Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138392e3132372e302e302f32312d3231203d3e203237363933.roa
File:                     3138392e3132372e302e302f32312d3231203d3e203237363933.roa (raw, json)
Hash identifier:          r7dXJhwWYlAZlTMFIvUmgQUqGVEu2w86+7ggwcxDuJk=
Subject key identifier:   AE:10:0D:DE:57:63:DA:C7:F2:0F:EF:7F:0B:62:2C:C3:A2:F6:86:98
Certificate issuer:       /CN=3345439099C79C13F583D2238E3BB7D0D60D6877
Certificate serial:       5F47D0A84E831AB4A7243AA61C495EA7524C749E
Authority key identifier: 33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138392e3132372e302e302f32312d3231203d3e203237363933.roa
Signing time:             Tue 22 Oct 2024 14:30:15 +0000
ROA not before:           Tue 22 Oct 2024 14:25:15 +0000
ROA not after:            Tue 21 Oct 2025 14:30:15 +0000
asID:                     27693
IP address blocks:        189.127.0.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl
                          rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 05:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:47:d0:a8:4e:83:1a:b4:a7:24:3a:a6:1c:49:5e:a7:52:4c:74:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3345439099C79C13F583D2238E3BB7D0D60D6877
        Validity
            Not Before: Oct 22 14:25:15 2024 GMT
            Not After : Oct 21 14:30:15 2025 GMT
        Subject: CN=AE100DDE5763DAC7F20FEF7F0B622CC3A2F68698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:54:e9:f0:e9:72:75:3a:7c:fa:04:05:52:57:
                    7d:c4:bc:98:8b:a9:f2:f1:98:b6:d8:b5:1e:b2:97:
                    16:0c:e5:0c:3e:f5:87:d7:2f:4e:8a:e3:27:51:36:
                    a7:8a:14:45:53:35:43:98:39:09:f4:03:80:69:70:
                    91:6b:12:99:f3:45:65:0b:04:9d:90:ad:a4:45:47:
                    f7:64:76:84:66:d1:91:0f:35:d0:4f:bc:b6:eb:ff:
                    44:3a:29:0d:b6:e3:1f:17:cc:e6:ea:07:4e:ca:a8:
                    ef:3f:96:64:5a:46:18:d2:a0:75:e4:3b:93:ae:71:
                    5f:0c:fb:40:1e:dc:fb:f5:65:8d:a9:15:32:99:7b:
                    19:56:d3:f9:b4:c1:fb:55:89:26:50:e3:4b:22:34:
                    d5:12:36:d1:b3:88:f4:65:f9:aa:20:f0:aa:88:70:
                    c2:56:de:e5:00:25:46:e9:7a:45:bb:d3:5f:7f:80:
                    e0:98:98:45:51:c8:e3:01:4f:97:0f:e4:04:7b:24:
                    34:ef:c4:58:b6:a9:be:86:97:0d:d5:16:6e:cb:91:
                    b8:ea:b9:f0:95:cf:64:e1:02:ca:fe:a0:c9:1d:9d:
                    04:15:13:55:eb:a0:20:ef:73:df:b1:ed:59:f9:3d:
                    ec:b6:23:be:4d:a8:02:e3:b5:23:8f:b9:a1:ea:a5:
                    5d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:10:0D:DE:57:63:DA:C7:F2:0F:EF:7F:0B:62:2C:C3:A2:F6:86:98
            X509v3 Authority Key Identifier:
