Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/3137302e37392e3131362e302f32322d3232203d3e20323636323835.roa
File:                     3137302e37392e3131362e302f32322d3232203d3e20323636323835.roa (raw, json)
Hash identifier:          pVTx22+pDi9BibBNdwEWx8tzQzr3zJjoOquJQS8zBik=
Subject key identifier:   DD:97:A8:23:01:18:52:62:91:D5:BC:7B:62:F9:12:37:B9:88:01:4A
Certificate issuer:       /CN=4ECB9B0B1B0DFBCA0197481108B068FF845655C6
Certificate serial:       71720F9367689F281B2D81C4E4B73C91CB497D3F
Authority key identifier: 4E:CB:9B:0B:1B:0D:FB:CA:01:97:48:11:08:B0:68:FF:84:56:55:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/3137302e37392e3131362e302f32322d3232203d3e20323636323835.roa
Signing time:             Wed 04 Dec 2024 11:53:10 +0000
ROA not before:           Wed 04 Dec 2024 11:48:10 +0000
ROA not after:            Wed 03 Dec 2025 11:53:10 +0000
asID:                     266285
IP address blocks:        170.79.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.crl
                          rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 15:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:72:0f:93:67:68:9f:28:1b:2d:81:c4:e4:b7:3c:91:cb:49:7d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ECB9B0B1B0DFBCA0197481108B068FF845655C6
        Validity
            Not Before: Dec  4 11:48:10 2024 GMT
            Not After : Dec  3 11:53:10 2025 GMT
        Subject: CN=DD97A8230118526291D5BC7B62F91237B988014A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a1:1e:73:a5:91:28:7d:f0:74:a8:a6:5c:8d:
                    a6:93:6f:42:e5:99:b7:50:f6:97:97:ec:78:da:52:
                    8c:31:e0:ed:bc:08:68:7e:95:ea:4e:6d:21:40:94:
                    c4:98:5b:a7:1e:44:01:95:00:f8:5d:d0:2c:17:3d:
                    04:51:c4:ab:37:71:4f:82:fe:a5:d1:5b:16:11:36:
                    83:24:ee:63:ad:54:58:4c:87:0f:0c:83:d5:b1:d4:
                    50:0a:40:8a:24:ab:98:06:b6:cd:94:c7:95:73:8d:
                    39:71:97:00:48:9e:83:39:96:27:18:7c:05:2a:25:
                    27:86:8b:44:71:6e:43:89:9e:1b:36:2c:26:59:17:
                    1f:3f:70:c5:ef:52:90:59:6c:08:bc:b3:77:16:30:
                    a5:b1:2a:ae:11:56:13:a3:4e:e9:58:06:18:e3:61:
                    4d:e1:4a:b2:1d:ad:73:b2:eb:c6:33:e8:73:48:50:
                    bc:6d:2c:49:39:ff:52:a1:35:80:08:a8:3a:4f:94:
                    23:c5:c0:84:4f:af:04:8d:71:dc:9b:06:d7:0f:59:
                    e6:ef:aa:f2:bf:3b:cb:24:c6:2e:1a:47:fb:d7:11:
                    3c:51:48:bf:1b:8d:4c:37:08:fd:a4:88:98:11:a8:
                    02:c1:9f:9c:b5:50:00:3a:e2:0a:f9:81:18:39:92:
                    79:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:97:A8:23:01:18:52:62:91:D5:BC:7B:62:F9:12:37:B9:88:01:4A
            X509v3 Authority Key Identifier:
