Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BtMMJnVCGfnYWw948awLnzmiKDbKxkza4yKU3qgDTUnB/0/3138372e3132302e3136342e302f32322d3234203d3e20323730353435.roa
File:                     3138372e3132302e3136342e302f32322d3234203d3e20323730353435.roa (raw, json)
Hash identifier:          Xf/gsCgWUCNPYgHG0bhYTfKfa2QgG61SfvpPCSjQmzQ=
Subject key identifier:   E9:B0:27:C8:FF:D3:3D:72:F8:A8:B2:C9:E1:83:DF:7C:23:32:EF:69
Certificate issuer:       /CN=8AC4503440253C4A4B471CCC1B5DB9D6F1EC6AC6
Certificate serial:       51F07E29CEC1F946602FDA4F697E890008325475
Authority key identifier: 8A:C4:50:34:40:25:3C:4A:4B:47:1C:CC:1B:5D:B9:D6:F1:EC:6A:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AC4503440253C4A4B471CCC1B5DB9D6F1EC6AC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BtMMJnVCGfnYWw948awLnzmiKDbKxkza4yKU3qgDTUnB/0/3138372e3132302e3136342e302f32322d3234203d3e20323730353435.roa
Signing time:             Mon 19 Aug 2024 19:46:59 +0000
ROA not before:           Mon 19 Aug 2024 19:41:59 +0000
ROA not after:            Mon 18 Aug 2025 19:46:59 +0000
asID:                     270545
IP address blocks:        187.120.164.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BtMMJnVCGfnYWw948awLnzmiKDbKxkza4yKU3qgDTUnB/0/8AC4503440253C4A4B471CCC1B5DB9D6F1EC6AC6.crl
                          rsync://rpki-repo.registro.br/repo/BtMMJnVCGfnYWw948awLnzmiKDbKxkza4yKU3qgDTUnB/0/8AC4503440253C4A4B471CCC1B5DB9D6F1EC6AC6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AC4503440253C4A4B471CCC1B5DB9D6F1EC6AC6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f0:7e:29:ce:c1:f9:46:60:2f:da:4f:69:7e:89:00:08:32:54:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AC4503440253C4A4B471CCC1B5DB9D6F1EC6AC6
        Validity
            Not Before: Aug 19 19:41:59 2024 GMT
            Not After : Aug 18 19:46:59 2025 GMT
        Subject: CN=E9B027C8FFD33D72F8A8B2C9E183DF7C2332EF69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:49:b8:de:98:a9:91:22:fa:50:62:01:21:ee:
                    35:49:3e:5c:ff:dd:45:20:43:ef:10:73:c5:e3:35:
                    58:71:99:69:c7:85:1a:15:64:9e:af:35:0d:f5:2b:
                    4e:67:cd:f4:c0:10:dd:50:1a:ee:96:95:f2:68:db:
                    6a:ac:54:0c:cd:1c:fc:b7:6f:a3:aa:c5:3d:86:28:
                    ed:d6:ec:3d:b0:23:ff:32:f6:92:3f:fb:c3:39:c6:
                    3d:a1:a7:4d:be:a6:0a:be:0e:4a:a3:c8:60:32:38:
                    6c:9a:e1:ab:b8:e2:cf:52:0c:b6:a6:bf:0b:c5:11:
                    af:c7:4c:b8:da:6b:da:eb:f9:72:f7:97:5e:32:c1:
                    81:bf:41:db:4d:11:88:99:f7:f0:34:e4:2d:cd:34:
                    36:01:9c:cb:e2:52:49:d5:cd:5c:00:3c:2f:87:74:
                    3b:12:e6:33:55:73:c6:e5:b9:88:15:0d:45:50:92:
                    e8:c7:70:c1:3e:bd:7f:39:64:d6:99:82:2e:a3:1f:
                    40:95:a1:f3:cf:1a:ae:3a:a1:2e:6e:82:73:b8:f3:
                    c5:98:dc:7f:86:67:98:70:f6:1d:d6:3c:64:20:37:
                    43:16:87:b5:2e:c5:f5:10:38:eb:ef:be:26:02:f8:
                    bd:5d:51:1d:1d:7a:2c:2f:8a:ce:3d:b4:af:db:09:
                    33:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B0:27:C8:FF:D3:3D:72:F8:A8:B2:C9:E1:83:DF:7C:23:32:EF:69
            X509v3 Authority Key Identifier:
