Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137302e3135302e3137362e302f32322d3234203d3e203533323336.roa
File:                     3137302e3135302e3137362e302f32322d3234203d3e203533323336.roa (raw, json)
Hash identifier:          q6Gr36kd1SdWmNiFoiP9yEj1Ph84Q65T5kEmSbR89dI=
Subject key identifier:   3A:3C:1D:A0:A3:C5:42:0A:44:96:FF:10:AD:B6:E9:C9:BB:F4:D6:39
Certificate issuer:       /CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
Certificate serial:       3A783DC8B5F10F97AA9F932EEDE722B98E0C0EFE
Authority key identifier: 17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137302e3135302e3137362e302f32322d3234203d3e203533323336.roa
Signing time:             Wed 03 Apr 2024 18:30:45 +0000
ROA not before:           Wed 03 Apr 2024 18:25:45 +0000
ROA not after:            Wed 02 Apr 2025 18:30:45 +0000
asID:                     53236
IP address blocks:        170.150.176.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl
                          rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:78:3d:c8:b5:f1:0f:97:aa:9f:93:2e:ed:e7:22:b9:8e:0c:0e:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
        Validity
            Not Before: Apr  3 18:25:45 2024 GMT
            Not After : Apr  2 18:30:45 2025 GMT
        Subject: CN=3082010A0282010100CE767829BCF8558828E5ED74A787EB4D761162D3FA871FC6BE42FFE88E24E7AE154B2ED9C4C007338ACB32AB8478E81B5413FC2ED471AE35E1A22618D7344E19E694AE0C8098C7C9BEA57EF690B746B21EFA504C437F7D319DF06649EB26E2AB8546AD6C01DC863D81C3AD9B20D76D8DE6730163B185DAC9478601F12FE16DC4B098E68D7772ADA312EEB40681FBB5E455A64091922F3D75644187EDD680494F2076D35119FCAD0176F1B9AF66B52B9359DD3DF4330B6B72E85E975F97BD5E3DB68952935E66E9B8DB9ED15637C4503409477003536DA329C454833D4511C89400E0AC4A2BC30E0BA1A5A9E5222DA22A4A8CAA07BC5FA782E513051A20600FC10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:76:78:29:bc:f8:55:88:28:e5:ed:74:a7:87:
                    eb:4d:76:11:62:d3:fa:87:1f:c6:be:42:ff:e8:8e:
                    24:e7:ae:15:4b:2e:d9:c4:c0:07:33:8a:cb:32:ab:
                    84:78:e8:1b:54:13:fc:2e:d4:71:ae:35:e1:a2:26:
                    18:d7:34:4e:19:e6:94:ae:0c:80:98:c7:c9:be:a5:
                    7e:f6:90:b7:46:b2:1e:fa:50:4c:43:7f:7d:31:9d:
                    f0:66:49:eb:26:e2:ab:85:46:ad:6c:01:dc:86:3d:
                    81:c3:ad:9b:20:d7:6d:8d:e6:73:01:63:b1:85:da:
                    c9:47:86:01:f1:2f:e1:6d:c4:b0:98:e6:8d:77:72:
                    ad:a3:12:ee:b4:06:81:fb:b5:e4:55:a6:40:91:92:
                    2f:3d:75:64:41:87:ed:d6:80:49:4f:20:76:d3:51:
                    19:fc:ad:01:76:f1:b9:af:66:b5:2b:93:59:dd:3d:
                    f4:33:0b:6b:72:e8:5e:97:5f:97:bd:5e:3d:b6:89:
                    52:93:5e:66:e9:b8:db:9e:d1:56:37:c4:50:34:09:
                    47:70:03:53:6d:a3:29:c4:54:83:3d:45:11:c8:94:
                    00:e0:ac:4a:2b:c3:0e:0b:a1:a5:a9:e5:22:2d:a2:
                    2a:4a:8c:aa:07:bc:5f:a7:82:e5:13:05:1a:20:60:
                    0f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:3C:1D:A0:A3:C5:42:0A:44:96:FF:10:AD:B6:E9:C9:BB:F4:D6:39
            X509v3 Authority Key Identifier:
                keyid:17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137302e3135302e3137362e302f32322d3234203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:e4:21:6c:3b:c0:e4:83:d1:c0:de:84:c2:6b:7b:8d:4b:06:
         57:67:b8:86:3f:2b:0a:d4:ef:a7:c7:c7:b1:84:9b:7f:21:d1:
         d0:e7:6d:b9:37:92:55:cc:f9:52:e0:d1:bd:f9:86:cf:3a:5e:
         c0:f9:6f:62:90:54:09:2d:d7:a1:f2:e5:56:db:65:cb:11:cf:
         07:2e:b0:ee:30:9c:96:a3:65:06:82:be:74:ca:25:e2:65:5d:
         28:4c:db:e5:27:11:e3:5c:09:08:12:3c:06:0b:4d:db:38:06:
         0b:49:2c:46:78:88:d1:86:d0:e9:44:e5:bb:86:1a:2f:a1:bf:
         23:db:8a:3c:b1:7e:41:dc:85:50:d8:7e:0b:ca:75:14:4e:64:
         98:a3:b3:04:9e:a9:dd:70:9a:30:a9:78:48:4a:32:0c:b8:e6:
         2d:85:16:ab:91:dc:37:ba:dd:f3:83:64:ba:ab:ca:63:b2:9e:
         97:76:b3:d7:ac:22:2d:d7:77:78:e8:58:5e:80:a6:22:cc:05:
         0b:52:1f:72:1a:b8:d2:6d:6e:5f:17:d8:e8:5b:fa:62:ee:d6:
         73:33:db:9b:ac:34:50:ea:4c:c8:b6:d9:34:c2:76:a5:38:a3:
         57:ea:00:71:e9:ae:a8:58:9c:08:74:cd:78:7c:ce:2c:6a:cb:
         ab:9b:54:0d
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUOng9yLXxD5eqn5Mu7eciuY4MDv4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTc0QzQwQkQyRDFERUYyRUQ4QkZDMURFMUJFQUJCRjUy
NzE4NEEwRjAeFw0yNDA0MDMxODI1NDVaFw0yNTA0MDIxODMwNDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0U3Njc4MjlCQ0Y4NTU4ODI4
RTVFRDc0QTc4N0VCNEQ3NjExNjJEM0ZBODcxRkM2QkU0MkZGRTg4RTI0RTdBRTE1
NEIyRUQ5QzRDMDA3MzM4QUNCMzJBQjg0NzhFODFCNTQxM0ZDMkVENDcxQUUzNUUx
QTIyNjE4RDczNDRFMTlFNjk0QUUwQzgwOThDN0M5QkVBNTdFRjY5MEI3NDZCMjFF
RkE1MDRDNDM3RjdEMzE5REYwNjY0OUVCMjZFMkFCODU0NkFENkMwMURDODYzRDgx
QzNBRDlCMjBENzZEOERFNjczMDE2M0IxODVEQUM5NDc4NjAxRjEyRkUxNkRDNEIw
OThFNjhENzc3MkFEQTMxMkVFQjQwNjgxRkJCNUU0NTVBNjQwOTE5MjJGM0Q3NTY0
NDE4N0VERDY4MDQ5NEYyMDc2RDM1MTE5RkNBRDAxNzZGMUI5QUY2NkI1MkI5MzU5
REQzREY0MzMwQjZCNzJFODVFOTc1Rjk3QkQ1RTNEQjY4OTUyOTM1RTY2RTlCOERC
OUVEMTU2MzdDNDUwMzQwOTQ3NzAwMzUzNkRBMzI5QzQ1NDgzM0Q0NTExQzg5NDAw
RTBBQzRBMkJDMzBFMEJBMUE1QTlFNTIyMkRBMjJBNEE4Q0FBMDdCQzVGQTc4MkU1
MTMwNTFBMjA2MDBGQzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAznZ4Kbz4VYgo5e10p4frTXYRYtP6hx/GvkL/6I4k564VSy7ZxMAH
M4rLMquEeOgbVBP8LtRxrjXhoiYY1zROGeaUrgyAmMfJvqV+9pC3RrIe+lBMQ399
MZ3wZknrJuKrhUatbAHchj2Bw62bINdtjeZzAWOxhdrJR4YB8S/hbcSwmOaNd3Kt
oxLutAaB+7XkVaZAkZIvPXVkQYft1oBJTyB201EZ/K0BdvG5r2a1K5NZ3T30Mwtr
cuhel1+XvV49tolSk15m6bjbntFWN8RQNAlHcANTbaMpxFSDPUURyJQA4KxKK8MO
C6GlqeUiLaIqSoyqB7xfp4LlEwUaIGAPwQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FDo8HaCjxUIKRJb/EK226cm79NY5MB8GA1UdIwQYMBaAFBdMQL0tHe8u2L/B3hvq
u/UnGEoPMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JUV2VDRU1xVm83aXRX
dHppNWs4OG52UUFMa0pncFB2RU50RHdnaTFveG9kLzEvMTc0QzQwQkQyRDFERUYy
RUQ4QkZDMURFMUJFQUJCRjUyNzE4NEEwRi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNzRDNDBCRDJEMURFRjJFRDhCRkMxREUxQkVBQkJGNTI3MTg0
QTBGLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CVFdlQ0VNcVZvN2l0V3R6aTVr
ODhudlFBTGtKZ3BQdkVOdER3Z2kxb3hvZC8xLzMxMzczMDJlMzEzNTMwMmUzMTM3
MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMzMzIzMzM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
qpawMA0GCSqGSIb3DQEBCwUAA4IBAQBC5CFsO8Dkg9HA3oTCa3uNSwZXZ7iGPysK
1O+nx8exhJt/IdHQ5225N5JVzPlS4NG9+YbPOl7A+W9ikFQJLdeh8uVW22XLEc8H
LrDuMJyWo2UGgr50yiXiZV0oTNvlJxHjXAkIEjwGC03bOAYLSSxGeIjRhtDpROW7
hhovob8j24o8sX5B3IVQ2H4LynUUTmSYo7MEnqndcJowqXhISjIMuOYthRarkdw3
ut3zg2S6q8pjsp6XdrPXrCIt13d46FhegKYizAULUh9yGrjSbW5fF9joW/pi7tZz
M9ubrDRQ6kzIttk0wnalOKNX6gBx6a6oWJwIdM14fM4sasurm1QN
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:57 2024 by rpki-client on console-fra.rpki-client.org