Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/2/3137302e38342e3136342e302f32322d3232203d3e20323635303136.roa
File:                     3137302e38342e3136342e302f32322d3232203d3e20323635303136.roa (raw, json)
Hash identifier:          a5vgEcENHVvraR8AAEA1GWf34yaJBuaXQh8Zmp6yD1w=
Subject key identifier:   73:FD:72:F3:91:A1:03:5D:83:53:88:C4:7F:CA:4C:45:CE:BB:01:60
Certificate issuer:       /CN=EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56
Certificate serial:       07EFA7E9D360B007D158D6BAA783D17A486BB7E1
Authority key identifier: EA:B8:84:B7:08:23:F4:FB:D6:D5:A6:BC:30:F2:4E:63:D0:B0:CE:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/2/3137302e38342e3136342e302f32322d3232203d3e20323635303136.roa
Signing time:             Mon 10 Jun 2024 14:05:17 +0000
ROA not before:           Mon 10 Jun 2024 14:00:17 +0000
ROA not after:            Mon 09 Jun 2025 14:05:17 +0000
asID:                     265016
IP address blocks:        170.84.164.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/2/EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56.crl
                          rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/2/EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ef:a7:e9:d3:60:b0:07:d1:58:d6:ba:a7:83:d1:7a:48:6b:b7:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56
        Validity
            Not Before: Jun 10 14:00:17 2024 GMT
            Not After : Jun  9 14:05:17 2025 GMT
        Subject: CN=73FD72F391A1035D835388C47FCA4C45CEBB0160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d2:d4:82:0d:fd:63:3b:2f:73:c0:20:80:90:
                    fb:56:ac:28:1b:bd:f1:31:b6:6b:f3:a6:72:31:cc:
                    b8:d7:80:f3:99:bf:f1:f4:ad:5d:5d:fe:3e:f3:d3:
                    5f:c2:2c:1e:84:7a:33:43:c4:73:4d:2b:65:72:77:
                    df:02:b0:3e:28:3a:f1:97:44:55:7a:37:c1:29:65:
                    06:2c:2e:7c:95:7d:1a:d0:1f:20:25:2f:8d:55:01:
                    95:68:b3:84:8c:3a:d1:3f:31:5f:0e:6c:43:29:88:
                    18:ff:86:8d:b1:c2:7d:94:3d:73:fd:02:29:99:3d:
                    78:e5:21:12:c4:b0:40:c1:4c:75:3b:eb:0a:e0:23:
                    d2:52:2e:59:39:cb:54:cd:d4:c2:5b:2c:a7:5e:a2:
                    fa:78:a8:7a:c9:97:c5:00:af:58:0e:5a:29:81:36:
                    cf:81:57:59:9f:7c:cd:52:b6:70:1d:2c:41:8b:47:
                    46:77:c9:f8:ca:d1:47:2f:0c:69:10:26:04:4a:69:
                    d3:c6:c4:67:b7:88:80:d2:f0:48:2d:dc:5f:41:9e:
                    be:fb:06:0d:30:45:fa:63:a7:48:67:f4:72:e3:59:
                    90:9c:0a:d4:b4:df:22:05:35:73:ff:8c:e1:7b:68:
                    57:75:d5:28:f0:56:d6:60:e0:d4:b4:c1:55:fe:82:
                    1b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FD:72:F3:91:A1:03:5D:83:53:88:C4:7F:CA:4C:45:CE:BB:01:60
            X509v3 Authority Key Identifier:
                keyid:EA:B8:84:B7:08:23:F4:FB:D6:D5:A6:BC:30:F2:4E:63:D0:B0:CE:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/2/EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/2/3137302e38342e3136342e302f32322d3232203d3e20323635303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cf:92:8c:fe:b6:aa:a3:77:26:87:07:47:01:af:e5:11:15:df:
         e8:f2:4f:22:e7:4c:d7:95:7f:0a:a7:e7:3f:cb:e5:dc:4c:39:
         b5:89:2a:a6:c7:b2:da:5e:93:51:9d:e2:e3:fd:dd:40:95:2a:
         aa:de:a3:7a:f5:73:bb:fd:bd:c1:00:70:74:4e:7c:8a:44:32:
         97:ce:e5:bd:1f:2a:1d:5c:29:ec:ce:5c:14:36:fc:1a:f6:f2:
         c6:1c:6b:35:df:ad:af:c1:c0:f8:5a:e3:db:ee:e7:37:be:5b:
         cf:65:86:d4:a5:06:dc:6b:13:be:30:72:2f:ef:9f:b6:80:b8:
         53:a8:9a:0f:26:fa:fb:8f:7c:02:c2:0b:65:fa:4c:98:76:77:
         c4:c6:1c:06:dc:d4:f6:e5:60:04:08:87:9d:72:9d:54:62:42:
         8e:a0:fa:14:81:f1:1a:54:47:0a:49:34:c3:1d:c3:1a:9e:1a:
         38:a3:ac:ca:7e:2b:e6:e2:68:db:f6:02:08:32:9c:03:59:55:
         da:af:1c:52:11:ba:4d:df:6c:8e:44:4e:2e:6c:d4:57:b6:c1:
         15:ed:75:55:6b:a0:52:77:77:1f:95:25:5f:a1:2c:e5:6b:0f:
         03:ac:b9:80:83:86:11:6b:6c:29:4d:db:c5:33:72:5d:ba:5c:
         69:87:58:e4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUB++n6dNgsAfRWNa6p4PRekhrt+EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUFCODg0QjcwODIzRjRGQkQ2RDVBNkJDMzBGMjRFNjNE
MEIwQ0U1NjAeFw0yNDA2MTAxNDAwMTdaFw0yNTA2MDkxNDA1MTdaMDMxMTAvBgNV
BAMTKDczRkQ3MkYzOTFBMTAzNUQ4MzUzODhDNDdGQ0E0QzQ1Q0VCQjAxNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV0tSCDf1jOy9zwCCAkPtWrCgb
vfExtmvzpnIxzLjXgPOZv/H0rV1d/j7z01/CLB6EejNDxHNNK2Vyd98CsD4oOvGX
RFV6N8EpZQYsLnyVfRrQHyAlL41VAZVos4SMOtE/MV8ObEMpiBj/ho2xwn2UPXP9
AimZPXjlIRLEsEDBTHU76wrgI9JSLlk5y1TN1MJbLKdeovp4qHrJl8UAr1gOWimB
Ns+BV1mffM1StnAdLEGLR0Z3yfjK0UcvDGkQJgRKadPGxGe3iIDS8Egt3F9Bnr77
Bg0wRfpjp0hn9HLjWZCcCtS03yIFNXP/jOF7aFd11SjwVtZg4NS0wVX+ghu/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUc/1y85GhA12DU4jEf8pMRc67AWAwHwYDVR0j
BBgwFoAU6riEtwgj9PvW1aa8MPJOY9CwzlYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEdyY0JIZWZmSE12NVJtOG83RjJYSjNkTEJ0Qlo5Sms1OEpjZTFiaGZV
WGQvMi9FQUI4ODRCNzA4MjNGNEZCRDZENUE2QkMzMEYyNEU2M0QwQjBDRTU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBQjg4NEI3MDgyM0Y0RkJE
NkQ1QTZCQzMwRjI0RTYzRDBCMENFNTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hHcmNCSGVmZkhNdjVSbThvN0YyWEozZExCdEJaOUprNThKY2UxYmhmVVhkLzIv
MzEzNzMwMmUzODM0MmUzMTM2MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzUzMDMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqVKQwDQYJKoZIhvcNAQELBQADggEBAM+SjP62
qqN3JocHRwGv5REV3+jyTyLnTNeVfwqn5z/L5dxMObWJKqbHstpek1Gd4uP93UCV
Kqreo3r1c7v9vcEAcHROfIpEMpfO5b0fKh1cKezOXBQ2/Br28sYcazXfra/BwPha
49vu5ze+W89lhtSlBtxrE74wci/vn7aAuFOomg8m+vuPfALCC2X6TJh2d8TGHAbc
1PblYAQIh51ynVRiQo6g+hSB8RpURwpJNMMdwxqeGjijrMp+K+biaNv2AggynANZ
VdqvHFIRuk3fbI5ETi5s1Fe2wRXtdVVroFJ3dx+VJV+hLOVrDwOsuYCDhhFrbClN
28Uzcl26XGmHWOQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:31 2024 by rpki-client on console-ams.rpki-client.org