Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/1/3137302e38342e34382e302f32332d3233203d3e20323635303232.roa
File:                     3137302e38342e34382e302f32332d3233203d3e20323635303232.roa (raw, json)
Hash identifier:          Dxi17u9iEO9RWeUQj7lk0FmL1pN9OX5nEYy8vfUNAYA=
Subject key identifier:   8F:D3:3B:76:5F:30:55:AA:09:40:CF:C9:FE:D7:9D:A6:88:20:61:F5
Certificate issuer:       /CN=75730747EE0CCC4C66AB50829F21FF172F57999D
Certificate serial:       6D5B21E7112987F008FF3DEB7B912429B5730886
Authority key identifier: 75:73:07:47:EE:0C:CC:4C:66:AB:50:82:9F:21:FF:17:2F:57:99:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75730747EE0CCC4C66AB50829F21FF172F57999D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/1/3137302e38342e34382e302f32332d3233203d3e20323635303232.roa
Signing time:             Thu 04 Apr 2024 05:48:28 +0000
ROA not before:           Thu 04 Apr 2024 05:43:28 +0000
ROA not after:            Thu 03 Apr 2025 05:48:28 +0000
asID:                     265022
IP address blocks:        170.84.48.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/1/75730747EE0CCC4C66AB50829F21FF172F57999D.crl
                          rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/1/75730747EE0CCC4C66AB50829F21FF172F57999D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75730747EE0CCC4C66AB50829F21FF172F57999D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:5b:21:e7:11:29:87:f0:08:ff:3d:eb:7b:91:24:29:b5:73:08:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75730747EE0CCC4C66AB50829F21FF172F57999D
        Validity
            Not Before: Apr  4 05:43:28 2024 GMT
            Not After : Apr  3 05:48:28 2025 GMT
        Subject: CN=8FD33B765F3055AA0940CFC9FED79DA6882061F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d5:e3:18:00:e4:f5:25:9f:0a:59:19:fe:8a:
                    73:90:ed:bf:41:1a:03:9c:23:7c:aa:b8:2e:ec:43:
                    60:1b:24:77:f8:98:e2:09:fa:28:93:bc:49:6f:39:
                    01:d7:00:1a:c9:6a:ed:ff:14:b8:8d:31:4c:6d:cc:
                    4b:56:92:cf:32:ae:65:c1:b4:19:3f:ef:91:8e:88:
                    5a:5c:92:d6:c2:9c:17:85:01:2e:7f:17:c6:75:db:
                    ac:46:30:62:b6:d5:fd:17:ec:c4:25:96:c3:c3:9c:
                    ae:6e:12:98:f2:78:b0:a0:f7:81:a2:75:d0:21:ce:
                    8d:b3:94:f3:65:f2:b1:af:b5:cf:af:43:fc:e8:8f:
                    7a:24:2b:58:c5:5b:62:c5:54:03:11:83:7d:13:97:
                    64:04:0e:89:fe:88:90:68:9f:a3:29:68:96:aa:ec:
                    ed:fe:a4:f4:63:b3:16:b9:47:92:a3:fa:c0:47:90:
                    b1:7a:6c:ba:40:00:9a:d9:e9:2e:73:41:2e:65:bd:
                    1b:3c:28:0f:29:3e:7e:bc:19:54:04:f1:1b:72:9f:
                    b3:08:05:74:17:71:3d:be:95:32:ff:21:e5:0e:30:
                    c1:4b:93:57:3f:3e:7a:93:0a:77:e3:95:12:f7:03:
                    96:6c:13:26:46:86:f3:7f:61:a1:67:2f:53:2f:1c:
                    5a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D3:3B:76:5F:30:55:AA:09:40:CF:C9:FE:D7:9D:A6:88:20:61:F5
            X509v3 Authority Key Identifier:
                keyid:75:73:07:47:EE:0C:CC:4C:66:AB:50:82:9F:21:FF:17:2F:57:99:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/1/75730747EE0CCC4C66AB50829F21FF172F57999D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75730747EE0CCC4C66AB50829F21FF172F57999D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/1/3137302e38342e34382e302f32332d3233203d3e20323635303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:c3:a8:22:b6:cd:ef:03:5f:db:72:11:5b:6c:d8:3e:78:eb:
         26:3b:d6:23:4e:d7:55:de:3f:f6:76:0b:30:6c:16:b1:13:82:
         96:b7:02:53:69:2f:a5:4f:c2:50:9a:59:5f:35:c9:d8:04:b4:
         a1:31:d3:f1:fc:e7:e6:99:c2:8e:76:60:08:4c:c0:ec:a6:87:
         15:41:26:f9:5a:1d:3b:64:5e:ac:dd:90:14:9b:b3:bf:8e:da:
         78:62:a6:3e:85:07:b6:45:e1:d4:f7:26:50:ca:6d:0f:4a:63:
         92:c3:d2:d8:df:f8:88:a1:40:12:e8:79:3c:c5:fb:14:8a:18:
         7e:8b:da:36:b8:41:3e:06:25:42:df:7e:42:e1:7b:f5:3c:d4:
         03:4e:af:e3:17:05:e6:40:77:4f:57:50:2a:51:03:78:6c:2c:
         a4:d8:92:6e:65:71:4e:32:5e:a4:aa:7e:82:e6:2c:66:fd:41:
         7b:fd:23:13:bd:13:29:b6:1f:c7:7c:ec:7e:f8:71:4a:0f:05:
         18:fc:ca:02:d1:86:39:7d:47:b3:71:6e:08:9d:88:13:82:ea:
         28:36:fb:25:e3:9d:85:0b:49:91:e3:50:ca:e8:22:8e:2f:19:
         01:51:5c:17:ae:f1:6a:18:c9:02:a8:ff:0d:5d:fe:64:31:a7:
         76:82:99:80
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUbVsh5xEph/AI/z3re5EkKbVzCIYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU3MzA3NDdFRTBDQ0M0QzY2QUI1MDgyOUYyMUZGMTcy
RjU3OTk5RDAeFw0yNDA0MDQwNTQzMjhaFw0yNTA0MDMwNTQ4MjhaMDMxMTAvBgNV
BAMTKDhGRDMzQjc2NUYzMDU1QUEwOTQwQ0ZDOUZFRDc5REE2ODgyMDYxRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD1eMYAOT1JZ8KWRn+inOQ7b9B
GgOcI3yquC7sQ2AbJHf4mOIJ+iiTvElvOQHXABrJau3/FLiNMUxtzEtWks8yrmXB
tBk/75GOiFpcktbCnBeFAS5/F8Z126xGMGK21f0X7MQllsPDnK5uEpjyeLCg94Gi
ddAhzo2zlPNl8rGvtc+vQ/zoj3okK1jFW2LFVAMRg30Tl2QEDon+iJBon6MpaJaq
7O3+pPRjsxa5R5Kj+sBHkLF6bLpAAJrZ6S5zQS5lvRs8KA8pPn68GVQE8Rtyn7MI
BXQXcT2+lTL/IeUOMMFLk1c/PnqTCnfjlRL3A5ZsEyZGhvN/YaFnL1MvHFrvAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUj9M7dl8wVaoJQM/J/tedpoggYfUwHwYDVR0j
BBgwFoAUdXMHR+4MzExmq1CCnyH/Fy9XmZ0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWFUVHdkeTNTVW1vVFN4a1A1OTJiRW9SejY4NXJ1bkJEZ2ttTHBvejJL
Y3cvMS83NTczMDc0N0VFMENDQzRDNjZBQjUwODI5RjIxRkYxNzJGNTc5OTlELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc1NzMwNzQ3RUUwQ0NDNEM2
NkFCNTA4MjlGMjFGRjE3MkY1Nzk5OUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FhVFR3ZHkzU1Vtb1RTeGtQNTkyYkVvUno2ODVydW5CRGdrbUxwb3oyS2N3LzEv
MzEzNzMwMmUzODM0MmUzNDM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM1
MzAzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBqlQwMA0GCSqGSIb3DQEBCwUAA4IBAQC/w6gits3v
A1/bchFbbNg+eOsmO9YjTtdV3j/2dgswbBaxE4KWtwJTaS+lT8JQmllfNcnYBLSh
MdPx/OfmmcKOdmAITMDspocVQSb5Wh07ZF6s3ZAUm7O/jtp4YqY+hQe2ReHU9yZQ
ym0PSmOSw9LY3/iIoUAS6Hk8xfsUihh+i9o2uEE+BiVC335C4Xv1PNQDTq/jFwXm
QHdPV1AqUQN4bCyk2JJuZXFOMl6kqn6C5ixm/UF7/SMTvRMpth/HfOx++HFKDwUY
/MoC0YY5fUezcW4InYgTguooNvsl452FC0mR41DK6CKOLxkBUVwXrvFqGMkCqP8N
Xf5kMad2gpmA
-----END CERTIFICATE-----
Generated at Fri Jun 28 09:12:27 2024 by rpki-client on console-fra.rpki-client.org