Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/3137302e38322e32302e302f32332d3332203d3e20323636343430.roa
File:                     3137302e38322e32302e302f32332d3332203d3e20323636343430.roa (raw, json)
Hash identifier:          +nAxPRtHcxrgkfrh1mtsvE/NhFZA9Y3xvxEZni9mbCY=
Subject key identifier:   03:54:A9:41:EA:85:97:B7:43:6E:FB:6C:3B:0B:97:8D:C0:53:F4:F7
Certificate issuer:       /CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D
Certificate serial:       65CAE16651BEAC031E4014E3F88963EF1A4BF43C
Authority key identifier: B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/3137302e38322e32302e302f32332d3332203d3e20323636343430.roa
Signing time:             Fri 22 Nov 2024 11:12:12 +0000
ROA not before:           Fri 22 Nov 2024 11:07:12 +0000
ROA not after:            Fri 21 Nov 2025 11:12:12 +0000
asID:                     266440
IP address blocks:        170.82.20.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.crl
                          rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ca:e1:66:51:be:ac:03:1e:40:14:e3:f8:89:63:ef:1a:4b:f4:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D
        Validity
            Not Before: Nov 22 11:07:12 2024 GMT
            Not After : Nov 21 11:12:12 2025 GMT
        Subject: CN=0354A941EA8597B7436EFB6C3B0B978DC053F4F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:32:c7:c1:53:ed:bf:4f:0f:ab:22:d6:b8:fc:
                    b4:39:36:c2:0d:e5:96:a9:b1:d0:0b:7d:a5:df:bd:
                    7b:be:07:38:87:9a:56:41:ac:22:11:cf:61:66:37:
                    5f:6a:b4:51:1e:17:73:65:9b:03:26:08:d8:bf:33:
                    96:b1:ff:14:4b:3f:60:31:40:b3:3c:54:bb:d3:07:
                    13:09:b2:bc:8e:d5:e3:a2:c6:54:e0:53:4b:63:e2:
                    ad:94:6f:0f:5c:15:9a:09:6a:44:f2:7a:5c:f6:6b:
                    7b:ed:ea:06:00:7e:93:85:7b:7b:9c:82:fb:d0:cb:
                    51:70:c2:f3:fe:4d:24:e6:62:43:f8:ab:02:ca:4e:
                    ff:aa:90:6c:ab:eb:f8:7a:7f:70:dc:c2:3c:a2:a2:
                    a8:67:2a:36:60:6e:21:c8:ad:81:d7:a7:9c:47:9d:
                    66:d9:cf:ca:fa:12:97:c7:12:98:8d:0e:9d:d2:51:
                    fa:95:ac:32:fa:0a:40:fe:85:46:e7:2b:af:ed:8e:
                    73:c5:23:de:07:29:93:9e:2f:71:d9:ea:f0:47:19:
                    c9:22:dd:09:8b:02:96:d9:71:39:a4:31:75:06:e0:
                    57:0d:c6:b2:57:9d:f3:14:91:05:86:96:e3:89:4a:
                    4c:40:ca:77:32:41:79:07:6e:61:56:c0:24:17:ec:
                    4a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:54:A9:41:EA:85:97:B7:43:6E:FB:6C:3B:0B:97:8D:C0:53:F4:F7
            X509v3 Authority Key Identifier:
                keyid:B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/3137302e38322e32302e302f32332d3332203d3e20323636343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:cb:45:ba:32:90:11:a6:5b:d0:5f:f2:13:5e:e3:ac:69:73:
         5c:37:e1:65:a6:c3:85:e3:83:e3:4b:bd:f2:6b:a8:ac:85:4e:
         77:4b:9c:ef:5b:4f:ee:be:ab:4f:3b:cc:b7:f9:e0:26:42:4b:
         b2:38:80:39:0b:23:3d:2d:e5:16:0d:6e:6a:68:76:fe:5d:61:
         31:a1:2c:26:2a:ce:1b:84:3e:7f:3a:00:94:ec:be:3a:09:1e:
         63:77:30:bc:e2:2f:3a:9c:7b:bd:87:db:04:24:46:d5:3d:39:
         86:d3:c8:1b:6e:5b:99:0c:f4:15:50:2e:b4:4e:19:5c:7d:8f:
         c1:d1:a9:ab:48:13:c6:b7:10:ac:e7:2b:d6:07:3b:dc:c9:61:
         86:3a:51:24:57:5f:5f:91:9c:1d:41:9c:ae:d9:61:85:f5:e0:
         ef:ac:1f:4f:b6:32:f9:e6:3e:4f:23:d4:a6:4f:2c:b8:2b:15:
         38:dd:97:df:3d:3f:1f:02:67:d1:06:ab:17:d6:63:cb:36:e3:
         a8:35:1c:4a:35:5f:d8:e4:ff:3f:67:91:3a:91:ef:b6:0a:ab:
         b0:ea:10:ea:c0:9b:9b:7b:18:43:8c:d6:89:15:28:c7:23:27:
         75:73:88:53:cf:e0:f2:76:52:af:43:8a:21:da:80:5f:a7:7e:
         4c:e5:8c:5a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZcrhZlG+rAMeQBTj+Ilj7xpL9DwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBEMEYxQ0UzMEEyQkMwRjNBREI2NkZEODI0Mjc1MDI1
ODk3NUUxRDAeFw0yNDExMjIxMTA3MTJaFw0yNTExMjExMTEyMTJaMDMxMTAvBgNV
BAMTKDAzNTRBOTQxRUE4NTk3Qjc0MzZFRkI2QzNCMEI5NzhEQzA1M0Y0RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcMsfBU+2/Tw+rIta4/LQ5NsIN
5ZapsdALfaXfvXu+BziHmlZBrCIRz2FmN19qtFEeF3NlmwMmCNi/M5ax/xRLP2Ax
QLM8VLvTBxMJsryO1eOixlTgU0tj4q2Ubw9cFZoJakTyelz2a3vt6gYAfpOFe3uc
gvvQy1FwwvP+TSTmYkP4qwLKTv+qkGyr6/h6f3DcwjyioqhnKjZgbiHIrYHXp5xH
nWbZz8r6EpfHEpiNDp3SUfqVrDL6CkD+hUbnK6/tjnPFI94HKZOeL3HZ6vBHGcki
3QmLApbZcTmkMXUG4FcNxrJXnfMUkQWGluOJSkxAyncyQXkHbmFWwCQX7EpnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUA1SpQeqFl7dDbvtsOwuXjcBT9PcwHwYDVR0j
BBgwFoAUsNDxzjCivA8622b9gkJ1AliXXh0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG9XVGJVR1BYS1hzN1FQQ2FEY1ZYQ1hYcGhzdlRmc1pDbXBSaXVxWk1r
WTQvMC9CMEQwRjFDRTMwQTJCQzBGM0FEQjY2RkQ4MjQyNzUwMjU4OTc1RTFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwRDBGMUNFMzBBMkJDMEYz
QURCNjZGRDgyNDI3NTAyNTg5NzVFMUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hvV1RiVUdQWEtYczdRUENhRGNWWENYWHBoc3ZUZnNaQ21wUml1cVpNa1k0LzAv
MzEzNzMwMmUzODMyMmUzMjMwMmUzMDJmMzIzMzJkMzMzMjIwM2QzZTIwMzIzNjM2
MzQzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBqlIUMA0GCSqGSIb3DQEBCwUAA4IBAQB0y0W6MpAR
plvQX/ITXuOsaXNcN+FlpsOF44PjS73ya6ishU53S5zvW0/uvqtPO8y3+eAmQkuy
OIA5CyM9LeUWDW5qaHb+XWExoSwmKs4bhD5/OgCU7L46CR5jdzC84i86nHu9h9sE
JEbVPTmG08gbbluZDPQVUC60ThlcfY/B0amrSBPGtxCs5yvWBzvcyWGGOlEkV19f
kZwdQZyu2WGF9eDvrB9PtjL55j5PI9SmTyy4KxU43ZffPT8fAmfRBqsX1mPLNuOo
NRxKNV/Y5P8/Z5E6ke+2Cquw6hDqwJubexhDjNaJFSjHIyd1c4hTz+DydlKvQ4oh
2oBfp35M5Yxa
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:34 2024 by rpki-client on console-fra.rpki-client.org