Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/3137302e38322e3232332e302f32342d3234203d3e20323636343438.roa
File:                     3137302e38322e3232332e302f32342d3234203d3e20323636343438.roa (raw, json)
Hash identifier:          nneOlX/Lwhw99efHcb91ua93bj/QK/5jDAUbV5DvC24=
Subject key identifier:   64:BF:15:62:54:38:C3:7A:D4:7B:63:C3:27:EC:57:D5:82:F9:42:93
Certificate issuer:       /CN=101C855F131ECCD651B34357FFD7CAA9390CF6FC
Certificate serial:       7F6FC69215E7C474B31BF0313B9C65BF93BEE339
Authority key identifier: 10:1C:85:5F:13:1E:CC:D6:51:B3:43:57:FF:D7:CA:A9:39:0C:F6:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/3137302e38322e3232332e302f32342d3234203d3e20323636343438.roa
Signing time:             Thu 04 Apr 2024 04:15:08 +0000
ROA not before:           Thu 04 Apr 2024 04:10:08 +0000
ROA not after:            Thu 03 Apr 2025 04:15:08 +0000
asID:                     266448
IP address blocks:        170.82.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.crl
                          rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:6f:c6:92:15:e7:c4:74:b3:1b:f0:31:3b:9c:65:bf:93:be:e3:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101C855F131ECCD651B34357FFD7CAA9390CF6FC
        Validity
            Not Before: Apr  4 04:10:08 2024 GMT
            Not After : Apr  3 04:15:08 2025 GMT
        Subject: CN=64BF15625438C37AD47B63C327EC57D582F94293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2c:e7:6f:e6:cf:6c:22:58:e7:17:50:fd:e1:
                    d1:c1:fe:d6:ae:ca:bf:7e:d8:72:14:77:7b:50:7c:
                    65:4c:4d:d5:5b:f7:5e:c6:03:34:74:d0:9c:2a:ce:
                    ea:09:c2:9a:fd:f5:a1:18:66:29:6d:ef:8d:5f:8d:
                    fa:04:ca:18:a2:a9:6c:9c:55:4a:5b:b3:d5:c9:e6:
                    ea:55:48:b7:87:90:ff:fe:82:e4:7c:c5:55:2e:35:
                    2c:02:51:da:41:6d:b4:49:6c:14:1e:43:f2:50:27:
                    4a:62:e6:e8:f5:22:fc:51:c6:0a:90:95:b8:8d:29:
                    c0:cf:44:a0:07:09:c7:0c:76:6d:ae:b1:df:cb:35:
                    dc:92:71:3b:20:4d:f8:04:e9:5b:15:e0:ca:6d:4d:
                    e7:db:00:24:38:82:fa:f6:3b:b6:c4:14:74:a9:83:
                    e8:34:03:25:2e:0f:24:b3:0b:60:e4:8c:22:49:1c:
                    e5:3b:7c:fc:bf:1e:17:53:7c:15:d5:72:c9:94:9b:
                    fa:b7:5d:df:5a:c3:62:a0:d9:c8:1e:1f:87:18:1d:
                    2b:dc:35:03:ab:ae:5e:8a:21:d3:23:65:7b:cc:13:
                    95:f3:ea:2b:d9:ec:73:43:8b:5c:31:92:bc:1a:60:
                    f0:0c:0f:0f:3a:b6:c6:f4:dc:de:3a:86:66:97:c1:
                    e5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:BF:15:62:54:38:C3:7A:D4:7B:63:C3:27:EC:57:D5:82:F9:42:93
            X509v3 Authority Key Identifier:
