Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/3137372e39312e3232382e302f32332d3233203d3e20323730383939.roa
File:                     3137372e39312e3232382e302f32332d3233203d3e20323730383939.roa (raw, json)
Hash identifier:          6+mRkdsV/FzpZ4b5EzAKLqzRPHq3ii+qyezzFvGSit0=
Subject key identifier:   C0:C5:10:38:FA:40:6E:15:AD:73:0A:42:CB:2B:7E:A9:48:4D:39:71
Certificate issuer:       /CN=9DB99B4A1CD56B1C7C104FA25EFDE518596FD221
Certificate serial:       0F587DC6FB49A76AC275E8A4A868DCEBD19F38C8
Authority key identifier: 9D:B9:9B:4A:1C:D5:6B:1C:7C:10:4F:A2:5E:FD:E5:18:59:6F:D2:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/3137372e39312e3232382e302f32332d3233203d3e20323730383939.roa
Signing time:             Thu 04 Apr 2024 03:55:54 +0000
ROA not before:           Thu 04 Apr 2024 03:50:54 +0000
ROA not after:            Thu 03 Apr 2025 03:55:54 +0000
asID:                     270899
IP address blocks:        177.91.228.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.crl
                          rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:58:7d:c6:fb:49:a7:6a:c2:75:e8:a4:a8:68:dc:eb:d1:9f:38:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB99B4A1CD56B1C7C104FA25EFDE518596FD221
        Validity
            Not Before: Apr  4 03:50:54 2024 GMT
            Not After : Apr  3 03:55:54 2025 GMT
        Subject: CN=C0C51038FA406E15AD730A42CB2B7EA9484D3971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:af:51:11:bd:4f:7d:c4:3b:63:0b:1d:97:1b:
                    02:8a:d2:27:55:70:ea:de:33:61:ce:f4:0e:ac:ff:
                    aa:da:9e:14:1f:87:a1:fa:1c:42:61:3d:e0:e2:52:
                    68:41:a5:7f:0c:1e:d2:4c:a7:7b:d1:dd:b3:c2:3e:
                    6f:d2:19:79:00:b9:b5:84:ad:4a:63:15:3b:64:ec:
                    ba:fb:dc:40:b2:48:49:0a:c1:24:9c:f3:36:64:14:
                    12:a0:11:2b:32:00:e1:b1:6d:89:ee:9c:b3:df:b2:
                    45:6c:cf:41:6b:64:e1:c4:06:db:e5:f8:c6:09:42:
                    f3:34:2e:62:01:f1:82:f2:41:5e:53:42:25:31:34:
                    20:1c:2b:4c:f3:37:93:6a:b6:c4:47:ad:46:42:7b:
                    e9:ce:55:05:11:1b:00:36:81:18:d1:91:0e:78:ce:
                    b4:2d:0b:1b:5d:e3:3c:13:c2:33:30:86:82:43:cc:
                    82:e6:8f:bb:0d:92:4d:fc:30:c8:0a:fc:ab:0c:c3:
                    22:31:7e:d7:61:3b:63:1d:2b:3d:d9:f9:5b:23:af:
                    2b:18:61:be:76:e7:cd:1c:b0:4c:65:3e:b8:e4:ed:
                    c5:08:b8:45:a2:53:59:18:f2:5e:7d:55:a0:3a:95:
                    ee:a8:0c:fe:4c:11:14:c4:3a:71:b3:76:75:1a:c7:
                    04:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C5:10:38:FA:40:6E:15:AD:73:0A:42:CB:2B:7E:A9:48:4D:39:71
            X509v3 Authority Key Identifier:
