Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/1/3139312e3234322e3130372e302f32342d3234203d3e20323633343736.roa
File:                     3139312e3234322e3130372e302f32342d3234203d3e20323633343736.roa (raw, json)
Hash identifier:          rAdJlBL4V/WIf48kpCffYr+5mzYx6oJWRk/74+EMR0o=
Subject key identifier:   92:83:01:BB:48:FC:F8:FA:00:7F:89:0E:29:9B:91:85:71:91:BA:45
Certificate issuer:       /CN=23D8772F1FE91464B5ECC47E55B96E95DD5594AA
Certificate serial:       2FA88B22CAD9DCC8E03E7CB485B35FDBCE6DE232
Authority key identifier: 23:D8:77:2F:1F:E9:14:64:B5:EC:C4:7E:55:B9:6E:95:DD:55:94:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23D8772F1FE91464B5ECC47E55B96E95DD5594AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/1/3139312e3234322e3130372e302f32342d3234203d3e20323633343736.roa
Signing time:             Thu 04 Apr 2024 21:49:57 +0000
ROA not before:           Thu 04 Apr 2024 21:44:57 +0000
ROA not after:            Thu 03 Apr 2025 21:49:57 +0000
asID:                     263476
IP address blocks:        191.242.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/1/23D8772F1FE91464B5ECC47E55B96E95DD5594AA.crl
                          rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/1/23D8772F1FE91464B5ECC47E55B96E95DD5594AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23D8772F1FE91464B5ECC47E55B96E95DD5594AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a8:8b:22:ca:d9:dc:c8:e0:3e:7c:b4:85:b3:5f:db:ce:6d:e2:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23D8772F1FE91464B5ECC47E55B96E95DD5594AA
        Validity
            Not Before: Apr  4 21:44:57 2024 GMT
            Not After : Apr  3 21:49:57 2025 GMT
        Subject: CN=928301BB48FCF8FA007F890E299B91857191BA45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:32:ce:b1:d3:f7:45:f9:0a:4b:2e:c0:33:a5:
                    a5:04:68:8c:c8:e4:17:2b:1a:75:e3:ce:0f:2a:fc:
                    aa:15:6d:fd:c3:4a:3d:6d:a6:65:89:ab:0a:ab:6a:
                    ee:96:7e:6a:ad:de:4d:42:d5:64:57:4f:a5:64:ee:
                    38:16:a5:fa:01:44:22:7e:7d:f1:18:f0:eb:d5:7c:
                    aa:61:54:3e:4b:3d:69:e9:24:b0:ec:db:1b:bb:56:
                    e1:71:ff:a8:43:d4:4a:3b:e9:8c:49:d7:18:4d:74:
                    5e:b1:29:05:46:0f:bf:0c:78:3e:6f:96:8a:eb:0a:
                    dd:cb:d7:fc:42:68:32:13:31:e3:3f:a4:a6:80:2a:
                    3d:d4:65:c8:34:5e:ba:7b:67:66:05:d7:9c:64:3c:
                    e3:19:8f:d8:7a:00:eb:fc:a6:25:94:9f:1a:81:3e:
                    1a:4a:09:d0:4f:95:d2:49:63:3b:22:e9:33:81:10:
                    a3:e7:e1:c1:26:f4:af:9d:96:48:10:a9:97:bb:4a:
                    5f:76:7e:7b:c5:f0:44:48:ca:d1:7e:46:95:4f:e0:
                    67:35:d3:5e:33:39:b7:15:54:ca:a6:af:04:57:9d:
                    69:4c:09:a6:b5:6a:68:18:ac:b2:d9:85:cb:b3:5b:
                    3b:23:9c:24:9f:25:47:8d:2e:d8:11:e4:a9:d6:92:
                    3c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:83:01:BB:48:FC:F8:FA:00:7F:89:0E:29:9B:91:85:71:91:BA:45
            X509v3 Authority Key Identifier:
                keyid:23:D8:77:2F:1F:E9:14:64:B5:EC:C4:7E:55:B9:6E:95:DD:55:94:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/1/23D8772F1FE91464B5ECC47E55B96E95DD5594AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23D8772F1FE91464B5ECC47E55B96E95DD5594AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2mguZW3b2wH6DW3p1BaLA73thJ1PMFEgU3DnQsxjyXb8/1/3139312e3234322e3130372e302f32342d3234203d3e20323633343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:f4:6c:6a:83:fb:25:4b:72:6e:15:fb:4e:0b:09:bc:33:84:
         79:88:e0:90:e4:23:8d:74:5e:57:50:1d:ed:ec:92:8c:fd:37:
         e5:3d:e1:f3:69:d2:c3:48:68:3f:a5:3b:84:91:2a:55:ef:95:
         6c:3f:97:5c:26:77:88:16:7f:01:61:d5:2b:c0:52:47:45:69:
         08:6a:12:68:32:38:8d:db:17:46:9d:57:64:a3:af:9a:48:28:
         36:ef:65:2a:25:fc:b9:dd:aa:9c:c6:32:39:d7:da:ed:c2:fd:
         2f:ff:88:4d:b6:ef:38:5d:f0:3e:a7:55:ea:c2:fc:bd:f2:68:
         8f:3f:27:bb:7e:0f:7e:b7:0d:12:05:e4:8f:1a:91:1a:8a:d4:
         0d:be:53:04:e0:ce:6e:98:0f:8e:63:28:47:6a:f8:90:4d:6f:
         ce:4e:c5:18:bc:c4:08:a3:46:0b:26:f0:c2:ef:37:35:04:81:
         10:cf:1f:5f:94:b4:4d:e5:28:98:83:1b:27:1f:08:31:cd:3e:
         31:de:33:3b:23:eb:07:57:c8:da:41:fe:c0:3f:64:d8:7c:b2:
         8a:19:b6:91:df:30:aa:72:b7:bd:52:65:56:5a:01:9e:09:3a:
         70:5f:74:3d:2b:83:58:e5:10:85:f9:10:1a:ab:a3:dc:f3:d2:
         0d:b8:40:88
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUL6iLIsrZ3MjgPny0hbNf285t4jIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjNEODc3MkYxRkU5MTQ2NEI1RUNDNDdFNTVCOTZFOTVE
RDU1OTRBQTAeFw0yNDA0MDQyMTQ0NTdaFw0yNTA0MDMyMTQ5NTdaMDMxMTAvBgNV
BAMTKDkyODMwMUJCNDhGQ0Y4RkEwMDdGODkwRTI5OUI5MTg1NzE5MUJBNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGMs6x0/dF+QpLLsAzpaUEaIzI
5BcrGnXjzg8q/KoVbf3DSj1tpmWJqwqrau6Wfmqt3k1C1WRXT6Vk7jgWpfoBRCJ+
ffEY8OvVfKphVD5LPWnpJLDs2xu7VuFx/6hD1Eo76YxJ1xhNdF6xKQVGD78MeD5v
lorrCt3L1/xCaDITMeM/pKaAKj3UZcg0Xrp7Z2YF15xkPOMZj9h6AOv8piWUnxqB
PhpKCdBPldJJYzsi6TOBEKPn4cEm9K+dlkgQqZe7Sl92fnvF8ERIytF+RpVP4Gc1
014zObcVVMqmrwRXnWlMCaa1amgYrLLZhcuzWzsjnCSfJUeNLtgR5KnWkjxPAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUkoMBu0j8+PoAf4kOKZuRhXGRukUwHwYDVR0j
BBgwFoAUI9h3Lx/pFGS17MR+Vbluld1VlKowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm1ndVpXM2Iyd0g2RFczcDFCYUxBNzN0aEoxUE1GRWdVM0RuUXN4anlY
YjgvMS8yM0Q4NzcyRjFGRTkxNDY0QjVFQ0M0N0U1NUI5NkU5NURENTU5NEFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIzRDg3NzJGMUZFOTE0NjRC
NUVDQzQ3RTU1Qjk2RTk1REQ1NTk0QUEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJtZ3VaVzNiMndINkRXM3AxQmFMQTczdGhKMVBNRkVnVTNEblFzeGp5WGI4LzEv
MzEzOTMxMmUzMjM0MzIyZTMxMzAzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM0MzczNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL/yazANBgkqhkiG9w0BAQsFAAOCAQEAOPRs
aoP7JUtybhX7TgsJvDOEeYjgkOQjjXReV1Ad7eySjP035T3h82nSw0hoP6U7hJEq
Ve+VbD+XXCZ3iBZ/AWHVK8BSR0VpCGoSaDI4jdsXRp1XZKOvmkgoNu9lKiX8ud2q
nMYyOdfa7cL9L/+ITbbvOF3wPqdV6sL8vfJojz8nu34PfrcNEgXkjxqRGorUDb5T
BODObpgPjmMoR2r4kE1vzk7FGLzECKNGCybwwu83NQSBEM8fX5S0TeUomIMbJx8I
Mc0+Md4zOyPrB1fI2kH+wD9k2Hyyihm2kd8wqnK3vVJlVloBngk6cF90PSuDWOUQ
hfkQGquj3PPSDbhAiA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:32:39 2024 by rpki-client on console-ams.rpki-client.org