Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234372e35322e302f32322d3232203d3e20323632353039.roa
File:                     3137302e3234372e35322e302f32322d3232203d3e20323632353039.roa (raw, json)
Hash identifier:          WdVmofKxFOfwNopV8tQJVpKGYIzwFGMe9H4ZRd6yKkA=
Subject key identifier:   FB:3C:24:89:14:34:7D:97:0D:C9:CF:C2:4C:66:6C:7E:D7:AD:AB:F0
Certificate issuer:       /CN=001C1582B42E32880AA66677B51A015B52D2C781
Certificate serial:       028785C0144E9717D140DBAF98B4FAA756C475BA
Authority key identifier: 00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234372e35322e302f32322d3232203d3e20323632353039.roa
Signing time:             Mon 09 Sep 2024 15:00:18 +0000
ROA not before:           Mon 09 Sep 2024 14:55:18 +0000
ROA not after:            Mon 08 Sep 2025 15:00:18 +0000
asID:                     262509
IP address blocks:        170.247.52.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 19:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:87:85:c0:14:4e:97:17:d1:40:db:af:98:b4:fa:a7:56:c4:75:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=001C1582B42E32880AA66677B51A015B52D2C781
        Validity
            Not Before: Sep  9 14:55:18 2024 GMT
            Not After : Sep  8 15:00:18 2025 GMT
        Subject: CN=FB3C248914347D970DC9CFC24C666C7ED7ADABF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a3:db:e3:1d:3e:ac:81:eb:fc:08:c2:dd:7f:
                    78:a6:d2:e4:94:18:5f:9f:b8:29:78:2d:14:83:d9:
                    98:89:bb:39:ba:d8:23:17:ff:19:15:87:25:21:42:
                    dc:2e:ba:57:d4:b0:e9:b4:04:86:e9:a2:7b:b0:36:
                    06:f0:0a:ca:a0:13:51:eb:9d:13:d2:45:58:e2:b2:
                    75:28:79:c6:6a:35:5b:8c:cd:aa:0d:86:00:17:9a:
                    e5:22:40:04:34:9e:68:28:ec:41:52:4e:a8:87:93:
                    c8:62:af:c1:24:0a:e0:d2:9b:b7:75:fc:7d:a6:ad:
                    d9:45:03:9c:80:5e:64:c1:df:3d:00:f0:64:88:e5:
                    47:90:75:d1:78:2c:00:27:b9:25:c8:16:65:65:c3:
                    a5:50:0a:f2:6c:70:b9:cf:85:8a:58:d0:0a:5d:b8:
                    60:b5:f8:46:2f:d7:5c:2a:7d:68:5a:3e:19:80:87:
                    bb:ed:a6:7d:52:85:a0:ca:95:4f:c6:29:15:18:57:
                    29:9d:eb:de:a2:97:4c:89:5e:00:70:5f:8f:7d:66:
                    5f:39:ab:61:e6:88:12:bc:18:25:27:87:80:e0:ff:
                    14:b2:ff:66:95:f1:7a:61:9a:53:3b:a4:13:1b:ad:
                    d5:2d:f0:05:ea:2c:c4:fc:c4:e7:fd:fa:1e:ae:a2:
                    4d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:3C:24:89:14:34:7D:97:0D:C9:CF:C2:4C:66:6C:7E:D7:AD:AB:F0
            X509v3 Authority Key Identifier:
                keyid:00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234372e35322e302f32322d3232203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:2b:9c:93:cf:76:d8:00:f8:6a:8d:1e:16:8d:bd:17:af:5d:
         05:f7:9f:aa:0e:ce:90:36:55:b6:ce:64:08:28:d2:e9:ea:40:
         09:b4:cb:a3:a9:24:dd:b0:68:6b:8b:a7:6d:df:93:6b:17:d2:
         cf:4b:d9:c6:f0:0a:e1:b0:3d:14:01:7d:1f:81:a3:02:84:19:
         dd:17:1e:17:5d:8e:32:c1:bb:f8:5d:b4:4a:b1:00:3e:cb:d0:
         38:9e:68:d7:f7:a8:76:21:a7:f3:61:ad:28:bd:fa:19:32:04:
         32:2c:70:95:98:84:5f:82:fc:2d:32:75:77:6e:fb:17:92:f8:
         c2:03:10:97:2c:7d:1e:22:9c:b3:c3:5e:9e:43:70:92:14:a5:
         e8:8d:34:e1:40:16:b1:6f:79:7e:f8:25:b4:33:52:06:59:62:
         34:8b:35:db:26:71:3a:ae:20:ad:37:4a:24:d7:91:50:a7:35:
         8d:64:90:58:2b:1c:85:f6:e6:38:3d:e8:14:7d:74:cc:b9:42:
         ab:d3:bc:30:cb:d2:03:d9:f7:3b:19:3b:64:04:26:fa:12:47:
         95:64:83:69:7a:c8:41:bf:ec:6d:e6:2e:9b:6e:73:47:40:0a:
         cb:6c:d5:fa:24:70:d0:2b:43:7d:88:da:33:e4:7a:4d:ea:1e:
         df:d4:e3:5c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAoeFwBROlxfRQNuvmLT6p1bEdbowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDAxQzE1ODJCNDJFMzI4ODBBQTY2Njc3QjUxQTAxNUI1
MkQyQzc4MTAeFw0yNDA5MDkxNDU1MThaFw0yNTA5MDgxNTAwMThaMDMxMTAvBgNV
BAMTKEZCM0MyNDg5MTQzNDdEOTcwREM5Q0ZDMjRDNjY2QzdFRDdBREFCRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeo9vjHT6sgev8CMLdf3im0uSU
GF+fuCl4LRSD2ZiJuzm62CMX/xkVhyUhQtwuulfUsOm0BIbponuwNgbwCsqgE1Hr
nRPSRVjisnUoecZqNVuMzaoNhgAXmuUiQAQ0nmgo7EFSTqiHk8hir8EkCuDSm7d1
/H2mrdlFA5yAXmTB3z0A8GSI5UeQddF4LAAnuSXIFmVlw6VQCvJscLnPhYpY0Apd
uGC1+EYv11wqfWhaPhmAh7vtpn1ShaDKlU/GKRUYVymd696il0yJXgBwX499Zl85
q2HmiBK8GCUnh4Dg/xSy/2aV8XphmlM7pBMbrdUt8AXqLMT8xOf9+h6uok2/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+zwkiRQ0fZcNyc/CTGZsftetq/AwHwYDVR0j
BBgwFoAUABwVgrQuMogKpmZ3tRoBW1LSx4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC8wMDFDMTU4MkI0MkUzMjg4MEFBNjY2NzdCNTFBMDE1QjUyRDJDNzgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwMUMxNTgyQjQyRTMyODgw
QUE2NjY3N0I1MUEwMTVCNTJEMkM3ODEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzNzMwMmUzMjM0MzcyZTM1MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzIzNTMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq9zQwDQYJKoZIhvcNAQELBQADggEBACkrnJPP
dtgA+GqNHhaNvRevXQX3n6oOzpA2VbbOZAgo0unqQAm0y6OpJN2waGuLp23fk2sX
0s9L2cbwCuGwPRQBfR+BowKEGd0XHhddjjLBu/hdtEqxAD7L0DieaNf3qHYhp/Nh
rSi9+hkyBDIscJWYhF+C/C0ydXdu+xeS+MIDEJcsfR4inLPDXp5DcJIUpeiNNOFA
FrFveX74JbQzUgZZYjSLNdsmcTquIK03SiTXkVCnNY1kkFgrHIX25jg96BR9dMy5
QqvTvDDL0gPZ9zsZO2QEJvoSR5Vkg2l6yEG/7G3mLptuc0dACsts1fokcNArQ32I
2jPkek3qHt/U41w=
-----END CERTIFICATE-----
Generated at Fri Sep 20 20:56:27 2024 by rpki-client on console-ams.rpki-client.org