Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/1/3230312e3135302e3130382e302f32322d3234203d3e203532353434.roa
File:                     3230312e3135302e3130382e302f32322d3234203d3e203532353434.roa (raw, json)
Hash identifier:          lDj5b1b7ECosiH2jE6r26YinrSDSsL3FXB/0lH7tHtY=
Subject key identifier:   47:DE:BD:86:52:91:5E:1F:9D:CA:66:C9:83:0C:7A:BE:E9:7A:2A:5E
Certificate issuer:       /CN=CB14FE80265F8727559A5009292EBBC26EE55F31
Certificate serial:       0B54D6BB3480873B2CB36D643172CEEB6793F446
Authority key identifier: CB:14:FE:80:26:5F:87:27:55:9A:50:09:29:2E:BB:C2:6E:E5:5F:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB14FE80265F8727559A5009292EBBC26EE55F31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/1/3230312e3135302e3130382e302f32322d3234203d3e203532353434.roa
Signing time:             Mon 16 Sep 2024 13:46:13 +0000
ROA not before:           Mon 16 Sep 2024 13:41:13 +0000
ROA not after:            Mon 15 Sep 2025 13:46:13 +0000
asID:                     52544
IP address blocks:        201.150.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/1/CB14FE80265F8727559A5009292EBBC26EE55F31.crl
                          rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/1/CB14FE80265F8727559A5009292EBBC26EE55F31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB14FE80265F8727559A5009292EBBC26EE55F31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:54:d6:bb:34:80:87:3b:2c:b3:6d:64:31:72:ce:eb:67:93:f4:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB14FE80265F8727559A5009292EBBC26EE55F31
        Validity
            Not Before: Sep 16 13:41:13 2024 GMT
            Not After : Sep 15 13:46:13 2025 GMT
        Subject: CN=47DEBD8652915E1F9DCA66C9830C7ABEE97A2A5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:84:e5:20:11:d5:10:27:c7:65:32:db:9e:b8:
                    6a:bb:d1:f9:5e:15:a7:bd:9a:bd:2f:e4:d8:d1:df:
                    35:4b:f2:5b:a8:76:af:97:04:bb:09:be:a9:78:bf:
                    c8:4f:61:b6:29:de:55:68:4b:97:e7:e8:84:f8:54:
                    e4:e1:fb:1a:38:35:70:ae:a0:58:5c:b2:d4:2d:75:
                    08:18:66:d8:34:e5:6a:74:20:14:6e:6e:86:dc:9a:
                    21:3f:40:79:c6:10:e3:db:19:0c:35:d0:68:0b:9b:
                    be:46:b3:9b:fa:35:48:80:63:19:67:df:e0:f7:23:
                    58:02:03:4e:21:98:92:7a:5a:72:cf:cc:aa:65:40:
                    ae:d0:2f:18:be:a9:58:d8:7e:35:35:4b:c6:7e:85:
                    3b:a7:f5:6b:83:67:b6:38:d2:19:d7:9a:ec:d6:be:
                    58:e8:66:83:de:25:b6:7b:64:82:27:5e:73:3f:79:
                    97:1f:44:2a:bb:85:74:77:d6:2e:6c:7c:e1:af:01:
                    23:97:90:b4:3a:00:14:54:3b:02:7b:55:12:6e:a8:
                    0b:60:e2:9a:e6:48:d9:8f:b7:ed:5f:6a:af:74:2e:
                    a9:77:1d:82:0d:89:9c:ab:47:b4:55:40:15:83:5d:
                    52:ce:f1:60:3a:63:e9:9f:85:7c:82:87:83:a2:ad:
                    ab:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:DE:BD:86:52:91:5E:1F:9D:CA:66:C9:83:0C:7A:BE:E9:7A:2A:5E
            X509v3 Authority Key Identifier:
