Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/3230312e3135382e382e302f32332d3233203d3e203631393336.roa
File:                     3230312e3135382e382e302f32332d3233203d3e203631393336.roa (raw, json)
Hash identifier:          3ZJppFYZkDv5o2k7UmF858LjZUUmddMQo2SyURgPkos=
Subject key identifier:   C7:38:24:E5:77:87:81:54:0D:54:92:7B:3B:ED:75:B4:73:71:EF:D9
Certificate issuer:       /CN=8D0306C23FF564AF54B79D8F98D0DCDDC930B21F
Certificate serial:       1B4135ECFE0AF562F8BEA358483CF44005061761
Authority key identifier: 8D:03:06:C2:3F:F5:64:AF:54:B7:9D:8F:98:D0:DC:DD:C9:30:B2:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/3230312e3135382e382e302f32332d3233203d3e203631393336.roa
Signing time:             Thu 18 Apr 2024 14:38:40 +0000
ROA not before:           Thu 18 Apr 2024 14:33:40 +0000
ROA not after:            Thu 17 Apr 2025 14:38:40 +0000
asID:                     61936
IP address blocks:        201.158.8.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.crl
                          rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 13:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:41:35:ec:fe:0a:f5:62:f8:be:a3:58:48:3c:f4:40:05:06:17:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D0306C23FF564AF54B79D8F98D0DCDDC930B21F
        Validity
            Not Before: Apr 18 14:33:40 2024 GMT
            Not After : Apr 17 14:38:40 2025 GMT
        Subject: CN=C73824E5778781540D54927B3BED75B47371EFD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1d:f9:41:b6:4d:75:3d:98:62:79:dd:04:ac:
                    9e:29:8a:25:88:12:c8:4a:89:b8:37:66:50:d3:59:
                    16:63:60:74:2d:44:ca:12:05:cd:9c:47:50:93:a5:
                    9e:92:eb:bb:93:6d:c3:7d:2f:5c:40:33:a2:b6:e4:
                    c5:77:89:be:3a:a7:33:06:27:0c:e5:98:2a:f3:89:
                    99:1a:da:cf:5d:8b:9b:e8:5a:c4:17:a0:0b:4f:bd:
                    71:67:dc:38:da:1a:76:d9:87:89:3d:c7:22:94:24:
                    31:e2:b7:b4:d2:84:fb:d0:04:b2:18:bd:1a:60:2a:
                    c0:8b:3e:20:7e:b4:5f:77:36:06:fc:d9:21:ee:80:
                    e6:af:aa:c3:82:13:62:c9:77:0c:1c:1c:cd:b1:7a:
                    ba:ab:85:3c:43:18:82:5d:c9:36:ef:e8:c1:9b:27:
                    10:a0:b6:a3:1a:5b:39:1d:52:93:64:8e:64:38:69:
                    74:43:30:5a:dc:14:4e:41:63:f1:76:01:af:1a:15:
                    e8:bf:95:29:47:a9:a1:a4:a7:02:1a:8a:b3:73:71:
                    53:f9:3d:1d:e5:66:66:e6:ae:b4:0d:ff:af:77:5d:
                    4d:78:4b:4a:3d:b5:65:53:4f:f6:3d:05:83:e0:74:
                    21:39:78:f5:42:1b:04:2a:08:d9:7f:ab:91:e0:c8:
                    a9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:38:24:E5:77:87:81:54:0D:54:92:7B:3B:ED:75:B4:73:71:EF:D9
            X509v3 Authority Key Identifier:
                keyid:8D:03:06:C2:3F:F5:64:AF:54:B7:9D:8F:98:D0:DC:DD:C9:30:B2:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D0306C23FF564AF54B79D8F98D0DCDDC930B21F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/3230312e3135382e382e302f32332d3233203d3e203631393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.158.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:df:1f:35:78:6a:73:6d:7d:fe:f1:67:58:d4:29:d5:a0:d9:
         c3:4e:23:09:ad:3d:5d:e3:f1:6b:a2:75:1a:58:46:35:1c:1b:
         13:14:64:20:6d:e9:b6:a2:c0:3c:84:1b:d9:67:cb:05:39:eb:
         65:94:c2:8c:4d:ff:54:47:d5:11:75:de:ea:d2:b0:55:54:0f:
         39:ed:31:b2:5e:30:28:ce:ba:51:92:79:70:01:4b:c3:25:64:
         3e:69:62:3e:a7:89:af:d7:43:3e:02:56:91:7c:20:d0:d8:e2:
         eb:01:f0:6e:a4:fb:ba:4c:64:f9:82:1d:56:d0:9e:86:aa:25:
         b6:5f:d8:5d:42:91:83:4e:eb:8e:11:b5:ff:e8:5d:d8:41:0a:
         43:1a:fc:a2:c3:e9:79:07:40:6d:9d:f5:a8:fa:ab:0f:7b:da:
         62:38:f4:8d:c0:df:9b:a2:2c:f9:0a:5e:df:b9:fb:33:40:d5:
         7a:dd:bb:9f:8b:cc:9e:90:b8:f0:79:44:dc:47:5f:eb:c6:8c:
         eb:84:0a:45:9f:3b:77:fb:48:b4:f0:05:c6:9a:b9:a5:f3:d1:
         2c:74:9e:75:4e:3c:31:be:be:2e:64:77:47:86:d3:9c:40:f6:
         e2:5e:e9:1e:39:ba:17:58:04:41:d1:bf:44:55:ed:70:6e:a2:
         63:32:fb:12
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUG0E17P4K9WL4vqNYSDz0QAUGF2EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQwMzA2QzIzRkY1NjRBRjU0Qjc5RDhGOThEMERDRERD
OTMwQjIxRjAeFw0yNDA0MTgxNDMzNDBaFw0yNTA0MTcxNDM4NDBaMDMxMTAvBgNV
BAMTKEM3MzgyNEU1Nzc4NzgxNTQwRDU0OTI3QjNCRUQ3NUI0NzM3MUVGRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkHflBtk11PZhied0ErJ4piiWI
EshKibg3ZlDTWRZjYHQtRMoSBc2cR1CTpZ6S67uTbcN9L1xAM6K25MV3ib46pzMG
JwzlmCrziZka2s9di5voWsQXoAtPvXFn3DjaGnbZh4k9xyKUJDHit7TShPvQBLIY
vRpgKsCLPiB+tF93Ngb82SHugOavqsOCE2LJdwwcHM2xerqrhTxDGIJdyTbv6MGb
JxCgtqMaWzkdUpNkjmQ4aXRDMFrcFE5BY/F2Aa8aFei/lSlHqaGkpwIairNzcVP5
PR3lZmbmrrQN/693XU14S0o9tWVTT/Y9BYPgdCE5ePVCGwQqCNl/q5HgyKl7AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUxzgk5XeHgVQNVJJ7O+11tHNx79kwHwYDVR0j
BBgwFoAUjQMGwj/1ZK9Ut52PmNDc3ckwsh8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkNYdkZVWXY4NDdNOEtOQUhGREppb3VUcUpCdDJWUU5xbUVOVHFNeFhG
TU4vMC84RDAzMDZDMjNGRjU2NEFGNTRCNzlEOEY5OEQwRENEREM5MzBCMjFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhEMDMwNkMyM0ZGNTY0QUY1
NEI3OUQ4Rjk4RDBEQ0REQzkzMEIyMUYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pDWHZGVVl2ODQ3TThLTkFIRkRKaW91VHFKQnQyVlFOcW1FTlRxTXhYRk1OLzAv
MzIzMDMxMmUzMTM1MzgyZTM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzYzMTM5
MzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAcmeCDANBgkqhkiG9w0BAQsFAAOCAQEApd8fNXhqc219
/vFnWNQp1aDZw04jCa09XePxa6J1GlhGNRwbExRkIG3ptqLAPIQb2WfLBTnrZZTC
jE3/VEfVEXXe6tKwVVQPOe0xsl4wKM66UZJ5cAFLwyVkPmliPqeJr9dDPgJWkXwg
0Nji6wHwbqT7ukxk+YIdVtCehqoltl/YXUKRg07rjhG1/+hd2EEKQxr8osPpeQdA
bZ31qPqrD3vaYjj0jcDfm6Is+Qpe37n7M0DVet27n4vMnpC48HlE3Edf68aM64QK
RZ87d/tItPAFxpq5pfPRLHSedU48Mb6+LmR3R4bTnED24l7pHjm6F1gEQdG/RFXt
cG6iYzL7Eg==
-----END CERTIFICATE-----
Generated at Sun Jun 2 11:54:04 2024 by rpki-client on console-fra.rpki-client.org