                keyid:9D:B9:9B:4A:1C:D5:6B:1C:7C:10:4F:A2:5E:FD:E5:18:59:6F:D2:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/3137372e39312e3232382e302f32332d3233203d3e20323730383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:8d:fd:89:63:ab:b8:81:bc:9d:40:f3:41:cd:71:de:29:88:
         f3:d2:7d:95:54:ee:87:56:9e:b8:8d:c5:46:07:bb:bc:b6:e8:
         32:19:cd:ad:8e:19:71:36:f6:0b:75:3c:71:7b:06:2b:d9:f7:
         3d:67:f7:6d:c6:f8:8f:8a:03:0a:c2:18:f1:24:63:d2:ea:06:
         b3:f4:16:09:12:e2:9b:71:16:e1:63:ef:a0:54:85:05:76:3a:
         1e:4b:f6:7f:09:0b:55:15:a9:cf:9f:ff:94:65:43:f4:26:fd:
         e2:90:5e:9d:3f:7c:ce:41:3b:39:de:28:0f:92:28:d8:72:6a:
         3a:e6:59:2c:5a:b7:33:e4:30:c8:d6:ac:d6:84:5b:22:6b:ae:
         44:53:a4:de:e9:8f:7a:3c:1a:f4:74:0b:85:a8:a2:26:4d:4c:
         43:b3:f7:93:d0:76:b8:46:1f:0a:6e:94:49:b3:67:56:1a:7a:
         26:18:a3:e4:7a:f0:7b:be:20:29:1c:42:b5:4a:0d:16:2d:ff:
         1d:b0:11:f6:3a:3f:18:ae:58:ca:a6:28:c0:2c:f2:37:87:df:
         b6:f9:9c:d2:a1:08:8f:62:4a:b1:13:ec:00:bb:a2:ed:58:43:
         6a:72:76:da:a4:c0:ad:be:ba:99:96:4f:f9:f9:13:8f:b0:fd:
         96:6e:5f:4e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUD1h9xvtJp2rCdeikqGjc69GfOMgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOURCOTlCNEExQ0Q1NkIxQzdDMTA0RkEyNUVGREU1MTg1
OTZGRDIyMTAeFw0yNDA0MDQwMzUwNTRaFw0yNTA0MDMwMzU1NTRaMDMxMTAvBgNV
BAMTKEMwQzUxMDM4RkE0MDZFMTVBRDczMEE0MkNCMkI3RUE5NDg0RDM5NzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEr1ERvU99xDtjCx2XGwKK0idV
cOreM2HO9A6s/6ranhQfh6H6HEJhPeDiUmhBpX8MHtJMp3vR3bPCPm/SGXkAubWE
rUpjFTtk7Lr73ECySEkKwSSc8zZkFBKgESsyAOGxbYnunLPfskVsz0FrZOHEBtvl
+MYJQvM0LmIB8YLyQV5TQiUxNCAcK0zzN5NqtsRHrUZCe+nOVQURGwA2gRjRkQ54
zrQtCxtd4zwTwjMwhoJDzILmj7sNkk38MMgK/KsMwyIxftdhO2MdKz3Z+VsjrysY
Yb52580csExlPrjk7cUIuEWiU1kY8l59VaA6le6oDP5MERTEOnGzdnUaxwRPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUwMUQOPpAbhWtcwpCyyt+qUhNOXEwHwYDVR0j
BBgwFoAUnbmbShzVaxx8EE+iXv3lGFlv0iEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1Z3TUVwNUVuSlNLN1RhQ2pidTVEcUhZU1RaV2E4UndxYXI5QWNBQ0pq
N3MvMS85REI5OUI0QTFDRDU2QjFDN0MxMDRGQTI1RUZERTUxODU5NkZEMjIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlEQjk5QjRBMUNENTZCMUM3
QzEwNEZBMjVFRkRFNTE4NTk2RkQyMjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dWd01FcDVFbkpTSzdUYUNqYnU1RHFIWVNUWldhOFJ3cWFyOUFjQUNKajdzLzEv
MzEzNzM3MmUzOTMxMmUzMjMyMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3
MzAzODM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxW+QwDQYJKoZIhvcNAQELBQADggEBAHSN/Ylj
q7iBvJ1A80HNcd4piPPSfZVU7odWnriNxUYHu7y26DIZza2OGXE29gt1PHF7BivZ
9z1n923G+I+KAwrCGPEkY9LqBrP0FgkS4ptxFuFj76BUhQV2Oh5L9n8JC1UVqc+f
/5RlQ/Qm/eKQXp0/fM5BOzneKA+SKNhyajrmWSxatzPkMMjWrNaEWyJrrkRTpN7p
j3o8GvR0C4WooiZNTEOz95PQdrhGHwpulEmzZ1YaeiYYo+R68Hu+ICkcQrVKDRYt
/x2wEfY6PxiuWMqmKMAs8jeH37b5nNKhCI9iSrET7AC7ou1YQ2pydtqkwK2+upmW
T/n5E4+w/ZZuX04=
-----END CERTIFICATE-----
Generated at Sat Jun 29 09:54:29 2024 by rpki-client on console-fra.rpki-client.org