                keyid:CB:14:FE:80:26:5F:87:27:55:9A:50:09:29:2E:BB:C2:6E:E5:5F:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/1/CB14FE80265F8727559A5009292EBBC26EE55F31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB14FE80265F8727559A5009292EBBC26EE55F31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6EcNHnGtfiwx6Ex4W34HQjqJy2j41pFPgobuZUc4H5c9/1/3230312e3135302e3130382e302f32322d3234203d3e203532353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:eb:08:d8:91:c4:f4:08:c7:7c:e8:2c:5e:ec:30:25:bb:0f:
         16:f3:aa:98:97:e1:73:ad:18:36:3d:f1:10:f2:8f:9d:f1:06:
         4e:13:4a:cf:01:55:89:a0:54:43:7d:d1:b4:4e:db:ea:96:18:
         e1:37:ce:77:9d:16:7b:52:a2:7b:c5:94:34:db:1f:6c:2a:8e:
         44:e9:b7:95:e8:3e:e8:ee:f5:f5:91:95:6e:8a:a5:9e:bc:45:
         a5:74:31:54:9d:36:d8:34:b5:2e:64:8e:76:fb:94:e0:da:26:
         c8:eb:a9:6d:40:2b:73:1c:72:a1:06:cc:78:92:c3:22:6c:10:
         df:b0:13:a6:82:f7:eb:d4:1a:4f:af:3d:ec:30:5e:8d:eb:7a:
         19:d5:f9:99:f9:be:27:9b:28:ac:13:d6:0e:6b:37:4e:42:d5:
         e7:8d:ec:9a:8e:d5:6c:83:ed:34:c3:0c:73:b1:a5:fd:0d:7a:
         bc:b1:ab:6b:1d:bd:7b:e8:fd:f5:93:37:c3:93:e1:c3:d0:63:
         87:a9:7a:f7:0d:f7:21:6f:3c:81:65:f5:95:31:1e:3d:cb:26:
         db:04:0e:b8:39:24:79:52:17:af:2d:6a:e1:86:f4:1c:b6:22:
         25:b1:ec:1c:3a:9d:02:3a:43:cf:f8:b4:70:2f:4c:3b:9e:d4:
         c1:18:3e:18
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUC1TWuzSAhzsss21kMXLO62eT9EYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0IxNEZFODAyNjVGODcyNzU1OUE1MDA5MjkyRUJCQzI2
RUU1NUYzMTAeFw0yNDA5MTYxMzQxMTNaFw0yNTA5MTUxMzQ2MTNaMDMxMTAvBgNV
BAMTKDQ3REVCRDg2NTI5MTVFMUY5RENBNjZDOTgzMEM3QUJFRTk3QTJBNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJhOUgEdUQJ8dlMtueuGq70fle
Fae9mr0v5NjR3zVL8luodq+XBLsJvql4v8hPYbYp3lVoS5fn6IT4VOTh+xo4NXCu
oFhcstQtdQgYZtg05Wp0IBRubobcmiE/QHnGEOPbGQw10GgLm75Gs5v6NUiAYxln
3+D3I1gCA04hmJJ6WnLPzKplQK7QLxi+qVjYfjU1S8Z+hTun9WuDZ7Y40hnXmuzW
vljoZoPeJbZ7ZIInXnM/eZcfRCq7hXR31i5sfOGvASOXkLQ6ABRUOwJ7VRJuqAtg
4prmSNmPt+1faq90Lql3HYINiZyrR7RVQBWDXVLO8WA6Y+mfhXyCh4OiratNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUR969hlKRXh+dymbJgwx6vul6Kl4wHwYDVR0j
BBgwFoAUyxT+gCZfhydVmlAJKS67wm7lXzEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkVjTkhuR3RmaXd4NkV4NFczNEhRanFKeTJqNDFwRlBnb2J1WlVjNEg1
YzkvMS9DQjE0RkU4MDI2NUY4NzI3NTU5QTUwMDkyOTJFQkJDMjZFRTU1RjMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCMTRGRTgwMjY1Rjg3Mjc1
NTlBNTAwOTI5MkVCQkMyNkVFNTVGMzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZFY05Ibkd0Zml3eDZFeDRXMzRIUWpxSnkyajQxcEZQZ29idVpVYzRINWM5LzEv
MzIzMDMxMmUzMTM1MzAyZTMxMzAzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1
MzIzNTM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALJlmwwDQYJKoZIhvcNAQELBQADggEBACbrCNiR
xPQIx3zoLF7sMCW7DxbzqpiX4XOtGDY98RDyj53xBk4TSs8BVYmgVEN90bRO2+qW
GOE3znedFntSonvFlDTbH2wqjkTpt5XoPuju9fWRlW6KpZ68RaV0MVSdNtg0tS5k
jnb7lODaJsjrqW1AK3MccqEGzHiSwyJsEN+wE6aC9+vUGk+vPewwXo3rehnV+Zn5
viebKKwT1g5rN05C1eeN7JqO1WyD7TTDDHOxpf0Neryxq2sdvXvo/fWTN8OT4cPQ
Y4epevcN9yFvPIFl9ZUxHj3LJtsEDrg5JHlSF68tauGG9By2IiWx7Bw6nQI6Q8/4
tHAvTDue1MEYPhg=
-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:33 2024 by rpki-client on console-ams.rpki-client.org