Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/1/3230312e3135392e3138322e302f32332d3233203d3e203631373936.roa
File:                     3230312e3135392e3138322e302f32332d3233203d3e203631373936.roa (raw, json)
Hash identifier:          9aJ3/tgGIaAW3ZnjCNnW2HC6HC5dojDcvzFTjIJiNcA=
Subject key identifier:   CE:C5:55:3C:F5:CD:B1:C3:FE:32:EE:B4:5D:69:B4:32:E5:4D:E6:E6
Certificate issuer:       /CN=70FD5F601D7D462846F26FF3F049419410FECDD4
Certificate serial:       08FFF9352EA4933A820E0647B017172EDC7AED29
Authority key identifier: 70:FD:5F:60:1D:7D:46:28:46:F2:6F:F3:F0:49:41:94:10:FE:CD:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70FD5F601D7D462846F26FF3F049419410FECDD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/1/3230312e3135392e3138322e302f32332d3233203d3e203631373936.roa
Signing time:             Thu 04 Apr 2024 04:22:50 +0000
ROA not before:           Thu 04 Apr 2024 04:17:50 +0000
ROA not after:            Thu 03 Apr 2025 04:22:50 +0000
asID:                     61796
IP address blocks:        201.159.182.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/1/70FD5F601D7D462846F26FF3F049419410FECDD4.crl
                          rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/1/70FD5F601D7D462846F26FF3F049419410FECDD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70FD5F601D7D462846F26FF3F049419410FECDD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ff:f9:35:2e:a4:93:3a:82:0e:06:47:b0:17:17:2e:dc:7a:ed:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70FD5F601D7D462846F26FF3F049419410FECDD4
        Validity
            Not Before: Apr  4 04:17:50 2024 GMT
            Not After : Apr  3 04:22:50 2025 GMT
        Subject: CN=CEC5553CF5CDB1C3FE32EEB45D69B432E54DE6E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:27:62:b2:e7:27:5f:0c:52:9c:93:f4:fa:88:
                    3b:cb:07:af:65:c9:dd:0d:1e:eb:1a:6b:67:0a:9f:
                    d5:04:bc:58:63:54:93:8c:06:3f:0e:47:0a:a8:c1:
                    0e:06:62:15:9a:37:8e:3e:c5:93:7f:ba:67:15:fa:
                    6a:02:c0:3b:4b:74:88:27:a0:e9:62:8b:a6:56:e2:
                    2f:49:5d:ca:c0:d5:d4:86:59:ec:57:09:b4:af:66:
                    be:57:9e:ee:cc:8e:29:11:73:dc:6b:cd:95:a6:55:
                    aa:c9:f8:4e:8f:0b:26:5d:c3:9e:59:f9:fc:89:81:
                    e5:20:4e:04:11:fc:1f:db:15:0f:7a:91:6f:63:06:
                    18:97:81:72:89:d0:be:c1:15:ad:19:20:c9:64:ab:
                    ce:6d:5f:ca:e6:5a:db:f5:fe:cb:09:45:54:01:29:
                    67:0d:2b:4d:ae:37:52:25:4e:32:54:a5:93:ee:81:
                    60:24:47:5e:89:e3:d9:4d:41:f8:bf:70:62:1d:9b:
                    8a:5e:6f:4c:39:da:6e:5a:76:07:b3:32:79:bb:59:
                    3e:08:9e:2a:34:c4:72:7c:63:c7:7f:01:8b:1d:77:
                    98:ea:0f:04:c0:7c:c3:ad:6c:cc:ad:d5:ee:fe:ef:
                    86:4d:5b:e7:88:31:15:e2:57:90:49:64:b6:41:71:
                    ca:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C5:55:3C:F5:CD:B1:C3:FE:32:EE:B4:5D:69:B4:32:E5:4D:E6:E6
            X509v3 Authority Key Identifier:
                keyid:70:FD:5F:60:1D:7D:46:28:46:F2:6F:F3:F0:49:41:94:10:FE:CD:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/1/70FD5F601D7D462846F26FF3F049419410FECDD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70FD5F601D7D462846F26FF3F049419410FECDD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/1/3230312e3135392e3138322e302f32332d3233203d3e203631373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:b7:81:54:6a:9e:ff:4e:1b:6c:22:38:83:8a:45:64:4f:22:
         d5:41:f0:a8:ab:bb:1a:21:b0:c0:9e:6c:cd:2b:28:68:58:c9:
         1b:b8:66:56:3e:3e:3f:35:37:1e:01:06:83:af:04:eb:d0:7e:
         22:3a:7a:87:27:f8:45:ae:da:43:ab:4c:2e:73:cc:a5:52:c4:
         2b:e2:9e:d9:f5:46:9e:78:ef:91:f8:3d:cd:af:ee:9d:f5:86:
         be:6e:ac:11:72:a6:8a:94:c0:a5:d7:ee:75:01:53:c9:13:b5:
         7e:b2:88:61:34:dc:8a:1f:37:fb:49:d5:fd:2c:66:4a:41:2d:
         9e:b1:3a:e2:2f:97:36:52:f0:d2:57:a7:53:30:43:5f:f2:19:
         27:bf:f7:a9:5f:f5:09:c6:b5:92:2a:d4:dd:56:a4:94:b2:f2:
         9b:48:c6:c9:6f:83:33:ad:28:25:d1:7a:35:15:27:65:c9:90:
         cc:8f:43:e8:56:6f:71:9a:84:d7:d5:bf:af:69:30:39:05:8e:
         32:a8:89:50:9a:fe:1a:2d:3e:87:15:11:83:0b:11:83:bd:a3:
         0b:a7:77:14:3d:d9:de:e5:d8:d2:e2:7a:a6:b5:2f:37:88:51:
         76:21:cf:78:15:e8:bb:96:de:26:3c:97:fe:e2:7c:f0:03:8c:
         cf:cd:53:44
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCP/5NS6kkzqCDgZHsBcXLtx67SkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBGRDVGNjAxRDdENDYyODQ2RjI2RkYzRjA0OTQxOTQx
MEZFQ0RENDAeFw0yNDA0MDQwNDE3NTBaFw0yNTA0MDMwNDIyNTBaMDMxMTAvBgNV
BAMTKENFQzU1NTNDRjVDREIxQzNGRTMyRUVCNDVENjlCNDMyRTU0REU2RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBJ2Ky5ydfDFKck/T6iDvLB69l
yd0NHusaa2cKn9UEvFhjVJOMBj8ORwqowQ4GYhWaN44+xZN/umcV+moCwDtLdIgn
oOlii6ZW4i9JXcrA1dSGWexXCbSvZr5Xnu7MjikRc9xrzZWmVarJ+E6PCyZdw55Z
+fyJgeUgTgQR/B/bFQ96kW9jBhiXgXKJ0L7BFa0ZIMlkq85tX8rmWtv1/ssJRVQB
KWcNK02uN1IlTjJUpZPugWAkR16J49lNQfi/cGIdm4peb0w52m5adgezMnm7WT4I
nio0xHJ8Y8d/AYsdd5jqDwTAfMOtbMyt1e7+74ZNW+eIMRXiV5BJZLZBccrFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUzsVVPPXNscP+Mu60XWm0MuVN5uYwHwYDVR0j
BBgwFoAUcP1fYB19RihG8m/z8ElBlBD+zdQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDFNYVd1Ymtuc1dFZnc3dkZoSHp3d2R1NHlxZGszbk1RUkhTaHc1NlVu
bWMvMS83MEZENUY2MDFEN0Q0NjI4NDZGMjZGRjNGMDQ5NDE5NDEwRkVDREQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcwRkQ1RjYwMUQ3RDQ2Mjg0
NkYyNkZGM0YwNDk0MTk0MTBGRUNERDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gxTWFXdWJrbnNXRWZ3N3ZGaEh6d3dkdTR5cWRrM25NUVJIU2h3NTZVbm1jLzEv
MzIzMDMxMmUzMTM1MzkyZTMxMzgzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM2
MzEzNzM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHJn7YwDQYJKoZIhvcNAQELBQADggEBAFC3gVRq
nv9OG2wiOIOKRWRPItVB8KiruxohsMCebM0rKGhYyRu4ZlY+Pj81Nx4BBoOvBOvQ
fiI6eocn+EWu2kOrTC5zzKVSxCvintn1Rp5475H4Pc2v7p31hr5urBFypoqUwKXX
7nUBU8kTtX6yiGE03IofN/tJ1f0sZkpBLZ6xOuIvlzZS8NJXp1MwQ1/yGSe/96lf
9QnGtZIq1N1WpJSy8ptIxslvgzOtKCXRejUVJ2XJkMyPQ+hWb3GahNfVv69pMDkF
jjKoiVCa/hotPocVEYMLEYO9owundxQ92d7l2NLieqa1LzeIUXYhz3gV6LuW3iY8
l/7ifPADjM/NU0Q=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:15 2024 by rpki-client on console-fra.rpki-client.org