Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/3230312e3134382e3234342e302f32322d3234203d3e203238323833.roa
File:                     3230312e3134382e3234342e302f32322d3234203d3e203238323833.roa (raw, json)
Hash identifier:          09WbyYkm5vBwvqcGIXnSJdvczNwI3a1lUSz3lNLInrc=
Subject key identifier:   86:A4:C8:D5:BD:B7:6E:BA:47:EF:A7:C4:68:34:07:B8:E5:89:E5:EA
Certificate issuer:       /CN=A690240C3E88B330B9BD0B91791F519DB5BE8C59
Certificate serial:       5D1890D82BEB105435B64F0FDDF34A9C9CE6643C
Authority key identifier: A6:90:24:0C:3E:88:B3:30:B9:BD:0B:91:79:1F:51:9D:B5:BE:8C:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/3230312e3134382e3234342e302f32322d3234203d3e203238323833.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     28283
IP address blocks:        201.148.244.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.crl
                          rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:18:90:d8:2b:eb:10:54:35:b6:4f:0f:dd:f3:4a:9c:9c:e6:64:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A690240C3E88B330B9BD0B91791F519DB5BE8C59
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:62:fc:0a:97:56:56:2a:10:91:ed:74:8c:f1:
                    67:09:06:58:15:62:cc:ca:33:0d:d5:10:04:b6:48:
                    5e:c4:83:39:6a:94:40:79:7a:84:5b:85:9b:f9:69:
                    01:55:3b:ba:88:ce:14:74:60:bf:ad:3e:33:be:f5:
                    f9:27:cd:7a:28:e5:c0:66:66:5f:23:23:f3:46:91:
                    12:e5:a9:6a:4c:6c:d3:d3:5b:7c:a0:c4:68:69:20:
                    61:38:6e:fe:80:6b:0e:8d:54:e2:e2:30:42:ae:de:
                    e2:7d:ee:a8:b8:1a:05:ee:54:82:4d:c6:66:d7:5d:
                    f1:5f:06:66:5b:9d:1e:64:09:5c:58:58:34:c0:e2:
                    0e:e3:9e:f1:5a:19:b4:45:d6:e2:e4:ef:8a:2c:a3:
                    e4:4d:65:4f:3a:cc:75:74:f3:f1:c7:5e:38:a0:e8:
                    6b:1e:a4:48:b1:d5:3c:31:0c:f8:45:54:c3:87:e0:
                    51:3d:d8:f6:3f:1e:65:31:4a:8d:9e:72:42:32:25:
                    05:c6:11:32:ad:12:29:cf:95:8b:ff:20:a6:b6:c7:
                    ff:13:b7:1e:8d:af:13:67:6d:07:77:d8:7f:4e:38:
                    3c:ba:d9:18:37:bf:a7:d1:45:f2:19:61:79:4f:c7:
                    1a:a3:af:89:e0:c2:39:4e:34:d3:47:ff:25:81:e3:
                    3b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A4:C8:D5:BD:B7:6E:BA:47:EF:A7:C4:68:34:07:B8:E5:89:E5:EA
            X509v3 Authority Key Identifier:
                keyid:A6:90:24:0C:3E:88:B3:30:B9:BD:0B:91:79:1F:51:9D:B5:BE:8C:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A690240C3E88B330B9BD0B91791F519DB5BE8C59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rcg4q11E7WAQKqTrMeA8QkbW9mNLu7ZwxzviCjLnfFv/1/3230312e3134382e3234342e302f32322d3234203d3e203238323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:f8:f6:ea:37:24:67:44:4a:ce:08:68:ab:b2:a9:b1:31:73:
         45:1e:cb:e8:7c:1e:c1:59:a1:e3:16:47:2a:8a:bd:4f:b9:59:
         61:f9:a6:0b:c8:9b:e1:aa:75:5e:0f:1b:d4:46:40:af:de:9b:
         cf:88:d0:e9:9a:62:f5:cb:91:7e:b0:bf:36:4c:b9:d3:3d:4e:
         b0:93:8d:23:87:77:a6:72:48:c9:1a:7c:69:09:6e:31:17:19:
         a8:3f:d3:15:ea:7b:8a:62:02:01:c1:a5:6a:f5:0d:ce:8d:c7:
         e2:b1:fa:d6:11:fe:36:b2:dc:f9:7d:f7:1f:1d:74:80:6e:f3:
         88:99:35:e7:4e:20:bf:47:99:48:f0:99:97:78:b6:e0:23:c3:
         e0:88:63:a0:65:71:5c:f5:13:3f:d2:de:03:b2:5c:51:6d:e5:
         71:37:64:21:75:1e:c9:92:6c:c5:d8:fd:21:e9:32:c3:61:74:
         eb:fd:9d:4b:55:67:e3:ae:b7:a5:ad:3d:78:e3:ed:9c:ec:36:
         6c:a4:61:45:7b:80:53:e2:fb:60:60:74:e8:49:49:aa:ae:e5:
         eb:d3:2e:68:e1:ce:c4:06:df:73:bb:73:6f:4f:3a:d8:dd:af:
         6a:31:c5:12:67:1c:ac:44:b6:18:ca:aa:41:20:31:21:b2:14:
         ce:a4:c4:51
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUXRiQ2CvrEFQ1tk8P3fNKnJzmZDwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTY5MDI0MEMzRTg4QjMzMEI5QkQwQjkxNzkxRjUxOURC
NUJFOEM1OTAeFw0yNDA0MDMxODU1MDFaFw0yNTA0MDMxOTAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREM2MkZDMEE5NzU2NTYyQTEw
OTFFRDc0OENGMTY3MDkwNjU4MTU2MkNDQ0EzMzBERDUxMDA0QjY0ODVFQzQ4MzM5
NkE5NDQwNzk3QTg0NUI4NTlCRjk2OTAxNTUzQkJBODhDRTE0NzQ2MEJGQUQzRTMz
QkVGNUY5MjdDRDdBMjhFNUMwNjY2NjVGMjMyM0YzNDY5MTEyRTVBOTZBNEM2Q0Qz
RDM1QjdDQTBDNDY4NjkyMDYxMzg2RUZFODA2QjBFOEQ1NEUyRTIzMDQyQUVERUUy
N0RFRUE4QjgxQTA1RUU1NDgyNERDNjY2RDc1REYxNUYwNjY2NUI5RDFFNjQwOTVD
NTg1ODM0QzBFMjBFRTM5RUYxNUExOUI0NDVENkUyRTRFRjhBMkNBM0U0NEQ2NTRG
M0FDQzc1NzRGM0YxQzc1RTM4QTBFODZCMUVBNDQ4QjFENTNDMzEwQ0Y4NDU1NEMz
ODdFMDUxM0REOEY2M0YxRTY1MzE0QThEOUU3MjQyMzIyNTA1QzYxMTMyQUQxMjI5
Q0Y5NThCRkYyMEE2QjZDN0ZGMTNCNzFFOERBRjEzNjc2RDA3NzdEODdGNEUzODND
QkFEOTE4MzdCRkE3RDE0NUYyMTk2MTc5NEZDNzFBQTNBRjg5RTBDMjM5NEUzNEQz
NDdGRjI1ODFFMzNCOTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3GL8CpdWVioQke10jPFnCQZYFWLMyjMN1RAEtkhexIM5apRAeXqE
W4Wb+WkBVTu6iM4UdGC/rT4zvvX5J816KOXAZmZfIyPzRpES5alqTGzT01t8oMRo
aSBhOG7+gGsOjVTi4jBCrt7ife6ouBoF7lSCTcZm113xXwZmW50eZAlcWFg0wOIO
457xWhm0Rdbi5O+KLKPkTWVPOsx1dPPxx144oOhrHqRIsdU8MQz4RVTDh+BRPdj2
Px5lMUqNnnJCMiUFxhEyrRIpz5WL/yCmtsf/E7ceja8TZ20Hd9h/Tjg8utkYN7+n
0UXyGWF5T8cao6+J4MI5TjTTR/8lgeM7lQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FIakyNW9t266R++nxGg0B7jlieXqMB8GA1UdIwQYMBaAFKaQJAw+iLMwub0LkXkf
UZ21voxZMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNyY2c0cTExRTdXQVFL
cVRyTWVBOFFrYlc5bU5MdTdad3h6dmlDakxuZkZ2LzEvQTY5MDI0MEMzRTg4QjMz
MEI5QkQwQjkxNzkxRjUxOURCNUJFOEM1OS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BNjkwMjQwQzNFODhCMzMwQjlCRDBCOTE3OTFGNTE5REI1QkU4
QzU5LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zcmNnNHExMUU3V0FRS3FUck1l
QThRa2JXOW1OTHU3Wnd4enZpQ2pMbmZGdi8xLzMyMzAzMTJlMzEzNDM4MmUzMjM0
MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4MzIzODMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
yZT0MA0GCSqGSIb3DQEBCwUAA4IBAQCA+PbqNyRnRErOCGirsqmxMXNFHsvofB7B
WaHjFkcqir1PuVlh+aYLyJvhqnVeDxvURkCv3pvPiNDpmmL1y5F+sL82TLnTPU6w
k40jh3emckjJGnxpCW4xFxmoP9MV6nuKYgIBwaVq9Q3OjcfisfrWEf42stz5ffcf
HXSAbvOImTXnTiC/R5lI8JmXeLbgI8PgiGOgZXFc9RM/0t4DslxRbeVxN2QhdR7J
kmzF2P0h6TLDYXTr/Z1LVWfjrrelrT144+2c7DZspGFFe4BT4vtgYHToSUmqruXr
0y5o4c7EBt9zu3NvTzrY3a9qMcUSZxysRLYYyqpBIDEhshTOpMRR
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:30 2024 by rpki-client on console-fra.rpki-client.org