Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234372e35322e302f32322d3232203d3e203238323730.roa
File:                     3137302e3234372e35322e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier:          +i/utphvumsbwbUIYFIKGUhh4IeKI8ywIbkiv7EqcRk=
Subject key identifier:   A4:7F:11:21:51:4A:B0:6B:26:86:5C:AA:76:40:D4:3E:18:C4:4B:D6
Certificate issuer:       /CN=001C1582B42E32880AA66677B51A015B52D2C781
Certificate serial:       2DD76B2F01B4D68062950161E685D051B37FA80C
Authority key identifier: 00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234372e35322e302f32322d3232203d3e203238323730.roa
Signing time:             Mon 09 Sep 2024 15:00:21 +0000
ROA not before:           Mon 09 Sep 2024 14:55:21 +0000
ROA not after:            Mon 08 Sep 2025 15:00:21 +0000
asID:                     28270
IP address blocks:        170.247.52.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 09:55:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d7:6b:2f:01:b4:d6:80:62:95:01:61:e6:85:d0:51:b3:7f:a8:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=001C1582B42E32880AA66677B51A015B52D2C781
        Validity
            Not Before: Sep  9 14:55:21 2024 GMT
            Not After : Sep  8 15:00:21 2025 GMT
        Subject: CN=A47F1121514AB06B26865CAA7640D43E18C44BD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:04:43:d1:43:53:35:0a:93:59:77:85:71:ad:
                    95:54:6e:c7:2f:3e:07:51:c3:e5:ee:21:ba:43:fe:
                    53:03:04:45:08:24:4b:83:4f:26:39:2f:9c:31:8d:
                    7d:a9:a5:b4:83:b6:d1:04:c1:53:8a:49:7a:a4:9d:
                    5a:bf:e8:de:41:8b:52:17:86:df:a9:75:00:7d:24:
                    07:d9:60:28:7c:8c:92:df:e0:37:3d:d6:a8:73:4d:
                    5e:8e:ee:52:63:25:83:85:d4:3a:22:7e:33:3f:39:
                    66:7d:81:c6:e5:7d:26:db:df:00:b0:1f:68:76:d3:
                    44:5b:18:6e:4b:06:f8:5a:53:e9:52:bd:7b:7d:59:
                    fc:a4:3a:46:65:80:3b:cb:87:4b:e3:8a:f3:a4:da:
                    4a:11:4e:e0:c5:2a:0e:c4:64:3a:55:76:de:71:fa:
                    ca:2b:85:54:fd:ff:2e:fc:d9:f7:bc:2c:92:a7:27:
                    3e:92:f0:99:88:1c:59:fb:8c:99:80:c0:61:26:05:
                    02:b4:4a:c2:22:13:06:6a:84:d7:67:13:5c:6b:b0:
                    e1:b6:27:71:a0:42:e5:e7:70:cf:5d:70:31:83:ed:
                    6e:ae:4a:21:b5:37:3f:05:cb:1a:9e:a4:16:ab:3c:
                    77:b5:6c:81:53:0a:46:4b:07:b9:ea:3a:3b:bc:2d:
                    1e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:7F:11:21:51:4A:B0:6B:26:86:5C:AA:76:40:D4:3E:18:C4:4B:D6
            X509v3 Authority Key Identifier:
                keyid:00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234372e35322e302f32322d3232203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:a6:d2:ac:cb:17:a4:56:75:aa:6e:57:28:1d:a1:c1:d2:13:
         9c:c7:a3:12:9a:f5:ed:d4:6e:fe:b8:ec:30:a5:77:b6:08:76:
         6d:f9:5c:f2:4a:17:37:af:19:53:0c:6b:6d:af:6c:60:22:37:
         91:79:09:04:b3:fd:dd:9e:d4:01:c9:be:cc:fe:e2:19:11:a1:
         86:4b:57:e8:a7:52:a2:30:46:57:90:2b:0e:15:21:2e:a8:10:
         0d:ed:50:66:0c:b2:f4:39:72:c6:7c:ff:31:e1:3d:36:a2:1c:
         71:a0:56:a7:d5:e7:ee:d6:27:0b:55:fc:66:01:32:57:38:62:
         6b:58:dd:71:c9:15:b9:3e:56:af:61:ee:ff:71:6f:b4:9d:9a:
         90:a5:9c:1b:75:46:d6:35:be:35:a8:4e:e1:cc:16:f0:34:c6:
         65:ab:08:c0:8e:36:0f:cf:d4:20:73:1d:19:4b:3b:ab:6c:d5:
         44:ff:41:a2:bc:e6:ea:72:e8:98:af:1b:0b:ef:69:a0:85:04:
         b1:56:3d:d0:b1:58:de:8e:a1:61:c3:7b:29:88:a8:37:cc:5f:
         5a:f0:a5:ca:48:70:97:0f:53:fe:b1:89:7c:05:a6:84:70:23:
         1d:d4:4a:f3:cf:23:4a:9b:03:cb:61:a5:e3:17:ba:09:99:cd:
         9a:d7:f8:04
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULddrLwG01oBilQFh5oXQUbN/qAwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDAxQzE1ODJCNDJFMzI4ODBBQTY2Njc3QjUxQTAxNUI1
MkQyQzc4MTAeFw0yNDA5MDkxNDU1MjFaFw0yNTA5MDgxNTAwMjFaMDMxMTAvBgNV
BAMTKEE0N0YxMTIxNTE0QUIwNkIyNjg2NUNBQTc2NDBENDNFMThDNDRCRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3BEPRQ1M1CpNZd4VxrZVUbscv
PgdRw+XuIbpD/lMDBEUIJEuDTyY5L5wxjX2ppbSDttEEwVOKSXqknVq/6N5Bi1IX
ht+pdQB9JAfZYCh8jJLf4Dc91qhzTV6O7lJjJYOF1DoifjM/OWZ9gcblfSbb3wCw
H2h200RbGG5LBvhaU+lSvXt9WfykOkZlgDvLh0vjivOk2koRTuDFKg7EZDpVdt5x
+sorhVT9/y782fe8LJKnJz6S8JmIHFn7jJmAwGEmBQK0SsIiEwZqhNdnE1xrsOG2
J3GgQuXncM9dcDGD7W6uSiG1Nz8FyxqepBarPHe1bIFTCkZLB7nqOju8LR5DAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUpH8RIVFKsGsmhlyqdkDUPhjES9YwHwYDVR0j
BBgwFoAUABwVgrQuMogKpmZ3tRoBW1LSx4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC8wMDFDMTU4MkI0MkUzMjg4MEFBNjY2NzdCNTFBMDE1QjUyRDJDNzgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwMUMxNTgyQjQyRTMyODgw
QUE2NjY3N0I1MUEwMTVCNTJEMkM3ODEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzNzMwMmUzMjM0MzcyZTM1MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM4
MzIzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqvc0MA0GCSqGSIb3DQEBCwUAA4IBAQBBptKsyxek
VnWqblcoHaHB0hOcx6MSmvXt1G7+uOwwpXe2CHZt+VzyShc3rxlTDGttr2xgIjeR
eQkEs/3dntQByb7M/uIZEaGGS1fop1KiMEZXkCsOFSEuqBAN7VBmDLL0OXLGfP8x
4T02ohxxoFan1efu1icLVfxmATJXOGJrWN1xyRW5PlavYe7/cW+0nZqQpZwbdUbW
Nb41qE7hzBbwNMZlqwjAjjYPz9Qgcx0ZSzurbNVE/0GivObqcuiYrxsL72mghQSx
Vj3QsVjejqFhw3spiKg3zF9a8KXKSHCXD1P+sYl8BaaEcCMd1ErzzyNKmwPLYaXj
F7oJmc2a1/gE
-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:21 2024 by rpki-client on console-fra.rpki-client.org