                keyid:8A:C4:50:34:40:25:3C:4A:4B:47:1C:CC:1B:5D:B9:D6:F1:EC:6A:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BtMMJnVCGfnYWw948awLnzmiKDbKxkza4yKU3qgDTUnB/0/8AC4503440253C4A4B471CCC1B5DB9D6F1EC6AC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AC4503440253C4A4B471CCC1B5DB9D6F1EC6AC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BtMMJnVCGfnYWw948awLnzmiKDbKxkza4yKU3qgDTUnB/0/3138372e3132302e3136342e302f32322d3234203d3e20323730353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:b0:f4:b3:e5:70:56:20:c4:a2:3f:9f:0b:65:cc:52:8d:fb:
         4f:60:10:51:57:51:fd:30:23:7a:9c:01:ff:7b:29:47:7e:12:
         57:64:0b:64:2a:da:40:d4:11:33:30:0c:99:02:2e:06:e0:9a:
         1d:7a:ac:bc:20:50:df:a3:e4:92:f8:1d:2b:83:0d:b1:ac:b9:
         ac:cd:0a:3c:2d:b7:1a:a7:bc:e1:83:53:36:86:e4:4b:d0:8d:
         48:32:e9:23:d7:9d:c9:a5:24:c1:35:6d:2c:5f:d2:a7:78:b0:
         af:0d:53:04:64:d9:54:69:3e:bb:a8:0a:ca:9f:0b:78:c3:1d:
         ac:68:f9:db:da:54:e0:05:58:dd:0f:f7:bf:cb:d7:aa:69:c8:
         b9:7f:68:2e:f9:e1:f4:36:2d:0d:10:5b:a6:bb:01:84:3b:9a:
         f7:dc:f4:68:52:1d:35:79:3f:18:26:77:fc:26:a8:eb:06:2b:
         5d:b1:5b:30:44:1f:12:41:ce:8c:13:53:03:4a:a5:84:d2:8e:
         72:f4:68:97:1e:96:71:f8:93:d9:56:75:c7:2d:f6:7f:a5:08:
         94:89:10:88:79:1a:37:2e:5c:5c:19:27:88:1f:99:a0:89:e1:
         14:ef:25:de:10:fe:c2:05:67:09:f1:60:72:0f:14:a3:c9:12:
         8b:19:6f:5f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUUfB+Kc7B+UZgL9pPaX6JAAgyVHUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEFDNDUwMzQ0MDI1M0M0QTRCNDcxQ0NDMUI1REI5RDZG
MUVDNkFDNjAeFw0yNDA4MTkxOTQxNTlaFw0yNTA4MTgxOTQ2NTlaMDMxMTAvBgNV
BAMTKEU5QjAyN0M4RkZEMzNENzJGOEE4QjJDOUUxODNERjdDMjMzMkVGNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1SbjemKmRIvpQYgEh7jVJPlz/
3UUgQ+8Qc8XjNVhxmWnHhRoVZJ6vNQ31K05nzfTAEN1QGu6WlfJo22qsVAzNHPy3
b6OqxT2GKO3W7D2wI/8y9pI/+8M5xj2hp02+pgq+DkqjyGAyOGya4au44s9SDLam
vwvFEa/HTLjaa9rr+XL3l14ywYG/QdtNEYiZ9/A05C3NNDYBnMviUknVzVwAPC+H
dDsS5jNVc8bluYgVDUVQkujHcME+vX85ZNaZgi6jH0CVofPPGq46oS5ugnO488WY
3H+GZ5hw9h3WPGQgN0MWh7UuxfUQOOvvviYC+L1dUR0deiwvis49tK/bCTNnAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU6bAnyP/TPXL4qLLJ4YPffCMy72kwHwYDVR0j
BBgwFoAUisRQNEAlPEpLRxzMG1251vHsasYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnRNTUpuVkNHZm5ZV3c5NDhhd0xuem1pS0RiS3hremE0eUtVM3FnRFRV
bkIvMC84QUM0NTAzNDQwMjUzQzRBNEI0NzFDQ0MxQjVEQjlENkYxRUM2QUM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhBQzQ1MDM0NDAyNTNDNEE0
QjQ3MUNDQzFCNURCOUQ2RjFFQzZBQzYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J0TU1KblZDR2ZuWVd3OTQ4YXdMbnptaUtEYkt4a3phNHlLVTNxZ0RUVW5CLzAv
MzEzODM3MmUzMTMyMzAyZTMxMzYzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzczMDM1MzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArt4pDANBgkqhkiG9w0BAQsFAAOCAQEABLD0
s+VwViDEoj+fC2XMUo37T2AQUVdR/TAjepwB/3spR34SV2QLZCraQNQRMzAMmQIu
BuCaHXqsvCBQ36PkkvgdK4MNsay5rM0KPC23Gqe84YNTNobkS9CNSDLpI9edyaUk
wTVtLF/Sp3iwrw1TBGTZVGk+u6gKyp8LeMMdrGj529pU4AVY3Q/3v8vXqmnIuX9o
Lvnh9DYtDRBbprsBhDua99z0aFIdNXk/GCZ3/Cao6wYrXbFbMEQfEkHOjBNTA0ql
hNKOcvRolx6WcfiT2VZ1xy32f6UIlIkQiHkaNy5cXBkniB+ZoInhFO8l3hD+wgVn
CfFgcg8Uo8kSixlvXw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:07 2024 by rpki-client on console-fra.rpki-client.org