Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/3132382e3230312e32382e302f32322d3232203d3e20323636363131.roa
File:                     3132382e3230312e32382e302f32322d3232203d3e20323636363131.roa (raw, json)
Hash identifier:          6JmENbqoWXiyO9Fe0+8u7P1LXCe/7hVDk51wo+0ouJo=
Subject key identifier:   A2:54:B2:15:9B:23:92:5D:12:C3:49:1F:99:02:AD:72:22:87:EF:9C
Certificate issuer:       /CN=C70EC4383B792424E71BC6853AD1C792781070B3
Certificate serial:       2278563DB39928F21BAD2C8214D67DF855E9600D
Authority key identifier: C7:0E:C4:38:3B:79:24:24:E7:1B:C6:85:3A:D1:C7:92:78:10:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/3132382e3230312e32382e302f32322d3232203d3e20323636363131.roa
Signing time:             Thu 04 Apr 2024 02:26:19 +0000
ROA not before:           Thu 04 Apr 2024 02:21:19 +0000
ROA not after:            Thu 03 Apr 2025 02:26:19 +0000
asID:                     266611
IP address blocks:        128.201.28.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.crl
                          rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:78:56:3d:b3:99:28:f2:1b:ad:2c:82:14:d6:7d:f8:55:e9:60:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C70EC4383B792424E71BC6853AD1C792781070B3
        Validity
            Not Before: Apr  4 02:21:19 2024 GMT
            Not After : Apr  3 02:26:19 2025 GMT
        Subject: CN=A254B2159B23925D12C3491F9902AD722287EF9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:49:6f:6e:95:88:d8:e1:82:9a:f4:d6:1e:42:
                    ec:b9:ad:01:39:5f:8e:d4:48:8d:7f:cc:7b:58:53:
                    81:db:3f:fe:d7:a7:4f:11:c4:9d:94:07:10:5f:0c:
                    37:95:4a:4f:29:d8:8a:48:5e:75:86:e9:b8:a8:75:
                    cb:e3:4b:4d:0a:e8:4b:57:47:ee:25:48:af:fc:8a:
                    2c:46:36:76:50:e8:df:25:bb:03:9f:74:4b:f9:32:
                    cc:72:07:7e:b5:dd:1d:13:6c:6d:67:f9:c7:23:8b:
                    1f:8b:16:d6:5d:1e:04:a1:d8:29:ca:b7:87:a7:99:
                    30:77:b2:7e:9e:74:53:ef:0f:46:ae:95:90:28:4d:
                    85:2e:40:fd:91:97:d8:ea:19:67:04:89:70:14:da:
                    fb:b8:b4:1d:37:44:43:61:2b:06:f5:ca:14:d8:71:
                    63:a7:01:c8:42:ff:05:a7:61:cc:90:59:1f:9b:2e:
                    e1:e3:21:48:3e:f6:c8:05:9c:12:17:d4:b0:ad:95:
                    8c:2d:46:a2:56:dc:42:dd:78:26:f8:3b:ee:d1:a6:
                    b8:48:42:90:8e:31:c1:fe:06:91:e8:88:0c:52:94:
                    29:ce:81:8c:47:3c:e8:b3:80:5e:b3:aa:b6:31:34:
                    7b:b5:67:71:94:fd:b8:1c:93:bf:96:a0:66:c7:a7:
                    36:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:54:B2:15:9B:23:92:5D:12:C3:49:1F:99:02:AD:72:22:87:EF:9C
            X509v3 Authority Key Identifier:
                keyid:C7:0E:C4:38:3B:79:24:24:E7:1B:C6:85:3A:D1:C7:92:78:10:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/3132382e3230312e32382e302f32322d3232203d3e20323636363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:02:60:9b:2a:10:13:e0:b7:6f:86:b2:cb:43:04:dd:e8:27:
         d9:43:e8:dd:fd:37:f8:da:f6:b6:b8:14:74:54:ba:37:ee:af:
         f1:5a:ba:bc:07:84:75:0a:53:e6:c9:a1:ba:e2:4d:b9:ce:98:
         db:d2:af:12:60:0d:48:37:89:22:90:19:5c:8f:8a:50:09:de:
         45:e2:a3:68:39:1e:09:57:3a:84:8e:ed:f1:bd:4e:2e:fc:74:
         41:29:92:ae:2b:08:ed:b3:f7:e9:7d:4f:a1:2b:22:55:a1:08:
         51:cd:cb:0d:3b:62:9c:f3:11:63:4a:87:4d:e5:c4:ba:62:a0:
         77:f8:9b:55:b4:6d:18:d1:e5:41:37:7a:68:c0:62:13:3e:ac:
         1f:05:fc:03:50:2a:8e:e6:3e:3f:4c:a7:0d:57:4c:72:62:dd:
         0f:d3:18:3f:90:2e:98:57:06:8e:d3:fe:69:8e:91:b4:6d:2f:
         6c:e4:c2:e2:0f:f9:10:25:9a:32:7e:e5:26:69:e6:df:6f:9c:
         03:d9:e4:3b:ba:e2:76:e6:7e:2c:c6:47:34:3c:27:99:8d:66:
         63:6e:e6:61:1e:6c:c1:1c:59:60:bd:c8:ca:9d:80:c0:96:a6:
         49:e7:f2:9f:f0:b2:8e:42:dd:b0:a7:ba:9b:00:db:be:4b:93:
         61:61:ee:77
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUInhWPbOZKPIbrSyCFNZ9+FXpYA0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzcwRUM0MzgzQjc5MjQyNEU3MUJDNjg1M0FEMUM3OTI3
ODEwNzBCMzAeFw0yNDA0MDQwMjIxMTlaFw0yNTA0MDMwMjI2MTlaMDMxMTAvBgNV
BAMTKEEyNTRCMjE1OUIyMzkyNUQxMkMzNDkxRjk5MDJBRDcyMjI4N0VGOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPSW9ulYjY4YKa9NYeQuy5rQE5
X47USI1/zHtYU4HbP/7Xp08RxJ2UBxBfDDeVSk8p2IpIXnWG6biodcvjS00K6EtX
R+4lSK/8iixGNnZQ6N8luwOfdEv5MsxyB3613R0TbG1n+ccjix+LFtZdHgSh2CnK
t4enmTB3sn6edFPvD0aulZAoTYUuQP2Rl9jqGWcEiXAU2vu4tB03RENhKwb1yhTY
cWOnAchC/wWnYcyQWR+bLuHjIUg+9sgFnBIX1LCtlYwtRqJW3ELdeCb4O+7RprhI
QpCOMcH+BpHoiAxSlCnOgYxHPOizgF6zqrYxNHu1Z3GU/bgck7+WoGbHpza5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUolSyFZsjkl0Sw0kfmQKtciKH75wwHwYDVR0j
BBgwFoAUxw7EODt5JCTnG8aFOtHHkngQcLMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3NKZWJjQm5LVlY3TEpXckVYZ015ZDU0NEp2b2ZKcEVxUDQ1OEZvU1dZ
SmUvMS9DNzBFQzQzODNCNzkyNDI0RTcxQkM2ODUzQUQxQzc5Mjc4MTA3MEIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M3MEVDNDM4M0I3OTI0MjRF
NzFCQzY4NTNBRDFDNzkyNzgxMDcwQjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dzSmViY0JuS1ZWN0xKV3JFWGdNeWQ1NDRKdm9mSnBFcVA0NThGb1NXWUplLzEv
MzEzMjM4MmUzMjMwMzEyZTMyMzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzYzNjMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKAyRwwDQYJKoZIhvcNAQELBQADggEBAC8CYJsq
EBPgt2+GsstDBN3oJ9lD6N39N/ja9ra4FHRUujfur/FaurwHhHUKU+bJobriTbnO
mNvSrxJgDUg3iSKQGVyPilAJ3kXio2g5HglXOoSO7fG9Ti78dEEpkq4rCO2z9+l9
T6ErIlWhCFHNyw07YpzzEWNKh03lxLpioHf4m1W0bRjR5UE3emjAYhM+rB8F/ANQ
Ko7mPj9Mpw1XTHJi3Q/TGD+QLphXBo7T/mmOkbRtL2zkwuIP+RAlmjJ+5SZp5t9v
nAPZ5Du64nbmfizGRzQ8J5mNZmNu5mEebMEcWWC9yMqdgMCWpknn8p/wso5C3bCn
upsA275Lk2Fh7nc=
-----END CERTIFICATE-----
Generated at Tue Nov 26 08:30:21 2024 by rpki-client on console-ams.rpki-client.org