Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133392e302f32342d3234203d3e20323636333230.roa
File:                     3137302e3233382e3133392e302f32342d3234203d3e20323636333230.roa (raw, json)
Hash identifier:          wxhu2ZX2PZfX9LT8vyDkS3zv4VoxU4umfRA7O+5X3rw=
Subject key identifier:   83:BE:2A:72:E5:E5:AF:0C:42:8A:B3:A5:48:42:E2:AD:50:5A:52:1D
Certificate issuer:       /CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
Certificate serial:       6473DC98A98598645BB6E0ED97AD78B032F49C08
Authority key identifier: 1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133392e302f32342d3234203d3e20323636333230.roa
Signing time:             Wed 03 Apr 2024 18:31:06 +0000
ROA not before:           Wed 03 Apr 2024 18:26:06 +0000
ROA not after:            Wed 02 Apr 2025 18:31:06 +0000
asID:                     266320
IP address blocks:        170.238.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl
                          rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:73:dc:98:a9:85:98:64:5b:b6:e0:ed:97:ad:78:b0:32:f4:9c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
        Validity
            Not Before: Apr  3 18:26:06 2024 GMT
            Not After : Apr  2 18:31:06 2025 GMT
        Subject: CN=83BE2A72E5E5AF0C428AB3A54842E2AD505A521D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:38:f6:f1:96:0c:ac:4c:b7:89:a6:1f:15:48:
                    49:00:39:99:8c:3b:8a:5d:3a:b7:61:24:de:c5:a1:
                    6a:23:24:b3:0e:84:32:17:37:6d:1b:cf:47:5b:f9:
                    b5:67:bd:b1:5a:0c:40:e6:91:73:b3:c6:14:d8:62:
                    c1:3b:4a:29:c4:c1:ad:45:0d:58:44:5e:69:c9:a4:
                    88:20:66:42:75:fb:45:a9:61:9c:ad:54:22:4f:f4:
                    a3:37:f1:19:de:a9:e7:17:92:23:f5:01:ff:a8:68:
                    67:49:0f:7e:d1:cb:1e:ea:52:14:cd:a7:30:8f:a0:
                    1f:55:ef:fe:35:8b:a9:2b:c7:3b:a4:84:01:cb:58:
                    ad:c2:7b:5b:27:80:ae:c4:38:b8:a8:12:55:03:7c:
                    c3:f0:0f:05:3f:27:03:ee:14:57:0e:3e:d1:9d:0d:
                    8c:67:b2:26:21:36:3d:82:74:f7:e9:12:b0:83:57:
                    a1:9d:a9:5f:9c:16:58:c6:be:b3:ab:3d:f6:0c:4a:
                    e1:b7:ae:56:97:43:6d:54:eb:b7:45:1b:b7:22:44:
                    04:88:2c:f0:4c:b4:30:ef:c5:e1:bc:77:51:b0:f0:
                    6b:d3:c9:91:ff:4a:0f:2a:2b:5b:d8:37:12:8a:0d:
                    f0:b8:65:0a:5e:19:42:ab:a6:21:e6:ed:5d:bc:5a:
                    93:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BE:2A:72:E5:E5:AF:0C:42:8A:B3:A5:48:42:E2:AD:50:5A:52:1D
            X509v3 Authority Key Identifier:
                keyid:1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/3137302e3233382e3133392e302f32342d3234203d3e20323636333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:4e:d1:e7:e7:02:c4:d4:17:e0:01:9c:5c:24:24:08:93:08:
         1e:b9:e6:89:fd:99:c8:6e:a8:75:3f:45:c1:d9:40:91:14:39:
         42:a4:e8:5b:22:dc:f2:22:bd:85:b3:2d:2a:39:30:2f:6b:27:
         67:97:b1:51:d9:96:61:c5:41:22:07:13:44:a6:2c:e0:2f:e8:
         d5:9e:af:c0:c8:09:d3:b5:f0:e0:eb:23:95:b6:c8:79:ae:43:
         6d:e0:f9:70:27:8b:55:63:83:f4:be:66:0a:ef:f3:6e:4c:52:
         c4:21:b3:c1:42:73:80:c9:83:23:ff:6d:b7:49:ff:16:8d:a0:
         3c:11:11:69:11:54:5b:bd:a6:3b:6d:25:4e:72:cd:51:a0:b3:
         4c:05:5a:9d:47:68:e4:a7:fd:db:b5:5d:5b:d9:55:12:41:5c:
         cd:8f:b0:80:b3:4e:22:5a:91:8b:14:3d:c9:c7:79:fc:49:76:
         79:40:68:f9:30:67:e3:de:42:d7:e5:26:3f:1e:dd:40:e6:ee:
         1a:3e:63:b5:26:ca:8c:ae:5f:03:77:28:18:94:c5:b9:5a:b6:
         a7:29:03:dd:3c:57:12:52:f4:7e:88:00:9e:c6:2d:64:ce:df:
         8e:8e:fc:f2:8f:e6:b7:08:86:eb:f6:59:3c:8e:b4:83:29:66:
         74:6e:fc:b7
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUZHPcmKmFmGRbtuDtl614sDL0nAgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM3RDgzOEYxQjU5ODk5RDQ0QjRGQzQwMEZCQzFEREEz
QzBCM0QzMDAeFw0yNDA0MDMxODI2MDZaFw0yNTA0MDIxODMxMDZaMDMxMTAvBgNV
BAMTKDgzQkUyQTcyRTVFNUFGMEM0MjhBQjNBNTQ4NDJFMkFENTA1QTUyMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyOPbxlgysTLeJph8VSEkAOZmM
O4pdOrdhJN7FoWojJLMOhDIXN20bz0db+bVnvbFaDEDmkXOzxhTYYsE7SinEwa1F
DVhEXmnJpIggZkJ1+0WpYZytVCJP9KM38RneqecXkiP1Af+oaGdJD37Ryx7qUhTN
pzCPoB9V7/41i6krxzukhAHLWK3Ce1sngK7EOLioElUDfMPwDwU/JwPuFFcOPtGd
DYxnsiYhNj2CdPfpErCDV6GdqV+cFljGvrOrPfYMSuG3rlaXQ21U67dFG7ciRASI
LPBMtDDvxeG8d1Gw8GvTyZH/Sg8qK1vYNxKKDfC4ZQpeGUKrpiHm7V28WpNJAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUg74qcuXlrwxCirOlSELirVBaUh0wHwYDVR0j
BBgwFoAUHH2DjxtZiZ1EtPxAD7wd2jwLPTAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzZSTnlWamlxWkhRSnM0eGU5OVBuaTU1WndjMzZhcldhdHpEVFIzM0I1
OFcvMS8xQzdEODM4RjFCNTk4OTlENDRCNEZDNDAwRkJDMUREQTNDMEIzRDMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDN0Q4MzhGMUI1OTg5OUQ0
NEI0RkM0MDBGQkMxRERBM0MwQjNEMzAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c2Uk55VmppcVpIUUpzNHhlOTlQbmk1NVp3YzM2YXJXYXR6RFRSMzNCNThXLzEv
MzEzNzMwMmUzMjMzMzgyZTMxMzMzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNjMzMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKruizANBgkqhkiG9w0BAQsFAAOCAQEAl07R
5+cCxNQX4AGcXCQkCJMIHrnmif2ZyG6odT9FwdlAkRQ5QqToWyLc8iK9hbMtKjkw
L2snZ5exUdmWYcVBIgcTRKYs4C/o1Z6vwMgJ07Xw4OsjlbbIea5DbeD5cCeLVWOD
9L5mCu/zbkxSxCGzwUJzgMmDI/9tt0n/Fo2gPBERaRFUW72mO20lTnLNUaCzTAVa
nUdo5Kf927VdW9lVEkFczY+wgLNOIlqRixQ9ycd5/El2eUBo+TBn495C1+UmPx7d
QObuGj5jtSbKjK5fA3coGJTFuVq2pykD3TxXElL0fogAnsYtZM7fjo788o/mtwiG
6/ZZPI60gylmdG78tw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:52 2024 by rpki-client on console-ams.rpki-client.org