                keyid:10:1C:85:5F:13:1E:CC:D6:51:B3:43:57:FF:D7:CA:A9:39:0C:F6:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/3137302e38322e3232332e302f32342d3234203d3e20323636343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:d8:a5:1d:87:97:50:47:55:c6:ee:82:3a:63:04:ce:a1:96:
         e7:50:1e:23:c8:fd:c6:7a:71:49:b6:8b:66:f3:9c:03:55:eb:
         34:28:54:dc:86:2d:14:9d:af:25:cd:ca:64:4b:68:8d:ac:b1:
         c2:fd:2c:4a:f1:f0:ad:ab:e1:f0:23:1c:04:d7:a3:19:b2:62:
         8f:d3:63:31:71:8b:db:4d:ca:76:be:b2:1a:41:0e:04:c7:6c:
         3d:b6:8b:20:ec:c8:3a:d8:8c:cf:65:19:15:9b:ca:49:18:83:
         3b:74:1f:21:df:17:22:12:8c:09:8b:00:ab:db:f6:ae:dc:90:
         45:a8:7e:92:c0:8a:2b:86:a7:1e:ca:2c:c2:c3:f8:0d:8a:3a:
         b3:fb:7d:25:f2:f2:65:a6:8e:f8:b0:dd:95:69:e3:00:9f:dd:
         0c:a9:cf:1b:0b:bf:fd:ed:3a:47:0a:06:78:b4:52:b9:7c:32:
         98:e9:ae:b4:32:82:c1:85:35:a0:c0:b1:f0:0c:4a:0a:30:ab:
         a1:89:78:da:ba:39:ab:19:02:06:d8:7e:64:60:8c:5f:95:75:
         b2:f4:a3:45:ef:9b:59:e3:a7:71:68:39:2f:c9:cf:33:5b:9e:
         d6:df:2f:97:21:48:6e:49:7c:8f:33:4f:33:33:a1:64:b8:98:
         fa:30:75:71
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUf2/GkhXnxHSzG/AxO5xlv5O+4zkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTAxQzg1NUYxMzFFQ0NENjUxQjM0MzU3RkZEN0NBQTkz
OTBDRjZGQzAeFw0yNDA0MDQwNDEwMDhaFw0yNTA0MDMwNDE1MDhaMDMxMTAvBgNV
BAMTKDY0QkYxNTYyNTQzOEMzN0FENDdCNjNDMzI3RUM1N0Q1ODJGOTQyOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFLOdv5s9sIljnF1D94dHB/tau
yr9+2HIUd3tQfGVMTdVb917GAzR00JwqzuoJwpr99aEYZilt741fjfoEyhiiqWyc
VUpbs9XJ5upVSLeHkP/+guR8xVUuNSwCUdpBbbRJbBQeQ/JQJ0pi5uj1IvxRxgqQ
lbiNKcDPRKAHCccMdm2usd/LNdyScTsgTfgE6VsV4MptTefbACQ4gvr2O7bEFHSp
g+g0AyUuDySzC2DkjCJJHOU7fPy/HhdTfBXVcsmUm/q3Xd9aw2Kg2cgeH4cYHSvc
NQOrrl6KIdMjZXvME5Xz6ivZ7HNDi1wxkrwaYPAMDw86tsb03N46hmaXweV/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZL8VYlQ4w3rUe2PDJ+xX1YL5QpMwHwYDVR0j
BBgwFoAUEByFXxMezNZRs0NX/9fKqTkM9vwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjlaMTFRVHhlbXk5Sm1EQURQQXhVNVRHMXN0NlE4Zm1hOHZnNWhuakhQ
Y2IvMS8xMDFDODU1RjEzMUVDQ0Q2NTFCMzQzNTdGRkQ3Q0FBOTM5MENGNkZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEwMUM4NTVGMTMxRUNDRDY1
MUIzNDM1N0ZGRDdDQUE5MzkwQ0Y2RkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y5WjExUVR4ZW15OUptREFEUEF4VTVURzFzdDZROGZtYTh2ZzVobmpIUGNiLzEv
MzEzNzMwMmUzODMyMmUzMjMyMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzNDM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACqUt8wDQYJKoZIhvcNAQELBQADggEBACTYpR2H
l1BHVcbugjpjBM6hludQHiPI/cZ6cUm2i2bznANV6zQoVNyGLRSdryXNymRLaI2s
scL9LErx8K2r4fAjHATXoxmyYo/TYzFxi9tNyna+shpBDgTHbD22iyDsyDrYjM9l
GRWbykkYgzt0HyHfFyISjAmLAKvb9q7ckEWofpLAiiuGpx7KLMLD+A2KOrP7fSXy
8mWmjviw3ZVp4wCf3QypzxsLv/3tOkcKBni0Url8MpjprrQygsGFNaDAsfAMSgow
q6GJeNq6OasZAgbYfmRgjF+VdbL0o0Xvm1njp3FoOS/JzzNbntbfL5chSG5JfI8z
TzMzoWS4mPowdXE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:22 2024 by rpki-client on console-fra.rpki-client.org