Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/3134332e3230322e3232382e302f32332d3233203d3e20323634353839.roa
File:                     3134332e3230322e3232382e302f32332d3233203d3e20323634353839.roa (raw, json)
Hash identifier:          wvwoNNa+2LszzkBB9uBF3nFgbXCKLfChPrL2senU+SE=
Subject key identifier:   58:28:74:3E:15:F1:31:9A:D1:A0:EC:FF:85:57:28:33:0D:5E:77:9A
Certificate issuer:       /CN=0E88601104C6C43AC785175C29585EFD06974620
Certificate serial:       199982DC973C3FFD701E4B1B3E45A216558102E3
Authority key identifier: 0E:88:60:11:04:C6:C4:3A:C7:85:17:5C:29:58:5E:FD:06:97:46:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/3134332e3230322e3232382e302f32332d3233203d3e20323634353839.roa
Signing time:             Thu 04 Apr 2024 08:02:40 +0000
ROA not before:           Thu 04 Apr 2024 07:57:40 +0000
ROA not after:            Thu 03 Apr 2025 08:02:40 +0000
asID:                     264589
IP address blocks:        143.202.228.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.crl
                          rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:99:82:dc:97:3c:3f:fd:70:1e:4b:1b:3e:45:a2:16:55:81:02:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E88601104C6C43AC785175C29585EFD06974620
        Validity
            Not Before: Apr  4 07:57:40 2024 GMT
            Not After : Apr  3 08:02:40 2025 GMT
        Subject: CN=5828743E15F1319AD1A0ECFF855728330D5E779A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3e:43:62:46:79:39:0c:56:0b:9f:c0:25:1d:
                    57:36:a2:59:d1:c9:49:6d:76:4d:93:c6:26:1c:23:
                    f6:8e:aa:f5:7b:e4:22:cf:8f:78:4c:6d:b6:09:30:
                    3c:96:54:88:cc:8e:bf:86:8e:9c:a1:62:6e:64:d4:
                    f3:f8:92:85:ca:ee:5f:84:6e:07:ea:76:63:e6:b6:
                    22:6c:e5:a9:79:cd:20:33:1c:87:8e:dd:1e:a9:4a:
                    b1:16:96:ee:ea:b1:58:02:ce:23:85:fd:c8:1a:fb:
                    5d:90:aa:37:43:b0:b9:fe:20:df:61:67:e4:0e:bb:
                    c3:e3:47:d2:41:08:ea:4f:89:58:e3:c5:c3:0e:75:
                    f3:2b:37:cc:85:39:21:45:a8:2b:e5:92:b9:63:77:
                    bb:ae:f0:65:e9:90:32:01:18:23:ca:5e:c1:f7:1d:
                    18:bf:ea:55:62:eb:87:12:f3:01:6a:e5:7a:66:1a:
                    88:d1:71:70:67:f4:a6:18:2d:57:58:f6:b8:6f:0a:
                    ef:72:b3:70:8c:c7:b6:6a:7c:f5:72:ed:df:a0:97:
                    c3:10:53:d4:1b:96:b6:58:54:fc:17:ff:77:56:08:
                    5f:6b:57:52:b2:b4:ac:3a:de:00:fe:f9:14:77:d8:
                    c2:c4:60:2b:98:35:b9:63:23:31:e7:b1:65:dc:39:
                    cd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:28:74:3E:15:F1:31:9A:D1:A0:EC:FF:85:57:28:33:0D:5E:77:9A
            X509v3 Authority Key Identifier:
