Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3232312e36382e302f32322d3232203d3e203238323730.roa
File:                     3133312e3232312e36382e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier:          k1xdAmAOpV7HS/JHZA5aLuq70zmUOd6XugtlVAm3bl0=
Subject key identifier:   C7:56:B7:94:14:E0:6E:DE:7C:2E:08:7C:6E:7C:C7:1D:DA:F4:4E:00
Certificate issuer:       /CN=001C1582B42E32880AA66677B51A015B52D2C781
Certificate serial:       37122F44E26C7C21339738DF0B0E5F44CC66D9D4
Authority key identifier: 00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3232312e36382e302f32322d3232203d3e203238323730.roa
Signing time:             Mon 09 Sep 2024 15:00:21 +0000
ROA not before:           Mon 09 Sep 2024 14:55:21 +0000
ROA not after:            Mon 08 Sep 2025 15:00:21 +0000
asID:                     28270
IP address blocks:        131.221.68.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 09:55:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:12:2f:44:e2:6c:7c:21:33:97:38:df:0b:0e:5f:44:cc:66:d9:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=001C1582B42E32880AA66677B51A015B52D2C781
        Validity
            Not Before: Sep  9 14:55:21 2024 GMT
            Not After : Sep  8 15:00:21 2025 GMT
        Subject: CN=C756B79414E06EDE7C2E087C6E7CC71DDAF44E00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d4:33:fe:05:09:5d:3c:a9:45:64:70:5e:72:
                    69:8b:6b:19:aa:ed:0b:02:70:3e:a9:f5:8e:7b:3a:
                    a0:2f:a0:e7:9e:53:f1:f8:18:22:ea:12:fa:50:ac:
                    39:70:43:1c:87:0d:30:03:7c:85:53:f3:4e:2b:13:
                    48:f5:d6:a4:ea:51:b9:c5:b0:2a:4e:92:91:3c:5d:
                    06:41:00:73:ef:30:1c:db:e3:6e:7b:1c:9d:c1:36:
                    38:50:09:b4:cf:37:42:4e:68:86:02:d3:31:cd:a6:
                    e6:23:54:7f:f7:65:e7:9f:fb:0a:4a:f0:34:5e:03:
                    04:be:72:63:9c:64:6c:3a:20:85:c3:7d:75:86:46:
                    33:2c:ab:88:e3:81:31:58:bc:1a:1a:a0:d0:74:02:
                    6e:95:c5:00:ef:47:a5:d9:29:aa:e7:76:64:dd:1c:
                    5e:ed:8e:40:41:74:c9:95:f9:5f:88:31:2d:4b:a0:
                    43:e8:c8:0b:39:e9:b6:1c:69:d4:c9:cf:b7:fb:b1:
                    a9:33:35:77:af:29:38:9f:6a:39:1e:a2:53:a2:79:
                    ad:01:84:cd:82:a3:37:8b:b6:75:16:35:8c:6d:db:
                    de:f6:c8:11:1b:c5:6f:26:e3:59:85:cb:26:1b:5e:
                    bd:d6:23:c1:d3:55:2e:7b:fa:0a:0a:3d:5b:19:a6:
                    88:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:56:B7:94:14:E0:6E:DE:7C:2E:08:7C:6E:7C:C7:1D:DA:F4:4E:00
            X509v3 Authority Key Identifier:
