Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3133382e3131372e3230342e302f32322d3234203d3e203238323031.roa
File:                     3133382e3131372e3230342e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier:          tpwzR8NAg8dW3JYixUNG8a+4nyQ5T/D0Dqy+N9d0Ssg=
Subject key identifier:   64:87:71:FB:AE:C5:37:8E:C8:B7:65:C3:74:3F:CA:8A:31:26:91:35
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       696DCE1E38B1B2A073ADF54C723E871C1756CF12
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3133382e3131372e3230342e302f32322d3234203d3e203238323031.roa
Signing time:             Wed 10 Apr 2024 12:41:41 +0000
ROA not before:           Wed 10 Apr 2024 12:36:41 +0000
ROA not after:            Wed 09 Apr 2025 12:41:41 +0000
asID:                     28201
IP address blocks:        138.117.204.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:27:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:6d:ce:1e:38:b1:b2:a0:73:ad:f5:4c:72:3e:87:1c:17:56:cf:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Apr 10 12:36:41 2024 GMT
            Not After : Apr  9 12:41:41 2025 GMT
        Subject: CN=648771FBAEC5378EC8B765C3743FCA8A31269135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2d:57:0f:83:7d:74:b6:e1:87:29:d9:e2:90:
                    16:cd:a7:7b:37:db:36:9d:f1:2a:f0:a9:7a:30:5b:
                    93:8a:e9:9e:7b:d2:32:1e:48:6b:48:bc:3c:c2:ea:
                    05:57:88:c5:2b:94:72:3e:e4:0f:03:08:af:a0:67:
                    ae:57:a8:a7:af:82:58:dd:09:02:73:41:1d:78:a2:
                    92:af:c8:f7:6c:57:72:7c:d2:5d:81:cc:55:cc:8a:
                    fc:ba:c1:fc:58:ef:be:8f:85:f9:73:88:da:f8:ba:
                    42:4a:c2:ef:9e:5c:93:42:7e:be:27:86:56:97:ea:
                    f4:2f:4c:c9:e9:b7:73:8e:ff:15:cd:ad:50:c5:2b:
                    cc:a9:78:b4:7c:e2:49:d9:17:11:40:7f:aa:04:8b:
                    97:06:f7:b3:e3:aa:33:57:e0:bb:b2:82:5e:87:cc:
                    5a:2f:91:f6:87:81:5f:63:43:8f:1d:dc:8b:00:ce:
                    e2:15:22:b2:2f:7a:fd:f3:5a:98:26:4f:9a:5a:53:
                    04:e9:82:69:4b:9f:34:31:d6:eb:a1:64:9f:c8:4a:
                    f8:3c:be:0c:ff:bd:3b:9b:0a:34:93:24:19:b3:cd:
                    92:8d:2f:39:0a:64:d1:de:23:9e:dc:a4:1c:35:e6:
                    14:45:ab:52:31:52:58:5c:e8:38:d6:97:32:d2:e8:
                    5d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:87:71:FB:AE:C5:37:8E:C8:B7:65:C3:74:3F:CA:8A:31:26:91:35
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3133382e3131372e3230342e302f32322d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:28:32:86:18:91:32:6f:70:87:0c:3e:f9:59:ab:52:52:a0:
         27:4f:b8:69:cb:30:6c:f9:c9:1e:c3:5d:7e:98:9c:3b:07:e4:
         08:66:05:30:76:49:4b:4b:2e:16:79:90:db:64:67:c1:ef:5a:
         c3:73:d9:5c:36:74:a3:c4:72:64:fe:cf:d5:ed:b6:85:e1:88:
         1a:a5:65:dd:ab:e6:e2:83:8f:7b:42:bb:55:55:1d:a1:21:c8:
         ec:01:40:5a:1a:3b:eb:56:19:70:34:92:b8:ca:a3:21:92:6d:
         65:51:1e:15:a5:de:62:7b:e7:fd:4e:ef:c4:f8:b8:88:58:45:
         7c:5d:05:aa:e4:0b:0c:77:2a:92:82:0c:f2:41:69:8d:64:54:
         b7:40:89:8c:10:e9:4b:49:18:b7:64:a6:a1:50:d9:cf:c2:a9:
         de:38:69:0f:75:cd:63:01:f3:89:cc:73:26:d7:d1:2e:d3:94:
         62:5a:8d:ce:a2:68:38:be:85:bb:ae:e8:1d:8e:16:13:0d:23:
         d6:35:1c:da:3d:b7:c4:b9:71:94:42:8a:39:99:e2:1b:c9:4f:
         c7:8c:02:9c:34:60:c9:92:09:9a:a7:30:10:0b:48:26:6b:05:
         1f:6a:e2:7d:28:50:f0:9e:7f:e0:f8:41:3f:28:09:7e:77:36:
         38:ab:3b:ba
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaW3OHjixsqBzrfVMcj6HHBdWzxIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUMxRkU5Mzg3NjQwQTc3N0I3M0Q5NDIxMUQ0QzhGRkE1
QzY2OTMwNDAeFw0yNDA0MTAxMjM2NDFaFw0yNTA0MDkxMjQxNDFaMDMxMTAvBgNV
BAMTKDY0ODc3MUZCQUVDNTM3OEVDOEI3NjVDMzc0M0ZDQThBMzEyNjkxMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxLVcPg310tuGHKdnikBbNp3s3
2zad8SrwqXowW5OK6Z570jIeSGtIvDzC6gVXiMUrlHI+5A8DCK+gZ65XqKevgljd
CQJzQR14opKvyPdsV3J80l2BzFXMivy6wfxY776PhflziNr4ukJKwu+eXJNCfr4n
hlaX6vQvTMnpt3OO/xXNrVDFK8ypeLR84knZFxFAf6oEi5cG97PjqjNX4Luygl6H
zFovkfaHgV9jQ48d3IsAzuIVIrIvev3zWpgmT5paUwTpgmlLnzQx1uuhZJ/ISvg8
vgz/vTubCjSTJBmzzZKNLzkKZNHeI57cpBw15hRFq1IxUlhc6DjWlzLS6F25AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZIdx+67FN47It2XDdD/KijEmkTUwHwYDVR0j
BBgwFoAUrB/pOHZAp3e3PZQhHUyP+lxmkwQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXRnSEZyWXFvdGtucnpHTkhBMjJxUFhBcmJUMjJVc3BUR2NacmlETjZm
Z1UvMC9BQzFGRTkzODc2NDBBNzc3QjczRDk0MjExRDRDOEZGQTVDNjY5MzA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDMUZFOTM4NzY0MEE3NzdC
NzNEOTQyMTFENEM4RkZBNUM2NjkzMDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl0Z0hGcllxb3RrbnJ6R05IQTIycVBYQXJiVDIyVXNwVEdjWnJpRE42ZmdVLzAv
MzEzMzM4MmUzMTMxMzcyZTMyMzAzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzgzMjMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKdcwwDQYJKoZIhvcNAQELBQADggEBADgoMoYY
kTJvcIcMPvlZq1JSoCdPuGnLMGz5yR7DXX6YnDsH5AhmBTB2SUtLLhZ5kNtkZ8Hv
WsNz2Vw2dKPEcmT+z9XttoXhiBqlZd2r5uKDj3tCu1VVHaEhyOwBQFoaO+tWGXA0
krjKoyGSbWVRHhWl3mJ75/1O78T4uIhYRXxdBarkCwx3KpKCDPJBaY1kVLdAiYwQ
6UtJGLdkpqFQ2c/Cqd44aQ91zWMB84nMcybX0S7TlGJajc6iaDi+hbuu6B2OFhMN
I9Y1HNo9t8S5cZRCijmZ4hvJT8eMApw0YMmSCZqnMBALSCZrBR9q4n0oUPCef+D4
QT8oCX53NjirO7o=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:01 2024 by rpki-client on console-ams.rpki-client.org