Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/3137302e302e3234302e302f32322d3234203d3e203238313331.roa
File:                     3137302e302e3234302e302f32322d3234203d3e203238313331.roa (raw, json)
Hash identifier:          slUPL89Xa4IzisxJX9odHxBR9ZtwrYH1tZaDOGkq8n4=
Subject key identifier:   0B:A1:75:8C:E3:7B:32:B1:80:84:B6:76:70:9D:83:E8:B4:3B:1B:66
Certificate issuer:       /CN=03981ED1B457034CCBAC00F384454B3A021E294E
Certificate serial:       0296803E171EF37F0E01759818A5ABA2E355045A
Authority key identifier: 03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/3137302e302e3234302e302f32322d3234203d3e203238313331.roa
Signing time:             Thu 04 Apr 2024 03:10:28 +0000
ROA not before:           Thu 04 Apr 2024 03:05:28 +0000
ROA not after:            Thu 03 Apr 2025 03:10:28 +0000
asID:                     28131
IP address blocks:        170.0.240.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl
                          rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:44:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:96:80:3e:17:1e:f3:7f:0e:01:75:98:18:a5:ab:a2:e3:55:04:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03981ED1B457034CCBAC00F384454B3A021E294E
        Validity
            Not Before: Apr  4 03:05:28 2024 GMT
            Not After : Apr  3 03:10:28 2025 GMT
        Subject: CN=0BA1758CE37B32B18084B676709D83E8B43B1B66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:62:74:f8:94:9d:66:e2:8e:8c:14:97:ad:76:
                    4e:25:e1:c4:dd:97:90:ce:be:4a:f5:43:f7:a6:35:
                    37:ca:4e:2e:cc:b4:4a:31:3a:43:92:cf:e1:cb:89:
                    b0:8f:10:1c:50:3e:2f:66:53:4c:f8:2a:66:d2:20:
                    d6:12:0e:80:e0:e9:52:85:b0:42:d2:7d:56:85:66:
                    0c:b2:bf:6a:26:1f:e3:1e:64:d9:d0:45:cd:63:8e:
                    ef:d0:8f:42:23:5e:cc:02:84:dc:3a:e6:e6:49:77:
                    57:45:a8:19:f6:aa:f2:71:15:e8:1e:f5:ee:b7:5d:
                    6c:cd:49:f3:6c:d3:61:66:c4:ac:88:9e:29:4b:7c:
                    42:3c:de:31:3f:3b:45:1f:66:4f:95:fd:7c:e4:e0:
                    a2:cd:08:22:09:e4:d8:9d:d7:bc:94:8b:2e:6d:f4:
                    68:c8:de:b3:24:2b:66:36:42:ed:92:40:52:3c:e6:
                    96:17:09:8a:36:bc:21:50:4e:8a:54:24:b4:8b:fe:
                    94:2b:6e:18:51:32:eb:db:9a:18:3e:41:12:f2:4d:
                    1b:fb:9d:e9:7f:31:7a:e9:57:68:f8:23:01:5e:e8:
                    11:49:7c:fe:94:01:7c:6c:ed:94:83:40:da:ff:a6:
                    ee:59:e1:21:65:de:c0:12:41:55:1e:7f:09:6b:53:
                    9c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A1:75:8C:E3:7B:32:B1:80:84:B6:76:70:9D:83:E8:B4:3B:1B:66
            X509v3 Authority Key Identifier:
