Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/2/3137302e38332e3139362e302f32322d3234203d3e20323636343736.roa
File:                     3137302e38332e3139362e302f32322d3234203d3e20323636343736.roa (raw, json)
Hash identifier:          /WMnHDWJzX3Jhl85u8vPHHFa1VV7OjIPEnsMHy5u2dk=
Subject key identifier:   6C:93:FD:EF:BC:EA:4E:9A:41:AB:A1:B6:BB:FD:5D:08:6F:A9:1F:02
Certificate issuer:       /CN=F0F5635EEFE9AFD648D58E84BDF797AF5F910D74
Certificate serial:       1F7C2085BD9B8DFBADE27C73AA6853AA57F5BE8B
Authority key identifier: F0:F5:63:5E:EF:E9:AF:D6:48:D5:8E:84:BD:F7:97:AF:5F:91:0D:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F5635EEFE9AFD648D58E84BDF797AF5F910D74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/2/3137302e38332e3139362e302f32322d3234203d3e20323636343736.roa
Signing time:             Thu 04 Apr 2024 09:28:28 +0000
ROA not before:           Thu 04 Apr 2024 09:23:28 +0000
ROA not after:            Thu 03 Apr 2025 09:28:28 +0000
asID:                     266476
IP address blocks:        170.83.196.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/2/F0F5635EEFE9AFD648D58E84BDF797AF5F910D74.crl
                          rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/2/F0F5635EEFE9AFD648D58E84BDF797AF5F910D74.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F5635EEFE9AFD648D58E84BDF797AF5F910D74.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:46:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:7c:20:85:bd:9b:8d:fb:ad:e2:7c:73:aa:68:53:aa:57:f5:be:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F5635EEFE9AFD648D58E84BDF797AF5F910D74
        Validity
            Not Before: Apr  4 09:23:28 2024 GMT
            Not After : Apr  3 09:28:28 2025 GMT
        Subject: CN=6C93FDEFBCEA4E9A41ABA1B6BBFD5D086FA91F02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6e:f4:b7:04:ae:f4:92:c2:e5:6b:55:10:58:
                    49:dd:8d:19:ef:87:75:81:88:f7:c1:a1:1d:77:71:
                    d1:e7:3e:4b:1e:a3:f4:0d:23:9e:c8:16:4d:0b:10:
                    84:d9:a4:38:b7:d2:49:38:71:9b:04:1d:24:ce:22:
                    cf:83:73:25:40:f1:f3:dc:df:b0:29:b9:95:c6:6b:
                    8c:7d:9e:f7:0a:e9:3f:d6:a1:83:f6:ba:09:bb:c5:
                    c6:a2:aa:c4:fb:64:fe:8b:97:c8:e5:1b:df:a4:ca:
                    06:32:19:02:e7:74:67:d7:7c:7f:ca:ef:5e:0b:73:
                    dd:6c:3d:00:93:c8:a7:b7:8b:5c:70:c0:c3:6b:39:
                    a7:31:b9:ac:03:a6:a2:ca:96:34:ab:f0:57:78:82:
                    54:f1:86:e3:3b:a3:ea:fe:9e:3d:e7:9a:de:de:a0:
                    77:97:ed:00:3e:7e:f3:20:fd:21:18:1f:fb:30:fb:
                    c0:55:49:d8:8f:e2:27:ee:c9:cf:17:dc:90:f5:e2:
                    68:bd:ae:28:ab:0d:45:2a:6f:89:5e:89:a6:0a:dc:
                    57:3d:a3:42:ad:e4:5a:c4:76:58:0d:08:21:89:0c:
                    18:1d:3e:99:41:50:49:82:c6:c7:0e:ce:d7:a1:78:
                    b4:3a:9a:8d:f0:37:26:e7:ab:89:50:57:ae:81:8c:
                    68:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:93:FD:EF:BC:EA:4E:9A:41:AB:A1:B6:BB:FD:5D:08:6F:A9:1F:02
            X509v3 Authority Key Identifier:
                keyid:F0:F5:63:5E:EF:E9:AF:D6:48:D5:8E:84:BD:F7:97:AF:5F:91:0D:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/2/F0F5635EEFE9AFD648D58E84BDF797AF5F910D74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F5635EEFE9AFD648D58E84BDF797AF5F910D74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/2/3137302e38332e3139362e302f32322d3234203d3e20323636343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:98:95:d5:55:96:d6:02:66:28:62:d9:b3:05:68:b2:9f:10:
         a1:d6:c3:d5:76:40:0d:d1:6b:e2:62:4c:bc:82:55:bb:b3:54:
         a5:f8:57:de:13:32:66:f7:73:5d:90:eb:1e:42:13:7b:65:a2:
         d9:f1:f8:b7:44:6b:55:14:8d:a5:40:3f:0f:a0:e7:f3:47:cf:
         70:ab:c3:20:c3:37:b2:f2:36:c0:e9:7b:c5:a5:57:29:32:9c:
         43:11:1e:b5:a3:fd:b7:0f:9f:f7:f9:ae:33:ba:87:e2:99:9e:
         ef:8c:55:35:6f:4d:d7:df:13:03:4a:c7:d3:a2:00:03:54:32:
         7b:55:5b:2b:86:19:14:fc:d3:7f:2d:4b:f6:7a:19:4c:9e:08:
         33:ca:3a:43:c3:c4:a5:c9:15:da:2c:fd:34:9b:24:bd:25:52:
         d7:a8:a7:38:00:de:36:8b:19:bf:76:3d:c5:76:33:22:e6:c7:
         42:30:e7:15:d8:f8:36:61:79:65:a5:24:d1:59:2f:d6:49:f8:
         8c:ac:a0:01:5e:e9:61:a9:3b:9f:54:d9:6e:4d:90:3c:76:58:
         d8:5b:2b:46:37:63:22:c8:f0:44:38:80:fd:34:40:a4:95:44:
         5d:ea:4f:11:05:88:3c:7b:26:ad:91:15:7d:af:de:39:60:07:
         42:ab:78:c0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUH3wghb2bjfut4nxzqmhTqlf1voswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjBGNTYzNUVFRkU5QUZENjQ4RDU4RTg0QkRGNzk3QUY1
RjkxMEQ3NDAeFw0yNDA0MDQwOTIzMjhaFw0yNTA0MDMwOTI4MjhaMDMxMTAvBgNV
BAMTKDZDOTNGREVGQkNFQTRFOUE0MUFCQTFCNkJCRkQ1RDA4NkZBOTFGMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7bvS3BK70ksLla1UQWEndjRnv
h3WBiPfBoR13cdHnPkseo/QNI57IFk0LEITZpDi30kk4cZsEHSTOIs+DcyVA8fPc
37ApuZXGa4x9nvcK6T/WoYP2ugm7xcaiqsT7ZP6Ll8jlG9+kygYyGQLndGfXfH/K
714Lc91sPQCTyKe3i1xwwMNrOacxuawDpqLKljSr8Fd4glTxhuM7o+r+nj3nmt7e
oHeX7QA+fvMg/SEYH/sw+8BVSdiP4ifuyc8X3JD14mi9riirDUUqb4leiaYK3Fc9
o0Kt5FrEdlgNCCGJDBgdPplBUEmCxscOzteheLQ6mo3wNybnq4lQV66BjGhTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUbJP977zqTppBq6G2u/1dCG+pHwIwHwYDVR0j
BBgwFoAU8PVjXu/pr9ZI1Y6EvfeXr1+RDXQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjlRSnk0ckQ3WXNQcnNSUVFOQ1k4c2FBYTJocU5ReXlncVJCM3pGcGRY
cnAvMi9GMEY1NjM1RUVGRTlBRkQ2NDhENThFODRCREY3OTdBRjVGOTEwRDc0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YwRjU2MzVFRUZFOUFGRDY0
OEQ1OEU4NEJERjc5N0FGNUY5MTBENzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I5UUp5NHJEN1lzUHJzUlFRTkNZOHNhQWEyaHFOUXl5Z3FSQjN6RnBkWHJwLzIv
MzEzNzMwMmUzODMzMmUzMTM5MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzYzNDM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqU8QwDQYJKoZIhvcNAQELBQADggEBAByYldVV
ltYCZihi2bMFaLKfEKHWw9V2QA3Ra+JiTLyCVbuzVKX4V94TMmb3c12Q6x5CE3tl
otnx+LdEa1UUjaVAPw+g5/NHz3CrwyDDN7LyNsDpe8WlVykynEMRHrWj/bcPn/f5
rjO6h+KZnu+MVTVvTdffEwNKx9OiAANUMntVWyuGGRT8038tS/Z6GUyeCDPKOkPD
xKXJFdos/TSbJL0lUteopzgA3jaLGb92PcV2MyLmx0Iw5xXY+DZheWWlJNFZL9ZJ
+IysoAFe6WGpO59U2W5NkDx2WNhbK0Y3YyLI8EQ4gP00QKSVRF3qTxEFiDx7Jq2R
FX2v3jlgB0KreMA=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:57 2024 by rpki-client on console-fra.rpki-client.org