Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/3137302e3233332e3234302e302f32322d3332203d3e20323731323933.roa
File:                     3137302e3233332e3234302e302f32322d3332203d3e20323731323933.roa (raw, json)
Hash identifier:          Qiql5aM9nrpdZS6Qv8ZtCabpYo9clI1Ymn7xPWCXITc=
Subject key identifier:   B7:51:79:75:2A:4B:65:64:D1:7B:A7:CB:25:60:D2:9B:B1:1C:89:FB
Certificate issuer:       /CN=D853C4D5568D20B0919C2E29804E2F4983BCFDF3
Certificate serial:       2767A691284D6D8F4E593D65E146446110694A8E
Authority key identifier: D8:53:C4:D5:56:8D:20:B0:91:9C:2E:29:80:4E:2F:49:83:BC:FD:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/3137302e3233332e3234302e302f32322d3332203d3e20323731323933.roa
Signing time:             Tue 21 May 2024 16:54:25 +0000
ROA not before:           Tue 21 May 2024 16:49:25 +0000
ROA not after:            Tue 20 May 2025 16:54:25 +0000
asID:                     271293
IP address blocks:        170.233.240.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.crl
                          rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:67:a6:91:28:4d:6d:8f:4e:59:3d:65:e1:46:44:61:10:69:4a:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D853C4D5568D20B0919C2E29804E2F4983BCFDF3
        Validity
            Not Before: May 21 16:49:25 2024 GMT
            Not After : May 20 16:54:25 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:11:df:aa:4c:65:7b:c9:2a:fa:51:64:4b:fc:
                    11:02:17:0a:2d:3a:eb:45:4e:59:b2:67:ad:f8:ac:
                    d7:e9:00:2b:b9:34:09:5b:76:62:1d:7a:6f:d2:40:
                    c4:37:fa:33:b8:82:0b:a7:e2:f2:5e:57:df:36:9e:
                    10:a1:37:ae:3b:18:cc:50:18:81:0c:7e:91:87:7c:
                    44:33:c0:30:fc:63:af:01:79:18:7e:98:06:9b:12:
                    a5:5a:de:0d:5d:9a:05:e0:5b:04:c2:37:11:e0:c7:
                    ef:da:b2:88:33:57:64:4e:ef:26:85:d2:16:35:36:
                    14:58:02:c3:b7:d4:4b:b9:84:8d:d1:d5:f4:7c:a1:
                    9f:25:45:a8:50:84:d9:db:c1:ae:a8:2f:51:96:08:
                    f4:72:63:df:6e:7d:fd:8f:d9:f3:ea:68:e8:19:62:
                    94:01:4c:15:98:d7:8e:ac:dd:66:c1:2a:9a:8b:8d:
                    20:a2:1e:c2:77:b3:bb:ad:c6:b5:1b:06:2a:0d:00:
                    2b:6e:3c:eb:a2:38:99:58:d4:b7:b3:bd:59:e0:08:
                    3f:d5:80:a6:31:7c:03:fc:25:c0:6e:0d:85:6c:44:
                    d2:3a:fc:d8:8a:05:eb:09:56:91:a8:3a:4f:1a:1d:
                    e2:9b:9e:c0:44:7a:54:1a:77:e4:a5:52:60:41:bf:
                    ae:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:51:79:75:2A:4B:65:64:D1:7B:A7:CB:25:60:D2:9B:B1:1C:89:FB
            X509v3 Authority Key Identifier:
                keyid:D8:53:C4:D5:56:8D:20:B0:91:9C:2E:29:80:4E:2F:49:83:BC:FD:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/3137302e3233332e3234302e302f32322d3332203d3e20323731323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:24:0a:c2:2d:29:4d:27:7d:be:89:96:41:d5:ac:bd:22:d3:
         65:b0:66:1f:0e:2a:db:34:5b:74:7a:b2:35:35:c0:93:6f:b5:
         ec:16:75:c6:70:47:07:ad:cf:b4:94:1e:c0:1d:b8:51:6e:00:
         1a:3c:ae:57:dd:49:65:6c:fe:5e:38:ab:76:1e:fa:53:e1:b8:
         67:0b:1e:c5:8e:12:59:d5:a0:25:8a:df:8b:cf:6f:2a:4f:6f:
         ef:a1:49:30:e8:03:12:7e:ed:e8:5d:a4:9c:88:61:c1:8d:4d:
         77:dc:b1:82:78:89:1a:79:41:15:7e:3a:df:c7:d5:83:fb:2f:
         c9:fd:f8:b4:5a:b7:1a:72:83:cd:62:5d:c4:a3:19:6f:87:a2:
         c6:ef:dd:ad:60:67:00:c5:cb:0c:ba:08:7f:f6:68:3a:88:c9:
         37:7d:e8:9f:31:1a:3f:ae:61:93:55:51:ff:32:b9:25:1b:00:
         c2:2a:3c:0a:79:8c:22:b7:06:aa:5a:cb:16:4a:94:25:9f:82:
         65:38:a0:fa:1e:5f:aa:fb:d4:49:c1:07:d8:2f:50:d0:6f:fa:
         ad:81:c5:4b:7c:32:0d:a2:b8:fc:bc:1b:28:8a:57:d7:d2:d5:
         a6:1a:3c:92:bb:00:e4:b6:fc:70:f8:14:1e:5a:f7:ec:14:d5:
         ee:2e:a8:c4
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUJ2emkShNbY9OWT1l4UZEYRBpSo4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg1M0M0RDU1NjhEMjBCMDkxOUMyRTI5ODA0RTJGNDk4
M0JDRkRGMzAeFw0yNDA1MjExNjQ5MjVaFw0yNTA1MjAxNjU0MjVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTIxMURGQUE0QzY1N0JDOTJB
RkE1MTY0NEJGQzExMDIxNzBBMkQzQUVCNDU0RTU5QjI2N0FERjhBQ0Q3RTkwMDJC
QjkzNDA5NUI3NjYyMUQ3QTZGRDI0MEM0MzdGQTMzQjg4MjBCQTdFMkYyNUU1N0RG
MzY5RTEwQTEzN0FFM0IxOENDNTAxODgxMEM3RTkxODc3QzQ0MzNDMDMwRkM2M0FG
MDE3OTE4N0U5ODA2OUIxMkE1NUFERTBENUQ5QTA1RTA1QjA0QzIzNzExRTBDN0VG
REFCMjg4MzM1NzY0NEVFRjI2ODVEMjE2MzUzNjE0NTgwMkMzQjdENDRCQjk4NDhE
RDFENUY0N0NBMTlGMjU0NUE4NTA4NEQ5REJDMUFFQTgyRjUxOTYwOEY0NzI2M0RG
NkU3REZEOEZEOUYzRUE2OEU4MTk2Mjk0MDE0QzE1OThENzhFQUNERDY2QzEyQTlB
OEI4RDIwQTIxRUMyNzdCM0JCQURDNkI1MUIwNjJBMEQwMDJCNkUzQ0VCQTIzODk5
NThENEI3QjNCRDU5RTAwODNGRDU4MEE2MzE3QzAzRkMyNUMwNkUwRDg1NkM0NEQy
M0FGQ0Q4OEEwNUVCMDk1NjkxQTgzQTRGMUExREUyOUI5RUMwNDQ3QTU0MUE3N0U0
QTU1MjYwNDFCRkFFNDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4hHfqkxle8kq+lFkS/wRAhcKLTrrRU5Zsmet+KzX6QAruTQJW3Zi
HXpv0kDEN/ozuIILp+LyXlffNp4QoTeuOxjMUBiBDH6Rh3xEM8Aw/GOvAXkYfpgG
mxKlWt4NXZoF4FsEwjcR4Mfv2rKIM1dkTu8mhdIWNTYUWALDt9RLuYSN0dX0fKGf
JUWoUITZ28GuqC9Rlgj0cmPfbn39j9nz6mjoGWKUAUwVmNeOrN1mwSqai40goh7C
d7O7rca1GwYqDQArbjzrojiZWNS3s71Z4Ag/1YCmMXwD/CXAbg2FbETSOvzYigXr
CVaRqDpPGh3im57ARHpUGnfkpVJgQb+uRQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FLdReXUqS2Vk0XunyyVg0puxHIn7MB8GA1UdIwQYMBaAFNhTxNVWjSCwkZwuKYBO
L0mDvP3zMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VwcFRkalAzZnZTQ1R0
eUpZTmV1UHBUYVVyMmcyM0FVSHhvNHczMmd1Y1g4LzAvRDg1M0M0RDU1NjhEMjBC
MDkxOUMyRTI5ODA0RTJGNDk4M0JDRkRGMy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9EODUzQzRENTU2OEQyMEIwOTE5QzJFMjk4MDRFMkY0OTgzQkNG
REYzLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FcHBUZGpQM2Z2U0NUdHlKWU5l
dVBwVGFVcjJnMjNBVUh4bzR3MzJndWNYOC8wLzMxMzczMDJlMzIzMzMzMmUzMjM0
MzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM3MzEzMjM5MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKq6fAwDQYJKoZIhvcNAQELBQADggEBAMMkCsItKU0nfb6JlkHVrL0i02WwZh8O
Kts0W3R6sjU1wJNvtewWdcZwRwetz7SUHsAduFFuABo8rlfdSWVs/l44q3Ye+lPh
uGcLHsWOElnVoCWK34vPbypPb++hSTDoAxJ+7ehdpJyIYcGNTXfcsYJ4iRp5QRV+
Ot/H1YP7L8n9+LRatxpyg81iXcSjGW+Hosbv3a1gZwDFywy6CH/2aDqIyTd96J8x
Gj+uYZNVUf8yuSUbAMIqPAp5jCK3BqpayxZKlCWfgmU4oPoeX6r71EnBB9gvUNBv
+q2BxUt8Mg2iuPy8GyiKV9fS1aYaPJK7AOS2/HD4FB5a9+wU1e4uqMQ=
-----END CERTIFICATE-----
Generated at Sat Sep 28 06:35:46 2024 by rpki-client on console-ams.rpki-client.org