                keyid:03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/3137302e302e3234302e302f32322d3234203d3e203238313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:51:f2:b2:86:01:de:bd:bc:5a:89:29:3a:ac:35:9f:52:d5:
         ba:08:c6:e2:0d:88:5d:6a:ee:51:ce:f6:89:d0:05:ee:98:04:
         29:89:2d:7b:77:0b:86:5f:bc:13:c2:29:09:60:95:60:0f:62:
         16:1e:55:fb:05:6f:94:6e:86:fa:4d:6f:95:14:ff:d0:01:14:
         2d:29:ac:46:26:29:1c:0b:49:fa:a8:5f:2d:39:9a:77:c2:4f:
         d1:da:25:5b:bb:cb:29:51:bd:a4:b1:f5:29:17:f7:7e:8f:ca:
         80:68:c9:bc:85:5f:e3:44:90:a0:01:5f:ce:a6:23:de:f4:12:
         76:f4:3a:44:10:61:81:99:38:10:2e:b4:c7:ec:cd:02:6e:1a:
         a9:31:26:56:aa:64:a0:9f:db:d0:5a:64:1c:f7:5f:78:82:b9:
         38:22:8e:37:f1:8c:13:3c:e1:80:d0:0a:1b:9f:56:36:2a:10:
         ae:53:e9:76:9b:99:24:66:02:82:8d:e2:c5:42:b3:78:3f:40:
         2a:e4:eb:30:c4:69:f9:ba:2b:ab:c2:d8:04:e9:c1:f3:9c:5e:
         64:30:76:51:16:72:70:9e:a7:97:7c:63:33:e5:7d:fe:2e:4e:
         04:be:a7:7e:37:5d:86:06:36:f8:f7:a6:65:af:7b:22:9c:a6:
         29:cd:8b:44
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUApaAPhce838OAXWYGKWrouNVBFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDM5ODFFRDFCNDU3MDM0Q0NCQUMwMEYzODQ0NTRCM0Ew
MjFFMjk0RTAeFw0yNDA0MDQwMzA1MjhaFw0yNTA0MDMwMzEwMjhaMDMxMTAvBgNV
BAMTKDBCQTE3NThDRTM3QjMyQjE4MDg0QjY3NjcwOUQ4M0U4QjQzQjFCNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5YnT4lJ1m4o6MFJetdk4l4cTd
l5DOvkr1Q/emNTfKTi7MtEoxOkOSz+HLibCPEBxQPi9mU0z4KmbSINYSDoDg6VKF
sELSfVaFZgyyv2omH+MeZNnQRc1jju/Qj0IjXswChNw65uZJd1dFqBn2qvJxFege
9e63XWzNSfNs02FmxKyInilLfEI83jE/O0UfZk+V/Xzk4KLNCCIJ5Nid17yUiy5t
9GjI3rMkK2Y2Qu2SQFI85pYXCYo2vCFQTopUJLSL/pQrbhhRMuvbmhg+QRLyTRv7
nel/MXrpV2j4IwFe6BFJfP6UAXxs7ZSDQNr/pu5Z4SFl3sASQVUefwlrU5wtAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUC6F1jON7MrGAhLZ2cJ2D6LQ7G2YwHwYDVR0j
BBgwFoAUA5ge0bRXA0zLrADzhEVLOgIeKU4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDJrRVF0OEdXR1laa1pKcktEZFpDNmdQemtOOUU4RnRjVGJEOTNnem1Q
RFgvMS8wMzk4MUVEMUI0NTcwMzRDQ0JBQzAwRjM4NDQ1NEIzQTAyMUUyOTRFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzOTgxRUQxQjQ1NzAzNEND
QkFDMDBGMzg0NDU0QjNBMDIxRTI5NEUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQya0VRdDhHV0dZWmtaSnJLRGRaQzZnUHprTjlFOEZ0Y1RiRDkzZ3ptUERYLzEv
MzEzNzMwMmUzMDJlMzIzNDMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzODMx
MzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAqoA8DANBgkqhkiG9w0BAQsFAAOCAQEAEFHysoYB3r28
WokpOqw1n1LVugjG4g2IXWruUc72idAF7pgEKYkte3cLhl+8E8IpCWCVYA9iFh5V
+wVvlG6G+k1vlRT/0AEULSmsRiYpHAtJ+qhfLTmad8JP0dolW7vLKVG9pLH1KRf3
fo/KgGjJvIVf40SQoAFfzqYj3vQSdvQ6RBBhgZk4EC60x+zNAm4aqTEmVqpkoJ/b
0FpkHPdfeIK5OCKON/GMEzzhgNAKG59WNioQrlPpdpuZJGYCgo3ixUKzeD9AKuTr
MMRp+borq8LYBOnB85xeZDB2URZycJ6nl3xjM+V9/i5OBL6nfjddhgY2+PemZa97
IpymKc2LRA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:20 2024 by rpki-client on console-fra.rpki-client.org