Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/3136302e3233382e3139392e302f32342d3234203d3e20323636353436.roa
File:                     3136302e3233382e3139392e302f32342d3234203d3e20323636353436.roa (raw, json)
Hash identifier:          fFS41olqIBtKxgUlRupFOijsnl6Sxb1Bax/EnMLKDh0=
Subject key identifier:   74:BB:79:21:D5:CB:19:8A:7D:B4:B6:39:45:99:A6:07:ED:B4:0F:60
Certificate issuer:       /CN=B850A87858FE7B4C31702DB93D7CE6CC2DF7944C
Certificate serial:       13D340E3522C5D413EC14EEE8ADD9750133FBE97
Authority key identifier: B8:50:A8:78:58:FE:7B:4C:31:70:2D:B9:3D:7C:E6:CC:2D:F7:94:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B850A87858FE7B4C31702DB93D7CE6CC2DF7944C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/3136302e3233382e3139392e302f32342d3234203d3e20323636353436.roa
Signing time:             Thu 01 Aug 2024 03:17:41 +0000
ROA not before:           Thu 01 Aug 2024 03:12:41 +0000
ROA not after:            Thu 31 Jul 2025 03:17:41 +0000
asID:                     266546
IP address blocks:        160.238.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/B850A87858FE7B4C31702DB93D7CE6CC2DF7944C.crl
                          rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/B850A87858FE7B4C31702DB93D7CE6CC2DF7944C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B850A87858FE7B4C31702DB93D7CE6CC2DF7944C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d3:40:e3:52:2c:5d:41:3e:c1:4e:ee:8a:dd:97:50:13:3f:be:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B850A87858FE7B4C31702DB93D7CE6CC2DF7944C
        Validity
            Not Before: Aug  1 03:12:41 2024 GMT
            Not After : Jul 31 03:17:41 2025 GMT
        Subject: CN=74BB7921D5CB198A7DB4B6394599A607EDB40F60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e0:d2:2a:5f:9d:d8:e2:03:b8:5f:c2:e0:ae:
                    af:9e:2b:6d:f8:66:86:ab:f1:41:b2:86:b1:b2:c2:
                    86:a8:35:9d:0d:95:4a:79:76:c2:0c:0c:47:7c:fc:
                    f5:e0:16:11:53:08:80:b5:50:9b:9e:69:19:6c:ec:
                    19:df:f7:5a:8d:40:6f:84:ee:a8:db:c8:9c:e8:44:
                    72:72:64:29:23:15:e9:5a:1a:b4:97:9f:c5:80:1b:
                    a0:3a:d4:94:fc:3d:a7:08:61:ce:65:27:d2:5b:c4:
                    f3:b0:47:70:db:b6:39:11:80:f5:8d:9b:e0:a0:6a:
                    b5:d2:0f:8f:0c:c0:17:17:dc:27:02:e5:4a:3b:98:
                    18:e7:e3:43:9a:f5:a8:9c:fd:5e:4e:17:36:d5:d6:
                    09:da:6b:75:de:c6:93:7f:f7:0e:ac:3a:f5:65:56:
                    6a:26:e4:24:bd:b5:ac:5a:c1:6b:b1:92:6e:47:0e:
                    52:ab:93:1f:cf:36:61:d4:8c:f4:bd:08:e8:23:f0:
                    55:05:75:db:0e:66:a3:9d:53:17:6a:02:2d:15:ad:
                    cf:db:54:0a:9b:e1:90:8d:5e:06:2a:ad:2d:7f:d5:
                    2d:05:6e:eb:b5:dc:d9:d3:41:a4:bd:03:56:3c:96:
                    a0:96:eb:6d:70:d4:5f:8d:e9:b0:6b:4a:50:f4:7c:
                    4c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:BB:79:21:D5:CB:19:8A:7D:B4:B6:39:45:99:A6:07:ED:B4:0F:60
            X509v3 Authority Key Identifier:
                keyid:B8:50:A8:78:58:FE:7B:4C:31:70:2D:B9:3D:7C:E6:CC:2D:F7:94:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/B850A87858FE7B4C31702DB93D7CE6CC2DF7944C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B850A87858FE7B4C31702DB93D7CE6CC2DF7944C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgD1ThHCNMUz2kADkMWJteSfpnTNpwQhxE8he2PXWEz/0/3136302e3233382e3139392e302f32342d3234203d3e20323636353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:c1:ae:b8:18:71:9c:5a:5e:1b:70:ca:5c:d9:be:21:a1:96:
         d2:fa:8b:ae:a2:c8:6b:4e:aa:4b:0f:25:6a:e5:29:5d:cf:9f:
         b4:9f:52:26:48:09:25:af:be:34:a3:73:5b:a1:23:b3:b7:97:
         27:35:68:fc:3c:3c:97:00:31:04:e5:34:86:20:6e:6f:eb:11:
         2a:ec:46:03:07:79:d5:ba:67:07:c7:e4:6c:d8:e6:97:82:b4:
         63:9d:1c:2e:c1:a4:85:29:b4:1c:f6:8b:1c:0d:fd:2d:bc:fe:
         ef:e8:50:a5:ec:36:0a:2c:2a:42:5b:1b:c6:be:a4:ef:7d:c3:
         fe:50:cc:7a:c8:45:26:b7:6b:48:a0:15:7a:53:44:06:5d:bc:
         68:f4:f8:bc:87:7a:58:c7:e5:76:b9:10:5e:ca:8e:4e:66:5c:
         d2:6e:30:72:1a:ad:82:2e:e9:2c:1d:7f:7c:f5:8f:35:b0:22:
         f8:2d:4d:83:af:68:89:f8:37:39:d3:b0:00:23:15:01:d9:98:
         95:64:d8:26:89:22:44:0c:38:0b:31:e3:2f:fd:98:eb:66:16:
         86:ea:ca:ca:7d:b5:cb:ec:9f:27:cc:8b:ff:2c:5f:e9:c7:73:
         73:4b:49:11:2c:68:5f:8b:21:01:e4:53:3a:7d:f1:69:36:5a:
         88:79:ec:3d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUE9NA41IsXUE+wU7uit2XUBM/vpcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg1MEE4Nzg1OEZFN0I0QzMxNzAyREI5M0Q3Q0U2Q0My
REY3OTQ0QzAeFw0yNDA4MDEwMzEyNDFaFw0yNTA3MzEwMzE3NDFaMDMxMTAvBgNV
BAMTKDc0QkI3OTIxRDVDQjE5OEE3REI0QjYzOTQ1OTlBNjA3RURCNDBGNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM4NIqX53Y4gO4X8Lgrq+eK234
Zoar8UGyhrGywoaoNZ0NlUp5dsIMDEd8/PXgFhFTCIC1UJueaRls7Bnf91qNQG+E
7qjbyJzoRHJyZCkjFelaGrSXn8WAG6A61JT8PacIYc5lJ9JbxPOwR3DbtjkRgPWN
m+CgarXSD48MwBcX3CcC5Uo7mBjn40Oa9aic/V5OFzbV1gnaa3XexpN/9w6sOvVl
Vmom5CS9taxawWuxkm5HDlKrkx/PNmHUjPS9COgj8FUFddsOZqOdUxdqAi0Vrc/b
VAqb4ZCNXgYqrS1/1S0Fbuu13NnTQaS9A1Y8lqCW621w1F+N6bBrSlD0fEzbAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUdLt5IdXLGYp9tLY5RZmmB+20D2AwHwYDVR0j
BBgwFoAUuFCoeFj+e0wxcC25PXzmzC33lEwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWhnRDFUaEhDTk1VejJrQURrTVdKdGVTZnBuVE5wd1FoeEU4aGUyUFhX
RXovMC9CODUwQTg3ODU4RkU3QjRDMzE3MDJEQjkzRDdDRTZDQzJERjc5NDRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4NTBBODc4NThGRTdCNEMz
MTcwMkRCOTNEN0NFNkNDMkRGNzk0NEMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VoZ0QxVGhIQ05NVXoya0FEa01XSnRlU2ZwblROcHdRaHhFOGhlMlBYV0V6LzAv
MzEzNjMwMmUzMjMzMzgyZTMxMzkzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNjM1MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKDuxzANBgkqhkiG9w0BAQsFAAOCAQEAksGu
uBhxnFpeG3DKXNm+IaGW0vqLrqLIa06qSw8lauUpXc+ftJ9SJkgJJa++NKNzW6Ej
s7eXJzVo/Dw8lwAxBOU0hiBub+sRKuxGAwd51bpnB8fkbNjml4K0Y50cLsGkhSm0
HPaLHA39Lbz+7+hQpew2CiwqQlsbxr6k733D/lDMeshFJrdrSKAVelNEBl28aPT4
vId6WMfldrkQXsqOTmZc0m4wchqtgi7pLB1/fPWPNbAi+C1Ng69oifg3OdOwACMV
AdmYlWTYJokiRAw4CzHjL/2Y62YWhurKyn21y+yfJ8yL/yxf6cdzc0tJESxoX4sh
AeRTOn3xaTZaiHnsPQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:12 2024 by rpki-client on console-ams.rpki-client.org