Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0/3137302e38302e36302e302f32322d3234203d3e20323732373330.roa
File:                     3137302e38302e36302e302f32322d3234203d3e20323732373330.roa (raw, json)
Hash identifier:          R0Yqnnjcq2YLzIuniHuYiRH4/lWo8L2Qen74yCUQKcc=
Subject key identifier:   20:20:F8:D3:68:FD:B2:4B:B7:D4:57:CF:12:70:D5:70:21:DB:61:AC
Certificate issuer:       /CN=C0DD64892A0C121799367350C68DE3D2965E859B
Certificate serial:       61AF4EDDC68691867B243F8BC9FA831B3079593D
Authority key identifier: C0:DD:64:89:2A:0C:12:17:99:36:73:50:C6:8D:E3:D2:96:5E:85:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0DD64892A0C121799367350C68DE3D2965E859B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0/3137302e38302e36302e302f32322d3234203d3e20323732373330.roa
Signing time:             Fri 18 Oct 2024 14:36:15 +0000
ROA not before:           Fri 18 Oct 2024 14:31:15 +0000
ROA not after:            Fri 17 Oct 2025 14:36:15 +0000
asID:                     272730
IP address blocks:        170.80.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0/C0DD64892A0C121799367350C68DE3D2965E859B.crl
                          rsync://rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0/C0DD64892A0C121799367350C68DE3D2965E859B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0DD64892A0C121799367350C68DE3D2965E859B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:af:4e:dd:c6:86:91:86:7b:24:3f:8b:c9:fa:83:1b:30:79:59:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0DD64892A0C121799367350C68DE3D2965E859B
        Validity
            Not Before: Oct 18 14:31:15 2024 GMT
            Not After : Oct 17 14:36:15 2025 GMT
        Subject: CN=2020F8D368FDB24BB7D457CF1270D57021DB61AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:78:f5:39:9d:7c:e6:1c:fe:2c:03:1f:01:08:
                    5f:a1:9c:fa:13:a3:8e:8b:a9:f0:4d:d2:df:24:5f:
                    2f:a4:68:3a:da:13:6d:9b:4a:d1:07:05:5f:8b:36:
                    16:5b:ba:c8:b3:7b:66:ed:6d:3a:35:74:c4:54:9e:
                    4f:e1:6b:9f:d1:60:41:34:89:f7:55:66:32:4a:64:
                    fe:32:f9:1b:a4:08:5e:28:b9:6a:b0:6e:9e:9c:fa:
                    6a:67:73:75:e5:a6:22:9a:2f:19:8b:1e:b2:2b:fc:
                    ef:9c:e7:90:8a:43:2f:84:5b:f2:19:00:5c:23:ee:
                    61:02:f3:d4:74:fe:be:d1:c5:57:f3:1f:bf:37:33:
                    05:cc:ac:f6:d3:5b:f8:7c:a9:74:b5:e1:40:67:da:
                    d2:f1:83:9a:83:e3:fa:d8:ad:47:fc:bd:5e:9d:03:
                    0a:da:fb:fe:af:e5:b5:78:fb:2a:7f:89:8c:5b:fe:
                    fc:11:5a:c5:f7:22:d4:c1:e1:26:3b:22:e3:9c:2e:
                    1a:8c:b2:d6:66:70:1b:38:c5:4f:38:d1:0e:ba:71:
                    a3:34:fe:86:07:ab:d5:a1:f3:79:f5:bc:8d:af:cf:
                    4d:22:32:52:90:3b:37:98:ad:5f:16:df:ce:9d:1c:
                    4a:04:6b:58:52:f4:6b:ee:9c:f5:e7:1f:06:c9:04:
                    1b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:20:F8:D3:68:FD:B2:4B:B7:D4:57:CF:12:70:D5:70:21:DB:61:AC
            X509v3 Authority Key Identifier:
                keyid:C0:DD:64:89:2A:0C:12:17:99:36:73:50:C6:8D:E3:D2:96:5E:85:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0/C0DD64892A0C121799367350C68DE3D2965E859B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0DD64892A0C121799367350C68DE3D2965E859B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FtygzU3dRvCp1ybv7hTxFR2yLc7gNKQq9S43HKtCgotV/0/3137302e38302e36302e302f32322d3234203d3e20323732373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:a2:c5:25:2a:6c:6d:ea:4f:9f:df:95:79:60:8c:e0:fb:73:
         ef:54:32:9c:72:e2:28:0d:f5:ea:81:fc:46:4d:36:33:96:5e:
         76:92:3b:f2:42:5b:86:49:93:ee:5f:b0:b0:eb:ac:71:59:6c:
         69:ab:9c:78:94:e1:54:fb:ef:85:d3:40:3c:84:ce:d4:66:c8:
         c4:d8:82:42:90:10:90:ba:b5:9b:1a:e3:f0:47:80:65:13:ce:
         03:58:bd:98:a9:7a:9e:e6:0f:ba:14:bd:9f:7d:08:e3:a9:3a:
         fe:b8:31:c2:36:3d:14:e4:af:3f:93:38:b0:68:ec:48:d3:c0:
         45:35:87:ce:72:1c:ba:35:3a:84:f8:33:4b:c7:f8:38:f6:b6:
         a4:58:9b:47:e8:30:e8:df:85:76:b7:78:66:a9:49:04:36:5e:
         74:fb:04:ec:c3:78:e1:e3:e7:7a:e8:8e:b8:15:83:55:c0:18:
         95:b0:43:1f:0c:53:e0:d1:5e:50:bf:d0:e7:6f:a8:51:e2:3c:
         b2:89:c9:cd:5c:ad:e4:d6:aa:40:a5:75:7c:50:9c:c4:ea:90:
         c4:75:bb:8f:7f:1c:69:5a:fe:10:61:d8:0f:0e:0a:c9:c1:78:
         03:11:6a:60:3a:0e:b5:a4:d4:68:80:f3:fb:c9:ff:d0:64:cd:
         d9:a6:eb:78
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYa9O3caGkYZ7JD+LyfqDGzB5WT0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzBERDY0ODkyQTBDMTIxNzk5MzY3MzUwQzY4REUzRDI5
NjVFODU5QjAeFw0yNDEwMTgxNDMxMTVaFw0yNTEwMTcxNDM2MTVaMDMxMTAvBgNV
BAMTKDIwMjBGOEQzNjhGREIyNEJCN0Q0NTdDRjEyNzBENTcwMjFEQjYxQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCePU5nXzmHP4sAx8BCF+hnPoT
o46LqfBN0t8kXy+kaDraE22bStEHBV+LNhZbusize2btbTo1dMRUnk/ha5/RYEE0
ifdVZjJKZP4y+RukCF4ouWqwbp6c+mpnc3XlpiKaLxmLHrIr/O+c55CKQy+EW/IZ
AFwj7mEC89R0/r7RxVfzH783MwXMrPbTW/h8qXS14UBn2tLxg5qD4/rYrUf8vV6d
Awra+/6v5bV4+yp/iYxb/vwRWsX3ItTB4SY7IuOcLhqMstZmcBs4xU840Q66caM0
/oYHq9Wh83n1vI2vz00iMlKQOzeYrV8W386dHEoEa1hS9GvunPXnHwbJBBuVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUICD402j9sku31FfPEnDVcCHbYawwHwYDVR0j
BBgwFoAUwN1kiSoMEheZNnNQxo3j0pZehZswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnR5Z3pVM2RSdkNwMXlidjdoVHhGUjJ5TGM3Z05LUXE5UzQzSEt0Q2dv
dFYvMC9DMERENjQ4OTJBMEMxMjE3OTkzNjczNTBDNjhERTNEMjk2NUU4NTlCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MwREQ2NDg5MkEwQzEyMTc5
OTM2NzM1MEM2OERFM0QyOTY1RTg1OUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z0eWd6VTNkUnZDcDF5YnY3aFR4RlIyeUxjN2dOS1FxOVM0M0hLdENnb3RWLzAv
MzEzNzMwMmUzODMwMmUzNjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMy
MzczMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqlA8MA0GCSqGSIb3DQEBCwUAA4IBAQAEosUlKmxt
6k+f35V5YIzg+3PvVDKccuIoDfXqgfxGTTYzll52kjvyQluGSZPuX7Cw66xxWWxp
q5x4lOFU+++F00A8hM7UZsjE2IJCkBCQurWbGuPwR4BlE84DWL2YqXqe5g+6FL2f
fQjjqTr+uDHCNj0U5K8/kziwaOxI08BFNYfOchy6NTqE+DNLx/g49rakWJtH6DDo
34V2t3hmqUkENl50+wTsw3jh4+d66I64FYNVwBiVsEMfDFPg0V5Qv9Dnb6hR4jyy
icnNXK3k1qpApXV8UJzE6pDEdbuPfxxpWv4QYdgPDgrJwXgDEWpgOg61pNRogPP7
yf/QZM3Zput4
-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:14 2024 by rpki-client on console-fra.rpki-client.org