Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/3137302e38342e3134312e302f32342d3234203d3e20323635303137.roa
File:                     3137302e38342e3134312e302f32342d3234203d3e20323635303137.roa (raw, json)
Hash identifier:          1AeAqQzFs/+FLVXT8RA1uaTScV+zDEClCBthutVoXiY=
Subject key identifier:   A8:38:CA:F0:9A:50:57:25:4E:F7:E3:4E:32:39:23:57:1D:93:79:CE
Certificate issuer:       /CN=DE52A04E8F1F5A9955E1555E60EA1A4BF5618404
Certificate serial:       067785B7F70AAB0AE4825679E3BA369450CD98D0
Authority key identifier: DE:52:A0:4E:8F:1F:5A:99:55:E1:55:5E:60:EA:1A:4B:F5:61:84:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE52A04E8F1F5A9955E1555E60EA1A4BF5618404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/3137302e38342e3134312e302f32342d3234203d3e20323635303137.roa
Signing time:             Fri 26 Apr 2024 19:34:22 +0000
ROA not before:           Fri 26 Apr 2024 19:29:22 +0000
ROA not after:            Fri 25 Apr 2025 19:34:22 +0000
asID:                     265017
IP address blocks:        170.84.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/DE52A04E8F1F5A9955E1555E60EA1A4BF5618404.crl
                          rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/DE52A04E8F1F5A9955E1555E60EA1A4BF5618404.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE52A04E8F1F5A9955E1555E60EA1A4BF5618404.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 07:07:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:77:85:b7:f7:0a:ab:0a:e4:82:56:79:e3:ba:36:94:50:cd:98:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE52A04E8F1F5A9955E1555E60EA1A4BF5618404
        Validity
            Not Before: Apr 26 19:29:22 2024 GMT
            Not After : Apr 25 19:34:22 2025 GMT
        Subject: CN=A838CAF09A5057254EF7E34E323923571D9379CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ef:71:6b:d4:9b:64:12:6c:60:7b:5e:6f:20:
                    ae:63:8a:b1:53:73:c2:2b:d8:91:da:35:c5:ee:ba:
                    4c:4f:e6:5a:98:e1:df:f6:1e:9f:83:4d:3f:7f:cf:
                    39:81:06:47:45:51:93:d8:c9:05:bf:12:0d:da:e2:
                    57:0c:2d:57:b8:2f:a7:e8:2e:9a:d9:1c:b0:ca:7e:
                    1e:e1:a1:58:cd:ba:f1:96:15:d3:46:71:42:86:88:
                    71:b8:17:34:54:20:60:dc:19:a6:5f:7f:46:5e:d4:
                    35:2f:c1:43:b9:83:5d:f3:f0:60:cf:89:b6:f2:37:
                    0b:d1:f8:db:cb:f6:37:e6:1c:9a:42:d6:bd:34:8f:
                    e6:22:bb:60:c3:94:6a:0c:81:4e:9a:c1:c9:29:b1:
                    67:ef:7f:95:56:c5:6c:3b:52:be:d2:0d:53:df:e4:
                    4e:a0:9a:ae:df:97:c9:39:e5:d1:73:21:8b:b7:10:
                    54:f3:00:74:49:90:ba:78:dd:7f:51:b7:42:d2:e6:
                    4e:30:ba:dc:c6:f5:80:4f:b6:31:41:b3:0f:45:1e:
                    76:e6:e6:81:6e:d7:62:0b:54:fe:4c:a5:19:cc:1e:
                    ba:5f:44:a2:fa:ec:d5:ec:7e:ee:76:57:77:ed:24:
                    4b:a8:51:53:41:48:65:07:d9:db:08:ab:08:71:d0:
                    b2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:38:CA:F0:9A:50:57:25:4E:F7:E3:4E:32:39:23:57:1D:93:79:CE
            X509v3 Authority Key Identifier:
                keyid:DE:52:A0:4E:8F:1F:5A:99:55:E1:55:5E:60:EA:1A:4B:F5:61:84:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/DE52A04E8F1F5A9955E1555E60EA1A4BF5618404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE52A04E8F1F5A9955E1555E60EA1A4BF5618404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/3137302e38342e3134312e302f32342d3234203d3e20323635303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:58:cc:db:94:c5:5f:dd:d1:55:9e:09:d0:1b:48:92:22:ba:
         aa:1c:72:87:5a:3c:39:ad:4f:6c:8d:6d:4d:13:c2:2b:55:ae:
         ab:f2:ca:c1:30:99:1b:16:cd:e5:9d:10:09:b5:62:a7:51:d5:
         cb:5d:67:00:3b:01:40:12:c6:18:62:60:77:7f:e3:14:97:96:
         c1:e0:b9:53:7c:05:7a:b8:8f:bc:9e:e9:71:48:0c:27:a6:88:
         cd:43:60:77:bc:0a:9c:40:87:50:9d:51:aa:a1:8b:89:7f:65:
         06:b9:81:fb:91:00:48:11:1b:86:f0:7c:c5:d1:92:ae:31:ef:
         e0:ce:59:71:ba:5d:89:4c:cd:14:47:16:ed:bf:14:22:6d:94:
         28:9d:1c:6e:00:51:57:fb:b7:f3:71:9f:8f:76:6d:5e:38:61:
         8c:4c:a4:f6:19:6e:b9:8d:ae:66:e4:8c:49:c1:76:4a:07:d5:
         89:a3:78:dd:2c:bc:66:e0:8b:58:79:5e:69:ce:9d:ee:eb:7a:
         9d:51:7e:08:1a:00:8d:d4:b5:5d:60:f2:b0:8f:ce:85:5f:44:
         d6:fb:c7:90:7b:89:02:a1:e6:5f:15:6e:31:bf:fa:5c:2d:5c:
         e3:a1:b0:1a:9c:d4:af:4c:c4:2e:ec:c4:2e:86:3b:7d:74:16:
         5b:53:99:cb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBneFt/cKqwrkglZ547o2lFDNmNAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREU1MkEwNEU4RjFGNUE5OTU1RTE1NTVFNjBFQTFBNEJG
NTYxODQwNDAeFw0yNDA0MjYxOTI5MjJaFw0yNTA0MjUxOTM0MjJaMDMxMTAvBgNV
BAMTKEE4MzhDQUYwOUE1MDU3MjU0RUY3RTM0RTMyMzkyMzU3MUQ5Mzc5Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy73Fr1JtkEmxge15vIK5jirFT
c8Ir2JHaNcXuukxP5lqY4d/2Hp+DTT9/zzmBBkdFUZPYyQW/Eg3a4lcMLVe4L6fo
LprZHLDKfh7hoVjNuvGWFdNGcUKGiHG4FzRUIGDcGaZff0Ze1DUvwUO5g13z8GDP
ibbyNwvR+NvL9jfmHJpC1r00j+Yiu2DDlGoMgU6awckpsWfvf5VWxWw7Ur7SDVPf
5E6gmq7fl8k55dFzIYu3EFTzAHRJkLp43X9Rt0LS5k4wutzG9YBPtjFBsw9FHnbm
5oFu12ILVP5MpRnMHrpfRKL67NXsfu52V3ftJEuoUVNBSGUH2dsIqwhx0LLJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUqDjK8JpQVyVO9+NOMjkjVx2Tec4wHwYDVR0j
BBgwFoAU3lKgTo8fWplV4VVeYOoaS/VhhAQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHNFTm5yVEZnZGh2Ylp1QjZWcTZTTVlpanMxdVpiYUR1RWo3QjkyNUN2
TW0vMC9ERTUyQTA0RThGMUY1QTk5NTVFMTU1NUU2MEVBMUE0QkY1NjE4NDA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFNTJBMDRFOEYxRjVBOTk1
NUUxNTU1RTYwRUExQTRCRjU2MTg0MDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RzRU5uclRGZ2RodmJadUI2VnE2U01ZaWpzMXVaYmFEdUVqN0I5MjVDdk1tLzAv
MzEzNzMwMmUzODM0MmUzMTM0MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMDMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACqVI0wDQYJKoZIhvcNAQELBQADggEBAKRYzNuU
xV/d0VWeCdAbSJIiuqoccodaPDmtT2yNbU0TwitVrqvyysEwmRsWzeWdEAm1YqdR
1ctdZwA7AUASxhhiYHd/4xSXlsHguVN8BXq4j7ye6XFIDCemiM1DYHe8CpxAh1Cd
Uaqhi4l/ZQa5gfuRAEgRG4bwfMXRkq4x7+DOWXG6XYlMzRRHFu2/FCJtlCidHG4A
UVf7t/Nxn492bV44YYxMpPYZbrmNrmbkjEnBdkoH1YmjeN0svGbgi1h5XmnOne7r
ep1RfggaAI3UtV1g8rCPzoVfRNb7x5B7iQKh5l8VbjG/+lwtXOOhsBqc1K9MxC7s
xC6GO310FltTmcs=
-----END CERTIFICATE-----
Generated at Sat Jun 1 05:48:35 2024 by rpki-client on console-fra.rpki-client.org