Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/3138372e37332e3234302e302f32302d3234203d3e20323632363639.roa
File:                     3138372e37332e3234302e302f32302d3234203d3e20323632363639.roa (raw, json)
Hash identifier:          jFCGEQhEJPAE8SvgLf6upqM8QGd5H1BVNn6no+Drxq0=
Subject key identifier:   B3:78:7E:F4:2F:64:BF:23:73:CC:29:B5:93:E4:B9:54:FE:D2:17:6B
Certificate issuer:       /CN=F9FB33583132547FA2AA2454BAD750E527E58EAD
Certificate serial:       0E6B9CD2D6C07B533B1C2B7267A6B85FBF2285EF
Authority key identifier: F9:FB:33:58:31:32:54:7F:A2:AA:24:54:BA:D7:50:E5:27:E5:8E:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9FB33583132547FA2AA2454BAD750E527E58EAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/3138372e37332e3234302e302f32302d3234203d3e20323632363639.roa
Signing time:             Wed 17 Apr 2024 18:19:02 +0000
ROA not before:           Wed 17 Apr 2024 18:14:02 +0000
ROA not after:            Wed 16 Apr 2025 18:19:02 +0000
asID:                     262669
IP address blocks:        187.73.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/F9FB33583132547FA2AA2454BAD750E527E58EAD.crl
                          rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/F9FB33583132547FA2AA2454BAD750E527E58EAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9FB33583132547FA2AA2454BAD750E527E58EAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 16:28:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:6b:9c:d2:d6:c0:7b:53:3b:1c:2b:72:67:a6:b8:5f:bf:22:85:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9FB33583132547FA2AA2454BAD750E527E58EAD
        Validity
            Not Before: Apr 17 18:14:02 2024 GMT
            Not After : Apr 16 18:19:02 2025 GMT
        Subject: CN=B3787EF42F64BF2373CC29B593E4B954FED2176B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d7:53:31:f7:07:fa:19:c0:f7:f4:85:8b:fb:
                    52:49:02:03:ff:4a:44:b0:f7:be:3f:fa:d5:4e:3b:
                    35:3d:5d:aa:b5:90:00:10:44:c7:c2:e3:04:85:a2:
                    f7:c7:9f:72:59:f1:91:3e:81:44:64:25:41:20:b8:
                    92:90:f5:38:f0:9a:da:28:ea:3b:c0:fc:86:d4:8e:
                    78:a7:41:80:9b:68:1e:24:8d:69:49:81:3b:08:0e:
                    e1:29:d7:aa:ec:91:ce:67:da:a4:53:24:12:ae:3a:
                    60:32:5e:17:49:78:f2:91:01:09:fc:d0:27:01:6a:
                    ea:00:19:01:6c:e0:11:54:51:33:d1:e5:16:9d:be:
                    72:03:26:91:c9:0f:59:8e:35:3d:74:e3:9f:7e:76:
                    88:33:0a:a1:d0:5f:cb:ac:cb:c5:70:62:9a:42:e4:
                    d5:dd:5f:11:ea:bf:d7:e5:99:06:26:d7:83:3b:c7:
                    16:af:68:e2:8e:10:16:99:61:ae:88:bf:54:55:37:
                    c7:6a:47:e7:91:97:21:21:85:82:75:f8:4b:43:24:
                    e0:93:04:e2:41:d0:69:20:c2:f1:9e:ca:8d:a0:2a:
                    9c:75:30:7a:b2:5d:43:72:cc:6a:40:01:4d:3c:c8:
                    6a:77:39:64:32:35:d3:e3:16:29:29:7b:7c:a3:e8:
                    44:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:78:7E:F4:2F:64:BF:23:73:CC:29:B5:93:E4:B9:54:FE:D2:17:6B
            X509v3 Authority Key Identifier:
                keyid:F9:FB:33:58:31:32:54:7F:A2:AA:24:54:BA:D7:50:E5:27:E5:8E:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/F9FB33583132547FA2AA2454BAD750E527E58EAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9FB33583132547FA2AA2454BAD750E527E58EAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/3138372e37332e3234302e302f32302d3234203d3e20323632363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         78:a3:8e:a0:63:31:a4:ad:52:8b:8a:78:ba:86:ce:31:3e:6a:
         7f:29:ba:85:3b:9b:43:bf:7a:e4:69:cf:40:e4:53:40:80:70:
         14:56:fa:eb:3f:b2:9f:42:dd:4f:91:dd:fe:fb:7a:05:17:2e:
         18:1a:98:bd:24:49:2a:64:fd:52:73:e5:1e:79:c4:ee:e7:ce:
         d8:98:7a:f6:50:fd:e7:a0:a1:ae:1a:fc:30:83:58:30:0e:87:
         77:56:49:49:fe:ad:03:50:97:b4:bd:87:4f:55:4e:97:af:75:
         25:12:3b:c8:83:be:b1:d6:c3:fb:c4:32:59:5a:ae:fe:3e:de:
         07:55:96:9d:7b:7c:57:82:ab:df:bf:ee:d7:92:e9:19:f5:c2:
         39:2e:55:39:d2:b1:4b:58:ba:e4:37:b5:f1:d0:0e:5f:f7:03:
         d2:d7:ac:f5:85:d4:d9:77:9e:8e:48:55:38:03:35:f7:1f:16:
         4a:03:39:e9:b6:e9:1a:02:0e:41:66:ed:31:53:d2:b8:a9:69:
         9d:d5:61:ca:02:f5:4e:92:71:2e:28:c2:0c:82:a1:96:45:4e:
         ff:22:9b:4f:ef:1a:fa:f3:b5:d6:24:05:3b:3f:87:6d:6e:1c:
         79:a8:66:e5:9c:32:99:39:88:72:e3:5b:90:c4:27:2a:65:1d:
         52:d1:8d:16
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDmuc0tbAe1M7HCtyZ6a4X78ihe8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjlGQjMzNTgzMTMyNTQ3RkEyQUEyNDU0QkFENzUwRTUy
N0U1OEVBRDAeFw0yNDA0MTcxODE0MDJaFw0yNTA0MTYxODE5MDJaMDMxMTAvBgNV
BAMTKEIzNzg3RUY0MkY2NEJGMjM3M0NDMjlCNTkzRTRCOTU0RkVEMjE3NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY11Mx9wf6GcD39IWL+1JJAgP/
SkSw974/+tVOOzU9Xaq1kAAQRMfC4wSFovfHn3JZ8ZE+gURkJUEguJKQ9Tjwmtoo
6jvA/IbUjninQYCbaB4kjWlJgTsIDuEp16rskc5n2qRTJBKuOmAyXhdJePKRAQn8
0CcBauoAGQFs4BFUUTPR5RadvnIDJpHJD1mONT10459+dogzCqHQX8usy8VwYppC
5NXdXxHqv9flmQYm14M7xxavaOKOEBaZYa6Iv1RVN8dqR+eRlyEhhYJ1+EtDJOCT
BOJB0GkgwvGeyo2gKpx1MHqyXUNyzGpAAU08yGp3OWQyNdPjFikpe3yj6ER7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUs3h+9C9kvyNzzCm1k+S5VP7SF2swHwYDVR0j
BBgwFoAU+fszWDEyVH+iqiRUutdQ5Sfljq0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmc5ZVdVelVjVTVqbUZTakVmMUVBOUZIWk5ENWtLd0tyYmpmcUtrS2dp
ZlQvMC9GOUZCMzM1ODMxMzI1NDdGQTJBQTI0NTRCQUQ3NTBFNTI3RTU4RUFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5RkIzMzU4MzEzMjU0N0ZB
MkFBMjQ1NEJBRDc1MEU1MjdFNThFQUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJnOWVXVXpVY1U1am1GU2pFZjFFQTlGSFpORDVrS3dLcmJqZnFLa0tnaWZULzAv
MzEzODM3MmUzNzMzMmUzMjM0MzAyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS7SfAwDQYJKoZIhvcNAQELBQADggEBAHijjqBj
MaStUouKeLqGzjE+an8puoU7m0O/euRpz0DkU0CAcBRW+us/sp9C3U+R3f77egUX
LhgamL0kSSpk/VJz5R55xO7nztiYevZQ/eegoa4a/DCDWDAOh3dWSUn+rQNQl7S9
h09VTpevdSUSO8iDvrHWw/vEMllarv4+3gdVlp17fFeCq9+/7teS6Rn1wjkuVTnS
sUtYuuQ3tfHQDl/3A9LXrPWF1Nl3no5IVTgDNfcfFkoDOem26RoCDkFm7TFT0rip
aZ3VYcoC9U6ScS4owgyCoZZFTv8im0/vGvrztdYkBTs/h21uHHmoZuWcMpk5iHLj
W5DEJyplHVLRjRY=
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:44:24 2024 by rpki-client on console-fra.rpki-client.org