Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3133312e302e32382e302f32322d3232203d3e203238323130.roa
File:                     3133312e302e32382e302f32322d3232203d3e203238323130.roa (raw, json)
Hash identifier:          BjVaJY5TwSg8WgGKcl9a2FuJnKUpTHuuxVlxLdT4ImY=
Subject key identifier:   06:D9:29:F5:AD:B5:B2:C3:24:F8:E0:9D:BA:AC:14:0C:69:AD:3E:44
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       066D8BBBACCF9F09425FBE4F8B59C2431E844AF7
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3133312e302e32382e302f32322d3232203d3e203238323130.roa
Signing time:             Thu 04 Apr 2024 04:37:48 +0000
ROA not before:           Thu 04 Apr 2024 04:32:48 +0000
ROA not after:            Thu 03 Apr 2025 04:37:48 +0000
asID:                     28210
IP address blocks:        131.0.28.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 08 Jul 2024 11:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:6d:8b:bb:ac:cf:9f:09:42:5f:be:4f:8b:59:c2:43:1e:84:4a:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Apr  4 04:32:48 2024 GMT
            Not After : Apr  3 04:37:48 2025 GMT
        Subject: CN=06D929F5ADB5B2C324F8E09DBAAC140C69AD3E44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a6:b0:c6:22:e3:3e:b5:9d:d4:09:2f:74:4c:
                    04:60:31:4b:10:21:20:c3:92:f5:d8:c1:b4:cf:a3:
                    58:36:c0:d5:a2:50:c2:8a:cb:ae:cf:41:5d:83:fc:
                    6e:26:09:22:5e:46:67:2e:58:4c:28:44:82:b8:f4:
                    b3:f0:b0:25:e7:4a:f4:28:b3:f0:93:3e:34:ed:16:
                    fc:0e:70:5d:7d:95:b5:b0:d6:91:ce:73:63:96:58:
                    a1:77:19:6b:99:90:e6:95:bc:4a:ca:01:39:30:b5:
                    b5:f5:51:37:f5:95:87:64:95:2b:7e:72:9c:59:cc:
                    84:81:ea:4d:3f:a7:86:3f:db:a8:5e:ca:c3:05:ea:
                    78:f4:31:8e:6d:5e:f6:ab:a7:1e:02:37:98:47:bd:
                    1c:2e:01:e0:fc:59:32:53:d5:cb:4a:f5:ab:5b:54:
                    6c:b2:08:3c:42:6b:62:b1:b7:99:de:af:9d:94:93:
                    42:f1:a4:06:04:c4:3b:3f:13:80:da:3d:dd:21:e6:
                    61:30:07:0b:8d:c8:6d:b3:1e:d3:5b:ec:c4:53:c5:
                    f8:f5:84:33:f6:06:4d:f4:3f:75:06:0e:47:8f:87:
                    d7:fd:8b:5f:c6:95:01:44:f4:6f:9e:6c:da:86:55:
                    91:14:8c:78:c0:4d:a5:ae:03:99:ed:c5:45:77:e9:
                    a6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D9:29:F5:AD:B5:B2:C3:24:F8:E0:9D:BA:AC:14:0C:69:AD:3E:44
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3133312e302e32382e302f32322d3232203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:93:1a:6c:43:c9:c7:71:48:81:05:62:9d:db:72:15:5c:6a:
         5c:70:b6:5c:64:63:45:eb:d1:6f:38:f9:ca:a7:3e:41:6c:ae:
         b1:83:7b:06:70:8f:e2:af:41:29:da:2d:c9:8b:eb:0a:51:5e:
         0b:9d:3b:2e:91:74:f6:9d:15:20:9f:d8:69:8e:64:56:01:6a:
         6b:ab:d1:8a:d5:c1:c3:c6:0f:0f:02:77:a5:e9:ed:37:93:9c:
         94:38:1c:d7:ec:38:92:06:8a:8f:0a:ba:4f:79:17:e6:75:d6:
         36:af:10:9c:84:dc:8e:6b:e1:eb:e7:12:ab:8c:df:0c:85:c1:
         31:9c:d7:60:f5:bd:e3:17:4e:07:49:e3:ad:4c:c4:6b:a4:94:
         e7:d5:82:0e:b6:48:39:7b:82:b0:6f:3c:3f:cb:2b:5d:b8:b8:
         b6:d8:34:be:d3:d5:25:b5:a2:e3:f5:a9:1d:b8:44:5c:9e:a2:
         fa:91:29:1b:0c:6c:db:49:2c:0a:a1:d5:d3:db:0c:cd:87:f5:
         19:b7:69:e7:84:ba:84:0b:28:6d:5b:fc:dd:b8:6e:07:d6:47:
         59:6f:69:a4:5a:fc:e8:8b:c4:73:d8:ef:be:0f:17:26:ff:22:
         bc:20:5a:09:24:4f:41:a9:fe:08:44:6d:4a:32:f6:73:7b:56:
         0f:7a:66:82
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUBm2Lu6zPnwlCX75Pi1nCQx6ESvcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYxQ0FCNjVCQURBRDc1RkY0OUNGOENFNTRBRTc1NzM3
MUQxQzRBQTAeFw0yNDA0MDQwNDMyNDhaFw0yNTA0MDMwNDM3NDhaMDMxMTAvBgNV
BAMTKDA2RDkyOUY1QURCNUIyQzMyNEY4RTA5REJBQUMxNDBDNjlBRDNFNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAprDGIuM+tZ3UCS90TARgMUsQ
ISDDkvXYwbTPo1g2wNWiUMKKy67PQV2D/G4mCSJeRmcuWEwoRIK49LPwsCXnSvQo
s/CTPjTtFvwOcF19lbWw1pHOc2OWWKF3GWuZkOaVvErKATkwtbX1UTf1lYdklSt+
cpxZzISB6k0/p4Y/26heysMF6nj0MY5tXvarpx4CN5hHvRwuAeD8WTJT1ctK9atb
VGyyCDxCa2Kxt5ner52Uk0LxpAYExDs/E4DaPd0h5mEwBwuNyG2zHtNb7MRTxfj1
hDP2Bk30P3UGDkePh9f9i1/GlQFE9G+ebNqGVZEUjHjATaWuA5ntxUV36aaXAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUBtkp9a21ssMk+OCduqwUDGmtPkQwHwYDVR0j
BBgwFoAUphyrZbra11/0nPjOVK51c3HRxKowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVFmeFJydGhFV3dtMXc3WVNmWUU5V2Q2NDFWMW5hWGRrdUtrQXRDOHFn
YVYvMS9BNjFDQUI2NUJBREFENzVGRjQ5Q0Y4Q0U1NEFFNzU3MzcxRDFDNEFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2MUNBQjY1QkFEQUQ3NUZG
NDlDRjhDRTU0QUU3NTczNzFEMUM0QUEuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlRZnhScnRoRVd3bTF3N1lTZllFOVdkNjQxVjFuYVhka3VLa0F0QzhxZ2FWLzEv
MzEzMzMxMmUzMDJlMzIzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzgzMjMx
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAKDABwwDQYJKoZIhvcNAQELBQADggEBADmTGmxDycdxSIEF
Yp3bchVcalxwtlxkY0Xr0W84+cqnPkFsrrGDewZwj+KvQSnaLcmL6wpRXgudOy6R
dPadFSCf2GmOZFYBamur0YrVwcPGDw8Cd6Xp7TeTnJQ4HNfsOJIGio8Kuk95F+Z1
1javEJyE3I5r4evnEquM3wyFwTGc12D1veMXTgdJ461MxGuklOfVgg62SDl7grBv
PD/LK124uLbYNL7T1SW1ouP1qR24RFyeovqRKRsMbNtJLAqh1dPbDM2H9Rm3aeeE
uoQLKG1b/N24bgfWR1lvaaRa/OiLxHPY774PFyb/IrwgWgkkT0Gp/ghEbUoy9nN7
Vg96ZoI=
-----END CERTIFICATE-----
Generated at Sun Jul 7 10:18:04 2024 by rpki-client on console-fra.rpki-client.org