Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137302e3233312e362e302f32332d3233203d3e203532393737.roa
File:                     3137302e3233312e362e302f32332d3233203d3e203532393737.roa (raw, json)
Hash identifier:          0oUbhLO9H651QRbXanIkWjBe9UTZqnIszVWel+4Hswg=
Subject key identifier:   1E:3E:82:62:74:1B:55:E3:54:44:AF:AE:AA:F7:F0:AF:F3:FA:D8:EE
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       6B10E4FFAE3268F937F84735BA27DEFC151A7E3C
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137302e3233312e362e302f32332d3233203d3e203532393737.roa
Signing time:             Wed 03 Apr 2024 18:30:53 +0000
ROA not before:           Wed 03 Apr 2024 18:25:53 +0000
ROA not after:            Wed 02 Apr 2025 18:30:53 +0000
asID:                     52977
IP address blocks:        170.231.6.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:10:e4:ff:ae:32:68:f9:37:f8:47:35:ba:27:de:fc:15:1a:7e:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Apr  3 18:25:53 2024 GMT
            Not After : Apr  2 18:30:53 2025 GMT
        Subject: CN=1E3E8262741B55E35444AFAEAAF7F0AFF3FAD8EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d4:70:a2:9f:ec:5f:a4:bb:6a:0f:41:5c:9a:
                    0e:3d:37:95:3e:85:99:13:f5:fb:a8:27:b0:a4:9a:
                    48:47:eb:a1:02:81:72:6a:dd:03:52:7e:00:50:22:
                    ff:17:a9:3c:9e:8a:96:b0:d2:7f:6e:67:1f:26:9a:
                    06:71:4a:ca:c9:e0:5d:54:eb:c5:b1:88:d2:cf:57:
                    f1:3c:d7:09:dc:93:6c:1e:d6:cd:14:8b:0b:da:ce:
                    d3:eb:8d:a5:d6:83:8e:a1:e4:12:68:96:84:4b:f6:
                    02:6d:eb:52:61:34:a5:92:1d:f8:1e:2b:3b:67:83:
                    8f:09:01:29:90:d4:a4:ce:ac:c9:22:93:66:ef:f1:
                    ba:7c:e9:20:73:75:e5:62:54:e4:71:15:cc:2a:f0:
                    02:d9:21:05:79:81:e7:42:e7:6b:d7:7f:65:9e:23:
                    c5:37:24:10:1b:04:d4:ff:aa:bb:35:6a:e9:26:7c:
                    99:ec:f2:e9:ac:38:8f:75:0e:fe:7e:01:cf:a7:7c:
                    5c:e3:b6:83:9f:31:ca:de:75:36:52:f3:59:9b:68:
                    cc:7b:5a:d0:2a:ba:7d:e1:f7:36:29:da:06:d8:23:
                    0f:1f:f4:db:bf:42:26:cd:26:ba:09:e6:02:8a:64:
                    86:57:e7:4c:1f:b0:c7:91:2c:bb:b3:72:1a:b7:17:
                    41:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3E:82:62:74:1B:55:E3:54:44:AF:AE:AA:F7:F0:AF:F3:FA:D8:EE
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/3137302e3233312e362e302f32332d3233203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:ae:4a:4b:11:ed:ac:23:89:bd:14:be:2b:41:e8:d7:2c:ce:
         a3:15:59:c7:38:40:31:dd:4a:38:91:b6:87:ac:0f:1f:b9:80:
         19:58:e1:a5:46:9b:38:a2:38:5b:8f:3f:fb:0c:78:43:74:ef:
         d6:45:56:85:5b:aa:d8:0f:01:be:83:51:fe:5d:e4:b9:fc:61:
         48:30:ab:04:05:1d:87:70:33:59:d6:45:5f:2c:b5:ee:d5:b2:
         2d:02:2f:d1:29:90:63:4d:28:07:b5:96:fd:30:1f:fd:a2:5b:
         d4:67:73:2f:c8:40:7b:ac:a0:b8:cc:b9:b1:1b:5e:c5:02:eb:
         f8:e7:62:d3:ba:8f:b6:bf:13:db:22:cc:73:da:4d:16:dc:ec:
         88:98:e5:79:5f:29:aa:a1:ae:6f:ac:1b:34:0c:51:3a:d3:81:
         31:f2:9d:3d:92:e8:94:cd:0d:e3:a8:7d:67:1a:b2:4c:7f:1e:
         d3:76:d5:6e:88:61:9f:ce:3f:bc:29:b9:9f:32:a9:15:1d:0c:
         b9:66:b5:d2:f4:50:9b:2c:82:a4:e5:f0:ba:5d:18:8d:3e:a6:
         fa:5b:f4:2a:7a:fb:ba:4b:0a:db:0a:b4:6e:d1:e5:53:09:11:
         d3:78:e2:50:05:0c:58:6f:1c:77:04:c1:d9:fe:51:3e:03:d9:
         ee:1f:f0:1e
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUaxDk/64yaPk3+Ec1uife/BUafjwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNCQzREQzc1MDBDMjRFQjdCRTVEMUIzMjM1QTdDRjBF
RTdDQzUwRTAeFw0yNDA0MDMxODI1NTNaFw0yNTA0MDIxODMwNTNaMDMxMTAvBgNV
BAMTKDFFM0U4MjYyNzQxQjU1RTM1NDQ0QUZBRUFBRjdGMEFGRjNGQUQ4RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH1HCin+xfpLtqD0Fcmg49N5U+
hZkT9fuoJ7CkmkhH66ECgXJq3QNSfgBQIv8XqTyeipaw0n9uZx8mmgZxSsrJ4F1U
68WxiNLPV/E81wnck2we1s0UiwvaztPrjaXWg46h5BJoloRL9gJt61JhNKWSHfge
Kztng48JASmQ1KTOrMkik2bv8bp86SBzdeViVORxFcwq8ALZIQV5gedC52vXf2We
I8U3JBAbBNT/qrs1aukmfJns8umsOI91Dv5+Ac+nfFzjtoOfMcredTZS81mbaMx7
WtAqun3h9zYp2gbYIw8f9Nu/QibNJroJ5gKKZIZX50wfsMeRLLuzchq3F0HvAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUHj6CYnQbVeNURK+uqvfwr/P62O4wHwYDVR0j
BBgwFoAUnLxNx1AMJOt75dGzI1p88O58xQ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTl6dGV3SmRGQjJ1WkNIWWlwZ244Ylp0RjZFN2NDWjhEdTFzeEN0aEYy
cHAvMS85Q0JDNERDNzUwMEMyNEVCN0JFNUQxQjMyMzVBN0NGMEVFN0NDNTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDQkM0REM3NTAwQzI0RUI3
QkU1RDFCMzIzNUE3Q0YwRUU3Q0M1MEUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E5enRld0pkRkIydVpDSFlpcGduOGJadEY2RTdjQ1o4RHUxc3hDdGhGMnBwLzEv
MzEzNzMwMmUzMjMzMzEyZTM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzMjM5
MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAarnBjANBgkqhkiG9w0BAQsFAAOCAQEASa5KSxHtrCOJ
vRS+K0Ho1yzOoxVZxzhAMd1KOJG2h6wPH7mAGVjhpUabOKI4W48/+wx4Q3Tv1kVW
hVuq2A8BvoNR/l3kufxhSDCrBAUdh3AzWdZFXyy17tWyLQIv0SmQY00oB7WW/TAf
/aJb1GdzL8hAe6yguMy5sRtexQLr+Odi07qPtr8T2yLMc9pNFtzsiJjleV8pqqGu
b6wbNAxROtOBMfKdPZLolM0N46h9ZxqyTH8e03bVbohhn84/vCm5nzKpFR0MuWa1
0vRQmyyCpOXwul0YjT6m+lv0Knr7uksK2wq0btHlUwkR03jiUAUMWG8cdwTB2f5R
PgPZ7h/wHg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:18 2024 by rpki-client on console-fra.rpki-client.org