Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/1/3137302e3235342e3139322e302f32322d3234203d3e20323635313131.roa
File:                     3137302e3235342e3139322e302f32322d3234203d3e20323635313131.roa (raw, json)
Hash identifier:          /hdgaqFeJhhn+2gDYRs/nAA7FSrEWnr4iHrWPnaamyw=
Subject key identifier:   D2:81:74:B4:25:1F:25:0E:0F:EE:22:22:B9:64:B8:C2:D6:0F:5C:C1
Certificate issuer:       /CN=4C94A42CCCF281C612C2A002CC0DEB4570D46EDC
Certificate serial:       14526E8C485A9E652F63EEA5F61637E76B695B3D
Authority key identifier: 4C:94:A4:2C:CC:F2:81:C6:12:C2:A0:02:CC:0D:EB:45:70:D4:6E:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C94A42CCCF281C612C2A002CC0DEB4570D46EDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/1/3137302e3235342e3139322e302f32322d3234203d3e20323635313131.roa
Signing time:             Thu 04 Apr 2024 03:13:03 +0000
ROA not before:           Thu 04 Apr 2024 03:08:03 +0000
ROA not after:            Thu 03 Apr 2025 03:13:03 +0000
asID:                     265111
IP address blocks:        170.254.192.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/1/4C94A42CCCF281C612C2A002CC0DEB4570D46EDC.crl
                          rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/1/4C94A42CCCF281C612C2A002CC0DEB4570D46EDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C94A42CCCF281C612C2A002CC0DEB4570D46EDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:15:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:52:6e:8c:48:5a:9e:65:2f:63:ee:a5:f6:16:37:e7:6b:69:5b:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C94A42CCCF281C612C2A002CC0DEB4570D46EDC
        Validity
            Not Before: Apr  4 03:08:03 2024 GMT
            Not After : Apr  3 03:13:03 2025 GMT
        Subject: CN=D28174B4251F250E0FEE2222B964B8C2D60F5CC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ba:30:07:2d:2c:38:8f:67:70:9f:57:b0:55:
                    1e:c4:5f:65:18:c1:b9:80:10:3b:63:19:77:6f:46:
                    52:7e:02:2d:ac:fa:6d:7d:97:8a:28:5b:04:85:00:
                    3c:cf:fa:73:de:08:14:71:e8:d1:6e:b0:f1:82:dc:
                    5f:ee:e9:62:a3:32:b4:bb:7f:e6:89:21:ae:9c:d0:
                    50:7e:1d:93:8e:25:e0:fe:e2:10:e7:35:ba:42:eb:
                    86:11:9b:ab:bc:8b:28:8b:7b:08:08:f4:ac:c2:14:
                    2b:75:29:79:be:b9:54:70:a9:44:b5:ab:c3:f9:76:
                    11:84:f9:03:3d:eb:43:09:f6:57:cd:34:2b:e8:62:
                    de:85:80:2e:42:22:9f:2e:98:64:14:49:0c:38:3c:
                    02:2d:4a:a7:84:15:42:1d:4f:d4:ef:a7:a4:85:22:
                    7b:fe:17:6d:e0:d7:97:f2:ef:b2:8c:a2:3b:ec:8e:
                    42:64:37:07:17:1f:44:bc:4e:ca:5b:64:71:04:df:
                    de:c0:fb:19:63:5e:15:a5:63:b0:9e:22:45:16:12:
                    55:83:93:26:5e:c9:10:9e:53:fe:02:c1:b4:37:59:
                    c7:56:b1:ea:08:42:75:e5:e7:15:09:4e:c8:86:4a:
                    d4:f4:14:31:9e:1c:87:46:92:e3:fc:7e:1c:b4:e8:
                    c6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:81:74:B4:25:1F:25:0E:0F:EE:22:22:B9:64:B8:C2:D6:0F:5C:C1
            X509v3 Authority Key Identifier:
