Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/3133382e35392e3230302e302f32342d3234203d3e20323634313236.roa
File:                     3133382e35392e3230302e302f32342d3234203d3e20323634313236.roa (raw, json)
Hash identifier:          te9dM/vi02hOJYa63nbqx+ItnCy/6UpGoTr9av2znFg=
Subject key identifier:   32:AD:92:9C:F4:84:2A:45:24:65:D6:87:EB:C2:C0:76:B7:17:FE:E5
Certificate issuer:       /CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
Certificate serial:       347CBBDACC13FC42DA7D6E7937E4E0219B5A4B0B
Authority key identifier: 2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/3133382e35392e3230302e302f32342d3234203d3e20323634313236.roa
Signing time:             Wed 03 Apr 2024 18:31:25 +0000
ROA not before:           Wed 03 Apr 2024 18:26:25 +0000
ROA not after:            Wed 02 Apr 2025 18:31:25 +0000
asID:                     264126
IP address blocks:        138.59.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl
                          rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:7c:bb:da:cc:13:fc:42:da:7d:6e:79:37:e4:e0:21:9b:5a:4b:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
        Validity
            Not Before: Apr  3 18:26:25 2024 GMT
            Not After : Apr  2 18:31:25 2025 GMT
        Subject: CN=32AD929CF4842A452465D687EBC2C076B717FEE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:66:27:ca:74:4a:73:d2:08:4e:c8:03:9a:b7:
                    c8:e1:80:96:e5:30:e8:16:2c:34:f1:aa:c8:0d:50:
                    63:ba:f2:62:94:10:74:27:11:b1:0e:0a:ed:0f:04:
                    04:49:d5:8b:02:df:36:e9:9e:49:85:20:11:77:f1:
                    26:30:fb:3a:b1:e8:64:f3:06:60:29:99:3c:0a:ef:
                    98:3f:29:3b:c0:07:6d:21:b8:a9:fe:e7:e2:24:be:
                    d3:43:5a:aa:ef:18:50:59:80:f4:3b:f4:0e:85:be:
                    3c:42:2e:31:0a:96:d2:2c:a2:1e:1e:24:7c:8b:21:
                    87:a2:53:2e:7c:a8:51:b3:88:60:51:de:1c:95:69:
                    39:77:3f:4d:b5:f6:a0:11:71:15:09:6c:6c:99:da:
                    7e:f5:d7:06:e7:e7:56:73:86:d1:fe:0d:16:88:f4:
                    e1:f1:8f:33:45:de:32:d5:ec:64:84:81:e9:6e:19:
                    c7:99:51:28:be:a3:1f:64:4a:2d:aa:e6:59:61:a9:
                    90:ae:44:fc:8b:0f:5a:a7:14:19:fa:b0:ec:ec:37:
                    e4:75:55:6b:29:56:25:10:b1:51:70:9f:22:f5:57:
                    8e:c3:fd:2f:2c:3d:cd:93:87:bf:42:08:a8:4d:8d:
                    83:76:1d:6f:94:50:ef:89:ea:53:df:6a:1a:bc:43:
                    42:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:AD:92:9C:F4:84:2A:45:24:65:D6:87:EB:C2:C0:76:B7:17:FE:E5
            X509v3 Authority Key Identifier:
                keyid:2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/3133382e35392e3230302e302f32342d3234203d3e20323634313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:ce:71:9d:fd:95:26:f6:61:75:b0:89:8c:84:fb:59:9d:21:
