Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3137302e3234362e3139322e302f32322d3234203d3e203238313538.roa
File:                     3137302e3234362e3139322e302f32322d3234203d3e203238313538.roa (raw, json)
Hash identifier:          g+RxZaJnd6xi2wtu8uT1fGnJ6VtKD82UOY6/yqYPRS4=
Subject key identifier:   6D:2C:F0:32:43:2E:EF:CB:24:AA:85:EF:9C:31:05:6A:A8:54:43:CF
Certificate issuer:       /CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
Certificate serial:       28CC6220521F86752C59363DC16D73B21CD4C158
Authority key identifier: B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3137302e3234362e3139322e302f32322d3234203d3e203238313538.roa
Signing time:             Thu 19 Sep 2024 14:38:04 +0000
ROA not before:           Thu 19 Sep 2024 14:33:04 +0000
ROA not after:            Thu 18 Sep 2025 14:38:04 +0000
asID:                     28158
IP address blocks:        170.246.192.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl
                          rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:cc:62:20:52:1f:86:75:2c:59:36:3d:c1:6d:73:b2:1c:d4:c1:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
        Validity
            Not Before: Sep 19 14:33:04 2024 GMT
            Not After : Sep 18 14:38:04 2025 GMT
        Subject: CN=6D2CF032432EEFCB24AA85EF9C31056AA85443CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f2:66:e7:f5:24:be:04:d8:28:ac:27:ad:94:
                    ec:5e:59:7d:de:c5:b0:37:f1:c7:85:5a:70:fe:48:
                    d5:9e:6f:6e:aa:fc:e8:8d:26:a3:02:9a:22:d7:60:
                    d2:7e:1d:97:a1:56:f4:ab:33:09:53:4e:8e:82:34:
                    09:b3:a0:79:76:bb:8b:75:2a:34:05:75:b3:7e:4b:
                    5b:62:09:dd:55:ec:a5:47:ec:08:76:54:b3:62:72:
                    51:11:88:84:a5:8f:c3:8c:f1:ff:08:df:8d:07:4c:
                    c3:1e:cb:b8:a3:55:f0:9b:cb:6b:c1:56:c7:40:9b:
                    c8:dd:d1:de:fd:12:12:9b:8b:fa:fd:3b:ca:80:b2:
                    0f:1b:84:4e:5b:20:07:96:38:23:f3:31:c9:4f:bd:
                    cb:f3:ca:72:9c:e2:99:08:7a:14:b3:3f:d9:13:1c:
                    d6:c3:12:8a:e8:2b:06:13:9b:c9:83:1f:4d:c1:8f:
                    d0:98:17:82:99:fe:7f:c3:73:db:e3:0c:ab:bc:64:
                    15:cc:32:33:2a:a4:47:42:89:0c:3e:3a:ac:41:1b:
                    d0:4b:ce:28:c4:76:2f:06:6d:d9:ac:34:1b:84:24:
                    0d:6b:4f:91:75:66:fb:92:91:62:1a:28:bd:52:e1:
                    10:15:20:59:c5:4c:e6:36:59:4b:f4:f8:6f:23:f2:
                    df:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2C:F0:32:43:2E:EF:CB:24:AA:85:EF:9C:31:05:6A:A8:54:43:CF
            X509v3 Authority Key Identifier:
                keyid:B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3137302e3234362e3139322e302f32322d3234203d3e203238313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:35:b4:58:0e:10:ae:48:a6:70:9f:ba:06:6c:56:3b:16:c7:
         0e:3c:53:29:11:a8:86:d3:51:e5:d9:28:45:a1:ff:f7:e8:b3:
         cc:e9:a4:b5:1c:9a:38:a9:b1:bb:15:91:cd:a6:50:e1:7e:44:
         31:42:72:21:86:fd:28:e1:1a:68:87:75:5a:be:a6:eb:98:99:
         53:ce:3c:0f:c8:dc:6e:f0:ff:e7:df:a3:96:e4:7a:a6:e2:af:
         43:6b:eb:70:c9:77:ce:19:52:51:08:65:bc:9f:fd:d5:61:8d:
         03:cf:16:4f:0e:fb:67:f7:7f:d1:da:ad:ac:93:a6:7c:9c:75:
         1d:83:ed:09:04:9f:a9:b9:8a:ad:07:b9:26:fd:5d:25:9e:b8:
         05:98:f3:ef:f9:0c:4b:6e:ff:66:7c:80:5c:ca:1f:46:21:91:
         71:bf:7e:f1:69:89:c7:69:5e:12:a1:8c:17:81:6b:c9:e7:5a:
         36:46:8b:1b:57:6d:44:fe:ec:70:ac:23:85:a6:85:e0:86:6b:
         f7:1f:c9:19:66:35:2f:97:4b:16:ae:f3:34:29:d7:19:4f:3c:
         02:c7:77:35:36:8d:32:75:78:48:a8:a1:96:0d:73:c7:37:f6:
         3a:61:52:c6:2e:af:51:c1:10:5d:7e:50:d2:07:4f:3f:9a:29:
         dd:aa:93:0c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKMxiIFIfhnUsWTY9wW1zshzUwVgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ1RDFBOEFGNzREOTRCMEUwQjEzNTY3MzZDOEJDOUFG
QjAxODVGRTAeFw0yNDA5MTkxNDMzMDRaFw0yNTA5MTgxNDM4MDRaMDMxMTAvBgNV
BAMTKDZEMkNGMDMyNDMyRUVGQ0IyNEFBODVFRjlDMzEwNTZBQTg1NDQzQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO8mbn9SS+BNgorCetlOxeWX3e
xbA38ceFWnD+SNWeb26q/OiNJqMCmiLXYNJ+HZehVvSrMwlTTo6CNAmzoHl2u4t1
KjQFdbN+S1tiCd1V7KVH7Ah2VLNiclERiISlj8OM8f8I340HTMMey7ijVfCby2vB
VsdAm8jd0d79EhKbi/r9O8qAsg8bhE5bIAeWOCPzMclPvcvzynKc4pkIehSzP9kT
HNbDEoroKwYTm8mDH03Bj9CYF4KZ/n/Dc9vjDKu8ZBXMMjMqpEdCiQw+OqxBG9BL
zijEdi8GbdmsNBuEJA1rT5F1ZvuSkWIaKL1S4RAVIFnFTOY2WUv0+G8j8t9JAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUbSzwMkMu78skqoXvnDEFaqhUQ88wHwYDVR0j
BBgwFoAUtF0aivdNlLDgsTVnNsi8mvsBhf4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzd6d3hiQzJBaHJjWHZvQ2U2TUVvTURKQ2dGZVJnZ2diTFo4NFVoUENt
dGsvMC9CNDVEMUE4QUY3NEQ5NEIwRTBCMTM1NjczNkM4QkM5QUZCMDE4NUZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0NUQxQThBRjc0RDk0QjBF
MEIxMzU2NzM2QzhCQzlBRkIwMTg1RkUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M3end4YkMyQWhyY1h2b0NlNk1Fb01ESkNnRmVSZ2dnYkxaODRVaFBDbXRrLzAv
MzEzNzMwMmUzMjM0MzYyZTMxMzkzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzgzMTM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq9sAwDQYJKoZIhvcNAQELBQADggEBAHc1tFgO
EK5IpnCfugZsVjsWxw48UykRqIbTUeXZKEWh//fos8zppLUcmjipsbsVkc2mUOF+
RDFCciGG/SjhGmiHdVq+puuYmVPOPA/I3G7w/+ffo5bkeqbir0Nr63DJd84ZUlEI
Zbyf/dVhjQPPFk8O+2f3f9HarayTpnycdR2D7QkEn6m5iq0HuSb9XSWeuAWY8+/5
DEtu/2Z8gFzKH0YhkXG/fvFpicdpXhKhjBeBa8nnWjZGixtXbUT+7HCsI4WmheCG
a/cfyRlmNS+XSxau8zQp1xlPPALHdzU2jTJ1eEiooZYNc8c39jphUsYur1HBEF1+
UNIHTz+aKd2qkww=
-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:55 2024 by rpki-client on console-fra.rpki-client.org