Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/3137302e38342e3131322e302f32322d3234203d3e20323633303439.roa
File:                     3137302e38342e3131322e302f32322d3234203d3e20323633303439.roa (raw, json)
Hash identifier:          LQ48vRmZZKf/vCS5JHaNfJrLt9w02/FVVz7iKT1EDKw=
Subject key identifier:   E5:3D:1D:EE:45:78:0A:A2:5E:B0:09:B3:54:7B:B0:3F:F0:E0:D8:CD
Certificate issuer:       /CN=51352D74D3778F2422CE0E96FC53071E18935405
Certificate serial:       62EC1ED976F33313EB51BAA943A23F6F8D5B566D
Authority key identifier: 51:35:2D:74:D3:77:8F:24:22:CE:0E:96:FC:53:07:1E:18:93:54:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51352D74D3778F2422CE0E96FC53071E18935405.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/3137302e38342e3131322e302f32322d3234203d3e20323633303439.roa
Signing time:             Thu 04 Apr 2024 04:30:32 +0000
ROA not before:           Thu 04 Apr 2024 04:25:32 +0000
ROA not after:            Thu 03 Apr 2025 04:30:32 +0000
asID:                     263049
IP address blocks:        170.84.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/51352D74D3778F2422CE0E96FC53071E18935405.crl
                          rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/51352D74D3778F2422CE0E96FC53071E18935405.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51352D74D3778F2422CE0E96FC53071E18935405.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ec:1e:d9:76:f3:33:13:eb:51:ba:a9:43:a2:3f:6f:8d:5b:56:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51352D74D3778F2422CE0E96FC53071E18935405
        Validity
            Not Before: Apr  4 04:25:32 2024 GMT
            Not After : Apr  3 04:30:32 2025 GMT
        Subject: CN=E53D1DEE45780AA25EB009B3547BB03FF0E0D8CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:14:6c:2c:d8:20:88:7e:e7:49:ce:64:6e:5b:
                    46:db:05:aa:c8:a7:9e:00:aa:a0:3c:c7:4f:60:fe:
                    77:7a:db:2a:02:5b:63:54:15:af:83:45:d4:35:70:
                    3d:4e:d2:7e:fe:6b:fb:5e:3b:de:4f:93:0e:80:7f:
                    80:a2:a1:8e:7d:f5:70:50:d9:31:0e:42:9a:3f:18:
                    ba:92:f5:9f:4c:d8:df:ef:fb:0c:1c:e2:21:47:9b:
                    44:5f:08:e2:c6:5f:f2:63:e5:38:e0:9f:fd:fa:9b:
                    a4:e6:53:24:ba:e4:e2:2e:bc:94:e1:d7:ee:52:0b:
                    07:87:8a:79:83:62:5e:86:ff:24:3a:28:2d:21:f4:
                    4a:48:e8:c6:87:31:9e:31:86:29:d0:32:94:68:6d:
                    a5:01:7a:50:bd:50:a3:81:fb:ed:5d:f8:5b:c5:2d:
                    13:66:a5:33:4e:76:69:19:a8:94:03:e9:27:b2:7d:
                    0e:57:b7:ad:81:81:94:e8:84:76:94:51:9a:64:b6:
                    b7:50:0c:9b:d3:18:56:b4:90:cf:52:a6:7a:a8:6f:
                    ed:ca:c4:34:49:e2:8c:06:33:8e:c1:16:6d:6d:1e:
                    f2:23:ac:a1:95:ce:5d:54:63:36:21:6c:13:8f:8c:
                    09:53:ad:91:c1:d9:a0:2f:a8:ef:a0:bb:53:a1:82:
                    91:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:3D:1D:EE:45:78:0A:A2:5E:B0:09:B3:54:7B:B0:3F:F0:E0:D8:CD
            X509v3 Authority Key Identifier:
                keyid:51:35:2D:74:D3:77:8F:24:22:CE:0E:96:FC:53:07:1E:18:93:54:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/51352D74D3778F2422CE0E96FC53071E18935405.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51352D74D3778F2422CE0E96FC53071E18935405.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/3137302e38342e3131322e302f32322d3234203d3e20323633303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:5f:de:d5:26:12:f1:3d:96:33:a5:e3:cf:d5:33:e5:f4:0d:
         b9:a6:aa:c8:ac:0a:93:6b:69:5e:86:49:44:8d:a7:44:f0:b9:
         bb:65:d6:8e:45:45:5a:2c:d9:a4:7a:88:cb:be:8a:6b:fc:6f:
         98:05:1a:99:df:7d:ba:15:75:dd:af:a9:64:37:24:c6:d1:ee:
         5f:72:f4:e2:e8:47:c8:d7:29:8e:44:b4:9b:aa:68:a8:12:ec:
         3f:42:b2:5c:45:c2:3e:5c:1a:ba:1f:70:b6:1d:c7:de:0c:fe:
         d7:14:19:a6:45:6b:43:0c:34:0d:b1:1b:a0:18:e7:b7:64:70:
         85:18:61:42:fc:02:fd:9e:91:02:1b:5f:07:a1:1d:8f:8f:7f:
         82:d1:89:fc:6e:d4:bf:4f:16:66:9e:39:e8:58:9a:00:37:f9:
         36:0c:10:75:a8:c9:c2:69:68:24:e1:6e:96:d4:33:8c:98:a2:
         55:74:32:d6:d0:cb:44:76:47:ef:51:18:8d:82:96:af:e6:7f:
         3c:81:fa:5c:73:2f:75:d4:a9:00:ae:ee:4d:09:e0:fc:bb:18:
         37:2f:72:eb:ac:4e:42:1a:bb:09:75:da:04:12:b7:bc:1f:85:
         15:a8:91:07:f7:41:96:4d:80:0d:38:67:15:5b:72:b4:5b:4f:
         b0:33:57:bd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYuwe2XbzMxPrUbqpQ6I/b41bVm0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTEzNTJENzREMzc3OEYyNDIyQ0UwRTk2RkM1MzA3MUUx
ODkzNTQwNTAeFw0yNDA0MDQwNDI1MzJaFw0yNTA0MDMwNDMwMzJaMDMxMTAvBgNV
BAMTKEU1M0QxREVFNDU3ODBBQTI1RUIwMDlCMzU0N0JCMDNGRjBFMEQ4Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSFGws2CCIfudJzmRuW0bbBarI
p54AqqA8x09g/nd62yoCW2NUFa+DRdQ1cD1O0n7+a/teO95Pkw6Af4CioY599XBQ
2TEOQpo/GLqS9Z9M2N/v+wwc4iFHm0RfCOLGX/Jj5Tjgn/36m6TmUyS65OIuvJTh
1+5SCweHinmDYl6G/yQ6KC0h9EpI6MaHMZ4xhinQMpRobaUBelC9UKOB++1d+FvF
LRNmpTNOdmkZqJQD6SeyfQ5Xt62BgZTohHaUUZpktrdQDJvTGFa0kM9Spnqob+3K
xDRJ4owGM47BFm1tHvIjrKGVzl1UYzYhbBOPjAlTrZHB2aAvqO+gu1OhgpF3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5T0d7kV4CqJesAmzVHuwP/Dg2M0wHwYDVR0j
BBgwFoAUUTUtdNN3jyQizg6W/FMHHhiTVAUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGRGTHBzbnZGTjhuSk0yTjU4TXNTM0g3UWh6V3dKY0c2NEZMS1VoWGp0
dFEvMS81MTM1MkQ3NEQzNzc4RjI0MjJDRTBFOTZGQzUzMDcxRTE4OTM1NDA1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUxMzUyRDc0RDM3NzhGMjQy
MkNFMEU5NkZDNTMwNzFFMTg5MzU0MDUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hkRkxwc252Rk44bkpNMk41OE1zUzNIN1Foeld3SmNHNjRGTEtVaFhqdHRRLzEv
MzEzNzMwMmUzODM0MmUzMTMxMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzMzMDM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqVHAwDQYJKoZIhvcNAQELBQADggEBAKdf3tUm
EvE9ljOl48/VM+X0DbmmqsisCpNraV6GSUSNp0Twubtl1o5FRVos2aR6iMu+imv8
b5gFGpnffboVdd2vqWQ3JMbR7l9y9OLoR8jXKY5EtJuqaKgS7D9CslxFwj5cGrof
cLYdx94M/tcUGaZFa0MMNA2xG6AY57dkcIUYYUL8Av2ekQIbXwehHY+Pf4LRifxu
1L9PFmaeOehYmgA3+TYMEHWoycJpaCThbpbUM4yYolV0MtbQy0R2R+9RGI2Clq/m
fzyB+lxzL3XUqQCu7k0J4Py7GDcvcuusTkIauwl12gQSt7wfhRWokQf3QZZNgA04
ZxVbcrRbT7AzV70=
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:56 2024 by rpki-client on console-ams.rpki-client.org