Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3137302e38332e3230302e302f32322d3232203d3e20323633343730.roa
File:                     3137302e38332e3230302e302f32322d3232203d3e20323633343730.roa (raw, json)
Hash identifier:          i+lU4w00AONMjt3hzZ6FIGnrOqkYg25gEJI79cSXzjQ=
Subject key identifier:   91:16:68:1D:E5:4A:21:9B:AC:9E:18:B2:21:5E:49:64:0F:F4:2F:7C
Certificate issuer:       /CN=9E103E5AB6354DFB87A485229671C8A2FC2131E8
Certificate serial:       2A8E8B8CA2256C143477336A5CBCEC1774392664
Authority key identifier: 9E:10:3E:5A:B6:35:4D:FB:87:A4:85:22:96:71:C8:A2:FC:21:31:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E103E5AB6354DFB87A485229671C8A2FC2131E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3137302e38332e3230302e302f32322d3232203d3e20323633343730.roa
Signing time:             Mon 20 May 2024 15:05:54 +0000
ROA not before:           Mon 20 May 2024 15:00:54 +0000
ROA not after:            Mon 19 May 2025 15:05:54 +0000
asID:                     263470
IP address blocks:        170.83.200.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/9E103E5AB6354DFB87A485229671C8A2FC2131E8.crl
                          rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/9E103E5AB6354DFB87A485229671C8A2FC2131E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E103E5AB6354DFB87A485229671C8A2FC2131E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:8e:8b:8c:a2:25:6c:14:34:77:33:6a:5c:bc:ec:17:74:39:26:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E103E5AB6354DFB87A485229671C8A2FC2131E8
        Validity
            Not Before: May 20 15:00:54 2024 GMT
            Not After : May 19 15:05:54 2025 GMT
        Subject: CN=9116681DE54A219BAC9E18B2215E49640FF42F7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:68:c5:71:06:5c:6f:52:d8:d6:3d:ff:c0:89:
                    08:d9:68:c8:c0:6a:e1:ec:e4:34:47:45:8f:f1:f5:
                    4e:d3:fe:83:75:d3:c3:5d:0c:28:1e:b0:8d:42:cc:
                    05:44:d3:8c:b1:71:9f:db:24:ab:84:63:7a:56:22:
                    e4:55:92:a9:a5:16:e0:92:70:3e:23:0e:04:41:8a:
                    f2:54:a9:fb:81:0a:3d:a2:35:f7:ee:b8:f1:ee:a1:
                    c3:d2:22:ec:21:9e:29:ad:d0:f3:00:a5:e2:f7:10:
                    02:d6:76:21:f9:a7:a2:50:30:a4:6c:08:47:7f:98:
                    10:39:e3:4b:84:52:74:b5:31:73:91:b3:7e:be:e7:
                    87:27:d6:79:d0:69:9b:f2:6f:47:6e:1f:c2:4d:01:
                    7d:ed:54:46:28:6b:c7:1d:04:31:39:6a:32:21:23:
                    61:03:66:e0:29:f1:71:99:ca:42:0c:f1:2e:d8:c9:
                    de:17:0b:0e:d6:d0:aa:1d:f0:69:09:98:a8:15:e4:
                    bf:75:d7:39:fc:f4:96:54:b3:9a:71:fe:e7:dd:51:
                    17:01:ff:80:cf:55:bd:bb:dc:b4:0b:04:25:2d:10:
                    9b:cb:47:92:f8:fc:ef:e8:e1:6f:ee:bf:f3:88:8a:
                    fb:bb:5b:c7:03:d5:12:e2:82:55:21:34:57:f6:98:
                    48:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:16:68:1D:E5:4A:21:9B:AC:9E:18:B2:21:5E:49:64:0F:F4:2F:7C
            X509v3 Authority Key Identifier:
