Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3135372e302f32342d3234203d3e20323632373834.roa
File:                     3139312e3234312e3135372e302f32342d3234203d3e20323632373834.roa (raw, json)
Hash identifier:          Vt1HzqTTXPBC2QZhlQOCJAatO4nmrMl0yifkIMDekHg=
Subject key identifier:   0D:BA:30:8E:E6:92:EA:C1:71:01:B5:77:B0:20:0C:AA:7A:3E:E0:4A
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       7D19034534D91535AC553B737978CA9B44D9F59B
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3135372e302f32342d3234203d3e20323632373834.roa
Signing time:             Sat 20 Apr 2024 09:49:04 +0000
ROA not before:           Sat 20 Apr 2024 09:44:04 +0000
ROA not after:            Sat 19 Apr 2025 09:49:04 +0000
asID:                     262784
IP address blocks:        191.241.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
                          rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:19:03:45:34:d9:15:35:ac:55:3b:73:79:78:ca:9b:44:d9:f5:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Apr 20 09:44:04 2024 GMT
            Not After : Apr 19 09:49:04 2025 GMT
        Subject: CN=0DBA308EE692EAC17101B577B0200CAA7A3EE04A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:56:e0:e8:13:b9:ef:66:8b:1c:48:14:7b:83:
                    2b:b9:ad:49:e0:1f:dd:eb:83:e9:93:52:56:b2:14:
                    47:a9:e7:c3:a5:b3:9f:10:62:28:19:7e:45:14:12:
                    7d:36:e1:c3:5b:22:5f:0f:a4:28:40:4d:46:db:66:
                    94:d2:b0:b0:70:1d:2c:ff:5f:1b:fb:7c:49:11:5c:
                    0c:e0:02:43:b4:04:02:1c:a6:ac:07:5f:7e:73:08:
                    55:35:99:bf:59:42:d5:fb:84:b6:c3:87:31:cd:ff:
                    a6:0a:a4:83:06:13:8d:7c:06:10:41:44:ec:3f:10:
                    c8:e0:c6:68:c6:99:7a:dc:dc:75:93:04:15:2e:39:
                    17:62:4e:e3:84:4c:6c:b6:56:28:7c:40:40:db:34:
                    00:77:88:55:f5:49:32:5b:af:36:89:55:a3:ea:f3:
                    16:02:c5:8a:37:8f:6f:7d:c0:31:34:b2:71:83:f2:
                    0e:5d:a4:e4:e5:42:96:8b:45:8f:05:86:47:0f:85:
                    09:62:09:6e:73:03:4d:a9:69:9c:c2:34:be:dd:ad:
                    9a:38:e0:f2:72:40:ed:47:2b:b2:74:56:58:c1:63:
                    c0:44:5e:d1:3b:65:c0:56:27:e0:c7:3f:db:2e:0d:
                    b6:4b:02:e3:d4:93:ca:df:9b:53:f0:3f:dc:44:38:
                    41:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:BA:30:8E:E6:92:EA:C1:71:01:B5:77:B0:20:0C:AA:7A:3E:E0:4A
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3135372e302f32342d3234203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:f0:da:18:c3:54:01:4c:b6:bf:96:b8:74:01:27:7c:4b:0c:
         94:39:bc:04:ee:08:24:53:59:46:a6:a0:4e:a3:67:02:2d:ca:
         4c:0f:39:f4:1b:a4:75:5b:50:bb:52:fe:86:6d:5b:30:f9:d8:
         66:fd:2d:3e:1d:95:06:c8:f8:6f:87:c7:25:1c:6d:cf:17:c1:
         c8:b6:74:ee:99:5a:bf:c0:ca:5f:63:12:47:0c:5d:39:e4:6e:
         c4:ac:d7:ce:88:90:87:17:02:ba:9a:0d:07:b5:07:2e:66:66:
         b5:04:89:08:e3:b0:20:d4:e7:1a:d9:ab:c3:c6:46:aa:7f:79:
         a1:94:57:04:af:e9:44:e6:48:f4:ac:54:d2:be:34:ce:4e:e4:
         1e:b4:83:9a:9b:4b:9b:8d:2a:20:68:c4:3d:bf:26:35:8a:f5:
         1a:31:34:20:21:8b:38:04:85:0c:d3:3d:ea:dc:0f:cd:e5:b9:
         27:ee:89:3b:a4:be:5e:e9:a9:46:1a:b4:ce:6f:bd:96:93:16:
         db:c0:6e:b2:27:bf:69:ad:64:e2:02:97:00:82:92:43:19:ab:
         50:71:df:29:b2:b7:70:0b:82:44:69:e0:94:9d:5c:78:0e:3c:
         05:d0:db:4f:2d:6a:c6:1b:0c:fa:6b:87:4a:d4:7c:18:6e:89:
         6b:0c:6c:22
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUfRkDRTTZFTWsVTtzeXjKm0TZ9ZswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENEMkU3NEMwQjUxNDE0ODI1Rjk1QzlEM0Q0MzJBREQ1
Njg5Njc1MTAeFw0yNDA0MjAwOTQ0MDRaFw0yNTA0MTkwOTQ5MDRaMDMxMTAvBgNV
BAMTKDBEQkEzMDhFRTY5MkVBQzE3MTAxQjU3N0IwMjAwQ0FBN0EzRUUwNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKVuDoE7nvZoscSBR7gyu5rUng
H93rg+mTUlayFEep58Ols58QYigZfkUUEn024cNbIl8PpChATUbbZpTSsLBwHSz/
Xxv7fEkRXAzgAkO0BAIcpqwHX35zCFU1mb9ZQtX7hLbDhzHN/6YKpIMGE418BhBB
ROw/EMjgxmjGmXrc3HWTBBUuORdiTuOETGy2Vih8QEDbNAB3iFX1STJbrzaJVaPq
8xYCxYo3j299wDE0snGD8g5dpOTlQpaLRY8FhkcPhQliCW5zA02paZzCNL7drZo4
4PJyQO1HK7J0VljBY8BEXtE7ZcBWJ+DHP9suDbZLAuPUk8rfm1PwP9xEOEFdAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUDbowjuaS6sFxAbV3sCAMqno+4EowHwYDVR0j
BBgwFoAUjNLnTAtRQUgl+VydPUMq3VaJZ1EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXVFTmlIRFl3Vnk0REFBZVFneEw0bkx0c3JxbkhhZlBEVnczS1l3dXdK
TDUvMS84Q0QyRTc0QzBCNTE0MTQ4MjVGOTVDOUQzRDQzMkFERDU2ODk2NzUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDRDJFNzRDMEI1MTQxNDgy
NUY5NUM5RDNENDMyQURENTY4OTY3NTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1RU5pSERZd1Z5NERBQWVRZ3hMNG5MdHNycW5IYWZQRFZ3M0tZd3V3Skw1LzEv
MzEzOTMxMmUzMjM0MzEyZTMxMzUzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM3MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL/xnTANBgkqhkiG9w0BAQsFAAOCAQEAA/Da
GMNUAUy2v5a4dAEnfEsMlDm8BO4IJFNZRqagTqNnAi3KTA859BukdVtQu1L+hm1b
MPnYZv0tPh2VBsj4b4fHJRxtzxfByLZ07plav8DKX2MSRwxdOeRuxKzXzoiQhxcC
upoNB7UHLmZmtQSJCOOwINTnGtmrw8ZGqn95oZRXBK/pROZI9KxU0r40zk7kHrSD
mptLm40qIGjEPb8mNYr1GjE0ICGLOASFDNM96twPzeW5J+6JO6S+XumpRhq0zm+9
lpMW28Busie/aa1k4gKXAIKSQxmrUHHfKbK3cAuCRGnglJ1ceA48BdDbTy1qxhsM
+muHStR8GG6JawxsIg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:09 2024 by rpki-client on console-ams.rpki-client.org