Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37362e302f32322d3232203d3e203238323730.roa
File:                     3133312e3139362e37362e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier:          s64p2yiunEONMENLxlgHST3sXuqnvFYaV0PIEOa+89c=
Subject key identifier:   22:C9:2C:35:FC:2A:B3:07:18:11:54:CA:B3:05:3A:9D:23:54:0C:78
Certificate issuer:       /CN=001C1582B42E32880AA66677B51A015B52D2C781
Certificate serial:       1BC11EBFDBB6A2E6E03D7BD3142B4A0EE59B825A
Authority key identifier: 00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37362e302f32322d3232203d3e203238323730.roa
Signing time:             Mon 09 Sep 2024 15:00:18 +0000
ROA not before:           Mon 09 Sep 2024 14:55:18 +0000
ROA not after:            Mon 08 Sep 2025 15:00:18 +0000
asID:                     28270
IP address blocks:        131.196.76.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 09:55:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c1:1e:bf:db:b6:a2:e6:e0:3d:7b:d3:14:2b:4a:0e:e5:9b:82:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=001C1582B42E32880AA66677B51A015B52D2C781
        Validity
            Not Before: Sep  9 14:55:18 2024 GMT
            Not After : Sep  8 15:00:18 2025 GMT
        Subject: CN=22C92C35FC2AB307181154CAB3053A9D23540C78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:02:f2:29:4e:f0:b9:88:ae:cb:50:1a:fa:97:
                    6f:f1:34:5c:92:fc:6b:95:f8:46:41:c0:70:89:f2:
                    88:83:00:92:21:c6:3d:ed:9a:78:2c:72:76:99:e8:
                    f9:25:0f:9a:ef:34:ec:36:15:16:e9:c5:09:dd:91:
                    55:d4:94:a4:ce:13:e7:4e:39:53:05:86:36:2e:bf:
                    63:a7:8d:02:7d:40:23:5b:13:86:03:0e:1c:66:67:
                    12:d1:ee:ef:0d:f3:f3:a5:69:1d:65:37:9a:f7:50:
                    9c:06:81:3d:c0:3f:46:ef:fd:ad:d8:3d:2d:36:97:
                    ca:44:fb:2b:07:ea:26:95:00:13:d6:11:4d:8e:71:
                    c4:a7:36:f0:6f:1c:d8:d2:3f:00:64:a4:3c:89:13:
                    c6:bf:5f:9e:dc:53:cf:06:79:b1:36:8f:44:14:cc:
                    9a:ae:22:75:72:e0:f3:ae:91:ab:a0:a6:9c:2e:08:
                    9b:93:82:7d:ce:f5:35:16:04:2e:fc:95:36:b2:0f:
                    36:34:1d:84:99:4d:33:d6:69:59:5b:22:de:45:8a:
                    65:6a:06:36:fb:39:6d:3c:46:e2:00:e1:7a:47:d9:
                    f1:fc:4a:33:dd:59:eb:21:28:d8:1c:17:f1:10:33:
                    c3:75:0c:8c:9c:fd:c5:e7:3b:0f:86:83:e4:78:85:
                    6c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C9:2C:35:FC:2A:B3:07:18:11:54:CA:B3:05:3A:9D:23:54:0C:78
            X509v3 Authority Key Identifier:
                keyid:00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37362e302f32322d3232203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:5a:e4:7c:f2:22:65:8b:16:47:96:85:e5:20:ba:1c:65:5a:
         67:df:eb:9c:24:06:1a:ca:09:00:95:f3:b9:b5:4d:0e:fd:a3:
         c8:7f:45:c2:97:03:e9:37:08:e6:44:72:59:15:b8:fb:90:8a:
         53:28:37:f1:48:8d:96:5b:e1:e9:bc:2f:cd:08:3e:a6:12:35:
         69:3f:c0:e3:af:58:60:a4:34:ee:34:52:d4:09:64:41:0e:70:
         8e:a5:4d:b0:47:1d:4b:2b:09:b5:93:e6:1e:86:7b:7d:c1:b2:
         e7:ad:30:53:b7:ef:fa:bf:35:60:84:98:d6:e4:39:98:eb:bf:
         5b:ee:93:22:be:4d:1b:2e:e1:bf:15:04:0c:28:fd:a1:50:c6:
         46:25:8a:d8:e4:85:3e:ac:57:bd:9d:cd:ff:94:e7:86:a6:d1:
         22:d2:ec:6c:8a:ea:6f:ad:51:ab:fe:ee:ee:a8:64:b7:9e:94:
         ec:99:7c:58:c9:6c:c7:d2:c3:b3:8e:f9:50:93:11:f7:a6:a6:
         9b:d4:34:84:f9:a3:41:19:ca:d9:9a:e1:62:35:5d:0e:c6:b7:
         ca:50:63:40:44:7a:de:14:f8:f7:fd:99:4c:60:7c:ba:4a:e2:
         61:83:c9:b8:74:a8:c9:92:a3:ab:ca:72:65:82:32:eb:64:f7:
         5a:9c:72:9d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUG8Eev9u2oubgPXvTFCtKDuWbglowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDAxQzE1ODJCNDJFMzI4ODBBQTY2Njc3QjUxQTAxNUI1
MkQyQzc4MTAeFw0yNDA5MDkxNDU1MThaFw0yNTA5MDgxNTAwMThaMDMxMTAvBgNV
BAMTKDIyQzkyQzM1RkMyQUIzMDcxODExNTRDQUIzMDUzQTlEMjM1NDBDNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCAvIpTvC5iK7LUBr6l2/xNFyS
/GuV+EZBwHCJ8oiDAJIhxj3tmngscnaZ6PklD5rvNOw2FRbpxQndkVXUlKTOE+dO
OVMFhjYuv2OnjQJ9QCNbE4YDDhxmZxLR7u8N8/OlaR1lN5r3UJwGgT3AP0bv/a3Y
PS02l8pE+ysH6iaVABPWEU2OccSnNvBvHNjSPwBkpDyJE8a/X57cU88GebE2j0QU
zJquInVy4POukaugppwuCJuTgn3O9TUWBC78lTayDzY0HYSZTTPWaVlbIt5FimVq
Bjb7OW08RuIA4XpH2fH8SjPdWeshKNgcF/EQM8N1DIyc/cXnOw+Gg+R4hWzfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUIsksNfwqswcYEVTKswU6nSNUDHgwHwYDVR0j
BBgwFoAUABwVgrQuMogKpmZ3tRoBW1LSx4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC8wMDFDMTU4MkI0MkUzMjg4MEFBNjY2NzdCNTFBMDE1QjUyRDJDNzgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwMUMxNTgyQjQyRTMyODgw
QUE2NjY3N0I1MUEwMTVCNTJEMkM3ODEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzMzMxMmUzMTM5MzYyZTM3MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM4
MzIzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCg8RMMA0GCSqGSIb3DQEBCwUAA4IBAQA2WuR88iJl
ixZHloXlILocZVpn3+ucJAYaygkAlfO5tU0O/aPIf0XClwPpNwjmRHJZFbj7kIpT
KDfxSI2WW+HpvC/NCD6mEjVpP8Djr1hgpDTuNFLUCWRBDnCOpU2wRx1LKwm1k+Ye
hnt9wbLnrTBTt+/6vzVghJjW5DmY679b7pMivk0bLuG/FQQMKP2hUMZGJYrY5IU+
rFe9nc3/lOeGptEi0uxsiupvrVGr/u7uqGS3npTsmXxYyWzH0sOzjvlQkxH3pqab
1DSE+aNBGcrZmuFiNV0OxrfKUGNARHreFPj3/ZlMYHy6SuJhg8m4dKjJkqOrynJl
gjLrZPdanHKd
-----END CERTIFICATE-----
Generated at Sat Sep 28 10:27:28 2024 by rpki-client on console-ams.rpki-client.org