Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/2/3137372e3132382e35322e302f32322d3234203d3e20323730363932.roa
File:                     3137372e3132382e35322e302f32322d3234203d3e20323730363932.roa (raw, json)
Hash identifier:          YM7KchdgkewTgjiensV+WMnGqGCRreSnb4AIeqzPo40=
Subject key identifier:   79:FB:BD:AE:B9:66:99:BA:CB:29:D0:C0:37:E7:57:E6:C4:D6:9E:7C
Certificate issuer:       /CN=4B28FA6097EDAF3D1C740125A43F5115184B3E7F
Certificate serial:       03B1A4C11F23FEC9B2981BBB244691394A9A0FDE
Authority key identifier: 4B:28:FA:60:97:ED:AF:3D:1C:74:01:25:A4:3F:51:15:18:4B:3E:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B28FA6097EDAF3D1C740125A43F5115184B3E7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/2/3137372e3132382e35322e302f32322d3234203d3e20323730363932.roa
Signing time:             Thu 04 Apr 2024 06:15:29 +0000
ROA not before:           Thu 04 Apr 2024 06:10:29 +0000
ROA not after:            Thu 03 Apr 2025 06:15:29 +0000
asID:                     270692
IP address blocks:        177.128.52.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/2/4B28FA6097EDAF3D1C740125A43F5115184B3E7F.crl
                          rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/2/4B28FA6097EDAF3D1C740125A43F5115184B3E7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B28FA6097EDAF3D1C740125A43F5115184B3E7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:b1:a4:c1:1f:23:fe:c9:b2:98:1b:bb:24:46:91:39:4a:9a:0f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B28FA6097EDAF3D1C740125A43F5115184B3E7F
        Validity
            Not Before: Apr  4 06:10:29 2024 GMT
            Not After : Apr  3 06:15:29 2025 GMT
        Subject: CN=79FBBDAEB96699BACB29D0C037E757E6C4D69E7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1c:71:80:32:31:46:18:48:e3:fc:78:81:7b:
                    9f:2e:e1:1e:a5:3f:db:25:29:d2:f0:40:85:32:a4:
                    00:cf:3e:42:d2:6b:dc:df:5e:40:0a:9c:61:f9:7c:
                    80:e6:a7:d5:7d:14:8d:b2:76:74:d3:7e:4a:0c:86:
                    25:11:f1:4c:7a:a5:fe:2d:e4:41:aa:48:51:d6:7e:
                    9a:ff:78:c8:5f:c0:31:fc:36:44:58:a3:4c:3d:ce:
                    59:e7:12:94:cb:6a:e9:07:68:32:a8:da:82:58:2c:
                    51:a2:64:25:ec:51:cc:33:a5:7d:ed:1f:e1:4c:83:
                    bd:0c:c5:47:32:e9:ee:d4:58:23:31:f2:a3:d9:f2:
                    12:86:52:d3:56:31:db:05:35:85:a7:5d:ed:e4:6e:
                    31:9a:0f:25:96:25:a2:93:a4:b6:79:a4:95:de:80:
                    79:10:ea:a8:f0:da:f3:e6:9f:1f:3b:d9:02:48:1a:
                    51:9c:67:20:63:87:3e:08:0d:96:1c:ab:37:d2:06:
                    b9:ca:c4:cf:2e:52:5c:18:93:5d:92:27:df:d2:8d:
                    8e:cb:a8:77:f5:d1:3d:a4:e4:6b:ba:cc:37:ac:49:
                    dd:cd:22:48:10:4d:8c:58:1b:16:58:02:4e:2a:a2:
                    15:82:f1:c2:7a:b5:a1:3f:36:79:2d:62:37:87:4f:
                    66:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FB:BD:AE:B9:66:99:BA:CB:29:D0:C0:37:E7:57:E6:C4:D6:9E:7C
            X509v3 Authority Key Identifier:
                keyid:4B:28:FA:60:97:ED:AF:3D:1C:74:01:25:A4:3F:51:15:18:4B:3E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/2/4B28FA6097EDAF3D1C740125A43F5115184B3E7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B28FA6097EDAF3D1C740125A43F5115184B3E7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/2/3137372e3132382e35322e302f32322d3234203d3e20323730363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:4a:63:4c:b7:f6:b0:5b:56:7e:99:dd:f8:b6:ab:61:32:ce:
         25:08:ab:1d:50:de:8b:dd:f4:6e:ea:cb:8d:84:4a:10:23:ca:
         d2:72:aa:09:b7:60:49:6b:b0:05:d2:5b:85:c9:cd:a0:c1:49:
         60:9a:82:d9:9c:81:d5:69:46:a3:e3:01:15:e8:5e:e5:2a:1f:
         a3:5b:a5:6f:2f:66:0a:38:f1:74:88:55:7e:9a:1a:86:be:66:
         e8:26:13:22:37:6d:7f:ec:83:c3:c0:aa:ad:b3:4e:b3:c9:26:
         59:fd:04:74:36:2b:4f:97:83:52:83:51:79:27:74:74:be:98:
         9d:18:9e:b4:45:24:f3:08:ef:cb:8a:8e:e7:da:2b:30:ef:9d:
         35:9f:1a:10:89:34:9d:03:1e:e9:ce:d9:d1:f0:17:5a:26:cc:
         d2:04:26:93:a1:c0:a0:81:75:68:e5:e2:fa:f4:40:d5:82:d0:
         77:3a:26:bc:3e:2a:a5:1f:cb:33:f6:7a:0c:76:81:82:1c:fc:
         5f:bf:d8:57:89:d7:59:ac:e2:3b:3c:81:23:69:3f:12:c4:7b:
         3a:29:7c:00:2e:c8:35:f6:66:86:78:96:f9:44:c0:23:1d:ff:
         c1:56:a8:ac:c5:ca:85:0c:78:71:66:9d:5f:1a:d2:f1:a2:c7:
         5b:52:2c:04
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUA7GkwR8j/smymBu7JEaROUqaD94wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEIyOEZBNjA5N0VEQUYzRDFDNzQwMTI1QTQzRjUxMTUx
ODRCM0U3RjAeFw0yNDA0MDQwNjEwMjlaFw0yNTA0MDMwNjE1MjlaMDMxMTAvBgNV
BAMTKDc5RkJCREFFQjk2Njk5QkFDQjI5RDBDMDM3RTc1N0U2QzRENjlFN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjHHGAMjFGGEjj/HiBe58u4R6l
P9slKdLwQIUypADPPkLSa9zfXkAKnGH5fIDmp9V9FI2ydnTTfkoMhiUR8Ux6pf4t
5EGqSFHWfpr/eMhfwDH8NkRYo0w9zlnnEpTLaukHaDKo2oJYLFGiZCXsUcwzpX3t
H+FMg70MxUcy6e7UWCMx8qPZ8hKGUtNWMdsFNYWnXe3kbjGaDyWWJaKTpLZ5pJXe
gHkQ6qjw2vPmnx872QJIGlGcZyBjhz4IDZYcqzfSBrnKxM8uUlwYk12SJ9/SjY7L
qHf10T2k5Gu6zDesSd3NIkgQTYxYGxZYAk4qohWC8cJ6taE/NnktYjeHT2ZjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUefu9rrlmmbrLKdDAN+dX5sTWnnwwHwYDVR0j
BBgwFoAUSyj6YJftrz0cdAElpD9RFRhLPn8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDIyUzJmRkQzdkJpR2dEYWpkYXY3WU5YeXhVcWpaZ1czeGV4amtWcHUy
Tm0vMi80QjI4RkE2MDk3RURBRjNEMUM3NDAxMjVBNDNGNTExNTE4NEIzRTdGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCMjhGQTYwOTdFREFGM0Qx
Qzc0MDEyNUE0M0Y1MTE1MTg0QjNFN0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QyMlMyZkZEM3ZCaUdnRGFqZGF2N1lOWHl4VXFqWmdXM3hleGprVnB1Mk5tLzIv
MzEzNzM3MmUzMTMyMzgyZTM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzAzNjM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxgDQwDQYJKoZIhvcNAQELBQADggEBAB9KY0y3
9rBbVn6Z3fi2q2EyziUIqx1Q3ovd9G7qy42EShAjytJyqgm3YElrsAXSW4XJzaDB
SWCagtmcgdVpRqPjARXoXuUqH6NbpW8vZgo48XSIVX6aGoa+ZugmEyI3bX/sg8PA
qq2zTrPJJln9BHQ2K0+Xg1KDUXkndHS+mJ0YnrRFJPMI78uKjufaKzDvnTWfGhCJ
NJ0DHunO2dHwF1omzNIEJpOhwKCBdWjl4vr0QNWC0Hc6Jrw+KqUfyzP2egx2gYIc
/F+/2FeJ11ms4js8gSNpPxLEezopfAAuyDX2ZoZ4lvlEwCMd/8FWqKzFyoUMeHFm
nV8a0vGix1tSLAQ=
-----END CERTIFICATE-----
Generated at Fri Sep 20 04:37:13 2024 by rpki-client on console-ams.rpki-client.org