Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3137302e3234372e3233362e302f32322d3234203d3e203631373932.roa
File:                     3137302e3234372e3233362e302f32322d3234203d3e203631373932.roa (raw, json)
Hash identifier:          3UHVpq59CNWrenGuzmVF5Askig4mL26RMPfTKL1qD9c=
Subject key identifier:   87:E2:00:CA:B2:B5:4A:67:B9:F0:10:77:32:1C:7F:AF:05:C8:2F:26
Certificate issuer:       /CN=83F0276570C6F4420470E10FE5542F0F878F7D89
Certificate serial:       78D62BAB1D5D2C35FD61F6BA8CE16D2F0BB0FBD2
Authority key identifier: 83:F0:27:65:70:C6:F4:42:04:70:E1:0F:E5:54:2F:0F:87:8F:7D:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83F0276570C6F4420470E10FE5542F0F878F7D89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3137302e3234372e3233362e302f32322d3234203d3e203631373932.roa
Signing time:             Wed 05 Jun 2024 19:06:40 +0000
ROA not before:           Wed 05 Jun 2024 19:01:40 +0000
ROA not after:            Wed 04 Jun 2025 19:06:40 +0000
asID:                     61792
IP address blocks:        170.247.236.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/83F0276570C6F4420470E10FE5542F0F878F7D89.crl
                          rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/83F0276570C6F4420470E10FE5542F0F878F7D89.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83F0276570C6F4420470E10FE5542F0F878F7D89.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Jun 2024 16:51:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d6:2b:ab:1d:5d:2c:35:fd:61:f6:ba:8c:e1:6d:2f:0b:b0:fb:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83F0276570C6F4420470E10FE5542F0F878F7D89
        Validity
            Not Before: Jun  5 19:01:40 2024 GMT
            Not After : Jun  4 19:06:40 2025 GMT
        Subject: CN=87E200CAB2B54A67B9F01077321C7FAF05C82F26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bc:2e:14:57:d7:31:93:58:92:ea:58:41:96:
                    b6:db:ba:16:13:24:74:8b:9b:68:4b:00:db:93:69:
                    12:06:bb:69:52:cd:1b:3b:7f:7c:ea:40:b7:e7:ad:
                    83:28:33:df:73:51:7d:09:25:9e:1c:06:9a:4d:63:
                    09:5a:89:24:e2:12:c9:f0:a5:06:a5:11:06:fe:32:
                    4a:ca:24:2a:61:83:c5:47:d7:03:14:21:8e:f6:1b:
                    7d:96:d4:32:71:2f:7a:d4:9b:11:1f:30:dc:28:22:
                    f0:8f:92:0c:9c:a0:81:38:a3:75:00:0c:52:55:e9:
                    74:3a:f3:72:d1:0d:a5:48:ce:1c:61:a3:ac:be:46:
                    69:dd:49:12:c8:87:4f:81:0a:f9:20:a0:20:15:e7:
                    5d:8f:88:3c:c2:92:e8:c5:b0:a3:42:25:15:ee:5c:
                    b9:b0:d6:05:e9:44:82:a8:a1:ca:5e:20:27:3d:cb:
                    c1:d5:08:d4:74:aa:ee:8b:12:27:30:f3:ac:c8:10:
                    79:21:d0:82:23:d5:35:24:68:a7:78:5b:6b:ae:6f:
                    59:ff:b8:1a:12:a7:1e:04:cf:3d:19:11:0c:57:9a:
                    4e:f3:74:dc:72:10:7f:98:6e:6e:fb:82:49:79:a5:
                    4d:26:34:b4:d4:bb:07:1d:58:c3:ee:84:a5:8f:2d:
                    d4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E2:00:CA:B2:B5:4A:67:B9:F0:10:77:32:1C:7F:AF:05:C8:2F:26
            X509v3 Authority Key Identifier:
                keyid:83:F0:27:65:70:C6:F4:42:04:70:E1:0F:E5:54:2F:0F:87:8F:7D:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/83F0276570C6F4420470E10FE5542F0F878F7D89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83F0276570C6F4420470E10FE5542F0F878F7D89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFq4UEfbcwLktpeZhfyoSPqimGhxLQMVN48xaba9R5N/0/3137302e3234372e3233362e302f32322d3234203d3e203631373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e9:e1:08:28:70:fd:00:9e:fe:0b:38:8a:c5:11:ce:11:aa:fc:
         08:f8:7b:63:52:3e:f1:a7:58:d1:bf:fa:61:ed:37:27:87:4e:
         09:d4:e5:ec:c0:cf:e1:dc:49:55:ef:64:07:2e:63:b9:77:64:
         fd:89:f3:86:b1:37:f0:64:78:fc:dd:fe:9d:db:1f:8c:a0:ef:
         27:a6:04:9a:ee:fa:17:64:51:fe:fb:7e:a3:a6:ed:f9:ea:39:
         01:8c:9c:45:bc:cf:e5:76:e2:c5:d2:41:98:1e:d3:58:5d:7a:
         5a:b4:13:81:cb:6f:8c:33:bc:8e:64:56:f9:7c:5f:4f:ad:71:
         cc:20:d6:4f:c8:b9:26:2b:d6:5c:a6:bd:bb:b6:b9:0a:cb:e7:
         5e:81:8d:5b:cf:3c:28:e9:e2:5e:6b:1a:25:22:3d:f3:e4:87:
         28:ce:b5:f2:69:e7:55:0f:6e:76:b1:5f:8b:d2:ed:9c:32:6d:
         0e:f7:99:ee:26:98:1f:e7:8b:ba:a5:fc:3c:08:a2:a2:a4:13:
         94:19:ee:a4:df:b8:b6:f9:c9:7c:49:1f:4e:d8:40:85:a6:70:
         56:b3:9a:96:89:f4:d4:57:c6:36:06:a8:d6:71:5e:79:65:e8:
         fc:51:8b:60:b7:f1:1d:e7:f8:03:92:84:2b:b3:f7:27:3b:a2:
         bd:94:ca:5d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeNYrqx1dLDX9Yfa6jOFtLwuw+9IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODNGMDI3NjU3MEM2RjQ0MjA0NzBFMTBGRTU1NDJGMEY4
NzhGN0Q4OTAeFw0yNDA2MDUxOTAxNDBaFw0yNTA2MDQxOTA2NDBaMDMxMTAvBgNV
BAMTKDg3RTIwMENBQjJCNTRBNjdCOUYwMTA3NzMyMUM3RkFGMDVDODJGMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSvC4UV9cxk1iS6lhBlrbbuhYT
JHSLm2hLANuTaRIGu2lSzRs7f3zqQLfnrYMoM99zUX0JJZ4cBppNYwlaiSTiEsnw
pQalEQb+MkrKJCphg8VH1wMUIY72G32W1DJxL3rUmxEfMNwoIvCPkgycoIE4o3UA
DFJV6XQ683LRDaVIzhxho6y+RmndSRLIh0+BCvkgoCAV512PiDzCkujFsKNCJRXu
XLmw1gXpRIKoocpeICc9y8HVCNR0qu6LEicw86zIEHkh0IIj1TUkaKd4W2uub1n/
uBoSpx4Ezz0ZEQxXmk7zdNxyEH+Ybm77gkl5pU0mNLTUuwcdWMPuhKWPLdRzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUh+IAyrK1Sme58BB3Mhx/rwXILyYwHwYDVR0j
BBgwFoAUg/AnZXDG9EIEcOEP5VQvD4ePfYkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3pGcTRVRWZiY3dMa3RwZVpoZnlvU1BxaW1HaHhMUU1WTjQ4eGFiYTlS
NU4vMC84M0YwMjc2NTcwQzZGNDQyMDQ3MEUxMEZFNTU0MkYwRjg3OEY3RDg5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgzRjAyNzY1NzBDNkY0NDIw
NDcwRTEwRkU1NTQyRjBGODc4RjdEODkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N6RnE0VUVmYmN3TGt0cGVaaGZ5b1NQcWltR2h4TFFNVk40OHhhYmE5UjVOLzAv
MzEzNzMwMmUzMjM0MzcyZTMyMzMzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM2
MzEzNzM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq9+wwDQYJKoZIhvcNAQELBQADggEBAOnhCChw
/QCe/gs4isURzhGq/Aj4e2NSPvGnWNG/+mHtNyeHTgnU5ezAz+HcSVXvZAcuY7l3
ZP2J84axN/BkePzd/p3bH4yg7yemBJru+hdkUf77fqOm7fnqOQGMnEW8z+V24sXS
QZge01hdelq0E4HLb4wzvI5kVvl8X0+tccwg1k/IuSYr1lymvbu2uQrL516BjVvP
PCjp4l5rGiUiPfPkhyjOtfJp51UPbnaxX4vS7ZwybQ73me4mmB/ni7ql/DwIoqKk
E5QZ7qTfuLb5yXxJH07YQIWmcFazmpaJ9NRXxjYGqNZxXnll6PxRi2C38R3n+AOS
hCuz9yc7or2Uyl0=
-----END CERTIFICATE-----
Generated at Mon Jun 17 15:56:06 2024 by rpki-client on console-fra.rpki-client.org