Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZMu1bMAv44FQz5kyLHqM9toGpz1BAXdV4cS92VYCLbM/0/3137302e3234342e3232392e302f32342d3234203d3e20323636353233.roa
File:                     3137302e3234342e3232392e302f32342d3234203d3e20323636353233.roa (raw, json)
Hash identifier:          +gUPwmgytwZOVUOzgf75YpCHj2pyTJKXiq4raz3Tnjw=
Subject key identifier:   7E:DD:8D:1E:FC:23:62:F8:E2:3E:14:2A:D8:50:4F:F8:84:51:D4:BC
Certificate issuer:       /CN=FC2C41622C37BCAC455084DC9E14B78BE8E39993
Certificate serial:       6C26BF8C0096A45555A08C5ED2AB88E167758D1D
Authority key identifier: FC:2C:41:62:2C:37:BC:AC:45:50:84:DC:9E:14:B7:8B:E8:E3:99:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC2C41622C37BCAC455084DC9E14B78BE8E39993.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZMu1bMAv44FQz5kyLHqM9toGpz1BAXdV4cS92VYCLbM/0/3137302e3234342e3232392e302f32342d3234203d3e20323636353233.roa
Signing time:             Fri 12 Apr 2024 13:10:23 +0000
ROA not before:           Fri 12 Apr 2024 13:05:23 +0000
ROA not after:            Fri 11 Apr 2025 13:10:23 +0000
asID:                     266523
IP address blocks:        170.244.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZMu1bMAv44FQz5kyLHqM9toGpz1BAXdV4cS92VYCLbM/0/FC2C41622C37BCAC455084DC9E14B78BE8E39993.crl
                          rsync://rpki-repo.registro.br/repo/EZMu1bMAv44FQz5kyLHqM9toGpz1BAXdV4cS92VYCLbM/0/FC2C41622C37BCAC455084DC9E14B78BE8E39993.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC2C41622C37BCAC455084DC9E14B78BE8E39993.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:17:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:26:bf:8c:00:96:a4:55:55:a0:8c:5e:d2:ab:88:e1:67:75:8d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC2C41622C37BCAC455084DC9E14B78BE8E39993
        Validity
            Not Before: Apr 12 13:05:23 2024 GMT
            Not After : Apr 11 13:10:23 2025 GMT
        Subject: CN=7EDD8D1EFC2362F8E23E142AD8504FF88451D4BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8e:51:c9:57:cc:00:78:e4:82:00:b8:6e:25:
                    00:10:17:83:ec:08:8d:83:ba:54:02:83:7a:f3:60:
                    a3:b5:85:42:6c:5a:47:1b:f4:7e:1b:d7:b0:04:f5:
                    f9:a1:9b:a7:59:a2:79:d2:3c:e8:95:09:21:45:8d:
                    93:c2:4d:85:45:8d:d1:d2:2f:ca:5f:16:6b:4c:c7:
                    57:ee:e4:26:6b:34:1f:75:c2:b9:00:57:fa:9d:ce:
                    1c:9f:6c:70:dc:5e:54:e6:b4:58:72:2a:66:75:a6:
                    fe:5b:18:c0:c2:df:f9:1f:5e:ef:7b:35:34:9b:c0:
                    53:96:ff:4f:04:72:85:81:32:6a:b0:69:66:08:b5:
                    ef:72:2f:4e:43:ce:ac:aa:43:84:bb:b1:2b:c8:b7:
                    50:d2:e5:c2:a3:97:28:b6:ac:cb:cf:e2:20:61:b2:
                    13:3e:4e:a9:24:db:d8:cb:79:b0:40:fc:10:d9:df:
                    12:82:fc:37:7f:8e:7a:53:68:a5:f5:18:00:c9:96:
                    d7:5f:8c:cf:dc:b0:08:07:e6:23:be:cb:a2:ca:74:
                    e2:39:ec:2e:c6:64:3c:54:b0:c5:e7:1d:75:7d:d9:
                    87:ce:97:b9:a4:37:26:65:56:ea:dd:29:af:0c:d3:
                    ab:46:50:26:ac:c9:46:b4:4b:8f:e5:36:39:f6:38:
                    a9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DD:8D:1E:FC:23:62:F8:E2:3E:14:2A:D8:50:4F:F8:84:51:D4:BC
            X509v3 Authority Key Identifier:
