Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3137302e3135302e3136342e302f32322d3234203d3e203238313330.roa
File:                     3137302e3135302e3136342e302f32322d3234203d3e203238313330.roa (raw, json)
Hash identifier:          XBDHg22OGfS1Mdcd1+reYEZtCnGhg3ahA8p11Zf5rOY=
Subject key identifier:   64:10:73:AB:76:A1:06:CE:00:98:4E:81:79:B2:46:26:E1:FA:20:89
Certificate issuer:       /CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Certificate serial:       515357F0087A0FB49957A8A0003C7735D536432A
Authority key identifier: 4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3137302e3135302e3136342e302f32322d3234203d3e203238313330.roa
Signing time:             Thu 04 Apr 2024 07:32:49 +0000
ROA not before:           Thu 04 Apr 2024 07:27:49 +0000
ROA not after:            Thu 03 Apr 2025 07:32:49 +0000
asID:                     28130
IP address blocks:        170.150.164.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl
                          rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:53:57:f0:08:7a:0f:b4:99:57:a8:a0:00:3c:77:35:d5:36:43:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
        Validity
            Not Before: Apr  4 07:27:49 2024 GMT
            Not After : Apr  3 07:32:49 2025 GMT
        Subject: CN=641073AB76A106CE00984E8179B24626E1FA2089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ad:35:df:7c:47:4c:3f:9a:d4:36:62:f0:fb:
                    91:49:8e:5a:01:f4:56:fa:7d:16:ee:79:bc:07:f2:
                    10:be:e5:b5:23:0a:f5:0f:9f:15:02:2c:19:0b:ed:
                    f2:79:22:7c:d4:a5:a8:e1:11:c1:77:cc:a5:3d:8d:
                    f3:83:64:69:f0:85:1f:81:d3:29:c0:eb:ff:e2:c1:
                    c8:e6:da:9e:e5:1d:4d:92:67:99:06:ad:82:c5:d7:
                    d7:05:f2:57:57:df:4f:25:8f:af:0b:0a:c5:b7:ff:
                    f1:6f:24:39:1b:d4:cb:8a:44:b3:d7:4c:3b:f6:e5:
                    45:60:ff:a0:66:b9:ac:6d:31:e7:5e:6e:d8:2b:24:
                    02:9e:d8:11:7d:b4:2d:8b:14:cc:96:a7:fa:9e:77:
                    c8:d5:4d:9e:5b:b0:29:79:9c:d4:60:bd:ff:43:d0:
                    bc:44:17:3e:06:60:33:18:3c:a2:18:ef:8c:e5:66:
                    c0:7f:cb:b9:d6:79:2c:29:f5:02:f8:f6:7e:ce:98:
                    04:cd:7e:c9:16:eb:43:c0:f2:65:23:d3:11:89:ae:
                    76:8f:5e:d0:0f:bc:ef:8d:58:88:45:35:b7:22:a6:
                    76:57:7c:bd:89:59:b0:de:d1:15:51:03:02:4d:3c:
                    e2:17:f5:ca:32:84:7a:bd:e1:43:fd:7c:85:63:50:
                    a2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:10:73:AB:76:A1:06:CE:00:98:4E:81:79:B2:46:26:E1:FA:20:89
            X509v3 Authority Key Identifier:
                keyid:4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3137302e3135302e3136342e302f32322d3234203d3e203238313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:4a:12:91:ed:88:7e:c3:37:50:c1:68:18:f4:e2:42:6b:74:
