Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3133312e37322e3234342e302f32342d3234203d3e20323632333933.roa
File:                     3133312e37322e3234342e302f32342d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          gSPhO5Ik4iQk+rzM8XJ+sXykgDjP6xCYPZHFV5slxJI=
Subject key identifier:   83:26:29:22:49:DF:3B:96:DC:D9:79:8B:82:2D:F6:A5:53:3D:6A:25
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       60A11E86F19BE9BFEB5FBEAB74D15BBCA69D3502
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3133312e37322e3234342e302f32342d3234203d3e20323632333933.roa
Signing time:             Sun 05 May 2024 21:40:37 +0000
ROA not before:           Sun 05 May 2024 21:35:37 +0000
ROA not after:            Sun 04 May 2025 21:40:37 +0000
asID:                     262393
IP address blocks:        131.72.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
                          rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a1:1e:86:f1:9b:e9:bf:eb:5f:be:ab:74:d1:5b:bc:a6:9d:35:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: May  5 21:35:37 2024 GMT
            Not After : May  4 21:40:37 2025 GMT
        Subject: CN=8326292249DF3B96DCD9798B822DF6A5533D6A25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:da:4e:d5:fd:ba:38:8b:af:ab:fe:fb:63:1c:
                    6e:45:f7:4f:09:8b:dd:de:f0:56:99:47:27:5c:f2:
                    34:59:3a:66:12:f2:67:dd:38:13:0f:dd:b0:2d:43:
                    17:78:3b:92:41:10:89:d6:16:3a:df:4d:c1:ac:91:
                    ef:c2:7e:2e:29:32:c3:7a:0b:b4:39:30:46:d3:75:
                    d6:52:7f:9d:b6:2c:0b:23:2e:16:66:57:46:0f:75:
                    af:ba:b8:5e:86:67:28:a1:25:58:19:93:dd:62:54:
                    58:3b:73:68:73:17:93:d7:90:46:97:f6:00:af:75:
                    e7:30:cb:d1:d7:3b:cd:60:18:00:e6:64:1c:29:f9:
                    e1:50:b0:c6:84:6b:67:32:46:37:dc:01:0d:ae:37:
                    3d:a4:63:49:da:de:6c:4c:f6:ee:c6:f2:43:22:fa:
                    6e:ea:3f:a7:06:29:d2:67:09:ae:f6:43:23:42:5a:
                    28:b8:2f:56:08:da:e1:cd:46:a9:49:e2:f6:32:cf:
                    17:f3:07:e2:7b:d1:17:d6:c9:3a:fd:0c:65:11:1f:
                    74:c3:07:1d:c7:4a:ef:e3:34:17:cd:66:5d:28:76:
                    fd:b9:22:83:80:d6:89:de:b1:cb:67:c9:8a:50:34:
                    80:e5:c2:d7:a5:6a:ad:42:f9:94:ac:b7:3b:ef:9d:
                    03:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:26:29:22:49:DF:3B:96:DC:D9:79:8B:82:2D:F6:A5:53:3D:6A:25
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3133312e37322e3234342e302f32342d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:92:33:2d:de:13:1e:c8:3a:49:96:82:45:4b:fe:b1:4b:f2:
         e7:54:db:0e:76:57:ff:95:29:00:7f:64:47:17:1a:aa:48:ff:
         85:c2:cb:d7:6d:b9:fc:fe:74:e6:6c:5a:60:0c:c6:7f:a1:09:
         ec:1a:54:a3:c6:f9:07:01:96:15:12:e4:6f:2e:57:80:46:9c:
         31:bd:c3:10:b4:7e:f5:8a:d7:c6:7a:d1:41:d2:42:ba:a8:fb:
         f8:cb:24:e9:8a:77:1f:9b:24:8b:45:73:8a:bb:e0:b4:5e:3f:
         70:68:1e:a5:c8:a6:2d:78:46:f7:3a:87:d3:84:e5:c0:ca:2c:
         c6:df:3c:fa:a0:67:7e:09:bb:63:99:a1:75:a5:19:70:4f:61:
         23:93:20:67:e0:69:af:01:5c:88:ac:84:21:67:f8:6f:fd:5f:
         14:23:8b:70:ef:9d:e8:a1:7d:69:c3:1f:37:93:b7:16:b6:55:
         5d:58:5c:ca:fe:81:4c:b8:91:0d:8a:71:fd:d2:2d:a8:0c:47:
         b7:a5:e5:21:71:1c:bc:f2:7f:e9:a4:b4:26:ca:c0:a0:86:9d:
         ba:b9:81:e8:55:8d:13:f0:fe:65:44:9a:28:c5:26:a6:e3:20:
         5c:66:97:14:d7:c1:e0:9a:9d:31:7d:1e:76:78:af:54:f8:46:
         17:11:2a:24
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYKEehvGb6b/rX76rdNFbvKadNQIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhCQjFGM0M3QjEwNjc3Njk3RDM2NzU4NjFGNThFQzVF
NEM0QjFFNTAeFw0yNDA1MDUyMTM1MzdaFw0yNTA1MDQyMTQwMzdaMDMxMTAvBgNV
BAMTKDgzMjYyOTIyNDlERjNCOTZEQ0Q5Nzk4QjgyMkRGNkE1NTMzRDZBMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw2k7V/bo4i6+r/vtjHG5F908J
i93e8FaZRydc8jRZOmYS8mfdOBMP3bAtQxd4O5JBEInWFjrfTcGske/Cfi4pMsN6
C7Q5MEbTddZSf522LAsjLhZmV0YPda+6uF6GZyihJVgZk91iVFg7c2hzF5PXkEaX
9gCvdecwy9HXO81gGADmZBwp+eFQsMaEa2cyRjfcAQ2uNz2kY0na3mxM9u7G8kMi
+m7qP6cGKdJnCa72QyNCWii4L1YI2uHNRqlJ4vYyzxfzB+J70RfWyTr9DGURH3TD
Bx3HSu/jNBfNZl0odv25IoOA1onesctnyYpQNIDlwtelaq1C+ZSstzvvnQNbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUgyYpIknfO5bc2XmLgi32pVM9aiUwHwYDVR0j
BBgwFoAUyLsfPHsQZ3aX02dYYfWOxeTEseUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk1UdTh5aEZMcm9HTkdDcVZrUzJpVDlhOGhONHFTeTlZZHM0NXJhZkFL
VTYvMS9DOEJCMUYzQzdCMTA2Nzc2OTdEMzY3NTg2MUY1OEVDNUU0QzRCMUU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4QkIxRjNDN0IxMDY3NzY5
N0QzNjc1ODYxRjU4RUM1RTRDNEIxRTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJNVHU4eWhGTHJvR05HQ3FWa1MyaVQ5YThoTjRxU3k5WWRzNDVyYWZBS1U2LzEv
MzEzMzMxMmUzNzMyMmUzMjM0MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzMzM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACDSPQwDQYJKoZIhvcNAQELBQADggEBAJSSMy3e
Ex7IOkmWgkVL/rFL8udU2w52V/+VKQB/ZEcXGqpI/4XCy9dtufz+dOZsWmAMxn+h
CewaVKPG+QcBlhUS5G8uV4BGnDG9wxC0fvWK18Z60UHSQrqo+/jLJOmKdx+bJItF
c4q74LReP3BoHqXIpi14Rvc6h9OE5cDKLMbfPPqgZ34Ju2OZoXWlGXBPYSOTIGfg
aa8BXIishCFn+G/9XxQji3DvneihfWnDHzeTtxa2VV1YXMr+gUy4kQ2Kcf3SLagM
R7el5SFxHLzyf+mktCbKwKCGnbq5gehVjRPw/mVEmijFJqbjIFxmlxTXweCanTF9
HnZ4r1T4RhcRKiQ=
-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:03 2024 by rpki-client on console-ams.rpki-client.org