Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3137302e3233382e35362e302f32322d3232203d3e20323636333132.roa
File:                     3137302e3233382e35362e302f32322d3232203d3e20323636333132.roa (raw, json)
Hash identifier:          /tJnlhctCvFzxCcWl/M8XLnaPXQGPvfEVnV/sztU8ZE=
Subject key identifier:   C8:FC:C2:9C:A8:9A:2E:B4:FC:0D:2F:9E:37:C2:F1:D0:34:73:F0:9E
Certificate issuer:       /CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
Certificate serial:       0951E1AF71CD70FFCE725E9D8D2E5C32D61A62CB
Authority key identifier: 0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3137302e3233382e35362e302f32322d3232203d3e20323636333132.roa
Signing time:             Thu 04 Apr 2024 12:39:08 +0000
ROA not before:           Thu 04 Apr 2024 12:34:08 +0000
ROA not after:            Thu 03 Apr 2025 12:39:08 +0000
asID:                     266312
IP address blocks:        170.238.56.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl
                          rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:25:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:51:e1:af:71:cd:70:ff:ce:72:5e:9d:8d:2e:5c:32:d6:1a:62:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
        Validity
            Not Before: Apr  4 12:34:08 2024 GMT
            Not After : Apr  3 12:39:08 2025 GMT
        Subject: CN=C8FCC29CA89A2EB4FC0D2F9E37C2F1D03473F09E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:34:a0:a9:a0:47:59:6b:4b:17:36:2c:9f:3e:
                    57:1a:d4:22:d1:12:7b:ca:72:61:fe:f3:9b:44:5e:
                    78:6f:3d:08:aa:4a:28:d1:84:26:e0:f4:cd:94:7b:
                    67:0b:5c:74:5b:67:e9:e2:f1:d5:dc:4c:8b:7a:12:
                    e0:1b:0a:2a:75:00:1c:d1:45:48:b5:40:af:a8:82:
                    0c:bd:a7:8a:29:bf:49:d7:78:77:17:56:7d:d2:31:
                    cb:b4:43:45:11:a2:f4:38:a9:fd:99:d5:20:d7:97:
                    19:1c:01:2c:98:d6:f7:b5:af:17:10:d8:89:e7:04:
                    ba:e7:87:b0:e8:66:79:c6:55:a9:ab:df:1a:b0:3f:
                    a1:34:db:be:da:2e:31:54:9a:6e:4e:e1:d0:96:9d:
                    48:91:fa:cc:8f:c8:39:0c:9e:00:a8:98:40:6a:7b:
                    d3:bc:4d:91:4b:37:e9:c1:55:60:c4:7a:f5:62:6f:
                    69:de:28:a0:86:b6:61:2c:b5:09:bb:d0:a3:72:ba:
                    03:c2:18:34:2b:43:80:8c:b8:d0:7c:3d:47:25:da:
                    c3:8e:9a:25:79:92:90:14:3f:25:fd:0a:35:b6:aa:
                    13:ed:a0:45:9f:04:84:22:cd:29:44:d0:30:bf:4a:
                    94:2a:71:58:26:20:8c:cf:f7:78:fa:8c:b3:70:1d:
                    9b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:FC:C2:9C:A8:9A:2E:B4:FC:0D:2F:9E:37:C2:F1:D0:34:73:F0:9E
            X509v3 Authority Key Identifier:
                keyid:0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3137302e3233382e35362e302f32322d3232203d3e20323636333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:a5:6c:fb:89:33:db:24:65:21:e7:aa:f0:18:b9:e2:5c:a9:
         47:0b:11:39:48:bb:8c:1d:e4:5e:87:9b:0a:3c:b7:b8:c3:2f:
         52:48:a1:03:a2:91:ba:99:e1:58:56:b1:40:dd:ef:69:35:21:
         f8:c7:54:9a:0e:5a:b7:b7:f2:c3:eb:12:18:de:6a:9d:fc:c6:
         f3:eb:58:74:d2:b0:21:ee:d1:34:07:ae:02:36:14:4d:2a:6e:
         71:a7:54:f2:cc:41:90:a6:e3:19:4d:02:b8:55:41:a2:13:ff:
         b8:a2:cf:d0:7c:0c:60:1c:97:51:8d:ae:8b:11:13:82:92:a6:
         be:4c:ab:a4:bc:e2:00:0b:29:23:f9:88:43:a7:b8:66:b4:61:
         9a:56:cd:ab:c2:23:50:1e:2b:fe:4e:28:8a:d8:ac:05:c9:a7:
         da:d6:94:6d:77:13:c7:f8:e7:51:55:6a:7c:91:7c:d1:b7:a5:
         31:4e:75:77:7b:70:63:de:31:6f:40:65:61:68:7f:bd:3d:a4:
         33:c6:80:0c:d4:2e:71:31:e2:1a:9c:e3:9b:c6:3a:ab:1d:46:
         94:9d:d2:e6:14:27:85:51:65:1e:a2:9f:bb:59:6e:a9:51:7c:
         5f:49:50:c7:ab:75:26:96:44:45:27:8f:b6:16:ec:fd:3a:49:
         00:d0:96:75
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCVHhr3HNcP/Ocl6djS5cMtYaYsswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEEyREM5RjU5MUQzMjU5OUMzQUIwNTYxQ0I4REVGNTlD
Mzk2QzA1NTAeFw0yNDA0MDQxMjM0MDhaFw0yNTA0MDMxMjM5MDhaMDMxMTAvBgNV
BAMTKEM4RkNDMjlDQTg5QTJFQjRGQzBEMkY5RTM3QzJGMUQwMzQ3M0YwOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/NKCpoEdZa0sXNiyfPlca1CLR
EnvKcmH+85tEXnhvPQiqSijRhCbg9M2Ue2cLXHRbZ+ni8dXcTIt6EuAbCip1ABzR
RUi1QK+oggy9p4opv0nXeHcXVn3SMcu0Q0URovQ4qf2Z1SDXlxkcASyY1ve1rxcQ
2InnBLrnh7DoZnnGVamr3xqwP6E0277aLjFUmm5O4dCWnUiR+syPyDkMngComEBq
e9O8TZFLN+nBVWDEevVib2neKKCGtmEstQm70KNyugPCGDQrQ4CMuNB8PUcl2sOO
miV5kpAUPyX9CjW2qhPtoEWfBIQizSlE0DC/SpQqcVgmIIzP93j6jLNwHZsbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUyPzCnKiaLrT8DS+eN8Lx0DRz8J4wHwYDVR0j
BBgwFoAUCi3J9ZHTJZnDqwVhy43vWcOWwFUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGRQQkpGNXZTMWl0eEZMUXh6OTlYeXVKVkFaeWFYUHpzVUU5Ykh3Mzdh
M24vMS8wQTJEQzlGNTkxRDMyNTk5QzNBQjA1NjFDQjhERUY1OUMzOTZDMDU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBMkRDOUY1OTFEMzI1OTlD
M0FCMDU2MUNCOERFRjU5QzM5NkMwNTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RkUEJKRjV2UzFpdHhGTFF4ejk5WHl1SlZBWnlhWFB6c1VFOWJIdzM3YTNuLzEv
MzEzNzMwMmUzMjMzMzgyZTM1MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzYzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq7jgwDQYJKoZIhvcNAQELBQADggEBAAelbPuJ
M9skZSHnqvAYueJcqUcLETlIu4wd5F6Hmwo8t7jDL1JIoQOikbqZ4VhWsUDd72k1
IfjHVJoOWre38sPrEhjeap38xvPrWHTSsCHu0TQHrgI2FE0qbnGnVPLMQZCm4xlN
ArhVQaIT/7iiz9B8DGAcl1GNrosRE4KSpr5Mq6S84gALKSP5iEOnuGa0YZpWzavC
I1AeK/5OKIrYrAXJp9rWlG13E8f451FVanyRfNG3pTFOdXd7cGPeMW9AZWFof709
pDPGgAzULnEx4hqc45vGOqsdRpSd0uYUJ4VRZR6in7tZbqlRfF9JUMerdSaWREUn
j7YW7P06SQDQlnU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:11 2024 by rpki-client on console-ams.rpki-client.org