Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/3137302e302e3139322e302f32322d3332203d3e20323636323939.roa
File:                     3137302e302e3139322e302f32322d3332203d3e20323636323939.roa (raw, json)
Hash identifier:          ZHS86h1PqASQZtMDUbjSTdL+kx8jsevUN91wERnwtto=
Subject key identifier:   EF:18:5F:72:70:91:B1:80:2D:AF:E8:8D:5D:EE:98:EA:AB:57:58:16
Certificate issuer:       /CN=31CF12552C0272C451E1EE12244E03BDDD6B2CA1
Certificate serial:       70960F7F6D573F2425464ACA1A380A6AA7B6AE48
Authority key identifier: 31:CF:12:55:2C:02:72:C4:51:E1:EE:12:24:4E:03:BD:DD:6B:2C:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/3137302e302e3139322e302f32322d3332203d3e20323636323939.roa
Signing time:             Fri 21 Jun 2024 21:48:35 +0000
ROA not before:           Fri 21 Jun 2024 21:43:35 +0000
ROA not after:            Fri 20 Jun 2025 21:48:35 +0000
asID:                     266299
IP address blocks:        170.0.192.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.crl
                          rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:96:0f:7f:6d:57:3f:24:25:46:4a:ca:1a:38:0a:6a:a7:b6:ae:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31CF12552C0272C451E1EE12244E03BDDD6B2CA1
        Validity
            Not Before: Jun 21 21:43:35 2024 GMT
            Not After : Jun 20 21:48:35 2025 GMT
        Subject: CN=EF185F727091B1802DAFE88D5DEE98EAAB575816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fb:f1:72:22:d8:7b:3e:3c:4d:4f:04:9c:d3:
                    2d:86:92:ea:10:db:ef:84:f2:c4:60:5b:e0:f0:43:
                    cc:d8:0d:ec:47:59:10:a5:92:74:00:eb:f6:d1:d9:
                    b5:e6:0d:e5:e4:2d:cb:7c:09:65:94:f1:07:0a:1c:
                    1f:07:f7:78:38:68:5b:cc:e2:7c:1e:cc:5a:44:da:
                    68:c2:90:b5:f2:f1:ca:93:97:b5:80:b5:02:b4:bb:
                    79:b9:43:20:5f:e9:a5:a2:c2:89:07:70:b2:1a:d8:
                    98:bc:7b:25:a2:13:21:06:6f:34:9a:33:90:76:61:
                    2d:9c:5b:8a:79:4e:9e:ac:2d:cd:a4:3d:46:e2:4e:
                    e3:64:62:2b:c8:57:84:7b:79:93:30:79:bb:58:da:
                    5d:0e:47:8e:c2:7c:5a:1b:7c:2e:65:71:74:18:61:
                    07:63:65:09:e6:18:c9:33:bb:be:bf:49:41:d5:66:
                    25:f9:6b:7e:a6:43:4e:17:07:79:2c:0a:c7:d0:dd:
                    54:95:2f:34:f9:19:13:e5:53:ee:84:ef:b2:5b:eb:
                    3f:e8:3f:99:be:bc:63:4c:12:74:58:04:96:84:68:
                    0d:db:10:2b:5f:7a:27:9b:98:dd:0a:5c:75:3b:f8:
                    a4:b5:62:ac:b5:d9:d4:c0:85:2a:24:ce:c2:4a:82:
                    ec:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:18:5F:72:70:91:B1:80:2D:AF:E8:8D:5D:EE:98:EA:AB:57:58:16
            X509v3 Authority Key Identifier:
                keyid:31:CF:12:55:2C:02:72:C4:51:E1:EE:12:24:4E:03:BD:DD:6B:2C:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31CF12552C0272C451E1EE12244E03BDDD6B2CA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/1/3137302e302e3139322e302f32322d3332203d3e20323636323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:74:34:5a:ae:b7:1a:1b:d3:02:b3:c4:f9:89:b3:94:85:07:
         7d:a0:d1:93:1a:3c:ae:d4:94:23:b0:b2:60:3d:c3:42:2d:51:
         f3:98:81:57:0f:33:66:75:2e:cd:9c:00:b7:03:e7:d1:ba:f2:
         30:5f:3d:2f:47:5c:7d:b2:2e:87:45:eb:78:01:d7:79:20:7c:
         33:90:e4:78:88:f5:12:d5:1f:2a:cf:a3:e5:ce:30:4e:49:dd:
         96:a8:e0:bc:05:57:55:bb:5f:28:b3:8c:0d:50:9c:28:52:14:
         45:7d:31:c3:6c:27:83:67:76:f9:3d:ec:46:eb:bc:6b:2c:97:
         40:a9:7a:81:a9:64:16:6c:26:37:99:2f:1c:12:14:45:c6:24:
         30:fd:ee:9b:28:d6:e0:5c:e2:19:62:38:5a:61:50:86:62:79:
         8e:64:36:12:05:78:92:21:f6:39:e0:29:d2:35:5a:fb:c0:ac:
         1b:ba:05:ed:f2:0d:e1:8b:2b:24:47:f7:22:b1:04:ac:a1:3f:
         d1:8d:f3:e5:ac:96:66:a0:bb:86:00:42:2b:ba:63:6d:87:28:
         77:1f:d0:98:44:32:f1:62:b3:76:36:30:60:4a:9a:55:c7:66:
         62:f4:62:c2:6c:24:de:ce:ff:7a:d4:1b:03:85:33:cc:2a:f5:
         f8:e6:ce:35
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcJYPf21XPyQlRkrKGjgKaqe2rkgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzFDRjEyNTUyQzAyNzJDNDUxRTFFRTEyMjQ0RTAzQkRE
RDZCMkNBMTAeFw0yNDA2MjEyMTQzMzVaFw0yNTA2MjAyMTQ4MzVaMDMxMTAvBgNV
BAMTKEVGMTg1RjcyNzA5MUIxODAyREFGRTg4RDVERUU5OEVBQUI1NzU4MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw+/FyIth7PjxNTwSc0y2GkuoQ
2++E8sRgW+DwQ8zYDexHWRClknQA6/bR2bXmDeXkLct8CWWU8QcKHB8H93g4aFvM
4nwezFpE2mjCkLXy8cqTl7WAtQK0u3m5QyBf6aWiwokHcLIa2Ji8eyWiEyEGbzSa
M5B2YS2cW4p5Tp6sLc2kPUbiTuNkYivIV4R7eZMwebtY2l0OR47CfFobfC5lcXQY
YQdjZQnmGMkzu76/SUHVZiX5a36mQ04XB3ksCsfQ3VSVLzT5GRPlU+6E77Jb6z/o
P5m+vGNMEnRYBJaEaA3bECtfeiebmN0KXHU7+KS1Yqy12dTAhSokzsJKguzxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU7xhfcnCRsYAtr+iNXe6Y6qtXWBYwHwYDVR0j
BBgwFoAUMc8SVSwCcsRR4e4SJE4Dvd1rLKEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUNtakI4UXlWVGZRZDlCWEJTd25Na3JYaHI0UHV5RG5kWEpoeXB2TG9L
aU0vMS8zMUNGMTI1NTJDMDI3MkM0NTFFMUVFMTIyNDRFMDNCRERENkIyQ0ExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxQ0YxMjU1MkMwMjcyQzQ1
MUUxRUUxMjI0NEUwM0JEREQ2QjJDQTEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VDbWpCOFF5VlRmUWQ5QlhCU3duTWtyWGhyNFB1eURuZFhKaHlwdkxvS2lNLzEv
MzEzNzMwMmUzMDJlMzEzOTMyMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM2
MzIzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqgDAMA0GCSqGSIb3DQEBCwUAA4IBAQAJdDRarrca
G9MCs8T5ibOUhQd9oNGTGjyu1JQjsLJgPcNCLVHzmIFXDzNmdS7NnAC3A+fRuvIw
Xz0vR1x9si6HRet4Add5IHwzkOR4iPUS1R8qz6PlzjBOSd2WqOC8BVdVu18os4wN
UJwoUhRFfTHDbCeDZ3b5PexG67xrLJdAqXqBqWQWbCY3mS8cEhRFxiQw/e6bKNbg
XOIZYjhaYVCGYnmOZDYSBXiSIfY54CnSNVr7wKwbugXt8g3hiyskR/cisQSsoT/R
jfPlrJZmoLuGAEIrumNthyh3H9CYRDLxYrN2NjBgSppVx2Zi9GLCbCTezv961BsD
hTPMKvX45s41
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:57 2024 by rpki-client on console-fra.rpki-client.org