Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/3230312e3138322e36362e302f32332d3233203d3e20323637353031.roa
File:                     3230312e3138322e36362e302f32332d3233203d3e20323637353031.roa (raw, json)
Hash identifier:          qbOh6fEyhdGLld2m2hfihV1HqBEHUhF+eYSuQXdKmcA=
Subject key identifier:   13:76:75:95:DF:97:B6:07:FD:ED:7B:40:36:77:84:75:9D:49:61:9F
Certificate issuer:       /CN=C7CEBDAC7451296ECAEFC51DE2EA531B5A105086
Certificate serial:       702DC0291A7942A3C1F0392AEF2D666749F13D04
Authority key identifier: C7:CE:BD:AC:74:51:29:6E:CA:EF:C5:1D:E2:EA:53:1B:5A:10:50:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/3230312e3138322e36362e302f32332d3233203d3e20323637353031.roa
Signing time:             Thu 04 Apr 2024 02:52:04 +0000
ROA not before:           Thu 04 Apr 2024 02:47:04 +0000
ROA not after:            Thu 03 Apr 2025 02:52:04 +0000
asID:                     267501
IP address blocks:        201.182.66.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.crl
                          rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:2d:c0:29:1a:79:42:a3:c1:f0:39:2a:ef:2d:66:67:49:f1:3d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7CEBDAC7451296ECAEFC51DE2EA531B5A105086
        Validity
            Not Before: Apr  4 02:47:04 2024 GMT
            Not After : Apr  3 02:52:04 2025 GMT
        Subject: CN=13767595DF97B607FDED7B40367784759D49619F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:75:de:a3:6c:9e:99:6d:5a:78:f6:89:31:2e:
                    71:77:39:7e:41:db:aa:75:a1:da:59:ae:80:e2:5c:
                    e9:0f:2a:ed:d4:52:86:90:9f:6c:4f:9b:f9:1a:ad:
                    58:8d:3f:16:40:3b:5f:c4:aa:f9:4d:b3:38:db:38:
                    d7:bc:60:80:bf:65:d2:02:15:61:ce:df:93:c5:fa:
                    9a:79:22:96:34:0a:9c:e5:a2:af:63:5a:19:96:2d:
                    2e:24:69:7f:30:dc:13:d7:f1:38:95:23:3a:6a:c1:
                    49:27:2c:58:8f:58:57:a9:52:55:88:bb:cc:a2:6b:
                    6b:0e:ec:42:1d:5b:a5:30:e6:c2:53:20:e0:9d:ad:
                    af:cf:82:ce:b5:05:34:0a:88:e2:6a:a4:af:cb:ac:
                    78:a7:c0:59:1f:31:bd:44:7e:e7:59:4f:9f:a7:cb:
                    f1:a6:14:08:cd:8a:76:8f:33:c4:c0:f6:eb:22:ed:
                    94:e8:82:1a:d8:ee:62:60:56:e3:bf:99:a8:4c:6b:
                    fd:be:cd:07:0e:81:92:8e:46:d4:63:35:09:2d:49:
                    61:a7:2d:87:8a:5e:29:63:1c:d6:71:02:d2:f0:df:
                    40:93:33:1d:42:b1:20:5d:05:75:e6:de:94:32:e8:
                    91:78:83:71:0f:1d:f5:4b:5b:4d:df:fa:ab:61:4a:
                    46:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:76:75:95:DF:97:B6:07:FD:ED:7B:40:36:77:84:75:9D:49:61:9F
            X509v3 Authority Key Identifier:
                keyid:C7:CE:BD:AC:74:51:29:6E:CA:EF:C5:1D:E2:EA:53:1B:5A:10:50:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7CEBDAC7451296ECAEFC51DE2EA531B5A105086.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/1/3230312e3138322e36362e302f32332d3233203d3e20323637353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cf:9e:7d:87:f3:51:e0:d5:e8:59:e6:ed:42:cf:14:04:1d:00:
         c5:9c:de:d3:c0:42:32:9c:f5:e3:2d:07:cd:b6:27:d0:ca:1d:
         3d:f4:44:8e:a6:68:7f:4a:7b:a3:8e:09:69:37:8e:75:b5:f3:
         0a:9d:9d:76:e7:42:03:d1:6c:0f:6c:38:73:e0:9d:ae:26:7d:
         92:45:50:cd:68:ed:19:9e:47:9e:de:d4:d7:63:47:2e:db:9d:
         1c:e0:85:7d:d6:ec:8e:24:17:e2:39:7e:a0:ae:32:c1:1a:e9:
         78:8c:c6:01:b7:b0:66:63:b4:aa:cf:91:62:e3:51:3c:e9:79:
         39:3b:69:13:07:bf:dd:09:8d:21:89:6e:48:84:8f:da:01:68:
         ab:84:4d:fb:28:7c:81:11:f6:5d:fb:6c:a7:d2:a9:2f:5c:a0:
         87:b9:b6:df:b7:55:e7:0d:67:ab:38:22:1b:dd:76:1f:27:0c:
         78:d1:d4:c2:53:3d:c9:d1:dc:b0:34:96:2f:2a:d1:4a:a4:1e:
         aa:b8:36:2f:1d:e5:7f:0f:21:cc:87:62:c6:e2:79:09:cb:5d:
         77:fa:d3:63:69:f3:e3:de:54:fd:bd:2a:7c:99:8b:47:bf:9e:
         91:a6:b4:b8:b8:be:69:63:8c:ed:42:df:65:13:e3:c4:2c:06:
         63:24:a4:13
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcC3AKRp5QqPB8Dkq7y1mZ0nxPQQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzdDRUJEQUM3NDUxMjk2RUNBRUZDNTFERTJFQTUzMUI1
QTEwNTA4NjAeFw0yNDA0MDQwMjQ3MDRaFw0yNTA0MDMwMjUyMDRaMDMxMTAvBgNV
BAMTKDEzNzY3NTk1REY5N0I2MDdGREVEN0I0MDM2Nzc4NDc1OUQ0OTYxOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3dd6jbJ6ZbVp49okxLnF3OX5B
26p1odpZroDiXOkPKu3UUoaQn2xPm/karViNPxZAO1/EqvlNszjbONe8YIC/ZdIC
FWHO35PF+pp5IpY0Cpzloq9jWhmWLS4kaX8w3BPX8TiVIzpqwUknLFiPWFepUlWI
u8yia2sO7EIdW6Uw5sJTIOCdra/Pgs61BTQKiOJqpK/LrHinwFkfMb1EfudZT5+n
y/GmFAjNinaPM8TA9usi7ZToghrY7mJgVuO/mahMa/2+zQcOgZKORtRjNQktSWGn
LYeKXiljHNZxAtLw30CTMx1CsSBdBXXm3pQy6JF4g3EPHfVLW03f+qthSkYhAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUE3Z1ld+Xtgf97XtANneEdZ1JYZ8wHwYDVR0j
BBgwFoAUx869rHRRKW7K78Ud4upTG1oQUIYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0tuUHhoa3NRSFJ1cWdzYWtGUnh1bXQ0WFJjZ283Z1FWR2RTejloVEZG
b3EvMS9DN0NFQkRBQzc0NTEyOTZFQ0FFRkM1MURFMkVBNTMxQjVBMTA1MDg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M3Q0VCREFDNzQ1MTI5NkVD
QUVGQzUxREUyRUE1MzFCNUExMDUwODYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NLblB4aGtzUUhSdXFnc2FrRlJ4dW10NFhSY2dvN2dRVkdkU3o5aFRGRm9xLzEv
MzIzMDMxMmUzMTM4MzIyZTM2MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzczNTMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHJtkIwDQYJKoZIhvcNAQELBQADggEBAM+efYfz
UeDV6Fnm7ULPFAQdAMWc3tPAQjKc9eMtB822J9DKHT30RI6maH9Ke6OOCWk3jnW1
8wqdnXbnQgPRbA9sOHPgna4mfZJFUM1o7RmeR57e1NdjRy7bnRzghX3W7I4kF+I5
fqCuMsEa6XiMxgG3sGZjtKrPkWLjUTzpeTk7aRMHv90JjSGJbkiEj9oBaKuETfso
fIER9l37bKfSqS9coIe5tt+3VecNZ6s4Ihvddh8nDHjR1MJTPcnR3LA0li8q0Uqk
Hqq4Ni8d5X8PIcyHYsbieQnLXXf602Np8+PeVP29KnyZi0e/npGmtLi4vmljjO1C
32UT48QsBmMkpBM=
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:07 2024 by rpki-client on console-fra.rpki-client.org