Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137302e38332e3230372e302f32342d3234203d3e203533323336.roa
File:                     3137302e38332e3230372e302f32342d3234203d3e203533323336.roa (raw, json)
Hash identifier:          ehk3JM0cRA/I/+lGDSFvP9+j+RyieAY2oN70mruVdAY=
Subject key identifier:   91:2C:80:70:CA:39:59:0F:3D:F0:71:2B:ED:EC:94:A4:C5:50:05:3B
Certificate issuer:       /CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
Certificate serial:       35F0255CBD1C2F6AD6D3FFB3E494AA8DE694CEF3
Authority key identifier: 17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137302e38332e3230372e302f32342d3234203d3e203533323336.roa
Signing time:             Wed 03 Apr 2024 18:30:45 +0000
ROA not before:           Wed 03 Apr 2024 18:25:45 +0000
ROA not after:            Wed 02 Apr 2025 18:30:45 +0000
asID:                     53236
IP address blocks:        170.83.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl
                          rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f0:25:5c:bd:1c:2f:6a:d6:d3:ff:b3:e4:94:aa:8d:e6:94:ce:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
        Validity
            Not Before: Apr  3 18:25:45 2024 GMT
            Not After : Apr  2 18:30:45 2025 GMT
        Subject: CN=3082010A0282010100C2A202B77570D7F8A233D09504B87FDA3F4C2092721E20E12F35E094AFCE774DA73BB47C7A8231F1530A6F684A72BEB657A6B2B8C8A0C959962E756A65156AB98C567FB89FAD4495BF2355EAADA41F36E8CB97CA9280D8715F854FF042CC894C3BAEC8245E97110B79F8F72AF12FEC82913FE54055D0382A227B64EEC62399BF38E3647A4F514600BD706FF6E06C78D5060171647CB7942B0B5D9993AB203EA0AB8F6CD82F00FCE55FF4FDF8F5764107985B26F6CCE94876AB62D4A95654A005DCD02E1649D9B64A9F53F90FEFF044172EAAAE179ED4D6DE1D08A82B6497F21BBB38B7711C5C128CC6075A047515321525D77F480E462C98388A4CAECF01C5970203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a2:02:b7:75:70:d7:f8:a2:33:d0:95:04:b8:
                    7f:da:3f:4c:20:92:72:1e:20:e1:2f:35:e0:94:af:
                    ce:77:4d:a7:3b:b4:7c:7a:82:31:f1:53:0a:6f:68:
                    4a:72:be:b6:57:a6:b2:b8:c8:a0:c9:59:96:2e:75:
                    6a:65:15:6a:b9:8c:56:7f:b8:9f:ad:44:95:bf:23:
                    55:ea:ad:a4:1f:36:e8:cb:97:ca:92:80:d8:71:5f:
                    85:4f:f0:42:cc:89:4c:3b:ae:c8:24:5e:97:11:0b:
                    79:f8:f7:2a:f1:2f:ec:82:91:3f:e5:40:55:d0:38:
                    2a:22:7b:64:ee:c6:23:99:bf:38:e3:64:7a:4f:51:
                    46:00:bd:70:6f:f6:e0:6c:78:d5:06:01:71:64:7c:
                    b7:94:2b:0b:5d:99:93:ab:20:3e:a0:ab:8f:6c:d8:
                    2f:00:fc:e5:5f:f4:fd:f8:f5:76:41:07:98:5b:26:
                    f6:cc:e9:48:76:ab:62:d4:a9:56:54:a0:05:dc:d0:
                    2e:16:49:d9:b6:4a:9f:53:f9:0f:ef:f0:44:17:2e:
                    aa:ae:17:9e:d4:d6:de:1d:08:a8:2b:64:97:f2:1b:
                    bb:38:b7:71:1c:5c:12:8c:c6:07:5a:04:75:15:32:
                    15:25:d7:7f:48:0e:46:2c:98:38:8a:4c:ae:cf:01:
                    c5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:2C:80:70:CA:39:59:0F:3D:F0:71:2B:ED:EC:94:A4:C5:50:05:3B
            X509v3 Authority Key Identifier:
                keyid:17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/3137302e38332e3230372e302f32342d3234203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:d9:72:fa:e9:f2:1c:70:39:33:2d:b0:d3:7d:ac:ec:bc:45:
         4d:86:31:b0:6d:fc:a4:5c:ad:3f:ac:69:28:2c:df:db:17:b0:
         3c:a5:7b:b5:f3:68:39:9e:7a:ca:84:7e:2a:9b:2a:17:a3:7e:
         27:84:62:55:b5:84:35:85:ee:16:47:6c:ff:38:70:88:08:29:
         0d:cd:7e:0d:a7:d2:08:1c:c8:27:28:b0:48:eb:db:44:dd:1b:
         7f:08:94:e8:e2:e9:6e:c6:1f:aa:2b:de:7a:3e:49:02:00:f7:
         05:c1:69:ee:d6:08:0c:5d:0e:25:3f:be:9e:f3:89:91:b4:cb:
         d7:82:9a:13:e6:dd:f5:a9:d9:ce:8b:1a:2b:c7:0e:d0:f4:4e:
         24:e2:74:5c:fe:78:e3:11:30:f3:e6:66:9b:f4:ed:69:ca:ab:
         8f:23:ae:70:35:be:da:fb:27:e9:e6:3f:71:c0:a4:f2:d4:d9:
         8c:bf:51:ee:ba:ba:ab:24:9c:74:c4:f7:f4:9d:b5:e4:5a:fc:
         26:60:e5:38:78:40:36:b9:b5:a7:7a:ee:bd:02:38:f5:5c:9f:
         f5:23:87:dc:4d:89:e9:f7:93:da:a7:9b:2b:b7:af:c8:ae:30:
         09:e8:37:a3:e4:e2:85:1d:b3:f5:38:0d:8a:e1:24:f5:4c:90:
         d1:ea:6a:65
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUNfAlXL0cL2rW0/+z5JSqjeaUzvMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTc0QzQwQkQyRDFERUYyRUQ4QkZDMURFMUJFQUJCRjUy
NzE4NEEwRjAeFw0yNDA0MDMxODI1NDVaFw0yNTA0MDIxODMwNDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzJBMjAyQjc3NTcwRDdGOEEy
MzNEMDk1MDRCODdGREEzRjRDMjA5MjcyMUUyMEUxMkYzNUUwOTRBRkNFNzc0REE3
M0JCNDdDN0E4MjMxRjE1MzBBNkY2ODRBNzJCRUI2NTdBNkIyQjhDOEEwQzk1OTk2
MkU3NTZBNjUxNTZBQjk4QzU2N0ZCODlGQUQ0NDk1QkYyMzU1RUFBREE0MUYzNkU4
Q0I5N0NBOTI4MEQ4NzE1Rjg1NEZGMDQyQ0M4OTRDM0JBRUM4MjQ1RTk3MTEwQjc5
RjhGNzJBRjEyRkVDODI5MTNGRTU0MDU1RDAzODJBMjI3QjY0RUVDNjIzOTlCRjM4
RTM2NDdBNEY1MTQ2MDBCRDcwNkZGNkUwNkM3OEQ1MDYwMTcxNjQ3Q0I3OTQyQjBC
NUQ5OTkzQUIyMDNFQTBBQjhGNkNEODJGMDBGQ0U1NUZGNEZERjhGNTc2NDEwNzk4
NUIyNkY2Q0NFOTQ4NzZBQjYyRDRBOTU2NTRBMDA1RENEMDJFMTY0OUQ5QjY0QTlG
NTNGOTBGRUZGMDQ0MTcyRUFBQUUxNzlFRDRENkRFMUQwOEE4MkI2NDk3RjIxQkJC
MzhCNzcxMUM1QzEyOENDNjA3NUEwNDc1MTUzMjE1MjVENzdGNDgwRTQ2MkM5ODM4
OEE0Q0FFQ0YwMUM1OTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwqICt3Vw1/iiM9CVBLh/2j9MIJJyHiDhLzXglK/Od02nO7R8eoIx
8VMKb2hKcr62V6ayuMigyVmWLnVqZRVquYxWf7ifrUSVvyNV6q2kHzboy5fKkoDY
cV+FT/BCzIlMO67IJF6XEQt5+Pcq8S/sgpE/5UBV0DgqIntk7sYjmb8442R6T1FG
AL1wb/bgbHjVBgFxZHy3lCsLXZmTqyA+oKuPbNgvAPzlX/T9+PV2QQeYWyb2zOlI
dqti1KlWVKAF3NAuFknZtkqfU/kP7/BEFy6qrhee1NbeHQioK2SX8hu7OLdxHFwS
jMYHWgR1FTIVJdd/SA5GLJg4ikyuzwHFlwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FJEsgHDKOVkPPfBxK+3slKTFUAU7MB8GA1UdIwQYMBaAFBdMQL0tHe8u2L/B3hvq
u/UnGEoPMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JUV2VDRU1xVm83aXRX
dHppNWs4OG52UUFMa0pncFB2RU50RHdnaTFveG9kLzEvMTc0QzQwQkQyRDFERUYy
RUQ4QkZDMURFMUJFQUJCRjUyNzE4NEEwRi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNzRDNDBCRDJEMURFRjJFRDhCRkMxREUxQkVBQkJGNTI3MTg0
QTBGLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CVFdlQ0VNcVZvN2l0V3R6aTVr
ODhudlFBTGtKZ3BQdkVOdER3Z2kxb3hvZC8xLzMxMzczMDJlMzgzMzJlMzIzMDM3
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMzMyMzMzNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKpT
zzANBgkqhkiG9w0BAQsFAAOCAQEAftly+unyHHA5My2w032s7LxFTYYxsG38pFyt
P6xpKCzf2xewPKV7tfNoOZ56yoR+KpsqF6N+J4RiVbWENYXuFkds/zhwiAgpDc1+
DafSCBzIJyiwSOvbRN0bfwiU6OLpbsYfqiveej5JAgD3BcFp7tYIDF0OJT++nvOJ
kbTL14KaE+bd9anZzosaK8cO0PROJOJ0XP544xEw8+Zmm/TtacqrjyOucDW+2vsn
6eY/ccCk8tTZjL9R7rq6qyScdMT39J215Fr8JmDlOHhANrm1p3ruvQI49Vyf9SOH
3E2J6feT2qebK7evyK4wCeg3o+TihR2z9TgNiuEk9UyQ0epqZQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:43 2024 by rpki-client on console-ams.rpki-client.org