Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137302e3233312e3232302e302f32322d3332203d3e20323632373733.roa
File:                     3137302e3233312e3232302e302f32322d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          vyCiRZLHfOvUqXaNpCxdDO99pOS+ta/OM1NDX7Czf0M=
Subject key identifier:   EA:F0:C0:74:F5:05:52:F9:88:81:21:3B:1C:60:20:31:7A:EA:7A:AF
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       7A95C5EFFE6AD30C0951387F9820E2386745DF5B
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137302e3233312e3232302e302f32322d3332203d3e20323632373733.roa
Signing time:             Mon 09 Sep 2024 14:49:58 +0000
ROA not before:           Mon 09 Sep 2024 14:44:58 +0000
ROA not after:            Mon 08 Sep 2025 14:49:58 +0000
asID:                     262773
IP address blocks:        170.231.220.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:95:c5:ef:fe:6a:d3:0c:09:51:38:7f:98:20:e2:38:67:45:df:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Sep  9 14:44:58 2024 GMT
            Not After : Sep  8 14:49:58 2025 GMT
        Subject: CN=EAF0C074F50552F98881213B1C6020317AEA7AAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:14:57:75:f4:49:80:05:8a:45:de:ec:8d:1e:
                    0b:19:ef:9a:25:00:3a:01:65:9b:ee:da:cf:29:31:
                    1e:41:55:e2:4b:d0:af:08:0b:15:cc:5e:80:fd:a8:
                    9a:01:d6:16:fc:7f:17:1d:3f:f8:77:4c:2d:7c:8f:
                    91:ce:7d:17:f5:47:ab:0f:5a:86:85:6d:13:3b:c9:
                    2f:10:37:88:5e:e9:ef:a5:e6:f9:32:d7:7e:27:05:
                    bb:f2:ba:fa:c0:69:8b:49:64:14:8d:ea:d1:06:49:
                    58:4d:6d:de:89:c3:89:91:6b:3f:4a:c6:9d:06:b9:
                    73:cf:93:db:00:f4:92:a5:c0:3d:25:87:44:e5:d7:
                    e5:dc:c9:b6:40:2f:6e:24:c6:84:91:8c:e2:ef:b3:
                    77:69:ed:c1:e1:78:7b:17:f4:5d:d8:3c:7d:24:93:
                    63:d3:c1:bd:f8:79:7a:96:75:12:aa:db:ce:89:4a:
                    4e:96:70:2e:15:76:40:14:04:05:91:eb:5a:46:ce:
                    ed:d5:b3:5f:de:d0:b8:79:33:f0:09:44:94:cf:38:
                    8e:28:f4:ee:a9:43:b5:df:b5:2a:a3:6c:68:61:2d:
                    f8:64:95:57:02:52:91:ff:3b:d6:15:59:3e:44:18:
                    a4:b2:fd:91:cc:71:c9:16:82:7d:e0:c0:dd:23:01:
                    62:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F0:C0:74:F5:05:52:F9:88:81:21:3B:1C:60:20:31:7A:EA:7A:AF
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137302e3233312e3232302e302f32322d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:31:c8:c7:88:ae:f5:5d:49:a1:98:4a:6b:8e:68:08:c0:9f:
         d4:88:7f:5f:d5:da:a7:c4:27:fc:2d:92:3b:0c:b8:ba:5c:6a:
         f3:4b:78:f8:ac:d3:e3:1a:ad:09:c8:53:ff:b3:b9:66:65:62:
         38:e6:37:1b:8e:8d:d3:31:62:64:ed:6c:89:4c:7e:90:27:eb:
         ab:7b:d8:e6:16:20:45:c9:8d:fe:bd:ce:93:dc:98:b3:89:c9:
         8d:8c:92:74:5e:d0:fc:35:24:6a:fa:3f:ce:4e:08:e4:6f:12:
         0d:e6:30:ff:c1:62:d5:50:3c:9a:55:20:eb:56:37:5c:36:1f:
         12:38:12:81:e3:e0:c5:9d:87:c8:39:9f:b9:7e:e8:e3:ca:f7:
         1d:6e:47:7e:01:7a:6e:56:32:31:1b:0d:76:1b:43:44:5f:86:
         94:03:75:9f:69:c7:5f:e5:fa:34:e2:8c:69:9e:1d:e4:d9:04:
         e0:05:73:e8:35:8e:3d:4a:1b:87:76:ad:9d:63:09:f3:1f:4a:
         29:55:87:c3:63:01:89:6f:c8:b2:ac:b3:02:24:52:7b:d9:7b:
         44:4c:0b:98:a0:df:17:6a:9d:e1:6f:8c:6f:91:88:a6:4b:0b:
         d4:68:07:bb:07:14:da:f9:0d:27:01:dd:76:65:20:26:a1:8e:
         4f:00:0c:3c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUepXF7/5q0wwJUTh/mCDiOGdF31swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJGOUFDNTAwQzU4OTk3MEI5RThBNkM2RTZGODgyREM2
RjI0NDg4NTAeFw0yNDA5MDkxNDQ0NThaFw0yNTA5MDgxNDQ5NThaMDMxMTAvBgNV
BAMTKEVBRjBDMDc0RjUwNTUyRjk4ODgxMjEzQjFDNjAyMDMxN0FFQTdBQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8FFd19EmABYpF3uyNHgsZ75ol
ADoBZZvu2s8pMR5BVeJL0K8ICxXMXoD9qJoB1hb8fxcdP/h3TC18j5HOfRf1R6sP
WoaFbRM7yS8QN4he6e+l5vky134nBbvyuvrAaYtJZBSN6tEGSVhNbd6Jw4mRaz9K
xp0GuXPPk9sA9JKlwD0lh0Tl1+XcybZAL24kxoSRjOLvs3dp7cHheHsX9F3YPH0k
k2PTwb34eXqWdRKq286JSk6WcC4VdkAUBAWR61pGzu3Vs1/e0Lh5M/AJRJTPOI4o
9O6pQ7XftSqjbGhhLfhklVcCUpH/O9YVWT5EGKSy/ZHMcckWgn3gwN0jAWIdAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU6vDAdPUFUvmIgSE7HGAgMXrqeq8wHwYDVR0j
BBgwFoAU+/msUAxYmXC56KbG5viC3G8kSIUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2
MzkvMS9GQkY5QUM1MDBDNTg5OTcwQjlFOEE2QzZFNkY4ODJEQzZGMjQ0ODg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCRjlBQzUwMEM1ODk5NzBC
OUU4QTZDNkU2Rjg4MkRDNkYyNDQ4ODUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzEv
MzEzNzMwMmUzMjMzMzEyZTMyMzIzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzMjM3MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqrn3DANBgkqhkiG9w0BAQsFAAOCAQEAwzHI
x4iu9V1JoZhKa45oCMCf1Ih/X9Xap8Qn/C2SOwy4ulxq80t4+KzT4xqtCchT/7O5
ZmViOOY3G46N0zFiZO1siUx+kCfrq3vY5hYgRcmN/r3Ok9yYs4nJjYySdF7Q/DUk
avo/zk4I5G8SDeYw/8Fi1VA8mlUg61Y3XDYfEjgSgePgxZ2HyDmfuX7o48r3HW5H
fgF6blYyMRsNdhtDRF+GlAN1n2nHX+X6NOKMaZ4d5NkE4AVz6DWOPUobh3atnWMJ
8x9KKVWHw2MBiW/IsqyzAiRSe9l7REwLmKDfF2qd4W+Mb5GIpksL1GgHuwcU2vkN
JwHddmUgJqGOTwAMPA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:41 2024 by rpki-client on console-ams.rpki-client.org