                keyid:9E:10:3E:5A:B6:35:4D:FB:87:A4:85:22:96:71:C8:A2:FC:21:31:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/9E103E5AB6354DFB87A485229671C8A2FC2131E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E103E5AB6354DFB87A485229671C8A2FC2131E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/3137302e38332e3230302e302f32322d3232203d3e20323633343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:23:7b:e9:4b:98:c0:82:65:40:1e:70:c6:c1:5b:83:fa:63:
         48:5a:52:0b:e5:4d:f6:b0:a5:80:ff:9d:b5:28:2b:7e:87:c2:
         2d:21:a5:0a:66:cd:bf:57:79:e7:7b:b5:18:d7:cf:87:32:43:
         2f:00:8e:ed:83:f4:9f:5a:a2:18:85:6f:db:51:59:ed:83:ff:
         93:89:13:f5:f4:4d:fd:c9:c2:fa:16:94:fb:bf:d1:cf:96:0c:
         93:c0:45:57:68:ef:e6:1d:9e:f4:5e:48:76:3f:41:d4:91:34:
         a4:98:5e:5f:b7:19:5e:b4:df:76:6a:9d:91:5d:4e:e1:84:5a:
         10:9a:63:ee:b0:5c:59:0f:12:f5:7e:4c:91:a7:a6:d4:ca:d7:
         41:92:46:7d:37:e5:59:7d:43:66:30:b8:e9:36:b3:24:c5:51:
         3b:15:90:79:e3:c7:81:95:3c:b5:c0:67:40:72:55:24:c7:71:
         d2:fc:03:58:fc:a6:18:7f:4a:34:bd:94:1b:a9:33:17:0d:23:
         69:9a:d9:da:aa:20:88:65:3f:b1:ce:bf:19:54:59:95:b3:b2:
         dc:48:6a:7c:0b:5d:f0:5c:52:9c:a3:a4:15:f1:3f:c8:46:c5:
         9a:d7:d4:21:7c:0a:07:26:cb:7a:b5:a4:4e:eb:27:89:18:61:
         65:95:2a:50
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKo6LjKIlbBQ0dzNqXLzsF3Q5JmQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUUxMDNFNUFCNjM1NERGQjg3QTQ4NTIyOTY3MUM4QTJG
QzIxMzFFODAeFw0yNDA1MjAxNTAwNTRaFw0yNTA1MTkxNTA1NTRaMDMxMTAvBgNV
BAMTKDkxMTY2ODFERTU0QTIxOUJBQzlFMThCMjIxNUU0OTY0MEZGNDJGN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSaMVxBlxvUtjWPf/AiQjZaMjA
auHs5DRHRY/x9U7T/oN108NdDCgesI1CzAVE04yxcZ/bJKuEY3pWIuRVkqmlFuCS
cD4jDgRBivJUqfuBCj2iNffuuPHuocPSIuwhnimt0PMApeL3EALWdiH5p6JQMKRs
CEd/mBA540uEUnS1MXORs36+54cn1nnQaZvyb0duH8JNAX3tVEYoa8cdBDE5ajIh
I2EDZuAp8XGZykIM8S7Yyd4XCw7W0Kod8GkJmKgV5L911zn89JZUs5px/ufdURcB
/4DPVb273LQLBCUtEJvLR5L4/O/o4W/uv/OIivu7W8cD1RLiglUhNFf2mEgFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUkRZoHeVKIZusnhiyIV5JZA/0L3wwHwYDVR0j
BBgwFoAUnhA+WrY1TfuHpIUilnHIovwhMegwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3hTMUhrYk1VSjc0SHFhZnNqYktuM1dyUkxyblVtTWIyYVBmRFExR3g2
UFkvMC85RTEwM0U1QUI2MzU0REZCODdBNDg1MjI5NjcxQzhBMkZDMjEzMUU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlFMTAzRTVBQjYzNTRERkI4
N0E0ODUyMjk2NzFDOEEyRkMyMTMxRTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d4UzFIa2JNVUo3NEhxYWZzamJLbjNXclJMcm5VbU1iMmFQZkRRMUd4NlBZLzAv
MzEzNzMwMmUzODMzMmUzMjMwMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzMzNDM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqU8gwDQYJKoZIhvcNAQELBQADggEBAGoje+lL
mMCCZUAecMbBW4P6Y0haUgvlTfawpYD/nbUoK36Hwi0hpQpmzb9Xeed7tRjXz4cy
Qy8Aju2D9J9aohiFb9tRWe2D/5OJE/X0Tf3JwvoWlPu/0c+WDJPARVdo7+YdnvRe
SHY/QdSRNKSYXl+3GV6033ZqnZFdTuGEWhCaY+6wXFkPEvV+TJGnptTK10GSRn03
5Vl9Q2YwuOk2syTFUTsVkHnjx4GVPLXAZ0ByVSTHcdL8A1j8phh/SjS9lBupMxcN
I2ma2dqqIIhlP7HOvxlUWZWzstxIanwLXfBcUpyjpBXxP8hGxZrX1CF8Cgcmy3q1
pE7rJ4kYYWWVKlA=
-----END CERTIFICATE-----
Generated at Sun Jun 16 23:12:48 2024 by rpki-client on console-ams.rpki-client.org