Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/1/3136302e3233382e3134342e302f32322d3234203d3e20323636353334.roa
File:                     3136302e3233382e3134342e302f32322d3234203d3e20323636353334.roa (raw, json)
Hash identifier:          k5BQba6TdIL1rkik3ajnFO6cRecWA26DG9rNIpU+y30=
Subject key identifier:   DF:1C:76:4C:FB:C4:32:A1:A6:F8:F8:65:13:F5:08:F1:1A:D9:DF:F4
Certificate issuer:       /CN=57D70E752697E99F4A1DD1DBCD525C92A57E6D29
Certificate serial:       1D269902FF5E1B7BFF987E3DF9EC1B8DB73A07E7
Authority key identifier: 57:D7:0E:75:26:97:E9:9F:4A:1D:D1:DB:CD:52:5C:92:A5:7E:6D:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57D70E752697E99F4A1DD1DBCD525C92A57E6D29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/1/3136302e3233382e3134342e302f32322d3234203d3e20323636353334.roa
Signing time:             Thu 04 Apr 2024 04:43:46 +0000
ROA not before:           Thu 04 Apr 2024 04:38:46 +0000
ROA not after:            Thu 03 Apr 2025 04:43:46 +0000
asID:                     266534
IP address blocks:        160.238.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/1/57D70E752697E99F4A1DD1DBCD525C92A57E6D29.crl
                          rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/1/57D70E752697E99F4A1DD1DBCD525C92A57E6D29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57D70E752697E99F4A1DD1DBCD525C92A57E6D29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:58:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:26:99:02:ff:5e:1b:7b:ff:98:7e:3d:f9:ec:1b:8d:b7:3a:07:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57D70E752697E99F4A1DD1DBCD525C92A57E6D29
        Validity
            Not Before: Apr  4 04:38:46 2024 GMT
            Not After : Apr  3 04:43:46 2025 GMT
        Subject: CN=DF1C764CFBC432A1A6F8F86513F508F11AD9DFF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6a:75:f4:b0:54:39:b6:89:37:ab:65:50:f1:
                    71:de:93:6b:cd:e9:86:f7:5f:c2:6a:3c:ff:be:96:
                    20:42:09:38:e5:f2:e0:80:7a:dc:bf:f9:31:2a:3a:
                    bb:8e:df:c4:6d:da:dd:b2:5a:3d:96:6d:b7:80:e0:
                    27:88:98:f7:7e:7f:64:b2:b4:ba:80:db:b6:a2:6f:
                    3a:16:03:a3:96:a8:88:ff:f6:fc:16:9c:31:17:a6:
                    84:3e:36:b0:d4:cb:9b:66:71:60:d9:96:cc:d0:37:
                    53:bd:73:df:c0:4c:00:94:de:1a:dc:d8:23:ab:f0:
                    54:9a:8b:49:54:20:77:e3:eb:85:9e:cc:91:91:e9:
                    ca:a3:12:e9:d8:08:5e:bf:5b:2c:78:68:6c:db:4c:
                    13:ac:41:16:77:bb:84:9c:2b:9a:ec:ba:66:16:8a:
                    a2:c9:11:a7:e3:2a:8e:b4:70:ab:45:ad:cc:89:9a:
                    35:f1:64:60:c8:ad:6d:e5:83:a3:80:71:41:45:35:
                    1a:2c:db:91:9e:c3:99:43:41:1f:bb:7a:2d:af:a6:
                    ea:d6:27:25:0a:a9:72:09:3a:06:51:d8:55:fc:ba:
                    9b:ff:6d:8c:35:f1:cf:08:02:df:c3:5e:a2:6f:ce:
                    39:b5:f1:50:8f:db:5d:60:82:29:af:46:ff:6a:35:
                    f9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1C:76:4C:FB:C4:32:A1:A6:F8:F8:65:13:F5:08:F1:1A:D9:DF:F4
            X509v3 Authority Key Identifier:
