Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3139302e3130332e3135322e302f32322d3232203d3e20323730393336.roa
File:                     3139302e3130332e3135322e302f32322d3232203d3e20323730393336.roa (raw, json)
Hash identifier:          fZe18nZmxswokpcFvsQH+FwAsaqdk702DexKSPjVKA4=
Subject key identifier:   07:52:7F:D2:01:69:9C:64:8D:05:C0:E2:20:6D:F1:DA:B5:C8:1E:A7
Certificate issuer:       /CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
Certificate serial:       3DD03D517FD0435DBB3CC80BE8D64B84E2BF8427
Authority key identifier: AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3139302e3130332e3135322e302f32322d3232203d3e20323730393336.roa
Signing time:             Fri 16 Aug 2024 01:48:42 +0000
ROA not before:           Fri 16 Aug 2024 01:43:42 +0000
ROA not after:            Fri 15 Aug 2025 01:48:42 +0000
asID:                     270936
IP address blocks:        190.103.152.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl
                          rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d0:3d:51:7f:d0:43:5d:bb:3c:c8:0b:e8:d6:4b:84:e2:bf:84:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
        Validity
            Not Before: Aug 16 01:43:42 2024 GMT
            Not After : Aug 15 01:48:42 2025 GMT
        Subject: CN=07527FD201699C648D05C0E2206DF1DAB5C81EA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9c:8d:ec:36:74:c0:87:6d:78:d6:65:8e:d0:
                    71:c3:68:98:cf:b9:53:af:3c:60:0a:17:55:90:4e:
                    d8:97:52:3c:24:7f:0d:90:8d:06:49:f1:ae:14:9e:
                    1f:39:5f:46:fe:1c:f7:46:4f:6c:91:ed:03:9a:64:
                    13:b8:5b:80:4d:12:50:5a:75:f6:c5:5b:dd:4a:e2:
                    d9:94:fa:2a:e2:97:5c:45:ba:0d:35:0b:16:be:e1:
                    19:ae:2c:69:04:0d:d9:e1:22:ae:4f:a5:03:fa:2d:
                    7c:82:1c:59:cb:84:27:9b:db:5c:5f:c3:2f:03:70:
                    d0:e0:c7:74:32:96:8d:24:42:13:44:fd:a6:ee:5a:
                    6a:f4:5a:fe:70:03:75:36:51:45:10:5a:60:48:44:
                    d0:2e:fb:31:0e:65:75:9e:b9:0c:16:21:be:96:bb:
                    87:11:d1:b7:cd:5d:15:f7:de:09:89:67:3d:f6:0b:
                    e8:b6:91:61:61:1d:60:da:5d:60:91:c3:11:0d:64:
                    92:48:2e:eb:a8:ea:65:04:a9:9d:0c:ac:53:83:44:
                    ea:ec:79:fe:42:24:6c:7b:57:02:58:ab:fe:d0:fa:
                    5d:5a:be:1c:6e:14:3c:c9:47:4b:ba:ba:18:b6:9b:
                    6a:8c:bd:08:c0:92:8d:91:ca:43:da:9c:c1:82:45:
                    a5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:52:7F:D2:01:69:9C:64:8D:05:C0:E2:20:6D:F1:DA:B5:C8:1E:A7
            X509v3 Authority Key Identifier:
                keyid:AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3139302e3130332e3135322e302f32322d3232203d3e20323730393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:07:b7:92:d6:75:a3:f8:25:e0:35:ec:f6:4e:a1:d0:d9:dc:
         62:f3:a3:83:9c:3d:f6:63:bc:f4:0c:1f:4b:a4:6a:01:0a:30:
         54:2d:26:d2:f3:4d:f0:22:c4:b1:af:8a:75:b2:75:e3:97:2d:
         56:26:46:a2:21:af:4a:b0:03:93:89:97:8f:36:61:a8:e6:be:
         ba:e7:3b:d7:82:14:bd:02:66:d1:8f:24:62:55:cf:6c:d7:44:
         c8:f5:42:df:cb:99:60:db:b0:21:cb:63:e1:2b:5c:8d:77:1f:
         4d:60:60:8a:98:c4:c9:18:2b:d3:b8:1a:cd:62:02:7d:7b:16:
         41:84:84:f8:aa:af:90:a9:f2:06:3a:bd:68:b8:d5:ea:ac:f2:
         fb:81:b8:4b:28:fb:fe:9c:22:17:56:6b:27:e8:d7:c8:70:b9:
         99:21:39:6f:26:0f:be:c0:89:b1:12:58:e7:37:17:d9:31:39:
         7a:e0:91:2f:e1:20:4e:5b:3d:45:3d:e2:9e:28:8b:1f:a0:c1:
         9d:4a:7f:ad:c5:c1:b6:0e:fc:14:88:7f:53:cd:2c:c6:b2:fa:
         c0:c5:45:7f:48:d7:80:9d:59:55:86:7a:95:a6:f9:8d:f6:58:
         ee:db:1e:3f:7b:4e:18:13:eb:c7:a8:39:78:29:13:cd:fc:fd:
         d7:43:7e:45
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUPdA9UX/QQ127PMgL6NZLhOK/hCcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUI5RUU3RDU2NUMwMjcwOTc1ODUzN0FGRUI3QkI4M0VD
NkFEMkVEMzAeFw0yNDA4MTYwMTQzNDJaFw0yNTA4MTUwMTQ4NDJaMDMxMTAvBgNV
BAMTKDA3NTI3RkQyMDE2OTlDNjQ4RDA1QzBFMjIwNkRGMURBQjVDODFFQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+nI3sNnTAh2141mWO0HHDaJjP
uVOvPGAKF1WQTtiXUjwkfw2QjQZJ8a4Unh85X0b+HPdGT2yR7QOaZBO4W4BNElBa
dfbFW91K4tmU+iril1xFug01Cxa+4RmuLGkEDdnhIq5PpQP6LXyCHFnLhCeb21xf
wy8DcNDgx3Qylo0kQhNE/abuWmr0Wv5wA3U2UUUQWmBIRNAu+zEOZXWeuQwWIb6W
u4cR0bfNXRX33gmJZz32C+i2kWFhHWDaXWCRwxENZJJILuuo6mUEqZ0MrFODROrs
ef5CJGx7VwJYq/7Q+l1avhxuFDzJR0u6uhi2m2qMvQjAko2RykPanMGCRaVXAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUB1J/0gFpnGSNBcDiIG3x2rXIHqcwHwYDVR0j
BBgwFoAUq57n1WXAJwl1hTev63u4PsatLtMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlNhcHluV0todW1HTmdIZkVHRFk3SjZDRW9udU54WHp5SEhhQ3ZFdkNj
dVkvMS9BQjlFRTdENTY1QzAyNzA5NzU4NTM3QUZFQjdCQjgzRUM2QUQyRUQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FCOUVFN0Q1NjVDMDI3MDk3
NTg1MzdBRkVCN0JCODNFQzZBRDJFRDMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJTYXB5bldLaHVtR05nSGZFR0RZN0o2Q0VvbnVOeFh6eUhIYUN2RXZDY3VZLzEv
MzEzOTMwMmUzMTMwMzMyZTMxMzUzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzczMDM5MzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAr5nmDANBgkqhkiG9w0BAQsFAAOCAQEAuAe3
ktZ1o/gl4DXs9k6h0NncYvOjg5w99mO89AwfS6RqAQowVC0m0vNN8CLEsa+KdbJ1
45ctViZGoiGvSrADk4mXjzZhqOa+uuc714IUvQJm0Y8kYlXPbNdEyPVC38uZYNuw
Ictj4StcjXcfTWBgipjEyRgr07gazWICfXsWQYSE+KqvkKnyBjq9aLjV6qzy+4G4
Syj7/pwiF1ZrJ+jXyHC5mSE5byYPvsCJsRJY5zcX2TE5euCRL+EgTls9RT3iniiL
H6DBnUp/rcXBtg78FIh/U80sxrL6wMVFf0jXgJ1ZVYZ6lab5jfZY7tseP3tOGBPr
x6g5eCkTzfz910N+RQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:38 2024 by rpki-client on console-fra.rpki-client.org