Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/1/3139322e3134312e3131342e302f32332d3233203d3e20323637343633.roa
File:                     3139322e3134312e3131342e302f32332d3233203d3e20323637343633.roa (raw, json)
Hash identifier:          CdpyUQNhjAWSxcRM4IUx61KuXHgHNi8FC78Y0Kl4neg=
Subject key identifier:   90:F2:93:A8:44:53:AB:36:64:4B:37:B9:44:19:4D:53:77:57:46:1C
Certificate issuer:       /CN=D6FA304477B282D06DA853CA151FF15FE4EA7B9C
Certificate serial:       5629DDB92CDCA9B5CBCC3715A2D2267950ED3779
Authority key identifier: D6:FA:30:44:77:B2:82:D0:6D:A8:53:CA:15:1F:F1:5F:E4:EA:7B:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6FA304477B282D06DA853CA151FF15FE4EA7B9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/1/3139322e3134312e3131342e302f32332d3233203d3e20323637343633.roa
Signing time:             Thu 04 Apr 2024 01:58:15 +0000
ROA not before:           Thu 04 Apr 2024 01:53:15 +0000
ROA not after:            Thu 03 Apr 2025 01:58:15 +0000
asID:                     267463
IP address blocks:        192.141.114.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/1/D6FA304477B282D06DA853CA151FF15FE4EA7B9C.crl
                          rsync://rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/1/D6FA304477B282D06DA853CA151FF15FE4EA7B9C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6FA304477B282D06DA853CA151FF15FE4EA7B9C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:29:dd:b9:2c:dc:a9:b5:cb:cc:37:15:a2:d2:26:79:50:ed:37:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6FA304477B282D06DA853CA151FF15FE4EA7B9C
        Validity
            Not Before: Apr  4 01:53:15 2024 GMT
            Not After : Apr  3 01:58:15 2025 GMT
        Subject: CN=90F293A84453AB36644B37B944194D537757461C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:da:60:1e:46:54:a6:d3:c0:6b:6e:a9:d7:30:
                    69:a4:79:e1:dc:16:aa:76:8a:e8:91:a5:fb:cc:b5:
                    4f:c3:25:a2:a9:7e:c1:99:90:63:47:09:78:2f:df:
                    15:3d:50:f0:c4:37:d5:0f:dd:5d:57:39:97:d9:33:
                    47:14:b1:06:c3:c9:04:12:0d:86:19:32:3d:b1:39:
                    05:a0:3e:b6:af:48:50:21:fe:11:fe:c2:de:6d:d6:
                    ec:4a:e7:d6:d6:24:95:f2:9d:c5:06:d1:d3:cc:04:
                    66:cf:90:31:1e:4a:c0:2c:6f:e6:bb:c2:ae:3e:34:
                    0f:fb:58:54:c0:35:96:b3:92:7e:92:20:57:f4:9d:
                    c6:bf:d7:42:74:b1:f5:72:d5:f8:36:ee:98:e6:36:
                    fd:9e:0b:e8:b4:7a:ab:40:41:c7:cf:26:7c:a1:4b:
                    fb:22:f1:11:01:25:3c:b7:51:b7:aa:bb:18:ab:56:
                    1a:1d:1a:65:65:04:54:aa:db:2c:d9:30:3c:c7:6a:
                    5a:5b:6a:24:eb:67:00:b7:d2:8b:0b:2e:16:3f:e2:
                    ed:a7:b7:cf:25:16:1b:0d:ef:5a:43:77:e3:ab:83:
                    71:fa:7b:3d:42:d7:87:85:3d:bf:8f:96:8b:69:d0:
                    3f:42:36:5f:47:3f:80:ed:83:0f:51:89:0b:45:c1:
                    6e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F2:93:A8:44:53:AB:36:64:4B:37:B9:44:19:4D:53:77:57:46:1C
            X509v3 Authority Key Identifier:
                keyid:D6:FA:30:44:77:B2:82:D0:6D:A8:53:CA:15:1F:F1:5F:E4:EA:7B:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/1/D6FA304477B282D06DA853CA151FF15FE4EA7B9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6FA304477B282D06DA853CA151FF15FE4EA7B9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4XopuNYA2NUaPnn15rcj4LyQy9Gw9xktbGXmRySmAqZE/1/3139322e3134312e3131342e302f32332d3233203d3e20323637343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:80:f1:52:8d:57:c1:3d:9a:76:20:c0:48:a9:31:c1:31:bb:
         d1:2c:61:be:c3:4e:d3:86:96:1f:12:35:8d:6d:6e:88:b4:ea:
         c0:28:17:8f:c8:32:e9:93:8c:a0:a9:c6:0d:69:59:f4:c4:49:
         32:a5:d2:fe:e6:41:65:f8:ea:a7:c0:0d:c2:83:b6:0b:03:a6:
         6d:21:fa:59:c2:84:30:47:49:d7:a1:59:0a:88:2e:cd:fe:c3:
         2d:c9:9c:e7:bc:e6:1b:3b:c9:eb:d7:61:cc:ef:a3:13:6e:a7:
         15:92:23:aa:af:e1:6b:15:ae:76:69:b0:74:c4:4a:54:58:ad:
         c5:8b:81:08:ae:95:54:a6:6d:0d:96:e0:7a:2a:02:c2:08:2a:
         10:a8:c8:f7:ab:5f:85:d6:d7:e7:c6:1c:75:ee:19:63:00:3d:
         53:41:a7:86:1d:c0:aa:d9:ff:b4:2e:be:ae:27:6e:1c:4a:21:
         cd:b4:aa:87:4f:10:7b:c8:03:c0:8b:fb:f6:c7:ce:7b:27:97:
         b7:ba:15:2b:19:a4:5a:21:11:6f:e7:8b:0b:ad:4c:b2:24:50:
         df:64:3f:79:2e:fc:d5:cf:74:05:5c:47:09:3a:4b:83:89:86:
         21:b9:d5:ab:14:fe:2a:4f:bf:bf:e6:f7:2a:06:59:29:08:9a:
         78:a0:20:2b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUVinduSzcqbXLzDcVotImeVDtN3kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDZGQTMwNDQ3N0IyODJEMDZEQTg1M0NBMTUxRkYxNUZF
NEVBN0I5QzAeFw0yNDA0MDQwMTUzMTVaFw0yNTA0MDMwMTU4MTVaMDMxMTAvBgNV
BAMTKDkwRjI5M0E4NDQ1M0FCMzY2NDRCMzdCOTQ0MTk0RDUzNzc1NzQ2MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM2mAeRlSm08BrbqnXMGmkeeHc
Fqp2iuiRpfvMtU/DJaKpfsGZkGNHCXgv3xU9UPDEN9UP3V1XOZfZM0cUsQbDyQQS
DYYZMj2xOQWgPravSFAh/hH+wt5t1uxK59bWJJXyncUG0dPMBGbPkDEeSsAsb+a7
wq4+NA/7WFTANZazkn6SIFf0nca/10J0sfVy1fg27pjmNv2eC+i0eqtAQcfPJnyh
S/si8REBJTy3UbequxirVhodGmVlBFSq2yzZMDzHalpbaiTrZwC30osLLhY/4u2n
t88lFhsN71pDd+Org3H6ez1C14eFPb+Plotp0D9CNl9HP4Dtgw9RiQtFwW6DAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUkPKTqERTqzZkSze5RBlNU3dXRhwwHwYDVR0j
BBgwFoAU1vowRHeygtBtqFPKFR/xX+Tqe5wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFhvcHVOWUEyTlVhUG5uMTVyY2o0THlReTlHdzl4a3RiR1htUnlTbUFx
WkUvMS9ENkZBMzA0NDc3QjI4MkQwNkRBODUzQ0ExNTFGRjE1RkU0RUE3QjlDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2RkEzMDQ0NzdCMjgyRDA2
REE4NTNDQTE1MUZGMTVGRTRFQTdCOUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRYb3B1TllBMk5VYVBubjE1cmNqNEx5UXk5R3c5eGt0YkdYbVJ5U21BcVpFLzEv
MzEzOTMyMmUzMTM0MzEyZTMxMzEzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNzM0MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAcCNcjANBgkqhkiG9w0BAQsFAAOCAQEAm4Dx
Uo1XwT2adiDASKkxwTG70SxhvsNO04aWHxI1jW1uiLTqwCgXj8gy6ZOMoKnGDWlZ
9MRJMqXS/uZBZfjqp8ANwoO2CwOmbSH6WcKEMEdJ16FZCoguzf7DLcmc57zmGzvJ
69dhzO+jE26nFZIjqq/haxWudmmwdMRKVFitxYuBCK6VVKZtDZbgeioCwggqEKjI
96tfhdbX58Ycde4ZYwA9U0Gnhh3Aqtn/tC6+riduHEohzbSqh08Qe8gDwIv79sfO
eyeXt7oVKxmkWiERb+eLC61MsiRQ32Q/eS781c90BVxHCTpLg4mGIbnVqxT+Kk+/
v+b3KgZZKQiaeKAgKw==
-----END CERTIFICATE-----
Generated at Sat Jun 29 03:14:54 2024 by rpki-client on console-fra.rpki-client.org