                keyid:57:D7:0E:75:26:97:E9:9F:4A:1D:D1:DB:CD:52:5C:92:A5:7E:6D:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/1/57D70E752697E99F4A1DD1DBCD525C92A57E6D29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57D70E752697E99F4A1DD1DBCD525C92A57E6D29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/1/3136302e3233382e3134342e302f32322d3234203d3e20323636353334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:b3:1a:37:0e:d1:71:dc:69:54:a9:a8:e6:24:4c:9e:ce:bf:
         36:be:07:92:8b:10:8d:01:c9:75:51:95:5e:fa:4f:b5:32:b9:
         6d:87:1b:90:b9:8e:9a:0b:1d:db:8e:60:4c:e2:87:70:e3:21:
         05:85:20:0b:80:b6:0b:92:68:92:b9:66:02:0e:ac:b3:d9:16:
         37:78:b6:93:3b:8b:94:5c:88:af:c9:b7:15:9d:f1:07:e2:af:
         91:10:f0:00:ef:86:aa:19:18:b9:c9:33:0a:64:4d:33:8d:9d:
         d1:7e:d7:a0:f8:b5:65:4c:e0:73:b7:ce:7f:7c:62:64:53:8b:
         4c:b2:ee:f9:0f:08:35:72:f3:ec:a0:13:a1:03:03:5d:94:b4:
         5f:00:3c:02:ff:1b:f1:8b:70:72:c0:3c:98:89:e2:1f:2d:08:
         27:de:17:9e:cd:6c:3b:d3:00:57:d4:3f:14:66:3c:46:fd:a3:
         a8:f6:63:f6:15:ee:53:e6:62:94:07:82:0f:72:bd:ed:e2:b3:
         03:ea:fb:45:df:44:b2:fd:67:26:66:93:bf:7f:ce:21:3c:69:
         4c:1c:2f:ce:a5:01:af:6e:27:c3:78:d0:b6:f1:53:de:dc:6c:
         89:72:75:2d:3b:0f:c2:6c:11:84:db:0c:2e:5d:31:2c:0c:e7:
         6f:7d:37:cb
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUHSaZAv9eG3v/mH49+ewbjbc6B+cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdENzBFNzUyNjk3RTk5RjRBMUREMURCQ0Q1MjVDOTJB
NTdFNkQyOTAeFw0yNDA0MDQwNDM4NDZaFw0yNTA0MDMwNDQzNDZaMDMxMTAvBgNV
BAMTKERGMUM3NjRDRkJDNDMyQTFBNkY4Rjg2NTEzRjUwOEYxMUFEOURGRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2anX0sFQ5tok3q2VQ8XHek2vN
6Yb3X8JqPP++liBCCTjl8uCAety/+TEqOruO38Rt2t2yWj2WbbeA4CeImPd+f2Sy
tLqA27aibzoWA6OWqIj/9vwWnDEXpoQ+NrDUy5tmcWDZlszQN1O9c9/ATACU3hrc
2COr8FSai0lUIHfj64WezJGR6cqjEunYCF6/Wyx4aGzbTBOsQRZ3u4ScK5rsumYW
iqLJEafjKo60cKtFrcyJmjXxZGDIrW3lg6OAcUFFNRos25Gew5lDQR+7ei2vpurW
JyUKqXIJOgZR2FX8upv/bYw18c8IAt/DXqJvzjm18VCP211ggimvRv9qNfmtAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU3xx2TPvEMqGm+PhlE/UI8RrZ3/QwHwYDVR0j
BBgwFoAUV9cOdSaX6Z9KHdHbzVJckqV+bSkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmpvTENlY0Q4UlhSOFRudzRZaHBHMWhHaFhza2Z3WGVycW5Kd2FjZ2tS
OGEvMS81N0Q3MEU3NTI2OTdFOTlGNEExREQxREJDRDUyNUM5MkE1N0U2RDI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3RDcwRTc1MjY5N0U5OUY0
QTFERDFEQkNENTI1QzkyQTU3RTZEMjkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Zqb0xDZWNEOFJYUjhUbnc0WWhwRzFoR2hYc2tmd1hlcnFuSndhY2drUjhhLzEv
MzEzNjMwMmUzMjMzMzgyZTMxMzQzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNjM1MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqDukDANBgkqhkiG9w0BAQsFAAOCAQEAeLMa
Nw7RcdxpVKmo5iRMns6/Nr4HkosQjQHJdVGVXvpPtTK5bYcbkLmOmgsd245gTOKH
cOMhBYUgC4C2C5JokrlmAg6ss9kWN3i2kzuLlFyIr8m3FZ3xB+KvkRDwAO+GqhkY
uckzCmRNM42d0X7XoPi1ZUzgc7fOf3xiZFOLTLLu+Q8INXLz7KAToQMDXZS0XwA8
Av8b8YtwcsA8mIniHy0IJ94Xns1sO9MAV9Q/FGY8Rv2jqPZj9hXuU+ZilAeCD3K9
7eKzA+r7Rd9Esv1nJmaTv3/OITxpTBwvzqUBr24nw3jQtvFT3txsiXJ1LTsPwmwR
hNsMLl0xLAznb303yw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:14 2024 by rpki-client on console-fra.rpki-client.org