Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137372e3135322e3136302e302f32302d3234203d3e203238323031.roa
File:                     3137372e3135322e3136302e302f32302d3234203d3e203238323031.roa (raw, json)
Hash identifier:          wBp24YLDTn9Otf3sH8mSJuxESccn8dgbxiObgA6S2sQ=
Subject key identifier:   28:9E:BF:92:DD:26:3F:02:4A:F0:64:2B:35:EF:E6:5E:34:9E:53:4D
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       4FC811A1ACE3B614846F980E3D680DD2AD229673
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137372e3135322e3136302e302f32302d3234203d3e203238323031.roa
Signing time:             Wed 10 Apr 2024 12:31:45 +0000
ROA not before:           Wed 10 Apr 2024 12:26:45 +0000
ROA not after:            Wed 09 Apr 2025 12:31:45 +0000
asID:                     28201
IP address blocks:        177.152.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:c8:11:a1:ac:e3:b6:14:84:6f:98:0e:3d:68:0d:d2:ad:22:96:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Apr 10 12:26:45 2024 GMT
            Not After : Apr  9 12:31:45 2025 GMT
        Subject: CN=289EBF92DD263F024AF0642B35EFE65E349E534D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6d:28:0c:ad:2c:fc:93:8a:57:31:5f:d8:60:
                    aa:6e:dd:a8:c4:77:52:89:10:50:f9:e6:9d:10:62:
                    91:ce:29:e1:e4:9a:b8:3a:9c:85:ac:5a:42:32:60:
                    de:d6:fa:fb:49:ff:e7:06:fc:2a:4d:a2:8f:ed:08:
                    b7:2e:ee:52:0b:33:0e:83:f8:df:df:92:b0:05:e1:
                    09:db:1e:df:94:58:3f:f3:42:0b:a4:cb:40:fb:49:
                    bf:94:05:ee:4c:68:2c:b3:d7:f0:6d:e4:61:64:f9:
                    4c:a9:58:ba:ce:37:d9:d1:9f:4e:af:e2:06:a6:91:
                    89:46:de:0f:16:3e:a9:38:32:c3:59:1b:0e:95:90:
                    03:c0:28:bf:f9:40:33:96:b8:d2:2d:0a:f8:03:ea:
                    12:20:2a:22:22:e9:b1:1f:cd:53:ec:c9:4d:61:36:
                    94:bf:52:5e:8b:5b:17:56:f5:0d:3d:a9:c5:b0:48:
                    a0:90:9d:a1:56:2e:29:29:50:e6:e5:14:a9:b5:5b:
                    f5:01:c5:2a:e5:78:7e:74:b4:0e:d9:e8:a2:cf:86:
                    bf:13:61:e3:da:19:da:c8:ca:05:95:96:a4:11:80:
                    00:aa:65:44:db:10:44:55:c0:cd:06:cf:22:d1:03:
                    0a:ec:79:6b:36:e8:da:4a:6c:52:e9:c4:15:3e:1c:
                    51:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:9E:BF:92:DD:26:3F:02:4A:F0:64:2B:35:EF:E6:5E:34:9E:53:4D
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137372e3135322e3136302e302f32302d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         67:3c:95:48:1b:dd:b0:1e:3b:76:d1:cf:d7:9e:c9:9c:d2:9b:
         2e:90:fd:3c:7f:27:6c:4a:78:36:a7:c3:e1:e5:b8:d7:03:74:
         e4:52:62:9a:76:ad:85:6e:b2:8a:67:c6:5e:65:e7:39:0b:a4:
         61:87:90:5a:7f:28:c0:2a:43:88:3c:83:0f:90:32:b5:5b:e6:
         71:32:58:51:e5:bd:3c:9b:a5:ad:7b:be:b8:91:e9:79:c2:29:
         72:d0:55:a1:2f:78:32:f2:94:bd:c8:07:4a:c0:5a:ae:ff:91:
         41:24:2f:79:2c:10:32:7d:4e:17:e1:ce:9a:0f:5a:ea:35:7a:
         2d:ef:70:b5:a7:48:b9:19:98:16:3b:d8:21:fc:40:bb:a2:1f:
         63:f3:5b:27:38:cc:01:e2:4d:3a:dc:4e:49:ed:af:34:a4:34:
         9e:9f:f7:ca:89:5e:05:11:e6:25:25:05:f3:a5:58:02:cb:d8:
         58:ee:af:c0:86:fb:3d:8f:85:c7:73:b1:4f:bb:7e:7b:c5:61:
         f1:ec:85:34:b4:a5:8f:9f:26:5f:41:16:75:c9:e4:70:34:b2:
         20:cb:0b:06:21:07:07:14:e6:b9:3f:07:5c:70:5b:4d:ec:39:
         1c:20:9a:ae:bf:33:0c:3b:3e:ab:85:e9:19:b0:fb:3e:9a:9a:
         2a:df:a3:19
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUT8gRoazjthSEb5gOPWgN0q0ilnMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUMxRkU5Mzg3NjQwQTc3N0I3M0Q5NDIxMUQ0QzhGRkE1
QzY2OTMwNDAeFw0yNDA0MTAxMjI2NDVaFw0yNTA0MDkxMjMxNDVaMDMxMTAvBgNV
BAMTKDI4OUVCRjkyREQyNjNGMDI0QUYwNjQyQjM1RUZFNjVFMzQ5RTUzNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6bSgMrSz8k4pXMV/YYKpu3ajE
d1KJEFD55p0QYpHOKeHkmrg6nIWsWkIyYN7W+vtJ/+cG/CpNoo/tCLcu7lILMw6D
+N/fkrAF4QnbHt+UWD/zQguky0D7Sb+UBe5MaCyz1/Bt5GFk+UypWLrON9nRn06v
4gamkYlG3g8WPqk4MsNZGw6VkAPAKL/5QDOWuNItCvgD6hIgKiIi6bEfzVPsyU1h
NpS/Ul6LWxdW9Q09qcWwSKCQnaFWLikpUOblFKm1W/UBxSrleH50tA7Z6KLPhr8T
YePaGdrIygWVlqQRgACqZUTbEERVwM0GzyLRAwrseWs26NpKbFLpxBU+HFFlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKJ6/kt0mPwJK8GQrNe/mXjSeU00wHwYDVR0j
BBgwFoAUrB/pOHZAp3e3PZQhHUyP+lxmkwQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXRnSEZyWXFvdGtucnpHTkhBMjJxUFhBcmJUMjJVc3BUR2NacmlETjZm
Z1UvMC9BQzFGRTkzODc2NDBBNzc3QjczRDk0MjExRDRDOEZGQTVDNjY5MzA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDMUZFOTM4NzY0MEE3NzdC
NzNEOTQyMTFENEM4RkZBNUM2NjkzMDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl0Z0hGcllxb3RrbnJ6R05IQTIycVBYQXJiVDIyVXNwVEdjWnJpRE42ZmdVLzAv
MzEzNzM3MmUzMTM1MzIyZTMxMzYzMDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMy
MzgzMjMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASxmKAwDQYJKoZIhvcNAQELBQADggEBAGc8lUgb
3bAeO3bRz9eeyZzSmy6Q/Tx/J2xKeDanw+HluNcDdORSYpp2rYVusopnxl5l5zkL
pGGHkFp/KMAqQ4g8gw+QMrVb5nEyWFHlvTybpa17vriR6XnCKXLQVaEveDLylL3I
B0rAWq7/kUEkL3ksEDJ9ThfhzpoPWuo1ei3vcLWnSLkZmBY72CH8QLuiH2PzWyc4
zAHiTTrcTkntrzSkNJ6f98qJXgUR5iUlBfOlWALL2Fjur8CG+z2PhcdzsU+7fnvF
YfHshTS0pY+fJl9BFnXJ5HA0siDLCwYhBwcU5rk/B1xwW03sORwgmq6/Mww7PquF
6Rmw+z6amirfoxk=
-----END CERTIFICATE-----
Generated at Sat Sep 28 10:31:31 2024 by rpki-client on console-fra.rpki-client.org