Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/3139302e3130332e3136322e302f32342d3332203d3e20323632393839.roa
File:                     3139302e3130332e3136322e302f32342d3332203d3e20323632393839.roa (raw, json)
Hash identifier:          Wx3mvW7ZrtxLMlGMXkMA/ui7l0JadSQRIyVw+uPjxNc=
Subject key identifier:   DF:CF:74:10:45:71:6A:4D:E7:80:7B:2F:6B:85:CB:22:D7:26:A8:4C
Certificate issuer:       /CN=D322281463F194BEAD29926EC73A0E7378D1F259
Certificate serial:       098F59BB4DAE3ED3A0D6842217FCEB82C82F0F7A
Authority key identifier: D3:22:28:14:63:F1:94:BE:AD:29:92:6E:C7:3A:0E:73:78:D1:F2:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D322281463F194BEAD29926EC73A0E7378D1F259.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/3139302e3130332e3136322e302f32342d3332203d3e20323632393839.roa
Signing time:             Thu 04 Apr 2024 19:59:11 +0000
ROA not before:           Thu 04 Apr 2024 19:54:11 +0000
ROA not after:            Thu 03 Apr 2025 19:59:11 +0000
asID:                     262989
IP address blocks:        190.103.162.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/D322281463F194BEAD29926EC73A0E7378D1F259.crl
                          rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/D322281463F194BEAD29926EC73A0E7378D1F259.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D322281463F194BEAD29926EC73A0E7378D1F259.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:8f:59:bb:4d:ae:3e:d3:a0:d6:84:22:17:fc:eb:82:c8:2f:0f:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D322281463F194BEAD29926EC73A0E7378D1F259
        Validity
            Not Before: Apr  4 19:54:11 2024 GMT
            Not After : Apr  3 19:59:11 2025 GMT
        Subject: CN=DFCF741045716A4DE7807B2F6B85CB22D726A84C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f4:38:02:88:de:bc:c3:c1:a3:41:09:a8:1c:
                    ee:e7:5c:76:4a:a2:2a:d1:99:7e:5d:02:68:51:1b:
                    09:47:d7:c3:7b:7f:ae:4e:fe:84:c2:fc:75:76:d3:
                    21:f2:10:59:ac:48:e1:93:e8:5b:1f:c1:3d:2e:6b:
                    50:88:93:bb:83:4a:ee:36:f0:8e:b8:eb:f8:66:60:
                    fb:c4:b5:fd:76:24:ea:b2:8c:8b:f0:99:0e:90:ca:
                    7a:4b:88:e7:7b:ae:39:2e:30:cb:6c:db:48:df:df:
                    fb:76:52:75:41:47:8d:a0:43:6e:64:10:e0:4a:71:
                    f9:39:c2:b7:98:8e:55:ca:8e:7f:ce:84:3d:63:80:
                    63:73:6a:9c:f1:18:82:7f:a3:7f:66:c7:69:7e:02:
                    2b:70:91:85:6e:8f:69:65:bc:b2:5c:67:68:75:4e:
                    91:8b:66:89:a6:f1:d3:e1:20:f3:14:8f:df:ea:ce:
                    45:18:da:f7:d5:df:69:6b:07:3d:0e:41:11:d8:10:
                    ad:ac:6e:91:25:44:84:6d:e2:9a:58:95:3c:c8:b8:
                    86:df:a1:0c:c7:37:8e:07:1b:05:c0:e3:29:6e:ca:
                    57:45:e1:d5:6e:f9:5d:a1:ee:08:de:0f:e0:0e:e7:
                    ae:f0:4c:11:45:4a:fb:c0:27:12:21:d8:f2:a5:e6:
                    9e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CF:74:10:45:71:6A:4D:E7:80:7B:2F:6B:85:CB:22:D7:26:A8:4C
            X509v3 Authority Key Identifier:
                keyid:D3:22:28:14:63:F1:94:BE:AD:29:92:6E:C7:3A:0E:73:78:D1:F2:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/D322281463F194BEAD29926EC73A0E7378D1F259.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D322281463F194BEAD29926EC73A0E7378D1F259.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/3139302e3130332e3136322e302f32342d3332203d3e20323632393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:ce:f8:96:66:0a:59:9c:fc:0c:62:42:d6:4a:b7:d8:fa:d2:
         ed:62:89:b8:4c:2d:2d:9e:e7:06:8e:dd:e3:c0:56:23:75:d6:
         b1:a1:8c:80:46:39:ea:f3:80:7e:ab:0b:12:d3:b5:81:19:5c:
         63:f8:5a:2c:7f:2e:be:2a:60:95:7d:5e:08:ab:f2:03:2b:88:
         14:42:f1:87:db:a3:ce:02:c1:09:63:79:4e:bf:ca:4a:2c:63:
         a5:eb:08:88:8f:97:88:25:a9:e2:15:70:40:fe:27:f2:8c:9d:
         79:25:77:42:d5:21:8c:3f:7e:37:60:9e:45:9b:5c:ac:45:0c:
         77:a1:57:56:62:17:8d:e8:4e:1a:06:3f:be:c4:3f:8a:e7:ce:
         e2:f1:4f:e7:5d:1f:0a:48:45:1b:ba:d9:b2:b1:67:2b:57:d2:
         2f:57:28:3d:50:e9:99:54:dd:56:fe:9d:c6:c5:bf:68:2a:62:
         2d:aa:08:b3:eb:19:e6:41:ca:d1:aa:b5:54:65:61:6a:8b:aa:
         c7:16:e4:b5:f5:1b:67:65:16:17:19:4d:5b:1c:ce:e1:e0:86:
         91:73:2c:17:81:a0:20:eb:5c:08:2e:28:df:c8:94:4a:d3:df:
         ad:02:b5:f2:e5:4b:63:7c:9a:56:57:11:2b:45:af:9e:22:07:
         52:c6:af:98
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUCY9Zu02uPtOg1oQiF/zrgsgvD3owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDMyMjI4MTQ2M0YxOTRCRUFEMjk5MjZFQzczQTBFNzM3
OEQxRjI1OTAeFw0yNDA0MDQxOTU0MTFaFw0yNTA0MDMxOTU5MTFaMDMxMTAvBgNV
BAMTKERGQ0Y3NDEwNDU3MTZBNERFNzgwN0IyRjZCODVDQjIyRDcyNkE4NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/9DgCiN68w8GjQQmoHO7nXHZK
oirRmX5dAmhRGwlH18N7f65O/oTC/HV20yHyEFmsSOGT6FsfwT0ua1CIk7uDSu42
8I646/hmYPvEtf12JOqyjIvwmQ6QynpLiOd7rjkuMMts20jf3/t2UnVBR42gQ25k
EOBKcfk5wreYjlXKjn/OhD1jgGNzapzxGIJ/o39mx2l+AitwkYVuj2llvLJcZ2h1
TpGLZomm8dPhIPMUj9/qzkUY2vfV32lrBz0OQRHYEK2sbpElRIRt4ppYlTzIuIbf
oQzHN44HGwXA4yluyldF4dVu+V2h7gjeD+AO567wTBFFSvvAJxIh2PKl5p55AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU3890EEVxak3ngHsva4XLItcmqEwwHwYDVR0j
BBgwFoAU0yIoFGPxlL6tKZJuxzoOc3jR8lkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHYxQXJrZFBjaU1XTlZGTGt4NnhGd3NjYWIxUTNqSEp3QlJIZ1VhUkVx
cU0vMS9EMzIyMjgxNDYzRjE5NEJFQUQyOTkyNkVDNzNBMEU3Mzc4RDFGMjU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzMjIyODE0NjNGMTk0QkVB
RDI5OTI2RUM3M0EwRTczNzhEMUYyNTkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR2MUFya2RQY2lNV05WRkxreDZ4RndzY2FiMVEzakhKd0JSSGdVYVJFcXFNLzEv
MzEzOTMwMmUzMTMwMzMyZTMxMzYzMjJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMy
MzYzMjM5MzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5nojANBgkqhkiG9w0BAQsFAAOCAQEAFc74
lmYKWZz8DGJC1kq32PrS7WKJuEwtLZ7nBo7d48BWI3XWsaGMgEY56vOAfqsLEtO1
gRlcY/haLH8uvipglX1eCKvyAyuIFELxh9ujzgLBCWN5Tr/KSixjpesIiI+XiCWp
4hVwQP4n8oydeSV3QtUhjD9+N2CeRZtcrEUMd6FXVmIXjehOGgY/vsQ/iufO4vFP
510fCkhFG7rZsrFnK1fSL1coPVDpmVTdVv6dxsW/aCpiLaoIs+sZ5kHK0aq1VGVh
aouqxxbktfUbZ2UWFxlNWxzO4eCGkXMsF4GgIOtcCC4o38iUStPfrQK18uVLY3ya
VlcRK0WvniIHUsavmA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:15 2024 by rpki-client on console-ams.rpki-client.org