Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/3138312e3139322e39362e302f32322d3234203d3e20323731373039.roa
File:                     3138312e3139322e39362e302f32322d3234203d3e20323731373039.roa (raw, json)
Hash identifier:          KVtDdYV0Oz+OdUeNMIGlFUYIY2oj9MItyW5ifSH17kU=
Subject key identifier:   DC:EC:80:FE:AB:E2:18:9A:E6:19:94:5E:57:88:C1:6D:19:CF:21:4C
Certificate issuer:       /CN=DB87B78475D3067687137BE8069FFB8CBC613CAF
Certificate serial:       28E44C2712CA789A835B5F767BA8E61417330204
Authority key identifier: DB:87:B7:84:75:D3:06:76:87:13:7B:E8:06:9F:FB:8C:BC:61:3C:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/3138312e3139322e39362e302f32322d3234203d3e20323731373039.roa
Signing time:             Wed 03 Apr 2024 20:48:44 +0000
ROA not before:           Wed 03 Apr 2024 20:43:44 +0000
ROA not after:            Wed 02 Apr 2025 20:48:44 +0000
asID:                     271709
IP address blocks:        181.192.96.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.crl
                          rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:e4:4c:27:12:ca:78:9a:83:5b:5f:76:7b:a8:e6:14:17:33:02:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB87B78475D3067687137BE8069FFB8CBC613CAF
        Validity
            Not Before: Apr  3 20:43:44 2024 GMT
            Not After : Apr  2 20:48:44 2025 GMT
        Subject: CN=DCEC80FEABE2189AE619945E5788C16D19CF214C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:70:0e:94:ed:a3:11:1b:e8:3f:b2:2b:d6:77:
                    db:9a:f2:bd:a8:43:c1:53:bc:20:49:da:2a:e7:d3:
                    fc:d2:d2:3c:99:a1:41:bc:50:69:74:13:a0:92:01:
                    81:a7:17:d1:0e:eb:f2:b0:b7:7e:9a:a4:80:0d:45:
                    30:88:a5:39:1a:86:e9:7c:1c:17:41:53:43:17:0b:
                    58:13:e0:75:95:37:a1:da:b9:a0:92:30:38:23:35:
                    55:81:e8:7d:5d:f2:92:a6:b9:e3:e4:52:3d:8c:c3:
                    bb:af:1a:68:fa:2f:40:2e:e6:55:0b:91:7e:38:8a:
                    86:6d:2e:71:00:e9:10:02:33:c3:75:b5:97:fa:f0:
                    cb:6e:92:c6:f3:81:6c:98:5f:1e:e3:b1:09:d9:db:
                    02:84:c6:43:d5:8f:ab:c4:75:e4:55:aa:a0:bb:0f:
                    2d:e0:aa:7c:33:d5:3a:73:cb:68:00:df:9b:b9:25:
                    8a:44:1e:a1:25:18:ca:c3:4a:fe:5d:4b:c8:f0:1b:
                    eb:3b:00:31:ef:40:b1:e2:ab:26:ab:9b:ce:a2:4c:
                    fd:ee:47:e2:2c:c0:f6:bd:ac:7d:91:2f:24:78:30:
                    a2:a9:11:f3:96:d3:fe:b1:ed:4d:f8:24:02:de:65:
                    96:d2:1c:f3:90:99:9e:74:5d:80:5f:8b:cc:0f:6b:
                    10:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EC:80:FE:AB:E2:18:9A:E6:19:94:5E:57:88:C1:6D:19:CF:21:4C
            X509v3 Authority Key Identifier:
                keyid:DB:87:B7:84:75:D3:06:76:87:13:7B:E8:06:9F:FB:8C:BC:61:3C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB87B78475D3067687137BE8069FFB8CBC613CAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34NkRAs4Q7g9ZixKzkYAKAxqtQepnwxEQPDdrJvEU7aU/1/3138312e3139322e39362e302f32322d3234203d3e20323731373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.192.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:bf:e1:54:fa:5d:90:45:1f:8f:16:8f:9e:ee:13:f2:a2:bc:
         49:43:8a:8d:6e:1a:93:3d:84:c7:c9:59:8a:f9:09:0f:be:b2:
         f0:51:57:f5:87:93:13:89:eb:5e:85:df:88:ce:cc:1c:0a:23:
         cd:63:3d:d8:d1:b2:b1:af:8f:94:2c:7a:8e:aa:14:7c:45:6c:
         6a:43:48:00:4c:2b:8b:fa:e3:b5:a8:cd:e3:7a:cf:a6:ca:67:
         f6:53:4a:30:2f:15:20:b9:80:c6:d8:5d:89:f7:a1:a4:0b:4d:
         90:11:d9:50:e5:83:5a:b3:d5:9a:21:dd:fe:21:47:92:b0:88:
         44:c4:28:5b:d4:24:2a:23:88:cb:f0:d8:36:24:b1:63:2c:3b:
         b2:6b:17:e8:92:f4:0d:5d:ee:50:08:ff:5f:d7:10:13:1a:45:
         14:7e:98:1e:a8:11:5e:0b:02:91:79:61:7f:8d:c5:f6:e1:2f:
         55:33:7b:58:a5:59:98:9b:ac:37:7a:07:c4:a3:91:09:72:dc:
         da:f4:9d:58:dd:3a:8d:9f:da:98:f4:6d:c7:84:fd:80:e7:e8:
         25:c5:3d:f9:a4:c7:59:04:66:20:a1:37:38:cf:4b:7b:23:17:
         c0:95:d1:de:bb:21:5b:b7:92:f2:41:96:36:6e:0f:5c:d4:06:
         f4:af:44:f1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKORMJxLKeJqDW192e6jmFBczAgQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI4N0I3ODQ3NUQzMDY3Njg3MTM3QkU4MDY5RkZCOENC
QzYxM0NBRjAeFw0yNDA0MDMyMDQzNDRaFw0yNTA0MDIyMDQ4NDRaMDMxMTAvBgNV
BAMTKERDRUM4MEZFQUJFMjE4OUFFNjE5OTQ1RTU3ODhDMTZEMTlDRjIxNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMcA6U7aMRG+g/sivWd9ua8r2o
Q8FTvCBJ2irn0/zS0jyZoUG8UGl0E6CSAYGnF9EO6/Kwt36apIANRTCIpTkahul8
HBdBU0MXC1gT4HWVN6HauaCSMDgjNVWB6H1d8pKmuePkUj2Mw7uvGmj6L0Au5lUL
kX44ioZtLnEA6RACM8N1tZf68MtuksbzgWyYXx7jsQnZ2wKExkPVj6vEdeRVqqC7
Dy3gqnwz1Tpzy2gA35u5JYpEHqElGMrDSv5dS8jwG+s7ADHvQLHiqyarm86iTP3u
R+IswPa9rH2RLyR4MKKpEfOW0/6x7U34JALeZZbSHPOQmZ50XYBfi8wPaxClAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU3OyA/qviGJrmGZReV4jBbRnPIUwwHwYDVR0j
BBgwFoAU24e3hHXTBnaHE3voBp/7jLxhPK8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzROa1JBczRRN2c5Wml4S3prWUFLQXhxdFFlcG53eEVRUERkckp2RVU3
YVUvMS9EQjg3Qjc4NDc1RDMwNjc2ODcxMzdCRTgwNjlGRkI4Q0JDNjEzQ0FGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCODdCNzg0NzVEMzA2NzY4
NzEzN0JFODA2OUZGQjhDQkM2MTNDQUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM0TmtSQXM0UTdnOVppeEt6a1lBS0F4cXRRZXBud3hFUVBEZHJKdkVVN2FVLzEv
MzEzODMxMmUzMTM5MzIyZTM5MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzEzNzMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK1wGAwDQYJKoZIhvcNAQELBQADggEBAEG/4VT6
XZBFH48Wj57uE/KivElDio1uGpM9hMfJWYr5CQ++svBRV/WHkxOJ616F34jOzBwK
I81jPdjRsrGvj5Qseo6qFHxFbGpDSABMK4v647WozeN6z6bKZ/ZTSjAvFSC5gMbY
XYn3oaQLTZAR2VDlg1qz1Zoh3f4hR5KwiETEKFvUJCojiMvw2DYksWMsO7JrF+iS
9A1d7lAI/1/XEBMaRRR+mB6oEV4LApF5YX+NxfbhL1Uze1ilWZibrDd6B8SjkQly
3Nr0nVjdOo2f2pj0bceE/YDn6CXFPfmkx1kEZiChNzjPS3sjF8CV0d67IVu3kvJB
ljZuD1zUBvSvRPE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:33 2024 by rpki-client on console-ams.rpki-client.org