Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/3137302e38322e32322e302f32332d3332203d3e20323636343430.roa
File:                     3137302e38322e32322e302f32332d3332203d3e20323636343430.roa (raw, json)
Hash identifier:          VhhP8rnZ6UCnRJRiCucXMy4ncmyKDFOTf8Wxmj/hPMI=
Subject key identifier:   52:CC:1D:F3:AC:D8:56:1A:07:F0:4C:EA:9A:79:E6:69:38:5B:AC:81
Certificate issuer:       /CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D
Certificate serial:       508398F7EAC98E3305810E4AE56AAE57C4FA6813
Authority key identifier: B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/3137302e38322e32322e302f32332d3332203d3e20323636343430.roa
Signing time:             Fri 22 Nov 2024 11:12:37 +0000
ROA not before:           Fri 22 Nov 2024 11:07:37 +0000
ROA not after:            Fri 21 Nov 2025 11:12:37 +0000
asID:                     266440
IP address blocks:        170.82.22.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.crl
                          rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:83:98:f7:ea:c9:8e:33:05:81:0e:4a:e5:6a:ae:57:c4:fa:68:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D
        Validity
            Not Before: Nov 22 11:07:37 2024 GMT
            Not After : Nov 21 11:12:37 2025 GMT
        Subject: CN=52CC1DF3ACD8561A07F04CEA9A79E669385BAC81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:34:80:b7:4e:bb:49:a5:4a:b8:d3:bb:0a:b2:
                    a0:38:4d:2f:11:62:40:68:e7:98:52:ee:51:64:cf:
                    d6:f6:e7:cf:7f:9b:4b:9f:8b:c4:5d:c4:89:ed:01:
                    f3:7b:0f:fa:7e:c5:7b:fc:90:27:a3:fc:b7:5c:e5:
                    9b:1c:ad:7a:b6:7e:7d:db:97:07:f7:fb:05:32:d2:
                    46:d5:0d:06:81:26:44:30:59:53:e8:47:d6:8b:cb:
                    c7:18:a9:2b:98:20:63:27:b7:01:6d:e8:df:8e:08:
                    cd:15:52:72:85:be:ea:6f:ba:2e:40:ea:d1:bc:c9:
                    05:c0:bb:b1:c3:e9:ce:1b:e9:f5:9b:24:4f:f7:6e:
                    c6:a2:0c:56:fc:98:55:af:0e:2f:81:92:8f:86:f1:
                    90:54:1c:39:e4:c3:cf:f8:2c:5b:7c:e7:1a:cb:7a:
                    ef:92:f7:bb:d8:27:2a:97:7b:2a:82:cf:6f:a6:14:
                    fd:4d:a5:61:69:f7:67:9e:71:c5:70:21:47:41:62:
                    65:f2:49:9b:e1:06:a6:2a:62:d2:3f:bf:b2:3d:62:
                    e5:32:9b:ce:38:e7:41:f0:ad:d7:be:c9:f2:f9:78:
                    76:00:44:b6:c5:98:ee:a9:a1:e7:c2:19:55:96:a0:
                    2f:07:f0:f9:87:d2:02:0e:66:f7:ce:17:30:41:0f:
                    70:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:CC:1D:F3:AC:D8:56:1A:07:F0:4C:EA:9A:79:E6:69:38:5B:AC:81
            X509v3 Authority Key Identifier:
                keyid:B0:D0:F1:CE:30:A2:BC:0F:3A:DB:66:FD:82:42:75:02:58:97:5E:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D0F1CE30A2BC0F3ADB66FD8242750258975E1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoWTbUGPXKXs7QPCaDcVXCXXphsvTfsZCmpRiuqZMkY4/0/3137302e38322e32322e302f32332d3332203d3e20323636343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:5a:63:a6:a1:74:87:2a:01:07:94:48:96:cc:ba:18:49:a3:
         ef:1c:7e:ae:64:a3:86:b8:c0:d7:c7:97:25:16:d3:de:d8:dc:
         b2:c2:f7:fe:c7:46:fb:e3:db:73:34:64:4f:fa:6f:7d:60:00:
         3b:1d:f4:b7:60:99:a1:4e:fa:b4:7a:7b:b4:32:b8:b0:92:02:
         69:79:15:15:02:4e:12:b4:42:d5:fd:92:81:a7:6e:bc:0e:0d:
         74:c7:74:be:f1:28:ee:fb:41:99:5a:27:26:6a:37:ff:7f:dc:
         bc:69:a4:ae:e4:c6:0d:ce:8b:b1:89:41:9b:0d:e5:e9:3e:d4:
         e4:a8:d1:85:bd:1b:1d:97:a2:58:d5:e1:9d:93:23:1c:9c:60:
         ed:d1:79:1c:b9:df:a2:2d:11:5d:97:b6:5f:d8:d5:d9:ad:b3:
         f9:d2:02:29:f6:f1:9b:73:4e:3f:1a:28:05:b6:ef:54:2d:08:
         b3:60:09:1d:d0:f2:c1:90:0a:4e:d3:bd:cf:d9:4d:7e:24:84:
         92:e5:a8:c7:fe:bc:f2:40:a1:39:be:d9:53:ac:e8:21:02:bb:
         00:60:a4:42:cc:73:eb:f6:19:06:8f:f9:49:bd:0f:3a:4a:89:
         d0:68:52:d9:c5:cd:b9:93:ec:c2:c6:4a:73:83:39:27:c7:b7:
         7a:c0:17:03
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUIOY9+rJjjMFgQ5K5WquV8T6aBMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBEMEYxQ0UzMEEyQkMwRjNBREI2NkZEODI0Mjc1MDI1
ODk3NUUxRDAeFw0yNDExMjIxMTA3MzdaFw0yNTExMjExMTEyMzdaMDMxMTAvBgNV
BAMTKDUyQ0MxREYzQUNEODU2MUEwN0YwNENFQTlBNzlFNjY5Mzg1QkFDODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfNIC3TrtJpUq407sKsqA4TS8R
YkBo55hS7lFkz9b2589/m0ufi8RdxIntAfN7D/p+xXv8kCej/Ldc5ZscrXq2fn3b
lwf3+wUy0kbVDQaBJkQwWVPoR9aLy8cYqSuYIGMntwFt6N+OCM0VUnKFvupvui5A
6tG8yQXAu7HD6c4b6fWbJE/3bsaiDFb8mFWvDi+Bko+G8ZBUHDnkw8/4LFt85xrL
eu+S97vYJyqXeyqCz2+mFP1NpWFp92eeccVwIUdBYmXySZvhBqYqYtI/v7I9YuUy
m84450Hwrde+yfL5eHYARLbFmO6poefCGVWWoC8H8PmH0gIOZvfOFzBBD3AnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUUswd86zYVhoH8EzqmnnmaThbrIEwHwYDVR0j
BBgwFoAUsNDxzjCivA8622b9gkJ1AliXXh0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG9XVGJVR1BYS1hzN1FQQ2FEY1ZYQ1hYcGhzdlRmc1pDbXBSaXVxWk1r
WTQvMC9CMEQwRjFDRTMwQTJCQzBGM0FEQjY2RkQ4MjQyNzUwMjU4OTc1RTFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwRDBGMUNFMzBBMkJDMEYz
QURCNjZGRDgyNDI3NTAyNTg5NzVFMUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hvV1RiVUdQWEtYczdRUENhRGNWWENYWHBoc3ZUZnNaQ21wUml1cVpNa1k0LzAv
MzEzNzMwMmUzODMyMmUzMjMyMmUzMDJmMzIzMzJkMzMzMjIwM2QzZTIwMzIzNjM2
MzQzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBqlIWMA0GCSqGSIb3DQEBCwUAA4IBAQCmWmOmoXSH
KgEHlEiWzLoYSaPvHH6uZKOGuMDXx5clFtPe2Nyywvf+x0b749tzNGRP+m99YAA7
HfS3YJmhTvq0enu0MriwkgJpeRUVAk4StELV/ZKBp268Dg10x3S+8Sju+0GZWicm
ajf/f9y8aaSu5MYNzouxiUGbDeXpPtTkqNGFvRsdl6JY1eGdkyMcnGDt0Xkcud+i
LRFdl7Zf2NXZrbP50gIp9vGbc04/GigFtu9ULQizYAkd0PLBkApO073P2U1+JISS
5ajH/rzyQKE5vtlTrOghArsAYKRCzHPr9hkGj/lJvQ86SonQaFLZxc25k+zCxkpz
gzknx7d6wBcD
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:11 2024 by rpki-client on console-ams.rpki-client.org