Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3134392e302f32342d3234203d3e20323632373834.roa
File:                     3139312e3234312e3134392e302f32342d3234203d3e20323632373834.roa (raw, json)
Hash identifier:          17xiMxG6wKdJdC1XIIItHZoZQzlRetMTs/PuBjnnS6M=
Subject key identifier:   2B:C2:BE:7D:25:23:C8:69:06:99:2A:E5:24:FD:15:D3:17:ED:A8:9A
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       7749C5654A4FAC9AA03C653418EFA3A775728357
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3134392e302f32342d3234203d3e20323632373834.roa
Signing time:             Sat 20 Apr 2024 09:49:05 +0000
ROA not before:           Sat 20 Apr 2024 09:44:05 +0000
ROA not after:            Sat 19 Apr 2025 09:49:05 +0000
asID:                     262784
IP address blocks:        191.241.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
                          rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:35:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:49:c5:65:4a:4f:ac:9a:a0:3c:65:34:18:ef:a3:a7:75:72:83:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Apr 20 09:44:05 2024 GMT
            Not After : Apr 19 09:49:05 2025 GMT
        Subject: CN=2BC2BE7D2523C86906992AE524FD15D317EDA89A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ed:87:13:14:a1:86:98:76:83:67:f8:c3:0b:
                    0e:14:cd:8d:9e:96:b8:9d:e3:d4:5b:25:4c:19:3b:
                    67:bf:f9:c5:cb:6d:7a:38:1c:04:3d:72:8f:4f:b2:
                    34:df:a2:d8:be:62:cc:16:e0:4c:8b:30:00:af:e2:
                    70:b7:44:c9:92:f3:92:b0:20:00:1a:e3:a2:1c:40:
                    4c:cd:ee:d1:d7:81:91:e7:7d:c8:d4:bb:1b:93:39:
                    34:45:bb:6b:30:fb:4c:5d:6e:f6:9f:84:2a:52:62:
                    0b:d1:c6:93:85:09:48:31:05:82:f3:8a:bc:ac:e8:
                    10:e8:fd:c8:cb:99:8c:2a:f6:24:2b:82:32:de:fc:
                    7c:e6:ab:41:97:08:55:08:d1:8e:67:df:87:12:75:
                    5d:9c:69:1d:ad:00:7a:c7:5e:f4:63:62:f4:f8:5b:
                    6a:66:c4:4a:7d:d0:dc:9c:b4:92:72:11:ed:4e:1b:
                    4a:2f:cf:c8:5a:5d:ac:16:ea:0e:89:b2:e0:2a:fe:
                    09:13:5a:70:59:14:f7:47:17:d7:5a:8e:97:c5:07:
                    34:7c:b5:00:0b:8e:8a:a8:ef:5f:91:dd:a5:d7:19:
                    26:13:9e:7c:5c:90:bf:97:4a:77:d3:37:d4:65:1b:
                    17:23:66:f1:9f:c3:0d:ad:10:0f:21:00:62:d7:95:
                    da:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C2:BE:7D:25:23:C8:69:06:99:2A:E5:24:FD:15:D3:17:ED:A8:9A
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3134392e302f32342d3234203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:cd:55:f9:de:92:ff:a6:2b:83:14:d6:c5:78:e4:b6:07:cd:
         3a:04:46:b7:b4:5e:58:3c:43:1c:d9:b8:e2:ca:81:65:ad:fd:
         fa:a8:f0:07:3b:f1:25:f5:11:65:03:c7:eb:72:1a:84:5a:a4:
         eb:50:38:da:2e:e6:bd:66:be:98:91:22:62:47:a0:d6:fc:30:
         e6:cc:5a:5c:03:16:ca:f5:8f:75:12:40:0c:cc:13:5f:60:95:
         b3:04:88:89:4a:6b:40:61:dd:7e:fe:12:84:9b:46:ca:4c:9e:
         d4:ea:02:67:df:50:2b:0f:b7:c3:9d:93:c2:a1:83:b3:30:09:
         07:5e:0a:7f:7a:7e:d9:d2:4c:c0:b1:22:b8:88:5f:df:f2:f1:
         c2:d6:2c:9b:68:e4:54:f3:f4:a0:d4:34:b5:fc:1e:18:46:62:
         12:43:5c:62:08:a9:e8:1a:3e:3e:8e:06:04:b6:9c:64:38:fd:
         5d:81:4a:e6:2a:dd:9b:e5:5c:13:6f:29:95:09:a2:26:c7:4a:
         3c:09:4d:f8:f5:1a:c0:ee:2f:65:6e:df:c9:76:6d:ec:58:de:
         f0:d6:46:05:f1:01:61:5a:1c:c6:4c:17:52:a3:8e:bf:b6:57:
         20:f5:0f:8e:9d:a0:a2:7c:8b:fc:a3:25:31:c1:26:d7:b1:a2:
         99:f5:e5:25
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUd0nFZUpPrJqgPGU0GO+jp3Vyg1cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENEMkU3NEMwQjUxNDE0ODI1Rjk1QzlEM0Q0MzJBREQ1
Njg5Njc1MTAeFw0yNDA0MjAwOTQ0MDVaFw0yNTA0MTkwOTQ5MDVaMDMxMTAvBgNV
BAMTKDJCQzJCRTdEMjUyM0M4NjkwNjk5MkFFNTI0RkQxNUQzMTdFREE4OUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe7YcTFKGGmHaDZ/jDCw4UzY2e
lrid49RbJUwZO2e/+cXLbXo4HAQ9co9PsjTfoti+YswW4EyLMACv4nC3RMmS85Kw
IAAa46IcQEzN7tHXgZHnfcjUuxuTOTRFu2sw+0xdbvafhCpSYgvRxpOFCUgxBYLz
irys6BDo/cjLmYwq9iQrgjLe/Hzmq0GXCFUI0Y5n34cSdV2caR2tAHrHXvRjYvT4
W2pmxEp90NyctJJyEe1OG0ovz8haXawW6g6JsuAq/gkTWnBZFPdHF9dajpfFBzR8
tQALjoqo71+R3aXXGSYTnnxckL+XSnfTN9RlGxcjZvGfww2tEA8hAGLXldpdAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUK8K+fSUjyGkGmSrlJP0V0xftqJowHwYDVR0j
BBgwFoAUjNLnTAtRQUgl+VydPUMq3VaJZ1EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXVFTmlIRFl3Vnk0REFBZVFneEw0bkx0c3JxbkhhZlBEVnczS1l3dXdK
TDUvMS84Q0QyRTc0QzBCNTE0MTQ4MjVGOTVDOUQzRDQzMkFERDU2ODk2NzUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDRDJFNzRDMEI1MTQxNDgy
NUY5NUM5RDNENDMyQURENTY4OTY3NTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1RU5pSERZd1Z5NERBQWVRZ3hMNG5MdHNycW5IYWZQRFZ3M0tZd3V3Skw1LzEv
MzEzOTMxMmUzMjM0MzEyZTMxMzQzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM3MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL/xlTANBgkqhkiG9w0BAQsFAAOCAQEAHM1V
+d6S/6YrgxTWxXjktgfNOgRGt7ReWDxDHNm44sqBZa39+qjwBzvxJfURZQPH63Ia
hFqk61A42i7mvWa+mJEiYkeg1vww5sxaXAMWyvWPdRJADMwTX2CVswSIiUprQGHd
fv4ShJtGykye1OoCZ99QKw+3w52TwqGDszAJB14Kf3p+2dJMwLEiuIhf3/LxwtYs
m2jkVPP0oNQ0tfweGEZiEkNcYgip6Bo+Po4GBLacZDj9XYFK5irdm+VcE28plQmi
JsdKPAlN+PUawO4vZW7fyXZt7Fje8NZGBfEBYVocxkwXUqOOv7ZXIPUPjp2gonyL
/KMlMcEm17GimfXlJQ==
-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:42 2024 by rpki-client on console-fra.rpki-client.org