                keyid:4E:CB:9B:0B:1B:0D:FB:CA:01:97:48:11:08:B0:68:FF:84:56:55:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/3137302e37392e3131362e302f32322d3232203d3e20323636323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:70:c3:76:f7:cf:56:05:da:6c:b0:7e:60:35:b1:5d:6e:f7:
         5d:f3:63:c9:c3:6d:41:4b:26:f3:82:d1:ae:ce:72:db:4e:cc:
         19:91:9a:01:e2:f8:b2:30:5b:d0:b8:55:45:ae:05:81:01:35:
         ee:07:be:f0:4e:ae:bf:96:29:bb:b0:2d:db:89:b3:23:5c:69:
         53:ef:9b:ec:60:8e:6a:4d:cb:10:e4:71:0f:f2:9c:83:ac:d5:
         4f:00:42:55:ca:66:43:77:12:eb:c3:7f:c7:e0:26:32:f3:23:
         14:25:7a:9e:53:51:f4:93:00:3e:ad:27:03:5c:2a:fd:6a:64:
         8b:25:23:70:1d:70:09:43:cc:c1:7b:02:c7:c3:a7:f5:7b:1f:
         6b:ee:91:78:c0:9b:dd:af:05:53:47:af:29:20:0d:b5:44:e7:
         35:36:78:1f:8e:73:fb:b8:bf:c7:ac:24:59:58:41:c4:b7:17:
         ee:cc:ef:b0:b0:6a:14:a4:f8:85:a9:a5:88:ea:03:2e:c5:d8:
         99:8a:61:6f:b8:c6:04:39:3c:a9:d9:0e:d9:11:fd:81:5c:32:
         d9:6b:26:22:96:86:28:d3:5e:5b:81:94:7d:e4:8c:1d:7c:61:
         e3:70:ea:45:52:3a:ca:0b:aa:a3:26:51:f2:36:93:33:cb:2c:
         ad:ca:da:0c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcXIPk2donygbLYHE5Lc8kctJfT8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEVDQjlCMEIxQjBERkJDQTAxOTc0ODExMDhCMDY4RkY4
NDU2NTVDNjAeFw0yNDEyMDQxMTQ4MTBaFw0yNTEyMDMxMTUzMTBaMDMxMTAvBgNV
BAMTKEREOTdBODIzMDExODUyNjI5MUQ1QkM3QjYyRjkxMjM3Qjk4ODAxNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCoR5zpZEoffB0qKZcjaaTb0Ll
mbdQ9peX7HjaUowx4O28CGh+lepObSFAlMSYW6ceRAGVAPhd0CwXPQRRxKs3cU+C
/qXRWxYRNoMk7mOtVFhMhw8Mg9Wx1FAKQIokq5gGts2Ux5VzjTlxlwBInoM5licY
fAUqJSeGi0RxbkOJnhs2LCZZFx8/cMXvUpBZbAi8s3cWMKWxKq4RVhOjTulYBhjj
YU3hSrIdrXOy68Yz6HNIULxtLEk5/1KhNYAIqDpPlCPFwIRPrwSNcdybBtcPWebv
qvK/O8skxi4aR/vXETxRSL8bjUw3CP2kiJgRqALBn5y1UAA64gr5gRg5knlfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU3ZeoIwEYUmKR1bx7YvkSN7mIAUowHwYDVR0j
BBgwFoAUTsubCxsN+8oBl0gRCLBo/4RWVcYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0VGYU02VHMyN1pBZEpmcm9nUHljcjRUTUdyU1g4cHg0Y0hkM3M2dmFK
VW0vMC80RUNCOUIwQjFCMERGQkNBMDE5NzQ4MTEwOEIwNjhGRjg0NTY1NUM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRFQ0I5QjBCMUIwREZCQ0Ew
MTk3NDgxMTA4QjA2OEZGODQ1NjU1QzYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dFRmFNNlRzMjdaQWRKZnJvZ1B5Y3I0VE1HclNYOHB4NGNIZDNzNnZhSlVtLzAv
MzEzNzMwMmUzNzM5MmUzMTMxMzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzYzMjM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqT3QwDQYJKoZIhvcNAQELBQADggEBAK9ww3b3
z1YF2mywfmA1sV1u913zY8nDbUFLJvOC0a7OcttOzBmRmgHi+LIwW9C4VUWuBYEB
Ne4HvvBOrr+WKbuwLduJsyNcaVPvm+xgjmpNyxDkcQ/ynIOs1U8AQlXKZkN3EuvD
f8fgJjLzIxQlep5TUfSTAD6tJwNcKv1qZIslI3AdcAlDzMF7AsfDp/V7H2vukXjA
m92vBVNHrykgDbVE5zU2eB+Oc/u4v8esJFlYQcS3F+7M77CwahSk+IWppYjqAy7F
2JmKYW+4xgQ5PKnZDtkR/YFcMtlrJiKWhijTXluBlH3kjB18YeNw6kVSOsoLqqMm
UfI2kzPLLK3K2gw=
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:55:34 2025 by rpki-client