Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137302e3233332e34382e302f32322d3232203d3e203238323130.roa
File:                     3137302e3233332e34382e302f32322d3232203d3e203238323130.roa (raw, json)
Hash identifier:          Hcw+6FMXiigYTaaGYFJpHLOPR8gzXkCOmPxiC5FVQSE=
Subject key identifier:   0E:F8:CE:8C:FF:1C:46:8B:DD:84:81:94:0F:04:C3:AB:7C:99:7D:C5
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       1CDACBBE31A79FD0516A0499C4ADA821858D936A
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137302e3233332e34382e302f32322d3232203d3e203238323130.roa
Signing time:             Thu 04 Apr 2024 04:37:49 +0000
ROA not before:           Thu 04 Apr 2024 04:32:49 +0000
ROA not after:            Thu 03 Apr 2025 04:37:49 +0000
asID:                     28210
IP address blocks:        170.233.48.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:da:cb:be:31:a7:9f:d0:51:6a:04:99:c4:ad:a8:21:85:8d:93:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Apr  4 04:32:49 2024 GMT
            Not After : Apr  3 04:37:49 2025 GMT
        Subject: CN=0EF8CE8CFF1C468BDD8481940F04C3AB7C997DC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:eb:2a:71:bf:da:af:30:db:69:34:b5:09:91:
                    e3:97:7f:37:f1:9b:93:21:f0:f7:27:d0:6b:fd:b9:
                    28:8b:ea:cc:1a:c8:fb:e7:81:69:3a:c8:49:c1:32:
                    51:8d:be:47:36:ac:82:4f:30:3e:15:72:56:62:79:
                    21:c2:40:51:58:a1:98:0b:b8:eb:50:0a:5c:fd:1e:
                    c4:83:17:a0:05:89:10:c7:64:c6:09:4f:a4:11:a5:
                    7e:9b:db:0d:06:69:2a:0a:cf:da:cb:18:f7:3b:f3:
                    83:48:8b:ad:e1:9b:a2:84:88:93:15:7b:09:22:aa:
                    8b:d6:a8:12:d1:d1:0d:d0:04:c5:b4:1f:b2:b3:2e:
                    cf:d5:a3:d1:10:4b:90:e2:b8:f3:82:02:41:50:fe:
                    14:d6:a4:99:62:a3:ed:95:3a:e2:9f:23:2b:fa:a7:
                    06:dc:d3:80:96:d1:28:00:ff:ea:06:da:c6:fc:b6:
                    bf:b9:be:52:27:c0:cb:db:80:a5:7f:b0:07:9a:32:
                    0f:c9:da:df:f6:5b:1e:4d:95:b4:c3:a6:c7:43:68:
                    ca:70:43:46:94:3b:e3:9c:55:c1:c5:fc:9c:08:e3:
                    b5:8c:41:e5:0c:e6:fe:6b:5f:24:55:6e:b1:60:73:
                    ae:f5:a6:6a:1d:18:92:7d:fe:53:76:e8:2e:21:24:
                    3f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F8:CE:8C:FF:1C:46:8B:DD:84:81:94:0F:04:C3:AB:7C:99:7D:C5
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3137302e3233332e34382e302f32322d3232203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:d2:6e:a0:4e:b6:3d:1b:a1:9c:f8:da:92:b0:f0:70:7b:d4:
         56:11:83:7d:30:20:17:e9:6a:75:3d:13:51:6c:3e:8b:ef:f6:
