Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DWD9LfuR9UcYi6hYx9XgGXYAEFWgoyugUYW73BhAYVy/1/3138312e3232352e3135322e302f32322d3234203d3e20323730363839.roa
File:                     3138312e3232352e3135322e302f32322d3234203d3e20323730363839.roa (raw, json)
Hash identifier:          nYT/SyVstQpWb3tkGIHgQQ0PAvhKqgtdaep5KFGq9dU=
Subject key identifier:   0B:0A:D4:8A:48:25:E2:6C:0F:E9:1B:19:D1:5D:1B:5F:29:FC:B5:C3
Certificate issuer:       /CN=E1A53866B17155A22981C4339035291ED9858A35
Certificate serial:       31907F63BC734BD21D408A75C188F0248D06001B
Authority key identifier: E1:A5:38:66:B1:71:55:A2:29:81:C4:33:90:35:29:1E:D9:85:8A:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1A53866B17155A22981C4339035291ED9858A35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DWD9LfuR9UcYi6hYx9XgGXYAEFWgoyugUYW73BhAYVy/1/3138312e3232352e3135322e302f32322d3234203d3e20323730363839.roa
Signing time:             Wed 03 Apr 2024 18:50:29 +0000
ROA not before:           Wed 03 Apr 2024 18:45:29 +0000
ROA not after:            Wed 02 Apr 2025 18:50:29 +0000
asID:                     270689
IP address blocks:        181.225.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5DWD9LfuR9UcYi6hYx9XgGXYAEFWgoyugUYW73BhAYVy/1/E1A53866B17155A22981C4339035291ED9858A35.crl
                          rsync://rpki-repo.registro.br/repo/5DWD9LfuR9UcYi6hYx9XgGXYAEFWgoyugUYW73BhAYVy/1/E1A53866B17155A22981C4339035291ED9858A35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1A53866B17155A22981C4339035291ED9858A35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:58:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:90:7f:63:bc:73:4b:d2:1d:40:8a:75:c1:88:f0:24:8d:06:00:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A53866B17155A22981C4339035291ED9858A35
        Validity
            Not Before: Apr  3 18:45:29 2024 GMT
            Not After : Apr  2 18:50:29 2025 GMT
        Subject: CN=0B0AD48A4825E26C0FE91B19D15D1B5F29FCB5C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fa:e0:a4:f1:4c:ae:c4:7d:94:5c:44:a0:5a:
                    f5:11:42:01:83:d1:4c:58:83:5a:5d:e5:71:2b:49:
                    83:0b:44:3f:17:77:4e:e5:82:51:e2:f5:3f:0c:b0:
                    8e:09:6a:cd:07:1f:cb:59:ea:ce:7f:96:a0:cc:b9:
                    61:96:da:47:4d:41:4b:62:eb:03:10:61:1d:67:63:
                    96:e9:24:cc:d5:50:7e:c2:14:87:e8:a2:e6:49:8b:
                    3b:e8:0a:87:e7:da:a2:4c:0b:b7:1d:46:58:a2:43:
                    a0:6d:a8:25:f0:4c:44:53:8c:17:32:cb:15:06:db:
                    56:c8:83:2e:4c:7a:f8:58:f6:90:6a:64:a2:c9:93:
                    6d:18:d0:da:28:5f:22:e4:b1:aa:da:b2:72:6f:e0:
                    70:a0:9a:fe:73:6a:68:fe:fa:be:a5:a1:fe:73:c1:
                    da:04:68:25:86:6b:98:5a:fb:c7:36:50:27:fc:c5:
                    e3:ec:65:21:0a:08:e8:01:2b:8b:22:01:87:b4:00:
                    7e:4a:84:4f:fb:94:58:ce:61:90:f6:24:78:f7:66:
                    07:ef:6e:d7:e5:48:12:05:af:bb:c1:b0:12:ab:50:
                    f4:03:60:04:0f:26:9d:c9:fa:92:32:5f:9f:f5:50:
                    92:bd:e7:c8:3c:ad:ca:82:ce:38:8d:00:8d:18:32:
                    45:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0A:D4:8A:48:25:E2:6C:0F:E9:1B:19:D1:5D:1B:5F:29:FC:B5:C3
            X509v3 Authority Key Identifier:
                keyid:E1:A5:38:66:B1:71:55:A2:29:81:C4:33:90:35:29:1E:D9:85:8A:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DWD9LfuR9UcYi6hYx9XgGXYAEFWgoyugUYW73BhAYVy/1/E1A53866B17155A22981C4339035291ED9858A35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1A53866B17155A22981C4339035291ED9858A35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DWD9LfuR9UcYi6hYx9XgGXYAEFWgoyugUYW73BhAYVy/1/3138312e3232352e3135322e302f32322d3234203d3e20323730363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:f1:10:3f:58:30:cc:f8:0e:06:31:15:a6:d7:90:92:97:4f:
         4a:e9:cb:c1:1b:e0:b2:36:de:e3:b8:d0:ee:62:4f:dc:2f:68:
         b7:15:14:a7:24:f6:fe:91:52:ea:68:46:b3:74:0d:0e:a3:8e:
         3f:6b:e8:0f:12:35:2d:01:a6:44:00:3d:ac:90:85:a4:45:11:
         57:b0:d0:ad:43:ab:d7:0c:00:f6:94:21:88:e4:82:d6:1c:a9:
         41:cc:f4:8f:9d:c8:53:4f:f6:f7:65:66:e9:a2:e6:30:87:24:
         e9:65:b8:38:d5:b6:98:79:9e:99:54:95:66:7c:f8:a7:6d:1d:
         d0:a3:95:d9:5e:94:93:72:16:e4:fb:0d:bd:49:91:21:99:7e:
         26:d4:a4:6f:de:f7:2e:d3:2c:71:19:30:18:a2:0e:c4:6a:66:
         5b:c0:6f:92:36:7b:35:72:24:cd:d2:5f:e1:d7:6b:aa:28:1a:
         96:ba:8e:9d:c2:a8:a4:6e:3b:34:fb:29:7c:a6:99:75:25:ee:
         26:13:b5:90:95:a5:35:6e:fb:99:61:f8:3d:31:f6:7e:44:82:
         b5:34:6f:54:b3:3d:fd:f9:04:ec:13:c6:4f:f8:ec:81:37:d3:
         fb:f2:a6:77:63:d2:b9:50:71:79:1e:68:34:a7:32:71:07:44:
         04:c1:33:ff
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUMZB/Y7xzS9IdQIp1wYjwJI0GABswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTFBNTM4NjZCMTcxNTVBMjI5ODFDNDMzOTAzNTI5MUVE
OTg1OEEzNTAeFw0yNDA0MDMxODQ1MjlaFw0yNTA0MDIxODUwMjlaMDMxMTAvBgNV
BAMTKDBCMEFENDhBNDgyNUUyNkMwRkU5MUIxOUQxNUQxQjVGMjlGQ0I1QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx+uCk8UyuxH2UXESgWvURQgGD
0UxYg1pd5XErSYMLRD8Xd07lglHi9T8MsI4Jas0HH8tZ6s5/lqDMuWGW2kdNQUti
6wMQYR1nY5bpJMzVUH7CFIfoouZJizvoCofn2qJMC7cdRliiQ6BtqCXwTERTjBcy
yxUG21bIgy5MevhY9pBqZKLJk20Y0NooXyLksarasnJv4HCgmv5zamj++r6lof5z
wdoEaCWGa5ha+8c2UCf8xePsZSEKCOgBK4siAYe0AH5KhE/7lFjOYZD2JHj3Zgfv
btflSBIFr7vBsBKrUPQDYAQPJp3J+pIyX5/1UJK958g8rcqCzjiNAI0YMkXRAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUCwrUikgl4mwP6RsZ0V0bXyn8tcMwHwYDVR0j
BBgwFoAU4aU4ZrFxVaIpgcQzkDUpHtmFijUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNURXRDlMZnVSOVVjWWk2aFl4OVhnR1hZQUVGV2dveXVnVVlXNzNCaEFZ
VnkvMS9FMUE1Mzg2NkIxNzE1NUEyMjk4MUM0MzM5MDM1MjkxRUQ5ODU4QTM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxQTUzODY2QjE3MTU1QTIy
OTgxQzQzMzkwMzUyOTFFRDk4NThBMzUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVEV0Q5TGZ1UjlVY1lpNmhZeDlYZ0dYWUFFRldnb3l1Z1VZVzczQmhBWVZ5LzEv
MzEzODMxMmUzMjMyMzUyZTMxMzUzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzczMDM2MzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArXhmDANBgkqhkiG9w0BAQsFAAOCAQEAKPEQ
P1gwzPgOBjEVpteQkpdPSunLwRvgsjbe47jQ7mJP3C9otxUUpyT2/pFS6mhGs3QN
DqOOP2voDxI1LQGmRAA9rJCFpEURV7DQrUOr1wwA9pQhiOSC1hypQcz0j53IU0/2
92Vm6aLmMIck6WW4ONW2mHmemVSVZnz4p20d0KOV2V6Uk3IW5PsNvUmRIZl+JtSk
b973LtMscRkwGKIOxGpmW8BvkjZ7NXIkzdJf4ddrqigalrqOncKopG47NPspfKaZ
dSXuJhO1kJWlNW77mWH4PTH2fkSCtTRvVLM9/fkE7BPGT/jsgTfT+/Kmd2PSuVBx
eR5oNKcycQdEBMEz/w==
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:35 2024 by rpki-client on console-ams.rpki-client.org