Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/3137302e3234342e37362e302f32342d3234203d3e20323636353035.roa
File:                     3137302e3234342e37362e302f32342d3234203d3e20323636353035.roa (raw, json)
Hash identifier:          lbO8+ZC4XxaIGQpLmqn1QMilowrf737l7NfWfC17MIo=
Subject key identifier:   D0:46:54:37:11:21:5D:A7:64:BA:F6:36:CF:87:4E:2B:ED:81:F3:0E
Certificate issuer:       /CN=CA9F7609986EAF1A517249B9120F2B69069A604A
Certificate serial:       1FB735541EE65DB77112EA50406987B111194181
Authority key identifier: CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/3137302e3234342e37362e302f32342d3234203d3e20323636353035.roa
Signing time:             Wed 03 Apr 2024 18:30:33 +0000
ROA not before:           Wed 03 Apr 2024 18:25:33 +0000
ROA not after:            Wed 02 Apr 2025 18:30:33 +0000
asID:                     266505
IP address blocks:        170.244.76.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl
                          rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:b7:35:54:1e:e6:5d:b7:71:12:ea:50:40:69:87:b1:11:19:41:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA9F7609986EAF1A517249B9120F2B69069A604A
        Validity
            Not Before: Apr  3 18:25:33 2024 GMT
            Not After : Apr  2 18:30:33 2025 GMT
        Subject: CN=D046543711215DA764BAF636CF874E2BED81F30E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b4:e3:70:30:c4:fb:b4:70:fb:3d:5d:04:81:
                    56:bc:61:10:61:aa:f2:2f:ff:a3:39:75:ec:cd:60:
                    b7:51:62:7f:f9:6d:0a:c7:51:10:3a:18:cb:2c:be:
                    95:15:b7:00:ee:19:d2:34:ea:46:6b:26:5f:96:49:
                    e6:c4:19:a3:4c:c3:cd:a4:a9:1c:de:89:b2:84:09:
                    94:12:f2:a1:d0:98:f2:92:f5:3a:c1:72:59:50:91:
                    ed:5c:3c:93:bd:05:ec:2e:99:bf:19:2b:83:ec:e4:
                    65:a5:e7:51:43:22:9e:28:fd:02:8b:2b:c8:5e:aa:
                    9b:16:fb:ae:37:25:58:ef:b0:c9:6a:c2:28:23:c1:
                    44:59:13:09:44:d1:57:f2:21:c0:8a:29:f3:07:aa:
                    fc:b7:1c:5c:29:25:18:1e:85:3a:0c:40:6b:98:11:
                    2e:98:24:29:ea:6a:21:17:b3:06:3c:5e:31:9a:0b:
                    bd:fd:08:9f:f2:e4:fd:4e:fa:dd:12:db:06:29:77:
                    74:d0:0e:39:ab:67:ed:8d:6c:a7:f7:61:e8:50:28:
                    94:13:57:37:8b:5c:2e:d4:73:ca:2f:e3:2f:c3:74:
                    0d:75:e5:7b:9b:d7:3a:ea:8a:d8:3a:25:af:d0:2d:
                    6e:82:19:f8:d5:51:5c:c5:21:7c:48:f8:96:f0:bb:
                    9f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:46:54:37:11:21:5D:A7:64:BA:F6:36:CF:87:4E:2B:ED:81:F3:0E
            X509v3 Authority Key Identifier:
                keyid:CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/3137302e3234342e37362e302f32342d3234203d3e20323636353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:f3:4b:b1:74:fd:be:38:ee:48:78:6c:2b:f4:25:77:c3:7c:
         c7:1c:09:5e:53:74:ee:8e:95:43:6f:48:d0:93:ee:c4:27:f7:
         25:93:08:7a:fe:e8:eb:57:05:33:f3:ec:f4:af:68:07:0f:e1:
         e3:01:bd:bc:ba:f8:48:c1:fa:6a:d2:45:2b:16:dd:5c:88:b5:
         ae:66:7c:bb:9c:f3:21:ed:c7:3c:32:4b:c9:d6:99:14:83:3f:
         e4:39:46:55:c4:40:b3:01:a6:4a:2a:80:cc:02:3a:f9:c2:53:
         ab:0b:4e:df:f2:c3:86:ea:12:ec:08:12:a4:90:d0:0f:f2:b1:
         1c:a3:ad:63:a6:90:73:a4:8d:72:ea:3c:4e:61:0d:3f:f8:7a:
         57:df:0b:a4:b6:b7:6c:32:b9:a5:21:5b:ff:21:5e:0d:8c:39:
         a0:aa:fd:4a:d3:c1:e4:19:04:d9:32:d4:97:26:68:0e:92:bd:
         81:b1:50:8c:43:45:91:f6:69:4d:f9:1a:80:ae:9e:49:20:22:
         1c:e7:8d:d0:d2:22:30:2f:38:c0:6f:dc:35:e2:8d:58:53:93:
         1e:18:36:1b:64:86:00:8c:13:b9:bd:1c:65:d0:e8:2f:b2:ef:
         b8:64:ed:bb:e3:6b:11:bc:d5:74:87:1c:e8:a2:e1:45:d3:9f:
         5a:a0:39:4a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUH7c1VB7mXbdxEupQQGmHsREZQYEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0E5Rjc2MDk5ODZFQUYxQTUxNzI0OUI5MTIwRjJCNjkw
NjlBNjA0QTAeFw0yNDA0MDMxODI1MzNaFw0yNTA0MDIxODMwMzNaMDMxMTAvBgNV
BAMTKEQwNDY1NDM3MTEyMTVEQTc2NEJBRjYzNkNGODc0RTJCRUQ4MUYzMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQtONwMMT7tHD7PV0EgVa8YRBh
qvIv/6M5dezNYLdRYn/5bQrHURA6GMssvpUVtwDuGdI06kZrJl+WSebEGaNMw82k
qRzeibKECZQS8qHQmPKS9TrBcllQke1cPJO9Bewumb8ZK4Ps5GWl51FDIp4o/QKL
K8heqpsW+643JVjvsMlqwigjwURZEwlE0VfyIcCKKfMHqvy3HFwpJRgehToMQGuY
ES6YJCnqaiEXswY8XjGaC739CJ/y5P1O+t0S2wYpd3TQDjmrZ+2NbKf3YehQKJQT
VzeLXC7Uc8ov4y/DdA115Xub1zrqitg6Ja/QLW6CGfjVUVzFIXxI+Jbwu59DAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0EZUNxEhXadkuvY2z4dOK+2B8w4wHwYDVR0j
BBgwFoAUyp92CZhurxpRckm5Eg8raQaaYEowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTdBVFVlNFJENTFZcUx5dkNHdUhTdlM2M2lBdHJyWGFFeEpqUmpydjk2
RGIvMS9DQTlGNzYwOTk4NkVBRjFBNTE3MjQ5QjkxMjBGMkI2OTA2OUE2MDRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBOUY3NjA5OTg2RUFGMUE1
MTcyNDlCOTEyMEYyQjY5MDY5QTYwNEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E3QVRVZTRSRDUxWXFMeXZDR3VIU3ZTNjNpQXRyclhhRXhKalJqcnY5NkRiLzEv
MzEzNzMwMmUzMjM0MzQyZTM3MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzNTMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACq9EwwDQYJKoZIhvcNAQELBQADggEBAF3zS7F0
/b447kh4bCv0JXfDfMccCV5TdO6OlUNvSNCT7sQn9yWTCHr+6OtXBTPz7PSvaAcP
4eMBvby6+EjB+mrSRSsW3VyIta5mfLuc8yHtxzwyS8nWmRSDP+Q5RlXEQLMBpkoq
gMwCOvnCU6sLTt/yw4bqEuwIEqSQ0A/ysRyjrWOmkHOkjXLqPE5hDT/4elffC6S2
t2wyuaUhW/8hXg2MOaCq/UrTweQZBNky1JcmaA6SvYGxUIxDRZH2aU35GoCunkkg
IhznjdDSIjAvOMBv3DXijVhTkx4YNhtkhgCME7m9HGXQ6C+y77hk7bvjaxG81XSH
HOii4UXTn1qgOUo=
-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:58 2024 by rpki-client on console-fra.rpki-client.org