Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/3137302e38312e3137362e302f32322d3234203d3e203238313331.roa
File:                     3137302e38312e3137362e302f32322d3234203d3e203238313331.roa (raw, json)
Hash identifier:          AEb8yOYwCcCrOyndvTakLg30WWUIaHP0eGitwkm1krw=
Subject key identifier:   2D:50:9F:19:F2:6F:66:FE:EC:0A:7D:24:E6:32:50:A0:B3:2F:D2:0D
Certificate issuer:       /CN=03981ED1B457034CCBAC00F384454B3A021E294E
Certificate serial:       62F80D6F68DCAF1EE4ECA28FF777FBA549BBC423
Authority key identifier: 03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/3137302e38312e3137362e302f32322d3234203d3e203238313331.roa
Signing time:             Thu 04 Apr 2024 03:10:27 +0000
ROA not before:           Thu 04 Apr 2024 03:05:27 +0000
ROA not after:            Thu 03 Apr 2025 03:10:27 +0000
asID:                     28131
IP address blocks:        170.81.176.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl
                          rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:44:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:f8:0d:6f:68:dc:af:1e:e4:ec:a2:8f:f7:77:fb:a5:49:bb:c4:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03981ED1B457034CCBAC00F384454B3A021E294E
        Validity
            Not Before: Apr  4 03:05:27 2024 GMT
            Not After : Apr  3 03:10:27 2025 GMT
        Subject: CN=2D509F19F26F66FEEC0A7D24E63250A0B32FD20D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:27:b2:cf:51:c1:be:18:59:01:f0:f5:c1:c1:
                    de:a6:3b:10:d8:f2:7e:80:0c:31:0e:65:a8:c9:79:
                    c3:01:0c:ac:92:9b:60:75:64:cb:fb:0e:99:d5:83:
                    63:47:e2:31:da:c8:b5:e2:fb:a2:a2:07:87:bb:35:
                    eb:26:6e:91:77:d7:ad:b0:a1:ac:6b:80:a4:3f:16:
                    a6:38:77:56:39:6f:c6:64:16:6f:8f:ef:01:bd:8f:
                    d4:dc:43:ad:c7:8d:ae:4d:97:e6:e5:86:6f:96:f4:
                    93:b2:54:42:75:00:43:2a:ee:a4:6c:9a:43:3c:23:
                    72:0a:9c:c2:6d:b7:62:2b:14:3c:65:07:10:3c:f6:
                    4f:0b:88:e6:c6:62:3f:c1:74:b0:ab:1b:84:fd:c7:
                    e8:bc:64:b7:59:75:1f:b3:0f:a9:4a:de:26:b9:19:
                    b7:66:a8:a5:ee:91:dd:b5:6a:db:15:b8:d5:84:2b:
                    d4:db:4c:82:79:39:7e:fb:89:0e:a3:da:c7:d5:18:
                    d5:27:67:8e:40:6c:b6:14:1a:ad:08:6c:d3:ae:d8:
                    53:0c:bc:55:96:e0:bd:30:94:18:11:82:9d:07:77:
                    7d:83:39:8a:5e:37:b6:d1:e8:f5:86:44:27:84:48:
                    46:d7:ad:5f:3f:ec:ab:bb:12:7b:b4:61:59:f0:fb:
                    86:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:50:9F:19:F2:6F:66:FE:EC:0A:7D:24:E6:32:50:A0:B3:2F:D2:0D
            X509v3 Authority Key Identifier:
                keyid:03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/3137302e38312e3137362e302f32322d3234203d3e203238313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:9b:fb:3e:77:44:c9:9d:60:85:ce:90:14:88:cc:ae:9e:fb:
         97:59:db:e8:af:33:6c:48:60:39:7b:a7:d3:bb:33:dd:86:aa:
         91:2b:e3:d5:d6:a9:0b:db:2c:a0:b9:b1:4c:90:d5:6c:3b:7b:
         cc:b1:fe:1f:0e:18:17:2d:b0:af:5b:3c:7e:68:7c:d2:7e:9c:
         4c:ee:72:d5:25:1f:40:81:13:8f:b2:60:37:4e:34:e5:12:61:
         89:b9:32:cd:a3:6c:30:b8:05:f4:87:3b:e9:77:f1:be:36:e1:
         eb:8f:7e:5c:30:91:99:73:80:53:c1:c7:4c:0a:03:41:f7:6f:
         4e:f6:14:70:e9:6a:3b:4b:4a:f0:7d:c1:0a:a3:fd:9e:a0:77:
         d3:5c:a1:bf:c2:5b:19:89:17:f1:a9:92:db:9a:a2:91:64:42:
         46:a1:67:71:c7:0f:d0:57:36:e9:00:49:9a:c7:7b:4b:2e:7b:
         e8:fe:50:e8:85:fc:9e:c8:77:6e:3b:2f:cb:1c:81:09:12:1f:
         62:ac:e4:ed:9c:4b:88:7c:9c:ef:1f:26:1c:be:f6:22:34:f5:
         b0:5e:21:fd:c5:2a:7f:a5:50:bc:58:8c:6f:3e:80:bc:99:25:
         b1:e4:fa:30:0d:a7:74:df:f2:bb:24:30:64:5a:75:48:38:e9:
         14:12:3e:d7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYvgNb2jcrx7k7KKP93f7pUm7xCMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDM5ODFFRDFCNDU3MDM0Q0NCQUMwMEYzODQ0NTRCM0Ew
MjFFMjk0RTAeFw0yNDA0MDQwMzA1MjdaFw0yNTA0MDMwMzEwMjdaMDMxMTAvBgNV
BAMTKDJENTA5RjE5RjI2RjY2RkVFQzBBN0QyNEU2MzI1MEEwQjMyRkQyMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuJ7LPUcG+GFkB8PXBwd6mOxDY
8n6ADDEOZajJecMBDKySm2B1ZMv7DpnVg2NH4jHayLXi+6KiB4e7NesmbpF3162w
oaxrgKQ/FqY4d1Y5b8ZkFm+P7wG9j9TcQ63Hja5Nl+blhm+W9JOyVEJ1AEMq7qRs
mkM8I3IKnMJtt2IrFDxlBxA89k8LiObGYj/BdLCrG4T9x+i8ZLdZdR+zD6lK3ia5
GbdmqKXukd21atsVuNWEK9TbTIJ5OX77iQ6j2sfVGNUnZ45AbLYUGq0IbNOu2FMM
vFWW4L0wlBgRgp0Hd32DOYpeN7bR6PWGRCeESEbXrV8/7Ku7Enu0YVnw+4bPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQULVCfGfJvZv7sCn0k5jJQoLMv0g0wHwYDVR0j
BBgwFoAUA5ge0bRXA0zLrADzhEVLOgIeKU4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDJrRVF0OEdXR1laa1pKcktEZFpDNmdQemtOOUU4RnRjVGJEOTNnem1Q
RFgvMS8wMzk4MUVEMUI0NTcwMzRDQ0JBQzAwRjM4NDQ1NEIzQTAyMUUyOTRFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzOTgxRUQxQjQ1NzAzNEND
QkFDMDBGMzg0NDU0QjNBMDIxRTI5NEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQya0VRdDhHV0dZWmtaSnJLRGRaQzZnUHprTjlFOEZ0Y1RiRDkzZ3ptUERYLzEv
MzEzNzMwMmUzODMxMmUzMTM3MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4
MzEzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqlGwMA0GCSqGSIb3DQEBCwUAA4IBAQCdm/s+d0TJ
nWCFzpAUiMyunvuXWdvorzNsSGA5e6fTuzPdhqqRK+PV1qkL2yygubFMkNVsO3vM
sf4fDhgXLbCvWzx+aHzSfpxM7nLVJR9AgROPsmA3TjTlEmGJuTLNo2wwuAX0hzvp
d/G+NuHrj35cMJGZc4BTwcdMCgNB929O9hRw6Wo7S0rwfcEKo/2eoHfTXKG/wlsZ
iRfxqZLbmqKRZEJGoWdxxw/QVzbpAEmax3tLLnvo/lDohfyeyHduOy/LHIEJEh9i
rOTtnEuIfJzvHyYcvvYiNPWwXiH9xSp/pVC8WIxvPoC8mSWx5PowDad03/K7JDBk
WnVIOOkUEj7X
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:20 2024 by rpki-client on console-fra.rpki-client.org