                keyid:00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3232312e36382e302f32322d3232203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:57:02:43:96:e3:ca:32:23:a9:94:d2:93:e9:d6:80:67:23:
         ef:02:8c:e0:40:37:20:5e:f1:5a:21:33:86:cd:1e:cd:71:39:
         4c:20:52:92:83:7a:94:1d:f6:f2:49:ae:1f:d1:f4:80:25:71:
         e0:68:91:01:95:1d:2c:80:eb:e0:f5:47:2b:12:23:2f:a2:d2:
         91:e8:fd:ce:80:26:f8:e6:de:61:4f:84:c2:62:cf:4a:bb:9f:
         09:65:4c:46:4c:ee:05:74:ac:fb:08:cd:ae:b5:b7:02:4f:4f:
         3c:8e:19:e3:7c:3d:99:56:f2:63:27:7d:06:08:d0:2b:11:dd:
         e2:c4:df:dc:25:eb:cd:2a:65:b6:48:b6:f4:9e:a0:6d:17:f1:
         a3:8d:4a:d9:89:e0:c8:ae:bf:6e:25:a3:04:1a:7c:c9:bd:10:
         d7:bd:65:85:6c:ef:2a:bc:72:14:92:f2:39:2e:11:53:3b:90:
         45:56:93:99:db:db:1c:b0:82:93:f6:bd:b1:3b:5b:48:9d:66:
         b5:9d:3e:9b:ad:f9:b8:e5:14:cd:45:39:b7:96:5c:ee:4e:29:
         13:f7:60:5b:6b:e4:3e:6d:09:06:9a:c8:ee:8e:8a:2f:34:90:
         b5:5a:98:98:b3:29:34:85:0a:1b:82:6a:20:b2:fe:80:ab:03:
         74:cc:d5:c7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNxIvROJsfCEzlzjfCw5fRMxm2dQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDAxQzE1ODJCNDJFMzI4ODBBQTY2Njc3QjUxQTAxNUI1
MkQyQzc4MTAeFw0yNDA5MDkxNDU1MjFaFw0yNTA5MDgxNTAwMjFaMDMxMTAvBgNV
BAMTKEM3NTZCNzk0MTRFMDZFREU3QzJFMDg3QzZFN0NDNzFEREFGNDRFMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI1DP+BQldPKlFZHBecmmLaxmq
7QsCcD6p9Y57OqAvoOeeU/H4GCLqEvpQrDlwQxyHDTADfIVT804rE0j11qTqUbnF
sCpOkpE8XQZBAHPvMBzb4257HJ3BNjhQCbTPN0JOaIYC0zHNpuYjVH/3Zeef+wpK
8DReAwS+cmOcZGw6IIXDfXWGRjMsq4jjgTFYvBoaoNB0Am6VxQDvR6XZKarndmTd
HF7tjkBBdMmV+V+IMS1LoEPoyAs56bYcadTJz7f7sakzNXevKTifajkeolOiea0B
hM2CozeLtnUWNYxt2972yBEbxW8m41mFyyYbXr3WI8HTVS57+goKPVsZpojnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUx1a3lBTgbt58Lgh8bnzHHdr0TgAwHwYDVR0j
BBgwFoAUABwVgrQuMogKpmZ3tRoBW1LSx4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC8wMDFDMTU4MkI0MkUzMjg4MEFBNjY2NzdCNTFBMDE1QjUyRDJDNzgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwMUMxNTgyQjQyRTMyODgw
QUE2NjY3N0I1MUEwMTVCNTJEMkM3ODEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzMzMxMmUzMjMyMzEyZTM2MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM4
MzIzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCg91EMA0GCSqGSIb3DQEBCwUAA4IBAQCCVwJDluPK
MiOplNKT6daAZyPvAozgQDcgXvFaITOGzR7NcTlMIFKSg3qUHfbySa4f0fSAJXHg
aJEBlR0sgOvg9UcrEiMvotKR6P3OgCb45t5hT4TCYs9Ku58JZUxGTO4FdKz7CM2u
tbcCT088jhnjfD2ZVvJjJ30GCNArEd3ixN/cJevNKmW2SLb0nqBtF/GjjUrZieDI
rr9uJaMEGnzJvRDXvWWFbO8qvHIUkvI5LhFTO5BFVpOZ29scsIKT9r2xO1tInWa1
nT6brfm45RTNRTm3llzuTikT92Bba+Q+bQkGmsjujoovNJC1WpiYsyk0hQobgmog
sv6AqwN0zNXH
-----END CERTIFICATE-----
Generated at Sat Sep 28 10:27:28 2024 by rpki-client on console-ams.rpki-client.org