Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3134362e302f32342d3234203d3e20323632373834.roa
File:                     3139312e3234312e3134362e302f32342d3234203d3e20323632373834.roa (raw, json)
Hash identifier:          pKaNsUIPj301ky4f3ab3/jctlMfozrs+FQl9U0p6XfE=
Subject key identifier:   0A:CF:5A:CC:6A:E8:BA:FC:B1:F6:5B:B3:91:AD:44:AF:64:07:A9:42
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       230C59FCE5FFC920EA3C50AF647761E2B0F9F86B
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3134362e302f32342d3234203d3e20323632373834.roa
Signing time:             Sat 20 Apr 2024 09:49:01 +0000
ROA not before:           Sat 20 Apr 2024 09:44:01 +0000
ROA not after:            Sat 19 Apr 2025 09:49:01 +0000
asID:                     262784
IP address blocks:        191.241.146.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
                          rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:0c:59:fc:e5:ff:c9:20:ea:3c:50:af:64:77:61:e2:b0:f9:f8:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Apr 20 09:44:01 2024 GMT
            Not After : Apr 19 09:49:01 2025 GMT
        Subject: CN=0ACF5ACC6AE8BAFCB1F65BB391AD44AF6407A942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:eb:13:54:22:7b:9b:6c:19:5a:8d:7d:7d:ee:
                    c1:7e:54:10:b1:c0:fc:51:6b:f9:df:4e:fd:0a:56:
                    d6:c3:40:e2:0d:28:05:2b:7b:a6:b1:3d:b0:a4:c0:
                    96:94:63:5e:c0:04:3b:4b:30:d4:1b:14:b6:5f:c3:
                    05:69:15:89:fd:5c:e3:ad:b6:b6:a0:d9:4d:8c:d9:
                    5b:3c:05:04:13:a6:2f:7b:50:28:b8:72:37:b0:f0:
                    46:1a:f5:85:87:4e:30:a4:91:75:7d:2e:72:49:74:
                    32:ab:d4:df:9f:65:e4:88:19:f6:07:25:bc:07:12:
                    f9:e5:34:0f:1c:91:ca:66:3a:40:43:13:d2:18:31:
                    5b:60:8b:08:d8:33:3d:5c:7b:f3:c8:b1:c7:7e:22:
                    fa:94:c4:68:af:fc:49:17:09:f9:e0:42:db:3f:5b:
                    f4:58:06:55:5e:d1:bd:17:40:3c:1e:95:56:0a:c0:
                    54:3b:6e:6a:13:c5:98:97:3e:53:6b:99:27:c2:c4:
                    d8:1e:44:73:35:12:86:ba:9c:53:12:a5:1e:ec:db:
                    b7:68:c4:4e:a0:9f:4a:0f:41:37:04:15:53:4c:ce:
                    9c:b7:19:ed:e3:a6:4f:5a:c2:28:a0:49:b0:a8:10:
                    f4:3b:56:09:0a:ac:60:87:c3:32:5e:62:4d:d4:95:
                    e1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CF:5A:CC:6A:E8:BA:FC:B1:F6:5B:B3:91:AD:44:AF:64:07:A9:42
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3134362e302f32342d3234203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:ee:60:23:f0:f3:26:62:c3:dd:55:77:82:94:8d:4c:4e:4c:
         17:20:56:0f:dc:84:bd:de:e2:5a:6a:5c:98:05:61:0d:77:42:
         93:5f:87:e0:60:bb:41:d9:66:34:de:bc:f7:f3:f7:87:9b:4b:
         33:50:aa:7d:0d:2f:b9:07:cc:97:83:d3:77:35:18:a8:20:63:
         88:cf:a8:d3:d7:5a:47:02:e6:c7:99:ad:e4:a3:ae:7a:1e:e1:
         fe:2b:96:5e:c0:9c:6c:30:50:55:16:bc:ae:22:35:fc:04:e9:
         84:88:e6:db:0a:46:98:6d:95:1b:ff:48:46:85:57:9f:50:61:
         97:35:0b:02:6a:45:79:33:0c:b7:0e:0f:07:20:0e:52:c8:b3:
         1b:60:ed:f2:1f:93:ce:c9:c7:b7:7e:df:94:dd:36:20:7e:59:
         93:d3:a4:c1:d5:47:de:31:73:76:3a:78:a1:79:52:89:62:d6:
         da:52:cf:3e:1c:43:90:f8:f0:8f:d1:50:62:d1:a1:9f:46:79:
         f0:fb:70:b4:e8:7b:e2:04:ea:6b:76:9f:9b:5f:65:46:72:e9:
         88:5d:bd:87:30:62:8f:69:06:da:3c:22:4d:56:17:53:81:4c:
         ee:50:db:5e:62:5c:08:e2:aa:a1:0f:48:71:e6:14:cd:ea:ba:
         b0:7c:de:55
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUIwxZ/OX/ySDqPFCvZHdh4rD5+GswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENEMkU3NEMwQjUxNDE0ODI1Rjk1QzlEM0Q0MzJBREQ1
Njg5Njc1MTAeFw0yNDA0MjAwOTQ0MDFaFw0yNTA0MTkwOTQ5MDFaMDMxMTAvBgNV
BAMTKDBBQ0Y1QUNDNkFFOEJBRkNCMUY2NUJCMzkxQUQ0NEFGNjQwN0E5NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/6xNUInubbBlajX197sF+VBCx
wPxRa/nfTv0KVtbDQOINKAUre6axPbCkwJaUY17ABDtLMNQbFLZfwwVpFYn9XOOt
trag2U2M2Vs8BQQTpi97UCi4cjew8EYa9YWHTjCkkXV9LnJJdDKr1N+fZeSIGfYH
JbwHEvnlNA8ckcpmOkBDE9IYMVtgiwjYMz1ce/PIscd+IvqUxGiv/EkXCfngQts/
W/RYBlVe0b0XQDwelVYKwFQ7bmoTxZiXPlNrmSfCxNgeRHM1Eoa6nFMSpR7s27do
xE6gn0oPQTcEFVNMzpy3Ge3jpk9awiigSbCoEPQ7VgkKrGCHwzJeYk3UleFfAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUCs9azGrouvyx9luzka1Er2QHqUIwHwYDVR0j
BBgwFoAUjNLnTAtRQUgl+VydPUMq3VaJZ1EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXVFTmlIRFl3Vnk0REFBZVFneEw0bkx0c3JxbkhhZlBEVnczS1l3dXdK
TDUvMS84Q0QyRTc0QzBCNTE0MTQ4MjVGOTVDOUQzRDQzMkFERDU2ODk2NzUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDRDJFNzRDMEI1MTQxNDgy
NUY5NUM5RDNENDMyQURENTY4OTY3NTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1RU5pSERZd1Z5NERBQWVRZ3hMNG5MdHNycW5IYWZQRFZ3M0tZd3V3Skw1LzEv
MzEzOTMxMmUzMjM0MzEyZTMxMzQzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM3MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL/xkjANBgkqhkiG9w0BAQsFAAOCAQEAye5g
I/DzJmLD3VV3gpSNTE5MFyBWD9yEvd7iWmpcmAVhDXdCk1+H4GC7QdlmNN689/P3
h5tLM1CqfQ0vuQfMl4PTdzUYqCBjiM+o09daRwLmx5mt5KOueh7h/iuWXsCcbDBQ
VRa8riI1/ATphIjm2wpGmG2VG/9IRoVXn1BhlzULAmpFeTMMtw4PByAOUsizG2Dt
8h+TzsnHt37flN02IH5Zk9OkwdVH3jFzdjp4oXlSiWLW2lLPPhxDkPjwj9FQYtGh
n0Z58PtwtOh74gTqa3afm19lRnLpiF29hzBij2kG2jwiTVYXU4FM7lDbXmJcCOKq
oQ9IceYUzeq6sHzeVQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:09 2024 by rpki-client on console-ams.rpki-client.org