         0f:78:95:01:7a:6c:c8:e9:76:d6:96:3a:33:03:c6:d6:a1:24:
         7f:d7:2f:4a:6a:3b:c9:50:b6:c4:5f:50:d1:63:b8:94:d5:b1:
         c0:d1:5f:e1:a9:06:b4:06:00:5e:51:cf:a1:4f:21:a4:a5:be:
         a9:9e:3e:1c:81:a5:d6:02:80:d5:42:35:f0:1d:00:8b:9c:d7:
         a3:64:ce:7a:33:c3:5b:b6:a6:44:fe:51:b5:6d:c3:0f:e8:f2:
         8a:11:b1:1e:9a:4b:8b:9c:b6:84:f3:72:b9:55:73:6a:e1:7b:
         ed:5f:6c:b8:37:bb:ca:0f:52:49:77:91:2b:7c:b2:5b:27:ed:
         4a:b6:49:35:90:42:59:a5:48:f9:8a:2f:39:06:96:36:26:66:
         61:07:1b:f7:1a:54:c6:de:30:2a:9c:cf:0d:cd:4d:ba:43:b5:
         d1:05:21:91:58:41:5e:43:92:c6:44:2c:c5:44:10:fc:bb:03:
         c0:52:99:1c:fb:70:3c:96:4f:8e:0c:cc:61:1e:9a:a6:0a:53:
         a3:bc:b6:ae:76:e5:53:7f:2b:f9:88:6f:45:14:56:da:fe:09:
         51:09:60:ce:8b:4a:c1:39:f5:00:eb:09:93:c0:79:f7:e1:08:
         b9:8d:28:7d
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUUVNX8Ah6D7SZV6igADx3NdU2QyowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEIxM0RCNjRCQ0MyNUM5RkE5OUZBMkI5REZBQzQ5NjFE
M0RDMDlFMDAeFw0yNDA0MDQwNzI3NDlaFw0yNTA0MDMwNzMyNDlaMDMxMTAvBgNV
BAMTKDY0MTA3M0FCNzZBMTA2Q0UwMDk4NEU4MTc5QjI0NjI2RTFGQTIwODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+rTXffEdMP5rUNmLw+5FJjloB
9Fb6fRbuebwH8hC+5bUjCvUPnxUCLBkL7fJ5InzUpajhEcF3zKU9jfODZGnwhR+B
0ynA6//iwcjm2p7lHU2SZ5kGrYLF19cF8ldX308lj68LCsW3//FvJDkb1MuKRLPX
TDv25UVg/6BmuaxtMedebtgrJAKe2BF9tC2LFMyWp/qed8jVTZ5bsCl5nNRgvf9D
0LxEFz4GYDMYPKIY74zlZsB/y7nWeSwp9QL49n7OmATNfskW60PA8mUj0xGJrnaP
XtAPvO+NWIhFNbcipnZXfL2JWbDe0RVRAwJNPOIX9coyhHq94UP9fIVjUKIzAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUZBBzq3ahBs4AmE6BebJGJuH6IIkwHwYDVR0j
BBgwFoAUSxPbZLzCXJ+pn6K536xJYdPcCeAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9oWHAzMTRBVm9uNVZVQjg1M29NVkQ2OWFaa3JLc3VHZkpEem95R3hnQXMy
LzEvNEIxM0RCNjRCQ0MyNUM5RkE5OUZBMkI5REZBQzQ5NjFEM0RDMDlFMC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80QjEzREI2NEJDQzI1QzlGQTk5
RkEyQjlERkFDNDk2MUQzREMwOUUwLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9o
WHAzMTRBVm9uNVZVQjg1M29NVkQ2OWFaa3JLc3VHZkpEem95R3hnQXMyLzEvMzEz
NzMwMmUzMTM1MzAyZTMxMzYzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzgz
MTMzMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAKqlqQwDQYJKoZIhvcNAQELBQADggEBAEBKEpHtiH7D
N1DBaBj04kJrdA94lQF6bMjpdtaWOjMDxtahJH/XL0pqO8lQtsRfUNFjuJTVscDR
X+GpBrQGAF5Rz6FPIaSlvqmePhyBpdYCgNVCNfAdAIuc16Nkznozw1u2pkT+UbVt
ww/o8ooRsR6aS4uctoTzcrlVc2rhe+1fbLg3u8oPUkl3kSt8slsn7Uq2STWQQlml
SPmKLzkGljYmZmEHG/caVMbeMCqczw3NTbpDtdEFIZFYQV5DksZELMVEEPy7A8BS
mRz7cDyWT44MzGEemqYKU6O8tq525VN/K/mIb0UUVtr+CVEJYM6LSsE59QDrCZPA
effhCLmNKH0=
-----END CERTIFICATE-----
Generated at Tue Nov 26 07:51:13 2024 by rpki-client on console-fra.rpki-client.org