         da:5f:65:29:03:60:58:e4:8e:d7:c4:19:4f:a0:5a:6a:7f:9e:
         4e:e7:fe:72:8c:02:ae:8f:71:98:e4:d2:72:a1:d4:58:c3:74:
         77:fd:5b:48:92:3e:c4:23:e2:36:5e:d6:39:54:31:77:da:dd:
         ba:d6:ee:03:7c:91:7f:07:74:ae:32:c9:f2:7b:f2:d2:0e:e6:
         a4:21:19:ac:8a:9c:e0:4b:02:17:ef:71:33:d4:b1:40:b5:0f:
         6e:f0:5f:3d:43:1a:2e:6d:be:f7:42:90:cb:c9:98:7d:58:0f:
         ee:b5:06:34:90:33:51:fe:72:43:95:b5:55:68:2a:e8:5c:20:
         cd:00:28:5b:6b:1a:b7:f1:81:63:b6:d9:f5:66:ce:2b:74:a9:
         45:6a:59:9a:d2:c6:8e:06:89:91:17:b7:3a:72:8b:17:b7:38:
         8d:45:44:4e:62:d3:9c:be:81:45:44:ce:4e:26:b2:ca:44:64:
         f4:9c:b8:eb:10:9e:2a:6b:12:87:b7:6a:b4:0b:fd:37:6d:db:
         ad:43:11:da:d3:72:16:31:92:f3:c6:f4:5d:e4:d4:d6:af:ef:
         6e:10:aa:ae:eb:a8:93:9f:69:e6:6d:f3:09:3f:b5:a2:41:fd:
         e6:c2:1f:99
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNHy72swT/ELafW55N+TgIZtaSwswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJCMUZCODVCNUE4MjRDRTFGMTJFOTlEODQ5NDNDMjgx
MjMzOEQ5QzAeFw0yNDA0MDMxODI2MjVaFw0yNTA0MDIxODMxMjVaMDMxMTAvBgNV
BAMTKDMyQUQ5MjlDRjQ4NDJBNDUyNDY1RDY4N0VCQzJDMDc2QjcxN0ZFRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwZifKdEpz0ghOyAOat8jhgJbl
MOgWLDTxqsgNUGO68mKUEHQnEbEOCu0PBARJ1YsC3zbpnkmFIBF38SYw+zqx6GTz
BmApmTwK75g/KTvAB20huKn+5+IkvtNDWqrvGFBZgPQ79A6FvjxCLjEKltIsoh4e
JHyLIYeiUy58qFGziGBR3hyVaTl3P0219qARcRUJbGyZ2n711wbn51ZzhtH+DRaI
9OHxjzNF3jLV7GSEgeluGceZUSi+ox9kSi2q5llhqZCuRPyLD1qnFBn6sOzsN+R1
VWspViUQsVFwnyL1V47D/S8sPc2Th79CCKhNjYN2HW+UUO+J6lPfahq8Q0L/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMq2SnPSEKkUkZdaH68LAdrcX/uUwHwYDVR0j
BBgwFoAUK7H7hbWoJM4fEumdhJQ8KBIzjZwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEhBMmhjRzRlQXVYREdCUGFZdHRLaGN0Rmd2d2J3RjVQR001RDJVUnhW
azkvMS8yQkIxRkI4NUI1QTgyNENFMUYxMkU5OUQ4NDk0M0MyODEyMzM4RDlDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCQjFGQjg1QjVBODI0Q0Ux
RjEyRTk5RDg0OTQzQzI4MTIzMzhEOUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRIQTJoY0c0ZUF1WERHQlBhWXR0S2hjdEZndndid0Y1UEdNNUQyVVJ4Vms5LzEv
MzEzMzM4MmUzNTM5MmUzMjMwMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzMTMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKO8gwDQYJKoZIhvcNAQELBQADggEBAL3OcZ39
lSb2YXWwiYyE+1mdIdpfZSkDYFjkjtfEGU+gWmp/nk7n/nKMAq6PcZjk0nKh1FjD
dHf9W0iSPsQj4jZe1jlUMXfa3brW7gN8kX8HdK4yyfJ78tIO5qQhGayKnOBLAhfv
cTPUsUC1D27wXz1DGi5tvvdCkMvJmH1YD+61BjSQM1H+ckOVtVVoKuhcIM0AKFtr
GrfxgWO22fVmzit0qUVqWZrSxo4GiZEXtzpyixe3OI1FRE5i05y+gUVEzk4msspE
ZPScuOsQniprEoe3arQL/Tdt261DEdrTchYxkvPG9F3k1Nav724Qqq7rqJOfaeZt
8wk/taJB/ebCH5k=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:14 2024 by rpki-client on console-fra.rpki-client.org