                keyid:0E:88:60:11:04:C6:C4:3A:C7:85:17:5C:29:58:5E:FD:06:97:46:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/3134332e3230322e3232382e302f32332d3233203d3e20323634353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:25:09:a1:fa:85:f9:35:f7:6c:ea:4f:aa:bb:c3:97:e8:17:
         d1:a5:88:b9:e0:44:0f:0a:fb:99:99:04:ed:66:31:a9:ad:bc:
         74:1a:1d:8c:ad:51:bd:ae:5e:c9:0a:ae:c3:5b:09:af:a0:b6:
         b3:68:a5:82:3b:4b:64:11:84:62:9f:28:47:4d:b1:84:39:ea:
         3b:fe:85:6a:d9:b8:0e:fb:c6:4c:05:50:8c:7a:2e:65:67:1e:
         bb:e3:47:ad:c1:22:80:fd:14:d5:ea:21:04:f9:90:7b:a7:91:
         40:f4:af:67:14:ff:02:ea:2a:e4:5b:b5:ce:a6:08:1c:53:f7:
         50:68:93:7d:cb:c6:52:54:31:3f:83:43:95:66:71:4b:68:7f:
         13:5b:9a:34:ad:b0:50:b6:82:47:d9:71:96:3d:e3:e5:0d:87:
         02:47:13:c9:c9:15:2c:04:db:35:87:7f:86:ee:b1:f3:61:35:
         fb:49:a7:fc:0c:55:87:29:9b:ae:a2:8c:3f:54:0c:15:b9:fe:
         69:f8:46:f0:9f:39:0d:0d:5b:2d:15:b6:8d:0c:f5:1d:52:55:
         53:25:43:50:c1:57:a4:8a:a5:48:75:85:cb:60:1d:14:b9:10:
         dd:68:b5:81:f8:37:5c:cf:5c:8f:c4:cf:e2:56:74:72:ab:11:
         99:77:ec:10
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUGZmC3Jc8P/1wHksbPkWiFlWBAuMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEU4ODYwMTEwNEM2QzQzQUM3ODUxNzVDMjk1ODVFRkQw
Njk3NDYyMDAeFw0yNDA0MDQwNzU3NDBaFw0yNTA0MDMwODAyNDBaMDMxMTAvBgNV
BAMTKDU4Mjg3NDNFMTVGMTMxOUFEMUEwRUNGRjg1NTcyODMzMEQ1RTc3OUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuPkNiRnk5DFYLn8AlHVc2olnR
yUltdk2TxiYcI/aOqvV75CLPj3hMbbYJMDyWVIjMjr+GjpyhYm5k1PP4koXK7l+E
bgfqdmPmtiJs5al5zSAzHIeO3R6pSrEWlu7qsVgCziOF/cga+12QqjdDsLn+IN9h
Z+QOu8PjR9JBCOpPiVjjxcMOdfMrN8yFOSFFqCvlkrljd7uu8GXpkDIBGCPKXsH3
HRi/6lVi64cS8wFq5XpmGojRcXBn9KYYLVdY9rhvCu9ys3CMx7ZqfPVy7d+gl8MQ
U9QblrZYVPwX/3dWCF9rV1KytKw63gD++RR32MLEYCuYNbljIzHnsWXcOc2TAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUWCh0PhXxMZrRoOz/hVcoMw1ed5owHwYDVR0j
BBgwFoAUDohgEQTGxDrHhRdcKVhe/QaXRiAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGo5UkdMdEVyVHhRTU4xVjFRaThQM3BUdmVyV0Z2UXBYWVZhaDZNMW1a
ZHQvMS8wRTg4NjAxMTA0QzZDNDNBQzc4NTE3NUMyOTU4NUVGRDA2OTc0NjIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBFODg2MDExMDRDNkM0M0FD
Nzg1MTc1QzI5NTg1RUZEMDY5NzQ2MjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRqOVJHTHRFclR4UU1OMVYxUWk4UDNwVHZlcldGdlFwWFlWYWg2TTFtWmR0LzEv
MzEzNDMzMmUzMjMwMzIyZTMyMzIzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNDM1MzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAY/K5DANBgkqhkiG9w0BAQsFAAOCAQEAgSUJ
ofqF+TX3bOpPqrvDl+gX0aWIueBEDwr7mZkE7WYxqa28dBodjK1Rva5eyQquw1sJ
r6C2s2ilgjtLZBGEYp8oR02xhDnqO/6Fatm4DvvGTAVQjHouZWceu+NHrcEigP0U
1eohBPmQe6eRQPSvZxT/Auoq5Fu1zqYIHFP3UGiTfcvGUlQxP4NDlWZxS2h/E1ua
NK2wULaCR9lxlj3j5Q2HAkcTyckVLATbNYd/hu6x82E1+0mn/AxVhymbrqKMP1QM
Fbn+afhG8J85DQ1bLRW2jQz1HVJVUyVDUMFXpIqlSHWFy2AdFLkQ3Wi1gfg3XM9c
j8TP4lZ0cqsRmXfsEA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:33 2024 by rpki-client on console-fra.rpki-client.org