         57:f4:d8:d7:4c:97:b5:d0:2f:13:2f:5c:ce:d9:f5:9a:0b:72:
         f6:6f:17:b8:50:2b:cb:89:d3:c7:62:17:6b:76:d6:5d:ae:07:
         0b:b0:82:7c:eb:12:a7:6f:26:72:e2:f9:90:2b:43:b1:82:f0:
         7d:d7:b1:59:65:9c:92:04:b5:50:16:bf:7c:02:03:46:52:9d:
         c4:c5:fb:d3:ca:c4:34:95:76:5c:20:14:db:38:2a:7d:04:16:
         6a:95:0d:57:88:65:f5:de:3c:22:7e:ea:2a:7a:a7:ed:6b:cf:
         9a:33:3d:b0:47:05:96:65:ae:ba:2d:cd:e6:01:cf:24:94:9f:
         94:97:35:10:e5:3e:69:13:16:82:6a:27:71:a5:67:30:5d:86:
         b5:ec:71:48:d1:6c:7b:11:f1:c9:62:40:58:ec:7b:af:e5:18:
         fb:fa:3f:5f:a6:2f:07:4c:53:34:c9:b4:b6:a2:8a:c6:61:47:
         d4:4b:06:1e:66:61:e4:23:d0:de:8f:c8:6f:f1:1c:8e:4a:b7:
         f9:6c:76:15:64:ba:c6:63:a2:55:fc:5d:a8:f7:40:f7:58:ef:
         75:a8:fe:9f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHNrLvjGnn9BRagSZxK2oIYWNk2owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYxQ0FCNjVCQURBRDc1RkY0OUNGOENFNTRBRTc1NzM3
MUQxQzRBQTAeFw0yNDA0MDQwNDMyNDlaFw0yNTA0MDMwNDM3NDlaMDMxMTAvBgNV
BAMTKDBFRjhDRThDRkYxQzQ2OEJERDg0ODE5NDBGMDRDM0FCN0M5OTdEQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc6ypxv9qvMNtpNLUJkeOXfzfx
m5Mh8Pcn0Gv9uSiL6swayPvngWk6yEnBMlGNvkc2rIJPMD4VclZieSHCQFFYoZgL
uOtQClz9HsSDF6AFiRDHZMYJT6QRpX6b2w0GaSoKz9rLGPc784NIi63hm6KEiJMV
ewkiqovWqBLR0Q3QBMW0H7KzLs/Vo9EQS5DiuPOCAkFQ/hTWpJlio+2VOuKfIyv6
pwbc04CW0SgA/+oG2sb8tr+5vlInwMvbgKV/sAeaMg/J2t/2Wx5NlbTDpsdDaMpw
Q0aUO+OcVcHF/JwI47WMQeUM5v5rXyRVbrFgc671pmodGJJ9/lN26C4hJD8vAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUDvjOjP8cRovdhIGUDwTDq3yZfcUwHwYDVR0j
BBgwFoAUphyrZbra11/0nPjOVK51c3HRxKowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVFmeFJydGhFV3dtMXc3WVNmWUU5V2Q2NDFWMW5hWGRrdUtrQXRDOHFn
YVYvMS9BNjFDQUI2NUJBREFENzVGRjQ5Q0Y4Q0U1NEFFNzU3MzcxRDFDNEFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2MUNBQjY1QkFEQUQ3NUZG
NDlDRjhDRTU0QUU3NTczNzFEMUM0QUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlRZnhScnRoRVd3bTF3N1lTZllFOVdkNjQxVjFuYVhka3VLa0F0QzhxZ2FWLzEv
MzEzNzMwMmUzMjMzMzMyZTM0MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM4
MzIzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqukwMA0GCSqGSIb3DQEBCwUAA4IBAQAN0m6gTrY9
G6Gc+NqSsPBwe9RWEYN9MCAX6Wp1PRNRbD6L7/ZX9NjXTJe10C8TL1zO2fWaC3L2
bxe4UCvLidPHYhdrdtZdrgcLsIJ86xKnbyZy4vmQK0OxgvB917FZZZySBLVQFr98
AgNGUp3ExfvTysQ0lXZcIBTbOCp9BBZqlQ1XiGX13jwifuoqeqfta8+aMz2wRwWW
Za66Lc3mAc8klJ+UlzUQ5T5pExaCaidxpWcwXYa17HFI0Wx7EfHJYkBY7Huv5Rj7
+j9fpi8HTFM0ybS2oorGYUfUSwYeZmHkI9Dej8hv8RyOSrf5bHYVZLrGY6JV/F2o
90D3WO91qP6f
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:09 2024 by rpki-client on console-fra.rpki-client.org