Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/3137302e3234372e3131312e302f32342d3234203d3e20323732313933.roa
File:                     3137302e3234372e3131312e302f32342d3234203d3e20323732313933.roa (raw, json)
Hash identifier:          KFhbQ7Y4aEKpjOgA/JOF2CXcsRcjYhh0mJKY3V4cwzk=
Subject key identifier:   07:BC:CD:E1:8F:C4:55:B5:EB:04:E3:15:67:1B:A3:73:F9:72:76:20
Certificate issuer:       /CN=558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3
Certificate serial:       32F076D8B5A48B3093EDC8EAF716C0A679DACA2F
Authority key identifier: 55:8F:AD:BC:85:8C:E2:0B:A4:32:A6:DD:4C:B4:84:AB:DB:DC:D4:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/3137302e3234372e3131312e302f32342d3234203d3e20323732313933.roa
Signing time:             Sun 29 Dec 2024 18:43:03 +0000
ROA not before:           Sun 29 Dec 2024 18:38:03 +0000
ROA not after:            Sun 28 Dec 2025 18:43:03 +0000
asID:                     272193
IP address blocks:        170.247.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.crl
                          rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 23:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:f0:76:d8:b5:a4:8b:30:93:ed:c8:ea:f7:16:c0:a6:79:da:ca:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3
        Validity
            Not Before: Dec 29 18:38:03 2024 GMT
            Not After : Dec 28 18:43:03 2025 GMT
        Subject: CN=07BCCDE18FC455B5EB04E315671BA373F9727620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:05:a4:5a:8c:15:68:0f:08:08:30:b1:8f:55:
                    06:dd:03:1f:89:07:6c:c5:ce:c7:0d:6e:0c:96:d3:
                    16:7f:ce:1e:59:e8:6e:a2:52:fe:fb:7b:6a:04:cf:
                    89:fb:1d:f1:c6:79:58:9f:6f:90:15:c7:c1:ce:6d:
                    bd:49:86:b8:a0:e5:cd:4a:be:e9:e3:b8:71:82:07:
                    f4:e1:02:78:bf:d0:bb:b1:01:1c:76:f2:c6:43:e7:
                    47:4a:27:74:96:4d:93:8f:49:c6:65:24:1f:bb:64:
                    ca:c2:1b:e4:68:b5:d1:1d:aa:9c:b2:6f:ad:1b:85:
                    74:86:47:74:2a:6d:bb:ca:ac:f5:1c:da:24:b9:fd:
                    b0:10:96:4c:51:55:19:7f:05:c3:f7:9b:2c:d8:7e:
                    11:4a:46:a8:94:b4:a5:5c:81:81:69:98:ff:2c:54:
                    4c:ca:62:22:f6:eb:ac:69:18:cb:8f:85:f9:eb:2e:
                    52:0f:de:4f:18:69:85:ea:d3:1a:b2:cb:c8:e8:f3:
                    04:fa:40:f0:53:66:39:2d:a8:08:be:c8:e2:2a:01:
                    31:27:30:21:e9:04:11:61:41:40:bf:30:9d:65:a6:
                    01:a7:d5:6b:07:24:8e:4a:c4:57:eb:6d:79:3d:28:
                    d7:9d:ee:be:86:06:86:91:20:09:d5:84:bc:90:ab:
                    a5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:BC:CD:E1:8F:C4:55:B5:EB:04:E3:15:67:1B:A3:73:F9:72:76:20
            X509v3 Authority Key Identifier:
                keyid:55:8F:AD:BC:85:8C:E2:0B:A4:32:A6:DD:4C:B4:84:AB:DB:DC:D4:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/3137302e3234372e3131312e302f32342d3234203d3e20323732313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:09:e4:f0:84:c5:02:23:ec:dc:d7:75:a5:07:dc:59:81:fb:
         51:ab:9b:5f:c5:72:bb:fd:9d:aa:8d:6a:e3:b5:33:bc:d1:91:
         0d:28:02:2f:17:e1:27:07:15:10:74:08:15:9d:d8:13:b9:11:
         32:d2:96:d8:25:b5:1f:35:81:7e:b9:65:6e:5b:70:23:cc:6a:
         f4:63:56:9a:c3:b9:68:b5:cd:b1:82:80:31:b8:7f:f7:c1:af:
         cf:8b:52:74:e5:73:1e:9c:fc:8b:cc:ae:14:2e:ed:8b:55:52:
         8d:6c:fb:44:e2:91:ce:48:85:c5:0a:f5:ca:5d:b6:dc:2d:3f:
         2e:f3:0b:86:8b:97:89:78:83:e6:21:be:ea:77:3e:b8:0c:35:
         b9:47:60:15:1a:17:0e:43:ba:57:d7:b1:0f:e7:bb:c5:af:ff:
         a8:54:57:66:20:15:26:9e:7f:ef:35:3e:e6:e9:47:85:dc:21:
         02:f7:66:9f:ab:41:7a:50:f8:22:d5:05:a8:1f:92:fd:e8:cc:
         44:07:f4:c2:52:44:44:ee:f8:c0:9d:03:fe:5d:a0:89:75:d7:
         b9:6c:19:77:d7:21:4a:7a:dd:13:45:8d:77:c0:75:f1:31:b3:
         0e:98:e9:f5:3f:3e:47:c6:15:51:90:56:6c:c3:cf:85:68:da:
         10:78:ec:b7
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUMvB22LWkizCT7cjq9xbApnnayi8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU4RkFEQkM4NThDRTIwQkE0MzJBNkRENENCNDg0QUJE
QkRDRDREMzAeFw0yNDEyMjkxODM4MDNaFw0yNTEyMjgxODQzMDNaMDMxMTAvBgNV
BAMTKDA3QkNDREUxOEZDNDU1QjVFQjA0RTMxNTY3MUJBMzczRjk3Mjc2MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8BaRajBVoDwgIMLGPVQbdAx+J
B2zFzscNbgyW0xZ/zh5Z6G6iUv77e2oEz4n7HfHGeVifb5AVx8HObb1Jhrig5c1K
vunjuHGCB/ThAni/0LuxARx28sZD50dKJ3SWTZOPScZlJB+7ZMrCG+RotdEdqpyy
b60bhXSGR3QqbbvKrPUc2iS5/bAQlkxRVRl/BcP3myzYfhFKRqiUtKVcgYFpmP8s
VEzKYiL266xpGMuPhfnrLlIP3k8YaYXq0xqyy8jo8wT6QPBTZjktqAi+yOIqATEn
MCHpBBFhQUC/MJ1lpgGn1WsHJI5KxFfrbXk9KNed7r6GBoaRIAnVhLyQq6UxAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUB7zN4Y/EVbXrBOMVZxujc/lydiAwHwYDVR0j
BBgwFoAUVY+tvIWM4gukMqbdTLSEq9vc1NMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlZvNnhDZlNXYmhTQUtkTEpaNUd5Q2djU2NDQUdxdXUxZVlWZXdHRnNN
ajcvMS81NThGQURCQzg1OENFMjBCQTQzMkE2REQ0Q0I0ODRBQkRCRENENEQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU1OEZBREJDODU4Q0UyMEJB
NDMyQTZERDRDQjQ4NEFCREJEQ0Q0RDMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZWbzZ4Q2ZTV2JoU0FLZExKWjVHeUNnY1NjQ0FHcXV1MWVZVmV3R0ZzTWo3LzEv
MzEzNzMwMmUzMjM0MzcyZTMxMzEzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMjMxMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKr3bzANBgkqhkiG9w0BAQsFAAOCAQEAiQnk
8ITFAiPs3Nd1pQfcWYH7UaubX8Vyu/2dqo1q47UzvNGRDSgCLxfhJwcVEHQIFZ3Y
E7kRMtKW2CW1HzWBfrllbltwI8xq9GNWmsO5aLXNsYKAMbh/98Gvz4tSdOVzHpz8
i8yuFC7ti1VSjWz7ROKRzkiFxQr1yl223C0/LvMLhouXiXiD5iG+6nc+uAw1uUdg
FRoXDkO6V9exD+e7xa//qFRXZiAVJp5/7zU+5ulHhdwhAvdmn6tBelD4ItUFqB+S
/ejMRAf0wlJERO74wJ0D/l2giXXXuWwZd9chSnrdE0WNd8B18TGzDpjp9T8+R8YV
UZBWbMPPhWjaEHjstw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:14 2025 by rpki-client on console.sobornost.net