Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/1/3137302e3234372e32302e302f32322d3234203d3e20323633333234.roa
File:                     3137302e3234372e32302e302f32322d3234203d3e20323633333234.roa (raw, json)
Hash identifier:          Tpz+5xEtqqhQ3Qy9X4516CY10CXiUyrFPpjsGrYNovw=
Subject key identifier:   BA:0A:40:0D:91:08:4D:E6:68:C9:72:85:C9:A4:E7:FE:8E:9C:04:17
Certificate issuer:       /CN=01364C396932D6F9D37D4E65B53FF5F1EF6CB2E2
Certificate serial:       5381E620704FED28B7819D5E9FE0F9D66CAA1F6C
Authority key identifier: 01:36:4C:39:69:32:D6:F9:D3:7D:4E:65:B5:3F:F5:F1:EF:6C:B2:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01364C396932D6F9D37D4E65B53FF5F1EF6CB2E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/1/3137302e3234372e32302e302f32322d3234203d3e20323633333234.roa
Signing time:             Thu 04 Apr 2024 03:14:53 +0000
ROA not before:           Thu 04 Apr 2024 03:09:53 +0000
ROA not after:            Thu 03 Apr 2025 03:14:53 +0000
asID:                     263324
IP address blocks:        170.247.20.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/1/01364C396932D6F9D37D4E65B53FF5F1EF6CB2E2.crl
                          rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/1/01364C396932D6F9D37D4E65B53FF5F1EF6CB2E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01364C396932D6F9D37D4E65B53FF5F1EF6CB2E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:20:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:81:e6:20:70:4f:ed:28:b7:81:9d:5e:9f:e0:f9:d6:6c:aa:1f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01364C396932D6F9D37D4E65B53FF5F1EF6CB2E2
        Validity
            Not Before: Apr  4 03:09:53 2024 GMT
            Not After : Apr  3 03:14:53 2025 GMT
        Subject: CN=BA0A400D91084DE668C97285C9A4E7FE8E9C0417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:06:26:9c:51:d7:85:35:b3:13:00:d8:ba:cd:
                    19:fe:12:ed:d1:96:b7:d3:cd:56:92:4a:0f:3e:f0:
                    96:b8:1f:a9:46:bb:aa:db:3d:c2:f5:de:c7:45:72:
                    e0:f4:20:64:7d:af:7e:8e:91:ac:fc:ab:7f:c3:6a:
                    1f:fc:7c:33:6a:57:cf:4b:36:27:46:55:32:fa:06:
                    95:91:5e:93:f5:e4:e9:aa:3e:5e:84:86:f4:cf:17:
                    41:8f:7b:ab:9d:66:ae:ac:15:0c:29:b5:fe:74:aa:
                    07:51:42:62:71:b4:05:5c:a0:ef:3b:48:92:9b:1c:
                    b0:9b:e6:35:0a:52:dd:31:0e:06:d8:8f:d2:87:ec:
                    66:cc:a4:cd:56:51:60:9f:5b:9b:0d:03:ee:32:e7:
                    a8:79:1e:4e:6e:0d:b9:de:31:fb:58:a9:6a:7e:2b:
                    97:79:63:86:6c:04:d4:1c:32:2f:71:74:aa:f3:27:
                    3b:4b:26:85:fe:89:66:e1:1b:97:66:c2:41:6d:f4:
                    b3:60:b5:ad:90:cd:ff:53:21:7f:f8:dd:cc:de:ba:
                    68:ed:a4:97:a8:32:b9:7b:de:23:7e:fb:8d:c5:59:
                    a4:69:cb:c9:16:cc:ca:2d:c8:83:29:9c:76:c6:78:
                    30:6a:8f:d5:65:1d:cf:2f:27:8f:d4:db:2f:5f:f7:
                    aa:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:0A:40:0D:91:08:4D:E6:68:C9:72:85:C9:A4:E7:FE:8E:9C:04:17
            X509v3 Authority Key Identifier:
                keyid:01:36:4C:39:69:32:D6:F9:D3:7D:4E:65:B5:3F:F5:F1:EF:6C:B2:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/1/01364C396932D6F9D37D4E65B53FF5F1EF6CB2E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01364C396932D6F9D37D4E65B53FF5F1EF6CB2E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/1/3137302e3234372e32302e302f32322d3234203d3e20323633333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:b9:72:6b:f1:be:0d:24:e7:8f:c5:3f:29:9d:42:06:53:27:
         28:95:ca:f1:ff:26:fe:cf:38:e2:87:cc:d0:56:84:26:d7:86:
         a2:1f:0e:cb:96:43:99:4e:a5:6a:0a:f6:43:e8:b5:66:34:34:
         9c:07:de:45:1e:8c:8f:f7:3f:2a:a6:f6:4c:46:f1:79:26:02:
         a4:01:fe:7d:38:76:1e:7a:04:2a:37:42:2e:be:5a:01:50:4b:
         58:69:30:00:d1:01:ed:56:b1:d7:d1:a1:a4:d9:37:37:1d:90:
         61:fe:64:a9:fd:4c:44:7d:48:48:ad:ab:e7:ab:9f:71:67:e8:
         f1:f8:2b:15:17:4b:23:52:eb:9e:9b:b3:bb:e3:5f:85:73:7e:
         63:40:30:ff:0e:0d:68:a8:cb:c3:5a:33:fd:27:c4:3f:b6:d4:
         20:75:b0:d6:b1:e2:90:42:b0:9d:51:5f:56:8c:07:3d:3d:16:
         cd:b9:aa:52:4d:9c:4d:17:bc:42:c4:31:00:5c:dd:0e:8d:d9:
         55:40:e8:ca:70:57:f9:e1:3d:22:bd:cf:e9:93:8c:b8:6a:2f:
         e8:f4:a8:6d:2f:38:7c:51:39:80:cb:6f:ac:98:bb:aa:e2:bf:
         2d:6c:24:5e:d0:e6:49:da:df:69:8d:5d:5d:33:34:90:3e:52:
         89:a1:8f:bf
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUU4HmIHBP7Si3gZ1en+D51myqH2wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDEzNjRDMzk2OTMyRDZGOUQzN0Q0RTY1QjUzRkY1RjFF
RjZDQjJFMjAeFw0yNDA0MDQwMzA5NTNaFw0yNTA0MDMwMzE0NTNaMDMxMTAvBgNV
BAMTKEJBMEE0MDBEOTEwODRERTY2OEM5NzI4NUM5QTRFN0ZFOEU5QzA0MTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDBiacUdeFNbMTANi6zRn+Eu3R
lrfTzVaSSg8+8Ja4H6lGu6rbPcL13sdFcuD0IGR9r36Okaz8q3/Dah/8fDNqV89L
NidGVTL6BpWRXpP15OmqPl6EhvTPF0GPe6udZq6sFQwptf50qgdRQmJxtAVcoO87
SJKbHLCb5jUKUt0xDgbYj9KH7GbMpM1WUWCfW5sNA+4y56h5Hk5uDbneMftYqWp+
K5d5Y4ZsBNQcMi9xdKrzJztLJoX+iWbhG5dmwkFt9LNgta2Qzf9TIX/43czeumjt
pJeoMrl73iN++43FWaRpy8kWzMotyIMpnHbGeDBqj9VlHc8vJ4/U2y9f96o/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUugpADZEITeZoyXKFyaTn/o6cBBcwHwYDVR0j
BBgwFoAUATZMOWky1vnTfU5ltT/18e9ssuIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3VqalRScm83cWRWRjZ5Vjd0aWhBUXphc2Q3Rlg3eHdrMjRZc2V1R1NK
clkvMS8wMTM2NEMzOTY5MzJENkY5RDM3RDRFNjVCNTNGRjVGMUVGNkNCMkUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxMzY0QzM5NjkzMkQ2RjlE
MzdENEU2NUI1M0ZGNUYxRUY2Q0IyRTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d1ampUUnJvN3FkVkY2eVY3dGloQVF6YXNkN0ZYN3h3azI0WXNldUdTSnJZLzEv
MzEzNzMwMmUzMjM0MzcyZTMyMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzMzMzMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq9xQwDQYJKoZIhvcNAQELBQADggEBADG5cmvx
vg0k54/FPymdQgZTJyiVyvH/Jv7POOKHzNBWhCbXhqIfDsuWQ5lOpWoK9kPotWY0
NJwH3kUejI/3Pyqm9kxG8XkmAqQB/n04dh56BCo3Qi6+WgFQS1hpMADRAe1WsdfR
oaTZNzcdkGH+ZKn9TER9SEitq+ern3Fn6PH4KxUXSyNS656bs7vjX4VzfmNAMP8O
DWioy8NaM/0nxD+21CB1sNax4pBCsJ1RX1aMBz09Fs25qlJNnE0XvELEMQBc3Q6N
2VVA6MpwV/nhPSK9z+mTjLhqL+j0qG0vOHxROYDLb6yYu6rivy1sJF7Q5kna32mN
XV0zNJA+Uomhj78=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:46 2024 by rpki-client on console-fra.rpki-client.org