Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/3137302e302e3130302e302f32332d3233203d3e20323634393637.roa
File:                     3137302e302e3130302e302f32332d3233203d3e20323634393637.roa (raw, json)
Hash identifier:          q9SrpbYt9WbY69AVCyixQIGIlrARaItfOczaUAd6Ugs=
Subject key identifier:   E7:0D:9B:9D:D4:E1:AD:4E:CA:B8:BE:E6:53:EB:11:64:E8:F7:BE:A4
Certificate issuer:       /CN=26F1864FE8FB04F586F022A4A61BDEB4D05ECF86
Certificate serial:       6A5942C38F35A34424DCC7AC5364E4B1CCA9D106
Authority key identifier: 26:F1:86:4F:E8:FB:04:F5:86:F0:22:A4:A6:1B:DE:B4:D0:5E:CF:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F1864FE8FB04F586F022A4A61BDEB4D05ECF86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/3137302e302e3130302e302f32332d3233203d3e20323634393637.roa
Signing time:             Wed 19 Jun 2024 20:12:44 +0000
ROA not before:           Wed 19 Jun 2024 20:07:44 +0000
ROA not after:            Wed 18 Jun 2025 20:12:44 +0000
asID:                     264967
IP address blocks:        170.0.100.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/26F1864FE8FB04F586F022A4A61BDEB4D05ECF86.crl
                          rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/26F1864FE8FB04F586F022A4A61BDEB4D05ECF86.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F1864FE8FB04F586F022A4A61BDEB4D05ECF86.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 08:53:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:59:42:c3:8f:35:a3:44:24:dc:c7:ac:53:64:e4:b1:cc:a9:d1:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26F1864FE8FB04F586F022A4A61BDEB4D05ECF86
        Validity
            Not Before: Jun 19 20:07:44 2024 GMT
            Not After : Jun 18 20:12:44 2025 GMT
        Subject: CN=E70D9B9DD4E1AD4ECAB8BEE653EB1164E8F7BEA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ab:49:58:41:06:63:07:0d:88:92:90:4a:48:
                    af:43:9f:94:9c:ef:ad:85:31:1c:dd:4e:1d:60:e6:
                    aa:0c:0c:0d:f7:5e:87:2e:17:a4:b3:be:37:92:39:
                    c0:a3:e8:92:40:64:d3:84:e4:68:ca:8c:c4:d3:1a:
                    20:90:b9:6e:2f:d2:4c:33:fc:f6:e0:f2:3d:0d:0d:
                    92:d8:a6:ce:d5:f1:aa:29:8f:9e:be:37:f0:2b:d3:
                    7c:32:8b:8b:17:ba:5d:e8:95:2b:fb:f2:05:3d:9e:
                    c7:31:0b:33:3b:1e:9a:ee:48:4d:e3:9e:c5:fd:f8:
                    95:10:fe:64:4b:6c:3c:41:33:5f:61:01:c8:f5:d5:
                    6a:63:d5:70:48:3f:44:c9:76:ce:ee:3e:e8:b7:5b:
                    b3:64:62:af:bc:8a:55:b0:d3:c6:fa:97:49:80:05:
                    52:f2:6f:87:ac:a4:6d:23:08:0f:81:7d:94:ba:26:
                    6a:5c:65:97:df:03:7c:49:44:00:71:ea:51:c1:d6:
                    16:39:c6:8c:98:b3:54:11:8d:73:11:25:cc:95:78:
                    ec:cb:7c:63:14:88:be:9c:c6:11:41:04:5d:97:bc:
                    d0:a6:dc:47:a4:7d:3a:df:fe:7a:d1:d8:1a:fa:35:
                    6c:32:d6:5b:d6:1d:48:2f:b2:e4:3c:b1:bb:85:e9:
                    af:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0D:9B:9D:D4:E1:AD:4E:CA:B8:BE:E6:53:EB:11:64:E8:F7:BE:A4
            X509v3 Authority Key Identifier:
                keyid:26:F1:86:4F:E8:FB:04:F5:86:F0:22:A4:A6:1B:DE:B4:D0:5E:CF:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/26F1864FE8FB04F586F022A4A61BDEB4D05ECF86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F1864FE8FB04F586F022A4A61BDEB4D05ECF86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMFVFdUhWFBKZa5guKSqPinRGiMnnGwjpiUnURbGZCoi/0/3137302e302e3130302e302f32332d3233203d3e20323634393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:21:73:5c:6f:c1:51:f6:b0:3a:dc:f2:d4:03:33:b0:1a:2d:
         40:b9:e7:f0:f5:59:0b:07:d6:e9:4a:fc:f4:2d:1e:24:03:01:
         be:9e:b7:f8:53:f1:85:fb:40:7d:ad:c2:6d:1c:3f:7b:e9:7b:
         c2:15:ea:55:72:c6:b2:47:ca:ff:12:03:e1:f4:5b:5e:ea:d2:
         ce:2c:7d:9b:5a:39:16:a4:9f:3a:7f:5d:59:94:3f:9d:c0:ab:
         9f:41:d9:ee:b4:c5:98:f0:10:00:c4:66:89:e6:6e:e4:0f:aa:
         47:75:12:31:67:7d:a1:1d:f6:11:87:63:33:c8:76:58:86:0a:
         af:f1:af:c3:8c:00:7b:36:41:b0:43:09:37:a5:d7:0e:92:d7:
         20:66:c6:9d:df:f0:1f:ee:e5:05:b1:2b:b7:31:74:bd:81:d4:
         9c:bb:8c:d4:a8:5f:d0:59:b3:97:af:a4:a6:0a:41:3a:01:e0:
         db:73:1c:5c:10:7a:de:91:0d:68:92:f8:b1:4a:78:be:a4:5d:
         fa:f2:b9:fc:85:1a:f7:14:5f:c8:68:a4:30:5e:84:83:5e:49:
         31:8d:58:5b:13:94:ef:60:f7:d9:b2:2d:ff:6d:29:07:ce:4d:
         9f:89:63:a2:b1:a5:27:90:fd:7c:50:4b:fd:aa:56:48:d4:ce:
         f2:b0:ea:a9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUallCw481o0Qk3MesU2Tkscyp0QYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjZGMTg2NEZFOEZCMDRGNTg2RjAyMkE0QTYxQkRFQjRE
MDVFQ0Y4NjAeFw0yNDA2MTkyMDA3NDRaFw0yNTA2MTgyMDEyNDRaMDMxMTAvBgNV
BAMTKEU3MEQ5QjlERDRFMUFENEVDQUI4QkVFNjUzRUIxMTY0RThGN0JFQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAq0lYQQZjBw2IkpBKSK9Dn5Sc
762FMRzdTh1g5qoMDA33XocuF6SzvjeSOcCj6JJAZNOE5GjKjMTTGiCQuW4v0kwz
/Pbg8j0NDZLYps7V8aopj56+N/Ar03wyi4sXul3olSv78gU9nscxCzM7HpruSE3j
nsX9+JUQ/mRLbDxBM19hAcj11Wpj1XBIP0TJds7uPui3W7NkYq+8ilWw08b6l0mA
BVLyb4espG0jCA+BfZS6JmpcZZffA3xJRABx6lHB1hY5xoyYs1QRjXMRJcyVeOzL
fGMUiL6cxhFBBF2XvNCm3EekfTrf/nrR2Br6NWwy1lvWHUgvsuQ8sbuF6a9xAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU5w2bndThrU7KuL7mU+sRZOj3vqQwHwYDVR0j
BBgwFoAUJvGGT+j7BPWG8CKkphvetNBez4YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ01GVkZkVWhXRkJLWmE1Z3VLU3FQaW5SR2lNbm5Hd2pwaVVuVVJiR1pD
b2kvMC8yNkYxODY0RkU4RkIwNEY1ODZGMDIyQTRBNjFCREVCNEQwNUVDRjg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI2RjE4NjRGRThGQjA0RjU4
NkYwMjJBNEE2MUJERUI0RDA1RUNGODYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NNRlZGZFVoV0ZCS1phNWd1S1NxUGluUkdpTW5uR3dqcGlVblVSYkdaQ29pLzAv
MzEzNzMwMmUzMDJlMzEzMDMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM0
MzkzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBqgBkMA0GCSqGSIb3DQEBCwUAA4IBAQAYIXNcb8FR
9rA63PLUAzOwGi1Auefw9VkLB9bpSvz0LR4kAwG+nrf4U/GF+0B9rcJtHD976XvC
FepVcsayR8r/EgPh9Fte6tLOLH2bWjkWpJ86f11ZlD+dwKufQdnutMWY8BAAxGaJ
5m7kD6pHdRIxZ32hHfYRh2MzyHZYhgqv8a/DjAB7NkGwQwk3pdcOktcgZsad3/Af
7uUFsSu3MXS9gdScu4zUqF/QWbOXr6SmCkE6AeDbcxxcEHrekQ1okvixSni+pF36
8rn8hRr3FF/IaKQwXoSDXkkxjVhbE5TvYPfZsi3/bSkHzk2fiWOisaUnkP18UEv9
qlZI1M7ysOqp
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:23 2024 by rpki-client on console-ams.rpki-client.org