Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3136382e3232372e382e302f32322d3234203d3e203238323031.roa
File:                     3136382e3232372e382e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier:          /SGgiX4diRDHE3pMpZoL1oQuxwiBFWOs58xjIvs+FP0=
Subject key identifier:   8A:82:AD:33:DB:2A:A1:DB:57:2B:6D:83:41:04:99:1D:36:5D:55:36
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       3F8D7081C1ECA9588210F304321C006B8E8AC715
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3136382e3232372e382e302f32322d3234203d3e203238323031.roa
Signing time:             Wed 10 Apr 2024 12:33:03 +0000
ROA not before:           Wed 10 Apr 2024 12:28:03 +0000
ROA not after:            Wed 09 Apr 2025 12:33:03 +0000
asID:                     28201
IP address blocks:        168.227.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:8d:70:81:c1:ec:a9:58:82:10:f3:04:32:1c:00:6b:8e:8a:c7:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Apr 10 12:28:03 2024 GMT
            Not After : Apr  9 12:33:03 2025 GMT
        Subject: CN=8A82AD33DB2AA1DB572B6D834104991D365D5536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:60:89:d6:ee:01:9b:1f:c2:1e:f9:d9:26:63:
                    ec:45:42:c8:b8:b0:8d:72:17:4d:28:a1:60:90:5a:
                    69:40:1a:20:8c:0a:f4:b9:03:d2:34:3f:be:96:38:
                    bb:3b:43:e5:60:a1:f6:d1:61:8f:c4:5e:0e:56:c0:
                    9d:cb:1b:5d:5a:5b:11:20:25:f4:96:6a:3c:1c:f5:
                    99:3e:7e:ed:dd:23:30:1d:b6:8e:4a:b9:2c:30:72:
                    7f:44:a4:e6:85:b8:f9:ff:e0:1b:ed:7d:3a:5a:28:
                    b4:6d:30:d5:42:e7:97:9c:56:12:d2:34:8c:16:f7:
                    ea:22:59:64:75:90:d3:15:fb:2a:fa:51:41:65:a0:
                    08:fd:89:fe:e4:f0:42:85:c0:f6:42:c1:40:c1:39:
                    9c:9b:18:5a:d3:85:ba:e2:9d:88:b9:e7:1c:06:d6:
                    a6:d9:03:23:7e:ec:9a:d3:16:bf:4c:e6:49:e8:a0:
                    fa:65:e2:54:a3:9d:b4:04:80:d7:fd:70:ab:85:40:
                    54:5d:d0:2b:c6:43:ec:97:83:a5:79:f3:ae:9d:a6:
                    80:c1:80:06:2a:09:a1:97:04:59:55:73:03:3f:a7:
                    08:23:d1:b6:62:18:7d:fa:28:d8:a3:76:d4:90:29:
                    8f:e7:00:e5:64:f3:82:fe:43:d8:70:c5:e3:ab:c4:
                    64:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:82:AD:33:DB:2A:A1:DB:57:2B:6D:83:41:04:99:1D:36:5D:55:36
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3136382e3232372e382e302f32322d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:ed:92:5f:45:dd:35:09:1e:11:db:e4:09:74:c4:2f:26:31:
         76:3b:e7:53:62:86:52:7a:39:c7:c9:0b:70:a8:90:15:29:3f:
         5f:f2:ad:dd:2e:5a:ef:31:cd:b6:d2:6a:9b:39:a5:78:d2:86:
         b9:ba:7e:a4:d1:e9:69:64:fc:9c:50:6a:54:e7:6f:32:17:eb:
         87:53:59:52:f8:62:a1:00:15:4b:c2:75:a8:9e:b5:74:f9:4b:
         0e:87:ff:75:03:b7:97:6b:66:bb:88:d3:a3:b2:e6:c9:d8:a1:
         d5:28:b5:13:56:25:67:61:e8:9c:d6:1c:25:e6:74:aa:04:b8:
         4a:c5:96:cd:a0:5d:f8:f4:db:2a:49:4a:b5:28:c7:3a:b1:31:
         06:1e:ef:b8:68:56:79:25:6f:4f:11:54:fe:a8:e4:98:90:5e:
         ae:81:c8:ef:5c:be:51:44:fa:92:36:a4:07:89:50:3b:f8:5f:
         bb:1b:09:c8:3b:f3:e9:0a:b9:71:13:82:af:40:3c:54:52:69:
         b2:64:26:8a:21:2a:47:89:42:30:b7:0d:0b:87:64:c0:ab:e1:
         e6:7d:5a:b5:cd:58:47:cf:89:c5:30:28:ff:e7:76:59:cf:36:
         0e:93:f2:6e:09:ee:1e:9f:38:ab:f9:c6:7b:61:c3:4b:6c:a1:
         d6:45:19:6b
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUP41wgcHsqViCEPMEMhwAa46KxxUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUMxRkU5Mzg3NjQwQTc3N0I3M0Q5NDIxMUQ0QzhGRkE1
QzY2OTMwNDAeFw0yNDA0MTAxMjI4MDNaFw0yNTA0MDkxMjMzMDNaMDMxMTAvBgNV
BAMTKDhBODJBRDMzREIyQUExREI1NzJCNkQ4MzQxMDQ5OTFEMzY1RDU1MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+YInW7gGbH8Ie+dkmY+xFQsi4
sI1yF00ooWCQWmlAGiCMCvS5A9I0P76WOLs7Q+VgofbRYY/EXg5WwJ3LG11aWxEg
JfSWajwc9Zk+fu3dIzAdto5KuSwwcn9EpOaFuPn/4BvtfTpaKLRtMNVC55ecVhLS
NIwW9+oiWWR1kNMV+yr6UUFloAj9if7k8EKFwPZCwUDBOZybGFrThbrinYi55xwG
1qbZAyN+7JrTFr9M5knooPpl4lSjnbQEgNf9cKuFQFRd0CvGQ+yXg6V5866dpoDB
gAYqCaGXBFlVcwM/pwgj0bZiGH36KNijdtSQKY/nAOVk84L+Q9hwxeOrxGRPAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUioKtM9sqodtXK22DQQSZHTZdVTYwHwYDVR0j
BBgwFoAUrB/pOHZAp3e3PZQhHUyP+lxmkwQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXRnSEZyWXFvdGtucnpHTkhBMjJxUFhBcmJUMjJVc3BUR2NacmlETjZm
Z1UvMC9BQzFGRTkzODc2NDBBNzc3QjczRDk0MjExRDRDOEZGQTVDNjY5MzA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDMUZFOTM4NzY0MEE3NzdC
NzNEOTQyMTFENEM4RkZBNUM2NjkzMDQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl0Z0hGcllxb3RrbnJ6R05IQTIycVBYQXJiVDIyVXNwVEdjWnJpRE42ZmdVLzAv
MzEzNjM4MmUzMjMyMzcyZTM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzODMy
MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAqjjCDANBgkqhkiG9w0BAQsFAAOCAQEAae2SX0XdNQke
EdvkCXTELyYxdjvnU2KGUno5x8kLcKiQFSk/X/Kt3S5a7zHNttJqmzmleNKGubp+
pNHpaWT8nFBqVOdvMhfrh1NZUvhioQAVS8J1qJ61dPlLDof/dQO3l2tmu4jTo7Lm
ydih1Si1E1YlZ2HonNYcJeZ0qgS4SsWWzaBd+PTbKklKtSjHOrExBh7vuGhWeSVv
TxFU/qjkmJBeroHI71y+UUT6kjakB4lQO/hfuxsJyDvz6Qq5cROCr0A8VFJpsmQm
iiEqR4lCMLcNC4dkwKvh5n1atc1YR8+JxTAo/+d2Wc82DpPybgnuHp84q/nGe2HD
S2yh1kUZaw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:40 2024 by rpki-client on console-fra.rpki-client.org