                keyid:4C:94:A4:2C:CC:F2:81:C6:12:C2:A0:02:CC:0D:EB:45:70:D4:6E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/1/4C94A42CCCF281C612C2A002CC0DEB4570D46EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C94A42CCCF281C612C2A002CC0DEB4570D46EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/1/3137302e3235342e3139322e302f32322d3234203d3e20323635313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:2f:91:a9:cd:16:4c:ab:e0:0f:bf:d5:a2:61:a8:70:ed:8a:
         02:e0:4a:a2:46:2f:b9:30:ad:5c:db:bf:cd:48:d6:63:6b:81:
         b2:8f:46:1f:5c:e9:80:85:1b:e6:cd:13:aa:2e:97:09:36:4c:
         9c:4b:6f:0b:38:3c:b4:c5:72:f4:ef:ed:5f:1e:b4:c2:70:fb:
         72:9a:02:f6:18:19:86:ba:f9:59:89:7e:41:2c:b3:08:6d:af:
         ee:01:ee:69:4c:2e:29:87:1a:d1:ed:ab:35:ee:26:7d:1a:86:
         f9:8b:0f:7a:1c:66:97:62:25:ad:a2:a8:32:44:01:80:2a:95:
         ce:4d:6c:06:93:f0:fb:ef:32:5b:3a:0d:17:c7:e7:57:f5:b4:
         7c:ea:93:09:43:09:de:d5:4b:2a:fe:af:a9:aa:e8:b2:8b:f0:
         6e:50:e8:3e:f6:aa:42:a8:b4:1c:5a:40:d3:63:e1:cc:60:41:
         84:37:9a:f2:b4:d7:eb:2f:da:11:6e:aa:b3:80:38:db:17:56:
         23:50:fb:54:5f:f1:48:a0:9d:12:0a:48:44:8f:06:31:1d:d2:
         12:18:09:b8:30:e7:ae:54:7e:5e:d0:05:46:a8:e6:04:13:ca:
         de:a1:e2:9b:ef:4b:b8:74:32:ab:bd:48:98:77:a1:c8:20:c3:
         ef:c9:a5:4b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUFFJujEhanmUvY+6l9hY352tpWz0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEM5NEE0MkNDQ0YyODFDNjEyQzJBMDAyQ0MwREVCNDU3
MEQ0NkVEQzAeFw0yNDA0MDQwMzA4MDNaFw0yNTA0MDMwMzEzMDNaMDMxMTAvBgNV
BAMTKEQyODE3NEI0MjUxRjI1MEUwRkVFMjIyMkI5NjRCOEMyRDYwRjVDQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnujAHLSw4j2dwn1ewVR7EX2UY
wbmAEDtjGXdvRlJ+Ai2s+m19l4ooWwSFADzP+nPeCBRx6NFusPGC3F/u6WKjMrS7
f+aJIa6c0FB+HZOOJeD+4hDnNbpC64YRm6u8iyiLewgI9KzCFCt1KXm+uVRwqUS1
q8P5dhGE+QM960MJ9lfNNCvoYt6FgC5CIp8umGQUSQw4PAItSqeEFUIdT9Tvp6SF
Inv+F23g15fy77KMojvsjkJkNwcXH0S8TspbZHEE397A+xljXhWlY7CeIkUWElWD
kyZeyRCeU/4CwbQ3WcdWseoIQnXl5xUJTsiGStT0FDGeHIdGkuP8fhy06MbtAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU0oF0tCUfJQ4P7iIiuWS4wtYPXMEwHwYDVR0j
BBgwFoAUTJSkLMzygcYSwqACzA3rRXDUbtwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0V4S2N5ek5SRnN3azdxN0cxc3RwTDZMQ21LRDlyUlc1eUtlR29nSDZy
MjYvMS80Qzk0QTQyQ0NDRjI4MUM2MTJDMkEwMDJDQzBERUI0NTcwRDQ2RURDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDOTRBNDJDQ0NGMjgxQzYx
MkMyQTAwMkNDMERFQjQ1NzBENDZFREMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dFeEtjeXpOUkZzd2s3cTdHMXN0cEw2TENtS0Q5clJXNXlLZUdvZ0g2cjI2LzEv
MzEzNzMwMmUzMjM1MzQyZTMxMzkzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNTMxMzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqr+wDANBgkqhkiG9w0BAQsFAAOCAQEAQi+R
qc0WTKvgD7/VomGocO2KAuBKokYvuTCtXNu/zUjWY2uBso9GH1zpgIUb5s0Tqi6X
CTZMnEtvCzg8tMVy9O/tXx60wnD7cpoC9hgZhrr5WYl+QSyzCG2v7gHuaUwuKYca
0e2rNe4mfRqG+YsPehxml2IlraKoMkQBgCqVzk1sBpPw++8yWzoNF8fnV/W0fOqT
CUMJ3tVLKv6vqarosovwblDoPvaqQqi0HFpA02PhzGBBhDea8rTX6y/aEW6qs4A4
2xdWI1D7VF/xSKCdEgpIRI8GMR3SEhgJuDDnrlR+XtAFRqjmBBPK3qHim+9LuHQy
q71ImHehyCDD78mlSw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:53 2024 by rpki-client on console-fra.rpki-client.org