Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3133312e3130302e3137322e302f32322d3232203d3e203232313737.roa
File:                     3133312e3130302e3137322e302f32322d3232203d3e203232313737.roa (raw, json)
Hash identifier:          Aebr7xtxLj7NoiSS1oJShpsulNOwq91Q6CE68s3dxjA=
Subject key identifier:   EE:27:D1:31:C6:37:62:C4:48:3E:E7:AD:FB:42:F6:B2:6D:8F:62:3D
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       14B6CE8C2D7EE6624586E59A0301B452C4360DDF
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3133312e3130302e3137322e302f32322d3232203d3e203232313737.roa
Signing time:             Thu 04 Apr 2024 03:30:21 +0000
ROA not before:           Thu 04 Apr 2024 03:25:21 +0000
ROA not after:            Thu 03 Apr 2025 03:30:21 +0000
asID:                     22177
IP address blocks:        131.100.172.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b6:ce:8c:2d:7e:e6:62:45:86:e5:9a:03:01:b4:52:c4:36:0d:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Apr  4 03:25:21 2024 GMT
            Not After : Apr  3 03:30:21 2025 GMT
        Subject: CN=EE27D131C63762C4483EE7ADFB42F6B26D8F623D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fb:8f:49:9d:07:e5:54:93:77:87:df:95:e0:
                    73:3c:39:ec:c3:0d:0b:13:4f:5f:03:07:1d:08:69:
                    74:8e:c5:98:74:4f:09:88:70:62:51:32:79:3a:01:
                    a3:a4:b8:43:fb:8b:d1:16:d1:ec:7b:a2:62:7b:4f:
                    b5:72:c7:d4:3a:8f:7a:2f:95:1b:3b:83:35:87:88:
                    ca:30:b5:0b:c5:27:59:47:8a:71:88:8a:81:74:a6:
                    63:7d:dc:f3:18:97:28:13:f0:7b:99:f8:7a:64:6a:
                    ae:a4:62:dd:11:a5:4a:ef:03:1b:86:79:51:77:ba:
                    7f:ed:fa:31:9a:6f:ad:67:7e:37:f3:7b:c6:f2:85:
                    bb:ea:00:78:22:89:1d:32:8b:dc:2c:f5:57:e0:90:
                    25:9d:fe:ee:44:9b:f5:62:71:4c:4e:72:1d:79:97:
                    4a:49:8b:f5:6c:3d:c4:f9:92:ee:a0:10:17:45:41:
                    2d:e3:51:db:e7:c3:55:7f:d6:7d:3e:b4:2b:e7:e7:
                    64:66:79:da:f2:5d:2e:38:62:92:63:d9:d0:01:f0:
                    ac:15:16:5c:7b:ef:92:08:37:6e:e8:c7:89:2b:c9:
                    c2:99:75:52:c5:f4:d2:98:4c:52:ea:b9:b7:05:3c:
                    6f:7d:8e:0d:02:12:8e:4b:fd:9d:6c:46:b6:43:c3:
                    94:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:27:D1:31:C6:37:62:C4:48:3E:E7:AD:FB:42:F6:B2:6D:8F:62:3D
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3133312e3130302e3137322e302f32322d3232203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:bc:8c:2f:ff:e1:c1:f0:27:9d:cc:71:50:fe:d8:c7:2e:70:
         c9:fc:2c:71:ee:a9:4d:29:1c:58:88:ad:1c:0e:d2:4e:b1:7d:
         bd:e8:5d:13:47:7c:95:9f:85:da:36:ca:91:9f:13:1b:5c:5b:
         90:9f:ef:67:0f:b0:c0:e4:72:54:d7:ed:a4:5b:72:24:8f:b4:
         98:c5:0f:4a:33:ce:ab:4a:60:62:c1:31:6c:46:25:90:43:a9:
         7f:db:1e:83:58:da:1d:71:12:fd:90:ec:23:4c:b0:1b:4a:f1:
         7c:a9:99:31:6b:f1:a2:0a:e8:48:eb:b1:ee:82:20:0b:36:1c:
         7e:50:e1:74:51:78:cd:e0:f3:e9:94:f2:f3:05:6c:55:6f:56:
         2d:99:9c:43:1b:2d:52:0b:52:b1:d3:be:9a:1d:ce:32:55:36:
         e1:54:01:85:49:8b:ad:2d:cf:1c:6f:4f:97:f9:ee:94:8a:83:
         05:c9:07:de:9e:97:25:70:38:db:ea:de:b7:dd:ce:60:21:1a:
         d7:80:de:8c:12:22:5d:62:8e:3d:44:1c:c8:db:de:22:7d:12:
         73:64:1c:1c:94:33:bb:a8:65:81:3c:75:92:02:0a:7d:bc:b3:
         65:40:97:1c:d8:ea:22:db:54:0b:cb:74:69:ae:88:61:5b:49:
         5c:6d:c9:4d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFLbOjC1+5mJFhuWaAwG0UsQ2Dd8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFCOTVCOUY4MTJGODc3RUZCNDg2RDJFNEMzMEI3MDNG
Q0FFQzgyOTAeFw0yNDA0MDQwMzI1MjFaFw0yNTA0MDMwMzMwMjFaMDMxMTAvBgNV
BAMTKEVFMjdEMTMxQzYzNzYyQzQ0ODNFRTdBREZCNDJGNkIyNkQ4RjYyM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn+49JnQflVJN3h9+V4HM8OezD
DQsTT18DBx0IaXSOxZh0TwmIcGJRMnk6AaOkuEP7i9EW0ex7omJ7T7Vyx9Q6j3ov
lRs7gzWHiMowtQvFJ1lHinGIioF0pmN93PMYlygT8HuZ+Hpkaq6kYt0RpUrvAxuG
eVF3un/t+jGab61nfjfze8byhbvqAHgiiR0yi9ws9VfgkCWd/u5Em/VicUxOch15
l0pJi/VsPcT5ku6gEBdFQS3jUdvnw1V/1n0+tCvn52RmedryXS44YpJj2dAB8KwV
Flx775IIN27ox4krycKZdVLF9NKYTFLqubcFPG99jg0CEo5L/Z1sRrZDw5SdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU7ifRMcY3YsRIPuet+0L2sm2PYj0wHwYDVR0j
BBgwFoAU0blbn4Evh377SG0uTDC3A/yuyCkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjdYeThRY0NvTXlZRjgxVXRpQUZLUTgyalEza1RubzQ3dnVQTlZXcmY4
TmsvMS9EMUI5NUI5RjgxMkY4NzdFRkI0ODZEMkU0QzMwQjcwM0ZDQUVDODI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxQjk1QjlGODEyRjg3N0VG
QjQ4NkQyRTRDMzBCNzAzRkNBRUM4MjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I3WHk4UWNDb015WUY4MVV0aUFGS1E4MmpRM2tUbm80N3Z1UE5WV3JmOE5rLzEv
MzEzMzMxMmUzMTMwMzAyZTMxMzczMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzIzMTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKDZKwwDQYJKoZIhvcNAQELBQADggEBAKq8jC//
4cHwJ53McVD+2McucMn8LHHuqU0pHFiIrRwO0k6xfb3oXRNHfJWfhdo2ypGfExtc
W5Cf72cPsMDkclTX7aRbciSPtJjFD0ozzqtKYGLBMWxGJZBDqX/bHoNY2h1xEv2Q
7CNMsBtK8XypmTFr8aIK6Ejrse6CIAs2HH5Q4XRReM3g8+mU8vMFbFVvVi2ZnEMb
LVILUrHTvpodzjJVNuFUAYVJi60tzxxvT5f57pSKgwXJB96elyVwONvq3rfdzmAh
GteA3owSIl1ijj1EHMjb3iJ9EnNkHByUM7uoZYE8dZICCn28s2VAlxzY6iLbVAvL
dGmuiGFbSVxtyU0=
-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:41 2024 by rpki-client on console-fra.rpki-client.org