Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/1/3137302e3235342e3132322e302f32342d3234203d3e20323731303038.roa
File:                     3137302e3235342e3132322e302f32342d3234203d3e20323731303038.roa (raw, json)
Hash identifier:          mrmffa+Yvz0pmnLxbs0lqeuw+231TE4tjx0dahIEMi4=
Subject key identifier:   F4:8B:77:A4:6A:1A:AC:4F:A8:E8:34:B2:37:F3:E6:00:D4:21:7E:71
Certificate issuer:       /CN=D4ADC22486EF8E2FFB5ACA852BB018F4A6D58D27
Certificate serial:       4F355C2D8E2692C3A92FF553366A3B1DD0BF981E
Authority key identifier: D4:AD:C2:24:86:EF:8E:2F:FB:5A:CA:85:2B:B0:18:F4:A6:D5:8D:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4ADC22486EF8E2FFB5ACA852BB018F4A6D58D27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/1/3137302e3235342e3132322e302f32342d3234203d3e20323731303038.roa
Signing time:             Fri 05 Apr 2024 00:38:57 +0000
ROA not before:           Fri 05 Apr 2024 00:33:57 +0000
ROA not after:            Fri 04 Apr 2025 00:38:57 +0000
asID:                     271008
IP address blocks:        170.254.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/1/D4ADC22486EF8E2FFB5ACA852BB018F4A6D58D27.crl
                          rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/1/D4ADC22486EF8E2FFB5ACA852BB018F4A6D58D27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4ADC22486EF8E2FFB5ACA852BB018F4A6D58D27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 15:54:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:35:5c:2d:8e:26:92:c3:a9:2f:f5:53:36:6a:3b:1d:d0:bf:98:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4ADC22486EF8E2FFB5ACA852BB018F4A6D58D27
        Validity
            Not Before: Apr  5 00:33:57 2024 GMT
            Not After : Apr  4 00:38:57 2025 GMT
        Subject: CN=F48B77A46A1AAC4FA8E834B237F3E600D4217E71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bb:6a:11:db:72:bd:3f:a9:5e:68:6a:40:cc:
                    a4:45:87:a6:c6:67:6b:c5:30:6c:b5:3a:1e:dd:5d:
                    b4:fc:9c:38:3b:89:d7:db:59:fa:7b:a2:3a:c9:99:
                    4e:1e:73:89:c3:07:ad:da:5d:e9:5d:ba:b7:3f:bd:
                    4a:42:a0:b1:96:8c:b6:31:7f:fc:53:83:b5:73:ed:
                    be:a3:e3:a5:f2:79:df:bb:57:24:29:a5:e4:a1:91:
                    57:2a:d2:d4:7a:25:5f:97:2f:c9:a7:01:be:8a:7a:
                    aa:8b:72:ee:b4:63:84:24:44:09:8b:3a:ae:e6:bb:
                    54:ad:6e:c0:ab:f9:49:16:9a:5d:38:1a:57:32:2e:
                    13:29:2c:cf:a8:71:aa:f9:70:a1:b1:a1:50:43:a3:
                    b0:1e:08:8e:95:7d:b8:71:74:05:ef:7a:0e:b7:2f:
                    0f:f4:71:6d:ac:ac:96:39:ef:c5:fb:50:25:6f:22:
                    22:e3:cf:60:dd:2e:e4:64:1e:dc:08:ec:16:40:74:
                    52:d0:83:74:7e:1d:10:69:e3:f0:0c:62:6f:b6:b8:
                    75:55:59:d0:e2:68:bf:6f:14:d6:8d:03:63:6a:1b:
                    4c:b8:3d:04:a8:9f:01:40:fc:78:4c:2c:36:e1:8f:
                    e7:e8:48:b5:1a:02:6f:9e:7b:4c:45:ff:ad:a8:1f:
                    32:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8B:77:A4:6A:1A:AC:4F:A8:E8:34:B2:37:F3:E6:00:D4:21:7E:71
            X509v3 Authority Key Identifier:
                keyid:D4:AD:C2:24:86:EF:8E:2F:FB:5A:CA:85:2B:B0:18:F4:A6:D5:8D:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/1/D4ADC22486EF8E2FFB5ACA852BB018F4A6D58D27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4ADC22486EF8E2FFB5ACA852BB018F4A6D58D27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9rEQhVjisK8Q27r13zZJK32sXQ4CRFBPVS8KNhZBiWB/1/3137302e3235342e3132322e302f32342d3234203d3e20323731303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:6d:62:18:4f:99:06:7e:e5:bd:37:57:64:19:fd:95:39:24:
         45:1c:c4:35:02:8b:a6:a9:1c:a3:de:09:ec:e7:82:65:a5:74:
         57:44:1a:08:d4:42:13:88:56:1b:87:cf:33:f2:e8:ee:6d:5b:
         79:0e:7b:a5:30:18:b1:96:7b:fb:ba:a4:6b:b0:77:9a:fc:15:
         9b:04:6c:03:ad:5f:43:af:c2:3d:06:73:84:6b:93:fb:3c:82:
         0d:47:ce:9a:23:02:40:2e:63:92:5b:9d:87:77:51:45:4b:25:
         4c:a5:54:ff:b4:56:bb:6a:94:21:2e:01:85:0e:4e:ca:94:26:
         01:46:74:c1:1a:76:fb:46:f5:c9:d8:e0:ad:ce:82:21:d3:cc:
         63:08:51:ba:93:c9:a2:4b:16:ce:f8:b1:b8:f6:1c:4e:04:26:
         24:af:28:c6:8b:ad:2f:ae:ab:d1:ef:82:10:ad:ac:4d:37:24:
         9a:9b:b5:b4:80:da:b2:03:5c:b0:c9:0f:b6:1c:99:27:2c:3b:
         0b:f8:5b:16:c6:c6:55:75:76:f5:6e:84:c4:0e:67:44:3d:4d:
         77:0c:e7:c4:a8:83:81:86:00:0e:15:ba:a5:66:3c:2d:d9:93:
         e2:bd:10:9c:fe:f2:98:db:47:4f:1d:6c:dd:e9:e1:ca:0c:e3:
         5c:3f:7f:44
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUTzVcLY4mksOpL/VTNmo7HdC/mB4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDRBREMyMjQ4NkVGOEUyRkZCNUFDQTg1MkJCMDE4RjRB
NkQ1OEQyNzAeFw0yNDA0MDUwMDMzNTdaFw0yNTA0MDQwMDM4NTdaMDMxMTAvBgNV
BAMTKEY0OEI3N0E0NkExQUFDNEZBOEU4MzRCMjM3RjNFNjAwRDQyMTdFNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOu2oR23K9P6leaGpAzKRFh6bG
Z2vFMGy1Oh7dXbT8nDg7idfbWfp7ojrJmU4ec4nDB63aXeldurc/vUpCoLGWjLYx
f/xTg7Vz7b6j46Xyed+7VyQppeShkVcq0tR6JV+XL8mnAb6KeqqLcu60Y4QkRAmL
Oq7mu1StbsCr+UkWml04GlcyLhMpLM+ocar5cKGxoVBDo7AeCI6VfbhxdAXveg63
Lw/0cW2srJY578X7UCVvIiLjz2DdLuRkHtwI7BZAdFLQg3R+HRBp4/AMYm+2uHVV
WdDiaL9vFNaNA2NqG0y4PQSonwFA/HhMLDbhj+foSLUaAm+ee0xF/62oHzKLAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU9It3pGoarE+o6DSyN/PmANQhfnEwHwYDVR0j
BBgwFoAU1K3CJIbvji/7WsqFK7AY9KbVjScwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzlyRVFoVmppc0s4UTI3cjEzelpKSzMyc1hRNENSRkJQVlM4S05oWkJp
V0IvMS9ENEFEQzIyNDg2RUY4RTJGRkI1QUNBODUyQkIwMThGNEE2RDU4RDI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0QURDMjI0ODZFRjhFMkZG
QjVBQ0E4NTJCQjAxOEY0QTZENThEMjcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c5ckVRaFZqaXNLOFEyN3IxM3paSkszMnNYUTRDUkZCUFZTOEtOaFpCaVdCLzEv
MzEzNzMwMmUzMjM1MzQyZTMxMzIzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMTMwMzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKr+ejANBgkqhkiG9w0BAQsFAAOCAQEAOW1i
GE+ZBn7lvTdXZBn9lTkkRRzENQKLpqkco94J7OeCZaV0V0QaCNRCE4hWG4fPM/Lo
7m1beQ57pTAYsZZ7+7qka7B3mvwVmwRsA61fQ6/CPQZzhGuT+zyCDUfOmiMCQC5j
kludh3dRRUslTKVU/7RWu2qUIS4BhQ5OypQmAUZ0wRp2+0b1ydjgrc6CIdPMYwhR
upPJoksWzvixuPYcTgQmJK8oxoutL66r0e+CEK2sTTckmpu1tIDasgNcsMkPthyZ
Jyw7C/hbFsbGVXV29W6ExA5nRD1NdwznxKiDgYYADhW6pWY8LdmT4r0QnP7ymNtH
Tx1s3enhygzjXD9/RA==
-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:29 2024 by rpki-client on console-ams.rpki-client.org