Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Gx4s2B43gUjdtkLQwuEpaQuvG5BXwUEnWKwDEQNnnLo/0/3230312e3138322e3134342e302f32342d3234203d3e20323637353339.roa
File:                     3230312e3138322e3134342e302f32342d3234203d3e20323637353339.roa (raw, json)
Hash identifier:          jzfF1v1KVeMR0ZQmDwOhP2XBX+u/92hFCIyzAkwOYtg=
Subject key identifier:   39:14:13:71:93:3C:9A:E2:E6:A3:76:52:70:2B:25:CF:85:3F:8E:B3
Certificate issuer:       /CN=C1857881F70F10C253164F1590B4BBC23D382D73
Certificate serial:       1CE0046DD2CD2A83B8C83322099B73033F1133E4
Authority key identifier: C1:85:78:81:F7:0F:10:C2:53:16:4F:15:90:B4:BB:C2:3D:38:2D:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1857881F70F10C253164F1590B4BBC23D382D73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Gx4s2B43gUjdtkLQwuEpaQuvG5BXwUEnWKwDEQNnnLo/0/3230312e3138322e3134342e302f32342d3234203d3e20323637353339.roa
Signing time:             Wed 22 May 2024 21:53:36 +0000
ROA not before:           Wed 22 May 2024 21:48:36 +0000
ROA not after:            Wed 21 May 2025 21:53:36 +0000
asID:                     267539
IP address blocks:        201.182.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Gx4s2B43gUjdtkLQwuEpaQuvG5BXwUEnWKwDEQNnnLo/0/C1857881F70F10C253164F1590B4BBC23D382D73.crl
                          rsync://rpki-repo.registro.br/repo/4Gx4s2B43gUjdtkLQwuEpaQuvG5BXwUEnWKwDEQNnnLo/0/C1857881F70F10C253164F1590B4BBC23D382D73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1857881F70F10C253164F1590B4BBC23D382D73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e0:04:6d:d2:cd:2a:83:b8:c8:33:22:09:9b:73:03:3f:11:33:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1857881F70F10C253164F1590B4BBC23D382D73
        Validity
            Not Before: May 22 21:48:36 2024 GMT
            Not After : May 21 21:53:36 2025 GMT
        Subject: CN=39141371933C9AE2E6A37652702B25CF853F8EB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f2:74:18:a7:48:74:bc:40:70:97:45:1f:18:
                    a7:59:5b:c7:53:b7:05:9f:da:a6:f9:55:d4:8c:33:
                    e9:3b:dd:65:70:79:f1:97:74:0a:87:f6:63:a0:fc:
                    dc:f7:1e:62:dd:8f:c7:aa:21:4d:df:1e:dd:a4:58:
                    6c:d1:e1:d5:c7:ff:03:bb:98:39:c3:b4:50:66:1d:
                    a6:4f:70:bd:24:c3:44:52:83:39:1c:29:98:10:42:
                    d5:fe:00:0b:dd:1d:82:01:2a:0e:73:57:e4:62:29:
                    1a:dc:34:b4:1b:5c:9c:fd:82:d3:3b:16:28:fb:5c:
                    b6:2f:8e:13:60:f3:bb:f8:6f:6f:f0:33:21:2d:9a:
                    cb:ef:68:08:66:bc:6f:da:43:44:14:3a:62:fb:7e:
                    ce:20:79:75:1f:c1:e7:52:6d:f6:f5:ec:0a:f4:d3:
                    01:a7:0c:83:98:d7:01:dd:04:0b:20:50:75:b3:39:
                    f9:5e:68:70:2a:61:97:7e:fd:f8:b3:4f:9f:37:9a:
                    53:0c:39:6b:7e:d1:40:00:dc:f8:ea:66:79:56:74:
                    51:7d:a1:42:55:d8:e1:b5:7e:19:44:4c:1b:da:cb:
                    18:0f:24:25:80:33:36:03:27:9a:ae:77:59:de:9d:
                    a8:c7:ee:8e:f8:0f:a0:2b:80:85:51:82:6c:9a:7e:
                    a2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:14:13:71:93:3C:9A:E2:E6:A3:76:52:70:2B:25:CF:85:3F:8E:B3
            X509v3 Authority Key Identifier:
                keyid:C1:85:78:81:F7:0F:10:C2:53:16:4F:15:90:B4:BB:C2:3D:38:2D:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Gx4s2B43gUjdtkLQwuEpaQuvG5BXwUEnWKwDEQNnnLo/0/C1857881F70F10C253164F1590B4BBC23D382D73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1857881F70F10C253164F1590B4BBC23D382D73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Gx4s2B43gUjdtkLQwuEpaQuvG5BXwUEnWKwDEQNnnLo/0/3230312e3138322e3134342e302f32342d3234203d3e20323637353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:96:cf:38:ad:46:9a:7e:93:bb:21:00:12:50:65:ef:ce:49:
         71:3b:06:2b:b2:47:9b:2b:5f:06:98:70:ff:47:49:82:36:6a:
         49:c1:ba:b8:7b:ac:da:55:5e:c3:41:a3:3c:07:37:e6:20:23:
         fa:c2:e4:61:95:e1:a0:33:87:99:05:3c:e2:da:72:e5:aa:9e:
         72:4c:85:2a:52:60:88:6d:46:11:db:d2:6e:fe:93:71:03:20:
         31:13:7c:df:43:bf:08:f6:bf:d4:44:12:86:c9:52:c8:75:86:
         4d:85:1d:9a:5e:96:3a:e0:35:2a:77:8d:4f:37:7a:f6:33:cd:
         95:b9:3b:0d:68:21:26:1f:51:f9:93:e2:76:95:78:e0:3f:d1:
         a6:9f:20:87:4f:43:dc:3a:82:47:61:95:7d:fe:a2:df:1b:1d:
         66:94:26:ca:99:e5:29:01:c4:4a:09:72:1e:69:c0:60:75:17:
         31:cc:05:3d:58:d5:62:f5:4f:71:c1:0d:68:36:fd:bf:b6:30:
         a8:ad:94:b9:f7:90:ae:9b:29:1d:b9:40:cc:4a:73:ac:49:40:
         b4:36:c9:49:fc:d5:bc:6b:8f:18:dd:d1:c5:7f:35:39:9b:04:
         65:71:e0:ec:fc:ed:23:06:ae:5b:f1:1d:ba:6b:2d:49:96:90:
         82:30:13:01
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUHOAEbdLNKoO4yDMiCZtzAz8RM+QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzE4NTc4ODFGNzBGMTBDMjUzMTY0RjE1OTBCNEJCQzIz
RDM4MkQ3MzAeFw0yNDA1MjIyMTQ4MzZaFw0yNTA1MjEyMTUzMzZaMDMxMTAvBgNV
BAMTKDM5MTQxMzcxOTMzQzlBRTJFNkEzNzY1MjcwMkIyNUNGODUzRjhFQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc8nQYp0h0vEBwl0UfGKdZW8dT
twWf2qb5VdSMM+k73WVwefGXdAqH9mOg/Nz3HmLdj8eqIU3fHt2kWGzR4dXH/wO7
mDnDtFBmHaZPcL0kw0RSgzkcKZgQQtX+AAvdHYIBKg5zV+RiKRrcNLQbXJz9gtM7
Fij7XLYvjhNg87v4b2/wMyEtmsvvaAhmvG/aQ0QUOmL7fs4geXUfwedSbfb17Ar0
0wGnDIOY1wHdBAsgUHWzOfleaHAqYZd+/fizT583mlMMOWt+0UAA3PjqZnlWdFF9
oUJV2OG1fhlETBvayxgPJCWAMzYDJ5qud1nenajH7o74D6ArgIVRgmyafqInAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUORQTcZM8muLmo3ZScCslz4U/jrMwHwYDVR0j
BBgwFoAUwYV4gfcPEMJTFk8VkLS7wj04LXMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEd4NHMyQjQzZ1VqZHRrTFF3dUVwYVF1dkc1Qlh3VUVuV0t3REVRTm5u
TG8vMC9DMTg1Nzg4MUY3MEYxMEMyNTMxNjRGMTU5MEI0QkJDMjNEMzgyRDczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxODU3ODgxRjcwRjEwQzI1
MzE2NEYxNTkwQjRCQkMyM0QzODJENzMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHeDRzMkI0M2dVamR0a0xRd3VFcGFRdXZHNUJYd1VFbldLd0RFUU5ubkxvLzAv
MzIzMDMxMmUzMTM4MzIyZTMxMzQzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNzM1MzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMm2kDANBgkqhkiG9w0BAQsFAAOCAQEAbZbP
OK1Gmn6TuyEAElBl785JcTsGK7JHmytfBphw/0dJgjZqScG6uHus2lVew0GjPAc3
5iAj+sLkYZXhoDOHmQU84tpy5aqeckyFKlJgiG1GEdvSbv6TcQMgMRN830O/CPa/
1EQShslSyHWGTYUdml6WOuA1KneNTzd69jPNlbk7DWghJh9R+ZPidpV44D/Rpp8g
h09D3DqCR2GVff6i3xsdZpQmypnlKQHESglyHmnAYHUXMcwFPVjVYvVPccENaDb9
v7YwqK2UufeQrpspHblAzEpzrElAtDbJSfzVvGuPGN3RxX81OZsEZXHg7PztIwau
W/EdumstSZaQgjATAQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:13:36 2025 by rpki-client