Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/1/3137302e38302e35322e302f32322d3232203d3e20323636333735.roa
File:                     3137302e38302e35322e302f32322d3232203d3e20323636333735.roa (raw, json)
Hash identifier:          3EEheB6Rthz1kwTOyHSJCL4XouBzt5ZrD8/Io5KZNIw=
Subject key identifier:   F1:F2:05:4E:6D:BC:C3:BC:DD:8E:E8:6A:AE:D8:FD:6E:6E:05:6D:21
Certificate issuer:       /CN=52DC1D0D4DA270646A5CC0BE564DD3E2ED696E7F
Certificate serial:       01BCE9B181AB9D484BF4603B1EA326D3BEC5E927
Authority key identifier: 52:DC:1D:0D:4D:A2:70:64:6A:5C:C0:BE:56:4D:D3:E2:ED:69:6E:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52DC1D0D4DA270646A5CC0BE564DD3E2ED696E7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/1/3137302e38302e35322e302f32322d3232203d3e20323636333735.roa
Signing time:             Thu 04 Apr 2024 17:46:26 +0000
ROA not before:           Thu 04 Apr 2024 17:41:26 +0000
ROA not after:            Thu 03 Apr 2025 17:46:26 +0000
asID:                     266375
IP address blocks:        170.80.52.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/1/52DC1D0D4DA270646A5CC0BE564DD3E2ED696E7F.crl
                          rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/1/52DC1D0D4DA270646A5CC0BE564DD3E2ED696E7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52DC1D0D4DA270646A5CC0BE564DD3E2ED696E7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 12:39:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:bc:e9:b1:81:ab:9d:48:4b:f4:60:3b:1e:a3:26:d3:be:c5:e9:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52DC1D0D4DA270646A5CC0BE564DD3E2ED696E7F
        Validity
            Not Before: Apr  4 17:41:26 2024 GMT
            Not After : Apr  3 17:46:26 2025 GMT
        Subject: CN=F1F2054E6DBCC3BCDD8EE86AAED8FD6E6E056D21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a9:f3:17:2e:7a:a4:de:d9:c7:89:4a:04:a3:
                    a4:31:5a:6b:87:62:00:3c:cd:aa:c7:78:4b:8a:35:
                    75:4d:09:47:ab:60:fa:a7:aa:54:3d:9a:e1:cb:d1:
                    c0:3c:63:60:51:31:67:7c:ba:84:53:fc:52:67:4c:
                    f8:4c:1c:ca:58:40:aa:f3:13:76:f8:4f:af:6e:f8:
                    b7:29:d5:02:0a:0c:79:cd:e2:d5:65:3b:64:bc:22:
                    f6:c0:2a:bd:16:34:68:9a:ec:7c:f6:62:9d:fd:86:
                    0c:ff:36:94:41:92:35:1c:eb:a4:cf:12:7b:f4:16:
                    61:58:10:d5:0b:18:4a:35:ba:52:92:72:58:1d:22:
                    b7:0f:1e:ed:fa:a8:36:14:c9:ed:23:65:20:1e:38:
                    d2:43:af:93:37:09:71:b6:3e:39:3d:da:6e:39:3f:
                    9c:f6:ee:a8:47:57:a3:5e:e0:08:73:53:39:5f:50:
                    39:22:ed:9d:fc:5a:a4:e4:3c:18:0e:e8:15:9f:98:
                    41:8d:03:f0:67:8c:45:f0:c5:da:7e:0d:c1:e9:2e:
                    31:44:c8:67:46:b7:0e:2a:bd:2e:f5:f9:11:ae:d2:
                    b5:fd:52:40:5c:26:7a:8d:51:1a:52:46:77:d3:3e:
                    e3:2e:dc:4b:42:35:9e:69:ea:59:59:da:81:e0:cb:
                    69:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F2:05:4E:6D:BC:C3:BC:DD:8E:E8:6A:AE:D8:FD:6E:6E:05:6D:21
            X509v3 Authority Key Identifier:
                keyid:52:DC:1D:0D:4D:A2:70:64:6A:5C:C0:BE:56:4D:D3:E2:ED:69:6E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/1/52DC1D0D4DA270646A5CC0BE564DD3E2ED696E7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52DC1D0D4DA270646A5CC0BE564DD3E2ED696E7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/1/3137302e38302e35322e302f32322d3232203d3e20323636333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:26:5a:42:35:16:04:2e:65:9f:dc:89:6b:2a:53:d8:37:00:
         3f:1e:f2:7f:da:72:65:61:c9:53:92:02:d5:3a:9e:60:0a:c2:
         46:4c:11:ee:4a:aa:92:81:d6:d2:ba:72:19:d6:2d:a0:8a:bc:
         e6:0c:98:ec:ba:bf:a5:e4:dc:70:e1:4f:76:34:21:55:e6:e2:
         eb:84:d4:ff:d9:59:02:21:b4:2b:bc:57:69:8a:8a:7f:c5:87:
         e4:55:0d:da:15:33:2a:83:54:b8:fd:1b:e2:90:b9:2f:9c:23:
         7c:88:83:9c:27:c4:41:7a:3c:5e:02:13:21:62:ea:c9:5d:24:
         2a:4a:92:fe:44:38:63:32:1e:e6:85:3a:48:20:aa:ba:14:72:
         18:07:75:8c:64:06:61:c3:c5:32:61:8c:13:bd:8d:4c:d1:12:
         75:f3:98:a5:98:3e:60:89:aa:92:e9:f2:92:82:09:cd:a6:9f:
         b6:9c:e3:15:65:bc:3d:12:62:8a:f5:b6:ca:a4:56:81:73:85:
         98:67:fd:75:4d:23:fb:ed:48:34:77:6b:15:e3:a4:f2:9e:5a:
         f5:2e:53:c8:46:a2:48:03:17:fb:be:c5:49:46:2f:0a:6c:d6:
         4f:64:53:b8:6d:09:82:71:93:c5:56:79:18:9a:8c:cd:1d:d4:
         1f:5f:6e:7f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUAbzpsYGrnUhL9GA7HqMm077F6ScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTJEQzFEMEQ0REEyNzA2NDZBNUNDMEJFNTY0REQzRTJF
RDY5NkU3RjAeFw0yNDA0MDQxNzQxMjZaFw0yNTA0MDMxNzQ2MjZaMDMxMTAvBgNV
BAMTKEYxRjIwNTRFNkRCQ0MzQkNERDhFRTg2QUFFRDhGRDZFNkUwNTZEMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+qfMXLnqk3tnHiUoEo6QxWmuH
YgA8zarHeEuKNXVNCUerYPqnqlQ9muHL0cA8Y2BRMWd8uoRT/FJnTPhMHMpYQKrz
E3b4T69u+Lcp1QIKDHnN4tVlO2S8IvbAKr0WNGia7Hz2Yp39hgz/NpRBkjUc66TP
Env0FmFYENULGEo1ulKSclgdIrcPHu36qDYUye0jZSAeONJDr5M3CXG2Pjk92m45
P5z27qhHV6Ne4AhzUzlfUDki7Z38WqTkPBgO6BWfmEGNA/BnjEXwxdp+DcHpLjFE
yGdGtw4qvS71+RGu0rX9UkBcJnqNURpSRnfTPuMu3EtCNZ5p6llZ2oHgy2lbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU8fIFTm28w7zdjuhqrtj9bm4FbSEwHwYDVR0j
BBgwFoAUUtwdDU2icGRqXMC+Vk3T4u1pbn8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjU4Vm9yMmVTUTFmMThZR2FxaGltTmRqeVlvSG5RS3lLdjhXanluNjhG
NzYvMS81MkRDMUQwRDREQTI3MDY0NkE1Q0MwQkU1NjRERDNFMkVENjk2RTdGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyREMxRDBENERBMjcwNjQ2
QTVDQzBCRTU2NEREM0UyRUQ2OTZFN0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y1OFZvcjJlU1ExZjE4WUdhcWhpbU5kanlZb0huUUt5S3Y4V2p5bjY4Rjc2LzEv
MzEzNzMwMmUzODMwMmUzNTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM2
MzMzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqlA0MA0GCSqGSIb3DQEBCwUAA4IBAQCeJlpCNRYE
LmWf3IlrKlPYNwA/HvJ/2nJlYclTkgLVOp5gCsJGTBHuSqqSgdbSunIZ1i2girzm
DJjsur+l5Nxw4U92NCFV5uLrhNT/2VkCIbQrvFdpiop/xYfkVQ3aFTMqg1S4/Rvi
kLkvnCN8iIOcJ8RBejxeAhMhYurJXSQqSpL+RDhjMh7mhTpIIKq6FHIYB3WMZAZh
w8UyYYwTvY1M0RJ185ilmD5giaqS6fKSggnNpp+2nOMVZbw9EmKK9bbKpFaBc4WY
Z/11TSP77Ug0d2sV46Tynlr1LlPIRqJIAxf7vsVJRi8KbNZPZFO4bQmCcZPFVnkY
mozNHdQfX25/
-----END CERTIFICATE-----
Generated at Fri Jun 28 12:21:56 2024 by rpki-client on console-fra.rpki-client.org