Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137302e38312e34382e302f32322d3234203d3e20323633363334.roa
File:                     3137302e38312e34382e302f32322d3234203d3e20323633363334.roa (raw, json)
Hash identifier:          /PrUy1p0+kIkqc2FjP6yAV2CPhaKLiqrdnUcj1tFyrk=
Subject key identifier:   4C:7E:96:EE:4A:AB:51:7F:79:64:24:48:8B:B0:EF:20:DC:A3:EE:9E
Certificate issuer:       /CN=521D4F32B82171B22F771F6945B5BED6147685DC
Certificate serial:       7695DD3F57447895546F86E2A64FC6847D9F9B3D
Authority key identifier: 52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137302e38312e34382e302f32322d3234203d3e20323633363334.roa
Signing time:             Thu 21 Nov 2024 14:32:38 +0000
ROA not before:           Thu 21 Nov 2024 14:27:38 +0000
ROA not after:            Thu 20 Nov 2025 14:32:38 +0000
asID:                     263634
IP address blocks:        170.81.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/521D4F32B82171B22F771F6945B5BED6147685DC.crl
                          rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/521D4F32B82171B22F771F6945B5BED6147685DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:95:dd:3f:57:44:78:95:54:6f:86:e2:a6:4f:c6:84:7d:9f:9b:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521D4F32B82171B22F771F6945B5BED6147685DC
        Validity
            Not Before: Nov 21 14:27:38 2024 GMT
            Not After : Nov 20 14:32:38 2025 GMT
        Subject: CN=4C7E96EE4AAB517F796424488BB0EF20DCA3EE9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f7:dd:4e:c9:71:7a:43:a0:36:bd:9e:90:eb:
                    9f:da:74:f4:ce:04:57:2f:20:19:15:fd:98:57:a8:
                    91:98:eb:32:03:5c:06:e9:f6:34:03:e2:73:b1:ca:
                    dc:8f:da:89:f3:72:80:db:80:6e:9a:87:f0:d6:d3:
                    6e:7f:df:50:f7:58:13:86:91:c3:2a:78:0a:35:ef:
                    00:96:fc:3e:f8:46:aa:d9:70:76:61:2d:f6:bd:8a:
                    54:bc:cf:9e:b0:0e:d7:8e:15:bb:81:e8:57:da:c1:
                    c8:c8:41:2f:e0:a2:db:59:2e:88:36:dc:e8:b0:56:
                    7f:5e:38:d7:4a:98:c3:fa:a3:ec:06:ad:42:95:91:
                    1f:bb:a8:3c:44:33:f7:72:c9:12:7b:62:eb:a6:d6:
                    40:d5:8b:d3:b1:47:6d:0a:a3:02:0b:f5:8d:4e:b3:
                    e4:c7:e1:3b:72:1b:3e:f5:de:07:20:b5:6c:30:47:
                    fd:db:6d:81:f1:a7:46:d0:d7:36:7b:91:08:66:2d:
                    f9:bf:c4:39:28:9d:cb:64:5c:62:60:3e:3a:6d:9e:
                    fd:ca:f0:79:ed:20:62:31:a1:8f:aa:e9:3b:5a:e8:
                    3c:15:d0:d4:ca:ef:b6:1d:16:38:91:9d:28:f7:44:
                    35:70:85:2a:fc:f3:b3:f6:5b:5c:da:7e:9f:bc:fc:
                    55:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:7E:96:EE:4A:AB:51:7F:79:64:24:48:8B:B0:EF:20:DC:A3:EE:9E
            X509v3 Authority Key Identifier:
                keyid:52:1D:4F:32:B8:21:71:B2:2F:77:1F:69:45:B5:BE:D6:14:76:85:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/521D4F32B82171B22F771F6945B5BED6147685DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/521D4F32B82171B22F771F6945B5BED6147685DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3mF7xNc4r27jGhKdLdQsm2wXhV6rn9dncx51jRYaeij/0/3137302e38312e34382e302f32322d3234203d3e20323633363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:65:93:1b:3e:2f:b1:7d:11:e3:5f:07:a0:77:99:bb:f7:9d:
         d6:ed:94:92:93:d1:d2:2f:60:31:1d:b2:af:f1:33:4e:45:dd:
         85:91:5c:61:7e:b7:82:8b:ea:18:e4:57:0b:ed:90:6c:ed:eb:
         bf:49:10:9e:0e:d1:8c:6a:19:2a:61:9a:d9:b5:69:ce:63:2f:
         ea:bc:5e:83:c5:00:54:d8:20:97:f0:77:d4:96:6a:e3:52:72:
         fe:7e:6d:ee:40:e4:84:c4:5d:48:cc:ad:db:98:67:fa:53:36:
         c8:af:ed:81:9f:9c:e7:68:2b:a1:1c:bf:d9:ac:5a:5d:c6:3f:
         8b:a8:7b:db:1e:04:52:98:4a:aa:93:95:42:09:6e:2d:72:39:
         51:0b:19:0a:8e:4d:79:b2:2b:c8:bf:5b:1e:f5:bd:95:7f:8b:
         0d:2e:d4:a2:04:3f:6b:84:5e:87:c2:f6:90:fb:a1:ee:2c:d4:
         ec:27:60:c4:ba:ad:6c:4f:b7:f6:11:8e:1b:f8:ea:18:88:5c:
         ac:4e:4a:02:84:de:41:34:34:1e:7c:3d:ea:df:69:f9:bf:15:
         b7:05:27:cd:b2:8b:22:0a:a1:94:4b:19:fe:80:aa:e2:a8:20:
         63:d9:47:63:c1:12:96:b5:7d:48:64:45:8f:ea:32:3b:f5:ec:
         e5:cf:c2:d4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdpXdP1dEeJVUb4bipk/GhH2fmz0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTIxRDRGMzJCODIxNzFCMjJGNzcxRjY5NDVCNUJFRDYx
NDc2ODVEQzAeFw0yNDExMjExNDI3MzhaFw0yNTExMjAxNDMyMzhaMDMxMTAvBgNV
BAMTKDRDN0U5NkVFNEFBQjUxN0Y3OTY0MjQ0ODhCQjBFRjIwRENBM0VFOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA991OyXF6Q6A2vZ6Q65/adPTO
BFcvIBkV/ZhXqJGY6zIDXAbp9jQD4nOxytyP2onzcoDbgG6ah/DW025/31D3WBOG
kcMqeAo17wCW/D74RqrZcHZhLfa9ilS8z56wDteOFbuB6FfawcjIQS/gottZLog2
3OiwVn9eONdKmMP6o+wGrUKVkR+7qDxEM/dyyRJ7Yuum1kDVi9OxR20KowIL9Y1O
s+TH4TtyGz713gcgtWwwR/3bbYHxp0bQ1zZ7kQhmLfm/xDkonctkXGJgPjptnv3K
8HntIGIxoY+q6Tta6DwV0NTK77YdFjiRnSj3RDVwhSr887P2W1zafp+8/FWNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUTH6W7kqrUX95ZCRIi7DvINyj7p4wHwYDVR0j
BBgwFoAUUh1PMrghcbIvdx9pRbW+1hR2hdwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzNtRjd4TmM0cjI3akdoS2RMZFFzbTJ3WGhWNnJuOWRuY3g1MWpSWWFl
aWovMC81MjFENEYzMkI4MjE3MUIyMkY3NzFGNjk0NUI1QkVENjE0NzY4NURDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyMUQ0RjMyQjgyMTcxQjIy
Rjc3MUY2OTQ1QjVCRUQ2MTQ3Njg1REMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0MzbUY3eE5jNHIyN2pHaEtkTGRRc20yd1hoVjZybjlkbmN4NTFqUllhZWlqLzAv
MzEzNzMwMmUzODMxMmUzNDM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMz
MzYzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqlEwMA0GCSqGSIb3DQEBCwUAA4IBAQBiZZMbPi+x
fRHjXwegd5m7953W7ZSSk9HSL2AxHbKv8TNORd2FkVxhfreCi+oY5FcL7ZBs7eu/
SRCeDtGMahkqYZrZtWnOYy/qvF6DxQBU2CCX8HfUlmrjUnL+fm3uQOSExF1IzK3b
mGf6UzbIr+2Bn5znaCuhHL/ZrFpdxj+LqHvbHgRSmEqqk5VCCW4tcjlRCxkKjk15
sivIv1se9b2Vf4sNLtSiBD9rhF6HwvaQ+6HuLNTsJ2DEuq1sT7f2EY4b+OoYiFys
TkoChN5BNDQefD3q32n5vxW3BSfNsosiCqGUSxn+gKriqCBj2UdjwRKWtX1IZEWP
6jI79ezlz8LU
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:07 2024 by rpki-client on console-fra.rpki-client.org