                keyid:33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138392e3132372e302e302f32312d3231203d3e203237363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         52:03:a2:b2:be:1c:53:31:43:a9:33:df:86:3e:c3:62:c5:8d:
         f8:a3:f5:02:c9:f3:65:76:cb:34:0d:ee:a5:43:17:2e:7a:d9:
         cc:dd:b9:56:7c:89:ca:f6:f5:0e:73:1e:fe:16:24:13:c8:4f:
         d5:70:65:71:6d:9b:ed:d3:62:08:18:b3:ee:6f:0f:d5:ce:e7:
         75:25:a3:0a:1a:81:ff:49:1c:21:b3:3d:34:91:8e:72:08:8f:
         5e:5d:45:5b:ed:02:aa:55:93:14:23:c5:94:96:6b:cc:f7:e7:
         2b:c4:3c:7b:48:89:9b:88:4b:2e:9c:47:97:7f:ae:78:95:6c:
         85:dc:61:c5:20:c6:8c:c2:58:bd:c5:d8:ab:50:ec:ef:2e:34:
         7f:cf:79:39:ae:63:f3:db:6a:bf:b8:80:8e:d6:18:60:57:6d:
         ec:df:0d:d2:f8:22:0c:3e:bb:85:40:93:88:46:97:ce:d3:62:
         69:a1:5e:2c:5b:8c:9f:f5:ee:94:17:ff:74:00:8f:0f:43:0a:
         40:e0:0f:17:ee:c7:61:48:19:b9:33:a6:bf:99:80:d3:98:dd:
         77:ef:67:b1:db:21:a5:5f:ca:46:35:20:de:1f:fc:3e:b4:1c:
         57:bb:bd:5f:02:a2:18:6b:a0:85:6d:3d:d4:47:12:ae:ce:11:
         bb:d4:0b:ac
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUX0fQqE6DGrSnJDqmHElep1JMdJ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzM0NTQzOTA5OUM3OUMxM0Y1ODNEMjIzOEUzQkI3RDBE
NjBENjg3NzAeFw0yNDEwMjIxNDI1MTVaFw0yNTEwMjExNDMwMTVaMDMxMTAvBgNV
BAMTKEFFMTAwRERFNTc2M0RBQzdGMjBGRUY3RjBCNjIyQ0MzQTJGNjg2OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6VOnw6XJ1Onz6BAVSV33EvJiL
qfLxmLbYtR6ylxYM5Qw+9YfXL06K4ydRNqeKFEVTNUOYOQn0A4BpcJFrEpnzRWUL
BJ2QraRFR/dkdoRm0ZEPNdBPvLbr/0Q6KQ224x8XzObqB07KqO8/lmRaRhjSoHXk
O5OucV8M+0Ae3Pv1ZY2pFTKZexlW0/m0wftViSZQ40siNNUSNtGziPRl+aog8KqI
cMJW3uUAJUbpekW7019/gOCYmEVRyOMBT5cP5AR7JDTvxFi2qb6Glw3VFm7Lkbjq
ufCVz2ThAsr+oMkdnQQVE1XroCDvc9+x7Vn5Pey2I75NqALjtSOPuaHqpV2bAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUrhAN3ldj2sfyD+9/C2Isw6L2hpgwHwYDVR0j
BBgwFoAUM0VDkJnHnBP1g9Ijjju30NYNaHcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNldMZFo1c0J3NjNIREV2Z1E3QUNKdGRZU1FZRkQ0MWJkYzFVZk5pTGZX
VzYvMC8zMzQ1NDM5MDk5Qzc5QzEzRjU4M0QyMjM4RTNCQjdEMEQ2MEQ2ODc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzNDU0MzkwOTlDNzlDMTNG
NTgzRDIyMzhFM0JCN0QwRDYwRDY4NzcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZXTGRaNXNCdzYzSERFdmdRN0FDSnRkWVNRWUZENDFiZGMxVWZOaUxmV1c2LzAv
MzEzODM5MmUzMTMyMzcyZTMwMmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzNzM2
MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEA71/ADANBgkqhkiG9w0BAQsFAAOCAQEAUgOisr4cUzFD
qTPfhj7DYsWN+KP1AsnzZXbLNA3upUMXLnrZzN25VnyJyvb1DnMe/hYkE8hP1XBl
cW2b7dNiCBiz7m8P1c7ndSWjChqB/0kcIbM9NJGOcgiPXl1FW+0CqlWTFCPFlJZr
zPfnK8Q8e0iJm4hLLpxHl3+ueJVshdxhxSDGjMJYvcXYq1Ds7y40f895Oa5j89tq
v7iAjtYYYFdt7N8N0vgiDD67hUCTiEaXztNiaaFeLFuMn/XulBf/dACPD0MKQOAP
F+7HYUgZuTOmv5mA05jdd+9nsdshpV/KRjUg3h/8PrQcV7u9XwKiGGughW091EcS
rs4Ru9QLrA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:37 2024 by rpki-client on console-fra.rpki-client.org