA08W41HP6nk+GxrmSaqk
25dGet2mSJXckvJkeOFd6f1lrLj5vboaZ2a5o7Bk9vy0Z1iM/WpEPduT/GHRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMlbfM/slHGDB3QCzYnKuPyQUhzIwHwYDVR0j
BBgwFoAUbNCtRDHMIhdQ2PLA7J7zBUO30kQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtoNG9Ma2RDS2JLYXE1Z3VrTWhLZFR3c21pb1JHdjVKTWNUWnN0U0x5
d3cvMS82Q0QwQUQ0NDMxQ0MyMjE3NTBEOEYyQzBFQzlFRjMwNTQzQjdEMjQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZDRDBBRDQ0MzFDQzIyMTc1
MEQ4RjJDMEVDOUVGMzA1NDNCN0QyNDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhraDRvTGtkQ0tiS2FxNWd1a01oS2RUd3NtaW9SR3Y1Sk1jVFpzdFNMeXd3LzEv
MzEzNzMwMmUzMjMzMzMyZTMzMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMTM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACq6ScwDQYJKoZIhvcNAQELBQADggEBABuZR26w
5qW/QihaxLT7ONC30BoriAOz0HTqYVrJeXdjhVcRLgWNqE9o4vA/tloPAXxMufJQ
cDyrbR/hxrWhn0aDPollm8oAu82bP2UB5ywJTkKtiaCLjIYRRmdp+RP+TlX2myG0
MANN19dYAwmSQEpRtcDty587UupEnIQNa1KCN6hmYQ3MHlmR5z3gvKqnHUVvjLZq
H7f+yF3V64ZD3liNgLCyNLyqwX7MQBnsqEumE2q2NGVFBfW5Uxw139KVLBQXv+9F
A2nlfAzU6CA2A/9Cz9iDny6wRcS+vZhg7np6TyHf5AyT15DUJL6uOXYOhJwRE/bx
j/v7tPcl1FuHsAY=
-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:02 2024 by rpki-client on console-fra.rpki-client.org