Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3139302e3130332e3135342e302f32332d3233203d3e20323730393336.roa
File:                     3139302e3130332e3135342e302f32332d3233203d3e20323730393336.roa (raw, json)
Hash identifier:          rgr4fvTUAqNSLuV+Fphsi4qmp3Uavag+xETIODa10HU=
Subject key identifier:   A9:F4:80:50:59:69:16:AA:CE:40:0D:C8:58:25:51:05:91:BA:83:88
Certificate issuer:       /CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
Certificate serial:       4773488F970B30219BC69C2BA46C6A0A9773134A
Authority key identifier: AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3139302e3130332e3135342e302f32332d3233203d3e20323730393336.roa
Signing time:             Fri 16 Aug 2024 01:49:05 +0000
ROA not before:           Fri 16 Aug 2024 01:44:05 +0000
ROA not after:            Fri 15 Aug 2025 01:49:05 +0000
asID:                     270936
IP address blocks:        190.103.154.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl
                          rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:73:48:8f:97:0b:30:21:9b:c6:9c:2b:a4:6c:6a:0a:97:73:13:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
        Validity
            Not Before: Aug 16 01:44:05 2024 GMT
            Not After : Aug 15 01:49:05 2025 GMT
        Subject: CN=A9F48050596916AACE400DC85825510591BA8388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b9:19:74:06:d9:8b:0f:e0:d0:ce:d1:7c:d7:
                    39:65:87:0a:7a:d7:95:f2:8e:fe:2c:52:c6:57:4a:
                    fc:5c:4c:5a:00:f8:32:6b:1e:64:da:3c:79:91:24:
                    02:5d:ab:79:49:ca:c2:c0:ae:09:8c:a6:97:29:27:
                    33:2f:a5:9a:75:cd:fe:df:76:1b:59:18:4a:c4:09:
                    c4:b4:47:08:91:18:9a:7a:b6:95:cd:0c:d4:30:09:
                    14:4c:cc:44:ef:f6:02:fa:3d:32:f8:77:20:3d:02:
                    51:0b:e5:97:40:5f:ea:38:f2:97:38:68:8b:95:59:
                    31:23:cc:0b:7b:9b:08:5a:2a:cd:d7:e9:ae:fb:e1:
                    7c:a5:15:e5:a9:5e:a6:6c:92:57:38:2c:0d:f4:a4:
                    ae:7e:82:7c:c8:05:08:7e:1d:bb:83:fd:0c:63:26:
                    44:bd:e6:4a:bb:b4:6e:9a:ac:a4:eb:f7:d1:7c:54:
                    d5:9d:43:bd:37:11:a9:a3:79:5a:89:80:fe:82:ce:
                    7c:c8:c4:35:6d:3f:f0:1b:ab:8a:84:3c:60:82:53:
                    b8:b1:a4:ae:da:64:dc:ab:ca:97:4e:2e:6f:c7:a8:
                    19:23:ff:b3:df:05:d6:6a:a5:96:9f:9e:50:77:3c:
                    4d:5e:35:a4:db:e8:d2:bc:33:0a:70:bc:57:12:a0:
                    66:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F4:80:50:59:69:16:AA:CE:40:0D:C8:58:25:51:05:91:BA:83:88
            X509v3 Authority Key Identifier:
                keyid:AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3139302e3130332e3135342e302f32332d3233203d3e20323730393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:37:eb:ea:e0:10:f1:64:54:a8:6f:07:a0:0b:1f:58:8a:26:
