Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/1/3133382e39372e3230382e302f32322d3332203d3e20323634323031.roa
File:                     3133382e39372e3230382e302f32322d3332203d3e20323634323031.roa (raw, json)
Hash identifier:          LwqKezlKdWBIqfmXwBiNmDit7paseJmasdl0055Y46I=
Subject key identifier:   6B:DC:84:46:98:C9:C3:5A:8C:44:93:08:9E:F7:09:F1:85:C6:69:1E
Certificate issuer:       /CN=8E1E54DB030D4E86E9AF9B44C4588E78821D597A
Certificate serial:       4C96AAFFC360AB84B44AB2E50D3770970B3A5AE4
Authority key identifier: 8E:1E:54:DB:03:0D:4E:86:E9:AF:9B:44:C4:58:8E:78:82:1D:59:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E1E54DB030D4E86E9AF9B44C4588E78821D597A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/1/3133382e39372e3230382e302f32322d3332203d3e20323634323031.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     264201
IP address blocks:        138.97.208.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/1/8E1E54DB030D4E86E9AF9B44C4588E78821D597A.crl
                          rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/1/8E1E54DB030D4E86E9AF9B44C4588E78821D597A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E1E54DB030D4E86E9AF9B44C4588E78821D597A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:96:aa:ff:c3:60:ab:84:b4:4a:b2:e5:0d:37:70:97:0b:3a:5a:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1E54DB030D4E86E9AF9B44C4588E78821D597A
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject: CN=3082010A0282010100FCC9002DF58C3E88ECD7265CDA62F93A2ECF2D3F8CC083142F2512A483AFD1C9A0C755284C751B14EEB6B6CD6C89833E571E75F8381BB8A9F3CC34ECEA1AEDF92174C926F98F7E3FD4388E2706559312BCA31654579661F11290F16A9B6F014252144203E30D6D9EDCDFABA151B290BA9C5062A70C3877BF6EBEF64426D42B546AD37AE36DE9827FA4C85B40161F7427F35CCFC7AB5D2F102E8A8264370392A3607B9E365C45F8B28CF15C2B6727E84C6CD14B80BAC3F615BA370466E9DF336486B149FB76CFC0C698BCD607B6BF2F6777786B9E3136E243B99D70E6F9D8F02D83BEEB0C0BFD4E23F11DAB2D954981970518BA8A5103F66513538C3ED67698B30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:c9:00:2d:f5:8c:3e:88:ec:d7:26:5c:da:62:
                    f9:3a:2e:cf:2d:3f:8c:c0:83:14:2f:25:12:a4:83:
                    af:d1:c9:a0:c7:55:28:4c:75:1b:14:ee:b6:b6:cd:
                    6c:89:83:3e:57:1e:75:f8:38:1b:b8:a9:f3:cc:34:
                    ec:ea:1a:ed:f9:21:74:c9:26:f9:8f:7e:3f:d4:38:
                    8e:27:06:55:93:12:bc:a3:16:54:57:96:61:f1:12:
                    90:f1:6a:9b:6f:01:42:52:14:42:03:e3:0d:6d:9e:
                    dc:df:ab:a1:51:b2:90:ba:9c:50:62:a7:0c:38:77:
                    bf:6e:be:f6:44:26:d4:2b:54:6a:d3:7a:e3:6d:e9:
                    82:7f:a4:c8:5b:40:16:1f:74:27:f3:5c:cf:c7:ab:
                    5d:2f:10:2e:8a:82:64:37:03:92:a3:60:7b:9e:36:
                    5c:45:f8:b2:8c:f1:5c:2b:67:27:e8:4c:6c:d1:4b:
                    80:ba:c3:f6:15:ba:37:04:66:e9:df:33:64:86:b1:
                    49:fb:76:cf:c0:c6:98:bc:d6:07:b6:bf:2f:67:77:
                    78:6b:9e:31:36:e2:43:b9:9d:70:e6:f9:d8:f0:2d:
                    83:be:eb:0c:0b:fd:4e:23:f1:1d:ab:2d:95:49:81:
                    97:05:18:ba:8a:51:03:f6:65:13:53:8c:3e:d6:76:
                    98:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DC:84:46:98:C9:C3:5A:8C:44:93:08:9E:F7:09:F1:85:C6:69:1E
            X509v3 Authority Key Identifier:
                keyid:8E:1E:54:DB:03:0D:4E:86:E9:AF:9B:44:C4:58:8E:78:82:1D:59:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/1/8E1E54DB030D4E86E9AF9B44C4588E78821D597A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E1E54DB030D4E86E9AF9B44C4588E78821D597A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/1/3133382e39372e3230382e302f32322d3332203d3e20323634323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:f4:2d:94:cf:27:10:bd:a0:73:7a:86:b9:a2:b3:a3:b6:59:
         16:68:47:9f:07:86:87:9e:8e:82:f1:31:40:89:db:eb:41:47:
         f7:be:63:50:0a:b3:c8:08:0d:d5:dc:c9:5f:6b:1f:f5:b1:94:
         85:51:e0:9a:dc:2f:b4:72:11:9d:9f:9e:82:8e:de:21:f8:6c:
         70:ff:47:a3:f7:94:a0:50:c9:5c:b1:2a:31:5e:57:e6:41:8b:
         dd:00:e9:77:fe:68:a5:0f:08:fa:99:62:06:90:39:d5:2d:b5:
         6f:fe:8d:99:4e:e7:a2:60:90:e4:82:ce:cd:d7:b7:d1:0a:5e:
         97:1a:8f:ef:4e:9f:40:9d:a9:72:07:ba:91:06:8f:90:cd:75:
         f6:4e:75:f4:14:07:1b:5e:b6:7b:3c:7d:7d:dd:be:79:c7:80:
         71:a3:98:cc:c8:a9:c3:18:5a:03:2d:52:4e:d4:83:85:cf:fb:
         f2:27:59:05:c0:6e:1f:c2:c5:1b:d9:95:70:6f:ce:9b:2b:5c:
         df:d7:5c:d9:b5:77:42:11:8f:2e:76:8c:ee:08:1c:fe:f5:7b:
         47:43:de:13:74:fd:c7:a7:91:8b:84:86:fb:91:f7:e6:86:8f:
         44:e3:e0:33:e0:5d:8e:6d:14:b7:79:ec:08:69:20:68:88:c5:
         81:f9:5a:0f
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUTJaq/8Ngq4S0SrLlDTdwlws6WuQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEUxRTU0REIwMzBENEU4NkU5QUY5QjQ0QzQ1ODhFNzg4
MjFENTk3QTAeFw0yNDA0MDMxODU1MDBaFw0yNTA0MDMxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRkNDOTAwMkRGNThDM0U4OEVD
RDcyNjVDREE2MkY5M0EyRUNGMkQzRjhDQzA4MzE0MkYyNTEyQTQ4M0FGRDFDOUEw
Qzc1NTI4NEM3NTFCMTRFRUI2QjZDRDZDODk4MzNFNTcxRTc1RjgzODFCQjhBOUYz
Q0MzNEVDRUExQUVERjkyMTc0QzkyNkY5OEY3RTNGRDQzODhFMjcwNjU1OTMxMkJD
QTMxNjU0NTc5NjYxRjExMjkwRjE2QTlCNkYwMTQyNTIxNDQyMDNFMzBENkQ5RURD
REZBQkExNTFCMjkwQkE5QzUwNjJBNzBDMzg3N0JGNkVCRUY2NDQyNkQ0MkI1NDZB
RDM3QUUzNkRFOTgyN0ZBNEM4NUI0MDE2MUY3NDI3RjM1Q0NGQzdBQjVEMkYxMDJF
OEE4MjY0MzcwMzkyQTM2MDdCOUUzNjVDNDVGOEIyOENGMTVDMkI2NzI3RTg0QzZD
RDE0QjgwQkFDM0Y2MTVCQTM3MDQ2NkU5REYzMzY0ODZCMTQ5RkI3NkNGQzBDNjk4
QkNENjA3QjZCRjJGNjc3Nzc4NkI5RTMxMzZFMjQzQjk5RDcwRTZGOUQ4RjAyRDgz
QkVFQjBDMEJGRDRFMjNGMTFEQUIyRDk1NDk4MTk3MDUxOEJBOEE1MTAzRjY2NTEz
NTM4QzNFRDY3Njk4QjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA/MkALfWMPojs1yZc2mL5Oi7PLT+MwIMULyUSpIOv0cmgx1UoTHUb
FO62ts1siYM+Vx51+DgbuKnzzDTs6hrt+SF0ySb5j34/1DiOJwZVkxK8oxZUV5Zh
8RKQ8WqbbwFCUhRCA+MNbZ7c36uhUbKQupxQYqcMOHe/br72RCbUK1Rq03rjbemC
f6TIW0AWH3Qn81zPx6tdLxAuioJkNwOSo2B7njZcRfiyjPFcK2cn6Exs0UuAusP2
Fbo3BGbp3zNkhrFJ+3bPwMaYvNYHtr8vZ3d4a54xNuJDuZ1w5vnY8C2DvusMC/1O
I/Edqy2VSYGXBRi6ilED9mUTU4w+1naYswIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FGvchEaYycNajESTCJ73CfGFxmkeMB8GA1UdIwQYMBaAFI4eVNsDDU6G6a+bRMRY
jniCHVl6MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJYR250OHNHVVFOWEpD
eHFqSGgzc3RNY013NHFtZFpuQXlqRVhDY1FTREFGLzEvOEUxRTU0REIwMzBENEU4
NkU5QUY5QjQ0QzQ1ODhFNzg4MjFENTk3QS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS84RTFFNTREQjAzMEQ0RTg2RTlBRjlCNDRDNDU4OEU3ODgyMUQ1
OTdBLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yWEdudDhzR1VRTlhKQ3hxakho
M3N0TWNNdzRxbWRabkF5akVYQ2NRU0RBRi8xLzMxMzMzODJlMzkzNzJlMzIzMDM4
MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM0MzIzMDMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
imHQMA0GCSqGSIb3DQEBCwUAA4IBAQBJ9C2UzycQvaBzeoa5orOjtlkWaEefB4aH
no6C8TFAidvrQUf3vmNQCrPICA3V3Mlfax/1sZSFUeCa3C+0chGdn56Cjt4h+Gxw
/0ej95SgUMlcsSoxXlfmQYvdAOl3/milDwj6mWIGkDnVLbVv/o2ZTueiYJDkgs7N
17fRCl6XGo/vTp9AnalyB7qRBo+QzXX2TnX0FAcbXrZ7PH193b55x4Bxo5jMyKnD
GFoDLVJO1IOFz/vyJ1kFwG4fwsUb2ZVwb86bK1zf11zZtXdCEY8udozuCBz+9XtH
Q94TdP3Hp5GLhIb7kffmho9E4+Az4F2ObRS3eewIaSBoiMWB+VoP
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:30 2024 by rpki-client on console-fra.rpki-client.org