                keyid:FC:2C:41:62:2C:37:BC:AC:45:50:84:DC:9E:14:B7:8B:E8:E3:99:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZMu1bMAv44FQz5kyLHqM9toGpz1BAXdV4cS92VYCLbM/0/FC2C41622C37BCAC455084DC9E14B78BE8E39993.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC2C41622C37BCAC455084DC9E14B78BE8E39993.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZMu1bMAv44FQz5kyLHqM9toGpz1BAXdV4cS92VYCLbM/0/3137302e3234342e3232392e302f32342d3234203d3e20323636353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:58:ea:19:24:1b:6e:96:a4:ee:61:8f:fe:86:d5:e5:00:0b:
         d5:c3:6e:54:d5:ad:4f:8e:16:e0:d9:13:21:4f:90:b1:27:68:
         13:0e:8a:9b:5c:d5:6e:94:50:8d:e1:19:15:29:88:0d:4f:6a:
         6a:3b:af:d5:17:0c:91:d0:e4:1f:30:1d:53:c6:2a:61:7a:82:
         35:b7:78:15:2b:54:79:83:ad:4a:36:42:b8:4a:e3:df:a6:de:
         18:1c:db:a2:ad:fb:1b:6f:e8:c0:49:11:78:ac:a7:e6:9e:c8:
         95:d9:9f:4c:90:e9:41:20:f0:72:58:80:ac:6d:2f:b6:bf:8a:
         74:c0:c6:4e:b4:bd:bf:d5:95:33:f2:11:89:5c:89:0e:ec:97:
         9c:6b:44:3b:bf:31:be:a3:97:e7:94:7a:93:67:90:b7:51:a0:
         7c:1a:9b:9b:e5:37:7e:ca:96:de:5d:3a:64:3e:46:2d:17:19:
         60:81:7c:26:09:5a:70:5a:52:5c:68:3c:e9:99:b5:de:7a:78:
         82:24:cd:b3:75:9f:d7:fa:ce:c9:73:fa:4d:11:f0:56:fe:6d:
         ad:5f:ea:79:5c:6d:da:22:2a:5a:e2:db:1f:4b:09:8e:6f:f7:
         4d:34:7d:b6:31:eb:e9:e2:27:46:40:47:3a:ed:bb:90:d0:33:
         1e:d0:b7:c1
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUbCa/jACWpFVVoIxe0quI4Wd1jR0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkMyQzQxNjIyQzM3QkNBQzQ1NTA4NERDOUUxNEI3OEJF
OEUzOTk5MzAeFw0yNDA0MTIxMzA1MjNaFw0yNTA0MTExMzEwMjNaMDMxMTAvBgNV
BAMTKDdFREQ4RDFFRkMyMzYyRjhFMjNFMTQyQUQ4NTA0RkY4ODQ1MUQ0QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSjlHJV8wAeOSCALhuJQAQF4Ps
CI2DulQCg3rzYKO1hUJsWkcb9H4b17AE9fmhm6dZonnSPOiVCSFFjZPCTYVFjdHS
L8pfFmtMx1fu5CZrNB91wrkAV/qdzhyfbHDcXlTmtFhyKmZ1pv5bGMDC3/kfXu97
NTSbwFOW/08EcoWBMmqwaWYIte9yL05DzqyqQ4S7sSvIt1DS5cKjlyi2rMvP4iBh
shM+Tqkk29jLebBA/BDZ3xKC/Dd/jnpTaKX1GADJltdfjM/csAgH5iO+y6LKdOI5
7C7GZDxUsMXnHXV92YfOl7mkNyZlVurdKa8M06tGUCasyUa0S4/lNjn2OKlfAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUft2NHvwjYvjiPhQq2FBP+IRR1LwwHwYDVR0j
BBgwFoAU/CxBYiw3vKxFUITcnhS3i+jjmZMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVpNdTFiTUF2NDRGUXo1a3lMSHFNOXRvR3B6MUJBWGRWNGNTOTJWWUNM
Yk0vMC9GQzJDNDE2MjJDMzdCQ0FDNDU1MDg0REM5RTE0Qjc4QkU4RTM5OTkzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZDMkM0MTYyMkMzN0JDQUM0
NTUwODREQzlFMTRCNzhCRThFMzk5OTMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VaTXUxYk1BdjQ0RlF6NWt5TEhxTTl0b0dwejFCQVhkVjRjUzkyVllDTGJNLzAv
MzEzNzMwMmUzMjM0MzQyZTMyMzIzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNjM1MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKr05TANBgkqhkiG9w0BAQsFAAOCAQEAbVjq
GSQbbpak7mGP/obV5QAL1cNuVNWtT44W4NkTIU+QsSdoEw6Km1zVbpRQjeEZFSmI
DU9qajuv1RcMkdDkHzAdU8YqYXqCNbd4FStUeYOtSjZCuErj36beGBzboq37G2/o
wEkReKyn5p7IldmfTJDpQSDwcliArG0vtr+KdMDGTrS9v9WVM/IRiVyJDuyXnGtE
O78xvqOX55R6k2eQt1GgfBqbm+U3fsqW3l06ZD5GLRcZYIF8JglacFpSXGg86Zm1
3np4giTNs3Wf1/rOyXP6TRHwVv5trV/qeVxt2iIqWuLbH0sJjm/3TTR9tjHr6eIn
RkBHOu27kNAzHtC3wQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:31 2024 by rpki-client on console-fra.rpki-client.org