Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137302e3233312e342e302f32332d3233203d3e203532393737.roa
File:                     3137302e3233312e342e302f32332d3233203d3e203532393737.roa (raw, json)
Hash identifier:          /kqFimzxLARrjE7Mz571GJatwQtvyUuZJCAspyJu1y8=
Subject key identifier:   D3:DA:B6:2B:2C:8F:DB:A0:15:63:BD:E3:DE:5F:70:7B:55:8D:07:76
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       7DFE2466DD83C2E241444B438F83755BDD5E4C9D
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137302e3233312e342e302f32332d3233203d3e203532393737.roa
Signing time:             Wed 03 Apr 2024 18:30:50 +0000
ROA not before:           Wed 03 Apr 2024 18:25:50 +0000
ROA not after:            Wed 02 Apr 2025 18:30:50 +0000
asID:                     52977
IP address blocks:        170.231.4.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 17:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:fe:24:66:dd:83:c2:e2:41:44:4b:43:8f:83:75:5b:dd:5e:4c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Apr  3 18:25:50 2024 GMT
            Not After : Apr  2 18:30:50 2025 GMT
        Subject: CN=D3DAB62B2C8FDBA01563BDE3DE5F707B558D0776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:90:b5:f6:4c:ce:87:b1:f7:cd:88:2e:cf:51:
                    4c:f9:32:99:fb:9b:85:28:98:3d:e4:27:25:fe:14:
                    1a:5b:7a:4c:2a:fe:96:d6:4e:f8:63:e0:ce:e6:ce:
                    3a:76:89:3a:17:0a:41:e3:f0:5b:ed:43:a1:88:91:
                    12:2b:07:3f:05:85:e4:6a:58:81:d5:b4:20:7f:40:
                    c5:41:1c:7b:34:e2:0b:6d:7e:8c:a4:c0:36:71:6b:
                    b8:3d:40:6a:17:03:68:ae:29:dc:7a:94:3f:35:b1:
                    c0:c7:fd:9a:c9:84:f1:c6:38:53:41:a5:b0:3b:69:
                    c4:1b:53:8b:9f:b9:16:68:d1:bd:95:6f:f6:45:07:
                    43:29:02:b9:f2:0f:0f:83:bc:52:74:0f:b3:12:92:
                    f0:3a:83:49:67:b4:88:ab:23:51:01:e1:f1:c6:cf:
                    c4:0c:04:1e:8c:78:f6:f5:ca:a5:b9:2b:da:8c:43:
                    60:fb:c7:4a:e8:09:53:7c:9e:7f:a7:54:e6:b3:2a:
                    fb:e2:5d:03:2b:0a:61:58:67:9a:40:15:aa:25:ff:
                    ea:00:9c:26:90:21:78:8f:e1:22:36:ed:eb:e1:4f:
                    37:00:ce:10:8f:14:14:95:07:da:c8:39:26:cd:98:
                    76:7f:85:dc:ba:a5:53:ac:9c:01:a9:21:f6:88:f9:
                    69:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DA:B6:2B:2C:8F:DB:A0:15:63:BD:E3:DE:5F:70:7B:55:8D:07:76
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137302e3233312e342e302f32332d3233203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:67:8c:8f:9b:08:f7:c8:0e:e8:b9:33:e4:c2:ed:2e:dc:64:
         27:3b:54:b1:e9:90:fd:90:15:27:66:86:de:1c:77:d4:db:78:
         88:2c:3c:86:ce:e2:ad:54:54:c4:b4:b2:f1:73:e1:17:b9:1b:
         cf:1e:f8:2d:f1:e2:33:e3:74:33:ed:99:c7:1f:20:7f:ed:77:
         fe:ad:b0:b1:8a:d4:6d:61:f4:53:b0:78:d5:0f:d9:4c:30:4e:
         48:eb:db:f3:ff:60:fb:5c:dc:ae:cb:d5:67:c4:6f:77:f1:89:
         38:03:56:ba:6e:fa:cf:e3:2b:53:30:94:2f:ca:b8:9a:47:ff:
         0b:32:78:17:ef:2c:64:c1:c0:46:2c:ca:ae:e7:8b:b2:30:6b:
         e3:21:60:4b:5d:4a:62:4b:af:d4:cd:41:8f:5a:62:f8:16:e8:
         6b:f0:52:ec:9c:b2:34:fe:49:dc:71:a0:07:3b:69:09:f5:4a:
         d1:65:a7:1b:60:63:65:49:90:d5:f3:6b:1b:8b:45:34:5c:8a:
         4e:0d:ba:11:09:1d:a7:fc:c9:a6:a3:55:12:ed:8e:bf:71:69:
         18:d4:22:11:32:6c:e4:bd:2d:0b:ff:c1:74:cf:03:3c:2f:7d:
         de:db:9f:68:a4:c4:ba:90:f3:ee:5d:ba:5a:0c:b8:c3:14:d3:
         9a:97:e9:63
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUff4kZt2DwuJBREtDj4N1W91eTJ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNCQzREQzc1MDBDMjRFQjdCRTVEMUIzMjM1QTdDRjBF
RTdDQzUwRTAeFw0yNDA0MDMxODI1NTBaFw0yNTA0MDIxODMwNTBaMDMxMTAvBgNV
BAMTKEQzREFCNjJCMkM4RkRCQTAxNTYzQkRFM0RFNUY3MDdCNTU4RDA3NzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCkLX2TM6HsffNiC7PUUz5Mpn7
m4UomD3kJyX+FBpbekwq/pbWTvhj4M7mzjp2iToXCkHj8FvtQ6GIkRIrBz8FheRq
WIHVtCB/QMVBHHs04gttfoykwDZxa7g9QGoXA2iuKdx6lD81scDH/ZrJhPHGOFNB
pbA7acQbU4ufuRZo0b2Vb/ZFB0MpArnyDw+DvFJ0D7MSkvA6g0lntIirI1EB4fHG
z8QMBB6MePb1yqW5K9qMQ2D7x0roCVN8nn+nVOazKvviXQMrCmFYZ5pAFaol/+oA
nCaQIXiP4SI27evhTzcAzhCPFBSVB9rIOSbNmHZ/hdy6pVOsnAGpIfaI+WkBAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU09q2KyyP26AVY73j3l9we1WNB3YwHwYDVR0j
BBgwFoAUnLxNx1AMJOt75dGzI1p88O58xQ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTl6dGV3SmRGQjJ1WkNIWWlwZ244Ylp0RjZFN2NDWjhEdTFzeEN0aEYy
cHAvMS85Q0JDNERDNzUwMEMyNEVCN0JFNUQxQjMyMzVBN0NGMEVFN0NDNTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDQkM0REM3NTAwQzI0RUI3
QkU1RDFCMzIzNUE3Q0YwRUU3Q0M1MEUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E5enRld0pkRkIydVpDSFlpcGduOGJadEY2RTdjQ1o4RHUxc3hDdGhGMnBwLzEv
MzEzNzMwMmUzMjMzMzEyZTM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzMjM5
MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAarnBDANBgkqhkiG9w0BAQsFAAOCAQEAPGeMj5sI98gO
6Lkz5MLtLtxkJztUsemQ/ZAVJ2aG3hx31Nt4iCw8hs7irVRUxLSy8XPhF7kbzx74
LfHiM+N0M+2Zxx8gf+13/q2wsYrUbWH0U7B41Q/ZTDBOSOvb8/9g+1zcrsvVZ8Rv
d/GJOANWum76z+MrUzCUL8q4mkf/CzJ4F+8sZMHARizKrueLsjBr4yFgS11KYkuv
1M1Bj1pi+Bboa/BS7JyyNP5J3HGgBztpCfVK0WWnG2BjZUmQ1fNrG4tFNFyKTg26
EQkdp/zJpqNVEu2Ov3FpGNQiETJs5L0tC//BdM8DPC993tufaKTEupDz7l26Wgy4
wxTTmpfpYw==
-----END CERTIFICATE-----
Generated at Sat Sep 28 19:13:56 2024 by rpki-client on console-ams.rpki-client.org