         47:33:d8:99:35:5f:5e:90:a6:be:bf:69:4e:5b:fc:89:5e:5f:
         14:09:51:e8:42:25:21:c1:4d:eb:1b:ee:06:33:5b:56:e7:0b:
         c1:27:d1:68:3e:1e:cd:93:10:ca:3b:4e:50:43:60:02:b7:64:
         b4:93:55:9d:7e:b7:d5:ca:d5:11:f8:8e:46:c2:a6:6f:d5:0d:
         19:78:34:ea:15:de:2b:cf:9c:c8:69:7d:56:69:2a:40:b9:ca:
         15:a8:c1:f5:63:ea:2d:32:3e:dc:0b:b8:6b:cf:a0:75:70:3a:
         b3:74:7f:c2:b1:74:f1:c3:93:e9:a1:9a:48:93:39:eb:e3:31:
         d1:7b:78:32:ce:68:cb:04:b1:6f:22:80:7c:49:79:9c:70:c5:
         b0:4b:b4:2f:1d:4a:61:90:42:5e:b6:f1:da:ce:52:f2:e6:72:
         da:cb:eb:08:12:7a:55:cb:4c:bb:2f:6f:2d:63:94:50:ed:5c:
         a6:c2:ba:ae:e8:6b:b4:1f:e3:07:70:bd:94:14:97:20:c6:f8:
         2f:ff:09:f5:60:68:9e:06:9e:e7:cc:58:7c:06:dd:6f:14:88:
         4b:04:83:3d:8f:df:19:9a:7d:4b:f7:60:40:a0:a9:17:15:47:
         fc:ea:64:3f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUR3NIj5cLMCGbxpwrpGxqCpdzE0owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUI5RUU3RDU2NUMwMjcwOTc1ODUzN0FGRUI3QkI4M0VD
NkFEMkVEMzAeFw0yNDA4MTYwMTQ0MDVaFw0yNTA4MTUwMTQ5MDVaMDMxMTAvBgNV
BAMTKEE5RjQ4MDUwNTk2OTE2QUFDRTQwMERDODU4MjU1MTA1OTFCQTgzODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvuRl0BtmLD+DQztF81zllhwp6
15Xyjv4sUsZXSvxcTFoA+DJrHmTaPHmRJAJdq3lJysLArgmMppcpJzMvpZp1zf7f
dhtZGErECcS0RwiRGJp6tpXNDNQwCRRMzETv9gL6PTL4dyA9AlEL5ZdAX+o48pc4
aIuVWTEjzAt7mwhaKs3X6a774XylFeWpXqZsklc4LA30pK5+gnzIBQh+HbuD/Qxj
JkS95kq7tG6arKTr99F8VNWdQ703EamjeVqJgP6CznzIxDVtP/Abq4qEPGCCU7ix
pK7aZNyrypdOLm/HqBkj/7PfBdZqpZafnlB3PE1eNaTb6NK8MwpwvFcSoGZNAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUqfSAUFlpFqrOQA3IWCVRBZG6g4gwHwYDVR0j
BBgwFoAUq57n1WXAJwl1hTev63u4PsatLtMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlNhcHluV0todW1HTmdIZkVHRFk3SjZDRW9udU54WHp5SEhhQ3ZFdkNj
dVkvMS9BQjlFRTdENTY1QzAyNzA5NzU4NTM3QUZFQjdCQjgzRUM2QUQyRUQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FCOUVFN0Q1NjVDMDI3MDk3
NTg1MzdBRkVCN0JCODNFQzZBRDJFRDMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJTYXB5bldLaHVtR05nSGZFR0RZN0o2Q0VvbnVOeFh6eUhIYUN2RXZDY3VZLzEv
MzEzOTMwMmUzMTMwMzMyZTMxMzUzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzczMDM5MzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAb5nmjANBgkqhkiG9w0BAQsFAAOCAQEAkDfr
6uAQ8WRUqG8HoAsfWIomRzPYmTVfXpCmvr9pTlv8iV5fFAlR6EIlIcFN6xvuBjNb
VucLwSfRaD4ezZMQyjtOUENgArdktJNVnX631crVEfiORsKmb9UNGXg06hXeK8+c
yGl9VmkqQLnKFajB9WPqLTI+3Au4a8+gdXA6s3R/wrF08cOT6aGaSJM56+Mx0Xt4
Ms5oywSxbyKAfEl5nHDFsEu0Lx1KYZBCXrbx2s5S8uZy2svrCBJ6VctMuy9vLWOU
UO1cpsK6ruhrtB/jB3C9lBSXIMb4L/8J9WBongae58xYfAbdbxSISwSDPY/fGZp9
S/dgQKCpFxVH/OpkPw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:05 2024 by rpki-client on console-ams.rpki-client.org