Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/3136372e3234392e3136322e302f32342d3234203d3e20323637353735.roa
File:                     3136372e3234392e3136322e302f32342d3234203d3e20323637353735.roa (raw, json)
Hash identifier:          RaFkIlEGjnYp58YM44CZYYT/768sc8lWoeOS9JJZQqs=
Subject key identifier:   DC:6F:45:D5:A9:64:67:A6:C0:64:6D:83:9E:AD:B2:BA:87:BE:29:17
Certificate issuer:       /CN=E6E033681DC6E1958D9D3974EBB609A1AB57CB49
Certificate serial:       733D773D01FB6D85EB7A76277699106F07BF0F49
Authority key identifier: E6:E0:33:68:1D:C6:E1:95:8D:9D:39:74:EB:B6:09:A1:AB:57:CB:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6E033681DC6E1958D9D3974EBB609A1AB57CB49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/3136372e3234392e3136322e302f32342d3234203d3e20323637353735.roa
Signing time:             Wed 18 Sep 2024 12:17:31 +0000
ROA not before:           Wed 18 Sep 2024 12:12:31 +0000
ROA not after:            Wed 17 Sep 2025 12:17:31 +0000
asID:                     267575
IP address blocks:        167.249.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/E6E033681DC6E1958D9D3974EBB609A1AB57CB49.crl
                          rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/E6E033681DC6E1958D9D3974EBB609A1AB57CB49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6E033681DC6E1958D9D3974EBB609A1AB57CB49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 16:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:3d:77:3d:01:fb:6d:85:eb:7a:76:27:76:99:10:6f:07:bf:0f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6E033681DC6E1958D9D3974EBB609A1AB57CB49
        Validity
            Not Before: Sep 18 12:12:31 2024 GMT
            Not After : Sep 17 12:17:31 2025 GMT
        Subject: CN=DC6F45D5A96467A6C0646D839EADB2BA87BE2917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ed:b8:08:ce:29:00:15:66:4d:fd:b0:3e:11:
                    1a:de:34:f8:60:de:77:20:d1:b9:79:dd:c2:f9:8f:
                    0f:cc:e1:1f:d4:06:3b:57:6d:7d:85:62:02:fe:f4:
                    30:b9:63:b5:32:7b:46:b2:3e:4e:61:b6:d2:2d:a6:
                    af:d9:07:12:5b:1b:7f:ca:ff:96:61:80:03:6c:6a:
                    65:27:d8:c3:b2:2e:a6:21:78:44:3b:5f:c4:c3:cd:
                    61:8b:26:4d:a5:c8:6f:ce:88:a9:85:55:eb:d2:7b:
                    8b:16:6e:41:92:8f:7d:9e:49:42:a1:08:b5:43:da:
                    d5:09:c5:95:fe:84:96:76:9f:30:13:97:97:94:32:
                    22:68:e7:67:5f:9c:5d:ee:ae:71:8b:fb:e2:2c:50:
                    83:ca:f1:43:ae:3d:e1:83:27:b6:22:3d:db:87:28:
                    39:34:f6:d9:24:3b:59:ba:64:1f:f8:51:82:12:2a:
                    a9:59:d4:7a:0b:50:4a:e9:98:5c:7a:24:de:82:26:
                    1e:7a:be:ee:2a:10:7d:11:6f:75:5d:cb:ca:28:10:
                    f4:d1:4c:3e:4d:70:72:95:b7:b9:f2:56:3e:10:6e:
                    0e:ab:f8:cc:8f:e0:55:cf:0e:f6:f1:b2:b7:70:fb:
                    b6:49:f1:b0:ed:e8:41:25:a3:d5:db:93:a9:2b:d2:
                    5d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:6F:45:D5:A9:64:67:A6:C0:64:6D:83:9E:AD:B2:BA:87:BE:29:17
            X509v3 Authority Key Identifier:
                keyid:E6:E0:33:68:1D:C6:E1:95:8D:9D:39:74:EB:B6:09:A1:AB:57:CB:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/E6E033681DC6E1958D9D3974EBB609A1AB57CB49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6E033681DC6E1958D9D3974EBB609A1AB57CB49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/3136372e3234392e3136322e302f32342d3234203d3e20323637353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:1b:09:fe:66:cc:6e:4c:ca:7c:a6:10:88:ab:09:1e:aa:11:
         5f:92:75:28:74:6d:3c:3f:60:c1:ed:09:3b:78:2a:79:b8:74:
         6e:dd:c2:e1:9b:4b:e5:f4:49:e0:c4:59:4c:ec:46:f3:17:4f:
         f2:5f:b1:f3:39:83:22:be:f9:9b:46:e2:98:a2:d4:20:c9:98:
         db:cb:fe:9c:99:bc:e7:53:1b:ad:a3:4c:36:e5:92:4c:bc:60:
         53:36:d2:ab:f0:9b:c5:c6:81:de:28:8a:25:22:20:0d:5d:37:
         b7:10:8b:29:58:2b:a5:1f:7b:ab:cd:ae:2e:81:6a:74:88:96:
         7e:d6:de:5e:13:38:1d:87:14:50:12:60:83:17:26:e0:0b:3c:
         9c:b1:7f:d4:94:9f:6b:41:7d:b5:8e:8f:dd:2b:ff:04:bd:09:
         25:57:31:1c:71:46:6d:0e:73:5d:5b:98:f2:d3:fd:b9:20:60:
         60:36:f4:5c:3e:6e:56:92:f6:bb:f0:0c:05:8b:d1:f0:c7:62:
         8d:20:c7:a4:bf:59:5d:19:dd:4e:4d:d0:28:9f:c2:64:f3:29:
         f2:6f:90:f2:b1:46:b5:2b:65:bb:88:2f:27:ab:74:a0:c8:5f:
         d9:44:b3:76:68:ad:89:75:de:63:b4:d3:a5:dd:8f:7e:eb:a6:
         01:20:c3:bb
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUcz13PQH7bYXrenYndpkQbwe/D0kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTZFMDMzNjgxREM2RTE5NThEOUQzOTc0RUJCNjA5QTFB
QjU3Q0I0OTAeFw0yNDA5MTgxMjEyMzFaFw0yNTA5MTcxMjE3MzFaMDMxMTAvBgNV
BAMTKERDNkY0NUQ1QTk2NDY3QTZDMDY0NkQ4MzlFQURCMkJBODdCRTI5MTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS7bgIzikAFWZN/bA+ERreNPhg
3ncg0bl53cL5jw/M4R/UBjtXbX2FYgL+9DC5Y7Uye0ayPk5httItpq/ZBxJbG3/K
/5ZhgANsamUn2MOyLqYheEQ7X8TDzWGLJk2lyG/OiKmFVevSe4sWbkGSj32eSUKh
CLVD2tUJxZX+hJZ2nzATl5eUMiJo52dfnF3urnGL++IsUIPK8UOuPeGDJ7YiPduH
KDk09tkkO1m6ZB/4UYISKqlZ1HoLUErpmFx6JN6CJh56vu4qEH0Rb3Vdy8ooEPTR
TD5NcHKVt7nyVj4Qbg6r+MyP4FXPDvbxsrdw+7ZJ8bDt6EElo9Xbk6kr0l2tAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU3G9F1alkZ6bAZG2Dnq2yuoe+KRcwHwYDVR0j
BBgwFoAU5uAzaB3G4ZWNnTl067YJoatXy0kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVNnZFZyeG53VlBidFFoazY1a0xZR3c1WkpBMzk3ZzZmQ0RQeWF6TW11
UjcvMC9FNkUwMzM2ODFEQzZFMTk1OEQ5RDM5NzRFQkI2MDlBMUFCNTdDQjQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2RTAzMzY4MURDNkUxOTU4
RDlEMzk3NEVCQjYwOUExQUI1N0NCNDkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VTZ2RWcnhud1ZQYnRRaGs2NWtMWUd3NVpKQTM5N2c2ZkNEUHlhek1tdVI3LzAv
MzEzNjM3MmUzMjM0MzkyZTMxMzYzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNzM1MzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKf5ojANBgkqhkiG9w0BAQsFAAOCAQEAcBsJ
/mbMbkzKfKYQiKsJHqoRX5J1KHRtPD9gwe0JO3gqebh0bt3C4ZtL5fRJ4MRZTOxG
8xdP8l+x8zmDIr75m0bimKLUIMmY28v+nJm851MbraNMNuWSTLxgUzbSq/CbxcaB
3iiKJSIgDV03txCLKVgrpR97q82uLoFqdIiWftbeXhM4HYcUUBJggxcm4As8nLF/
1JSfa0F9tY6P3Sv/BL0JJVcxHHFGbQ5zXVuY8tP9uSBgYDb0XD5uVpL2u/AMBYvR
8MdijSDHpL9ZXRndTk3QKJ/CZPMp8m+Q8rFGtStlu4gvJ6t0oMhf2USzdmitiXXe
Y7TTpd2PfuumASDDuw==
-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:54 2024 by rpki-client on console-fra.rpki-client.org