Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/3133382e39392e3136342e302f32342d3234203d3e20323634323131.roa
File:                     3133382e39392e3136342e302f32342d3234203d3e20323634323131.roa (raw, json)
Hash identifier:          pdSfVdqDdttRk3tJDoD+g5tOmVfRYjHfAlSLKgpCPKQ=
Subject key identifier:   43:49:76:29:EF:DB:84:9D:21:65:D7:02:86:56:DC:26:84:43:20:88
Certificate issuer:       /CN=916B2689E54D248C6020BC30FDA122F25B14FE87
Certificate serial:       02BD78E02FA7161F2510C5E93DBBC13FC275D8F5
Authority key identifier: 91:6B:26:89:E5:4D:24:8C:60:20:BC:30:FD:A1:22:F2:5B:14:FE:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/916B2689E54D248C6020BC30FDA122F25B14FE87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/3133382e39392e3136342e302f32342d3234203d3e20323634323131.roa
Signing time:             Sun 08 Sep 2024 17:08:09 +0000
ROA not before:           Sun 08 Sep 2024 17:03:09 +0000
ROA not after:            Sun 07 Sep 2025 17:08:09 +0000
asID:                     264211
IP address blocks:        138.99.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/916B2689E54D248C6020BC30FDA122F25B14FE87.crl
                          rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/916B2689E54D248C6020BC30FDA122F25B14FE87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/916B2689E54D248C6020BC30FDA122F25B14FE87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 20:20:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:bd:78:e0:2f:a7:16:1f:25:10:c5:e9:3d:bb:c1:3f:c2:75:d8:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=916B2689E54D248C6020BC30FDA122F25B14FE87
        Validity
            Not Before: Sep  8 17:03:09 2024 GMT
            Not After : Sep  7 17:08:09 2025 GMT
        Subject: CN=43497629EFDB849D2165D7028656DC2684432088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:83:7c:d1:70:0d:18:9b:67:88:cd:17:a8:fd:
                    bd:1a:f6:4e:f9:18:12:b2:8d:fa:e2:d0:4f:54:9e:
                    f0:66:a5:5d:54:9b:c7:10:92:60:82:fc:27:f7:7e:
                    4b:c6:64:08:3a:f4:19:ba:bd:5d:bb:4e:ef:ee:d7:
                    ef:29:22:15:ae:b3:24:46:7d:6e:34:04:b0:2b:55:
                    c4:d3:93:65:ee:06:1e:21:f7:f1:11:2b:ca:14:c0:
                    ca:89:91:20:73:66:dc:d4:14:fc:9f:a3:b9:6f:bf:
                    8b:bc:29:66:0c:17:45:f6:64:fd:79:9c:9f:56:76:
                    cf:76:df:83:f6:fb:27:ee:cd:3a:4c:1d:5c:4a:6c:
                    80:73:4e:ad:a6:af:28:18:25:0f:9e:eb:da:85:62:
                    70:00:e0:2c:42:14:d7:84:99:33:41:0b:a9:b3:bc:
                    eb:57:70:26:94:af:bf:c7:0a:60:68:ca:5c:05:c3:
                    a4:b0:eb:51:35:f7:7d:db:e6:dc:47:e0:1a:4f:1e:
                    f8:e6:bf:fe:d2:18:d3:3a:c0:da:0b:f1:20:c7:ef:
                    b2:15:8a:b7:a8:61:5e:8a:64:8f:b0:04:f4:1a:a1:
                    bc:1e:54:d0:cd:20:0b:7c:48:e7:df:07:d5:aa:8e:
                    6c:f7:16:33:79:3d:d4:fa:29:cf:56:4b:6a:b9:be:
                    41:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:49:76:29:EF:DB:84:9D:21:65:D7:02:86:56:DC:26:84:43:20:88
            X509v3 Authority Key Identifier:
                keyid:91:6B:26:89:E5:4D:24:8C:60:20:BC:30:FD:A1:22:F2:5B:14:FE:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/916B2689E54D248C6020BC30FDA122F25B14FE87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/916B2689E54D248C6020BC30FDA122F25B14FE87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/3133382e39392e3136342e302f32342d3234203d3e20323634323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:e0:94:64:f0:12:05:16:25:b6:91:b9:f1:9a:4f:b7:b7:0e:
         06:0d:e3:a0:0d:ce:65:71:44:f9:fe:fb:d1:00:1a:14:c0:fa:
         2b:6a:c8:85:e1:95:82:0c:d0:92:f5:34:b8:ff:ae:ae:e7:20:
         77:1e:54:0c:16:0b:ec:4d:8e:74:f7:80:34:79:49:63:b3:3f:
         91:ef:99:23:60:5d:84:e6:44:70:ac:44:b5:62:fc:4b:a3:41:
         c6:e9:bb:fc:27:b9:26:ef:67:a2:17:ab:d2:6d:b2:3a:b4:8d:
         b2:d5:4c:39:21:ec:d7:ef:9c:91:81:13:8e:ab:b6:52:96:85:
         d1:78:a8:ef:24:a0:a6:e4:d4:1f:44:fb:d7:14:c4:3e:70:9f:
         73:57:3f:34:16:e5:0c:c6:a5:fa:a4:b4:3e:5e:68:ed:18:85:
         f8:69:ba:ff:63:cc:4f:a0:a5:bc:36:6c:24:63:7a:13:c6:6c:
         68:ad:ca:0b:79:d6:a5:ef:8d:be:0b:48:f3:c2:44:03:16:25:
         3e:a7:93:89:be:f8:7a:80:e8:84:59:41:c6:cc:ff:5a:59:16:
         da:8a:2c:ec:fc:6c:80:23:9e:89:de:49:c1:a4:f3:fc:18:92:
         68:a5:b7:04:b6:cb:fb:1f:03:b3:d9:22:9e:28:f8:7d:8c:7c:
         70:16:4b:f3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAr144C+nFh8lEMXpPbvBP8J12PUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE2QjI2ODlFNTREMjQ4QzYwMjBCQzMwRkRBMTIyRjI1
QjE0RkU4NzAeFw0yNDA5MDgxNzAzMDlaFw0yNTA5MDcxNzA4MDlaMDMxMTAvBgNV
BAMTKDQzNDk3NjI5RUZEQjg0OUQyMTY1RDcwMjg2NTZEQzI2ODQ0MzIwODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDg3zRcA0Ym2eIzReo/b0a9k75
GBKyjfri0E9UnvBmpV1Um8cQkmCC/Cf3fkvGZAg69Bm6vV27Tu/u1+8pIhWusyRG
fW40BLArVcTTk2XuBh4h9/ERK8oUwMqJkSBzZtzUFPyfo7lvv4u8KWYMF0X2ZP15
nJ9Wds9234P2+yfuzTpMHVxKbIBzTq2mrygYJQ+e69qFYnAA4CxCFNeEmTNBC6mz
vOtXcCaUr7/HCmBoylwFw6Sw61E1933b5txH4BpPHvjmv/7SGNM6wNoL8SDH77IV
ireoYV6KZI+wBPQaobweVNDNIAt8SOffB9Wqjmz3FjN5PdT6Kc9WS2q5vkEfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQ0l2Ke/bhJ0hZdcChlbcJoRDIIgwHwYDVR0j
BBgwFoAUkWsmieVNJIxgILww/aEi8lsU/ocwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmpraTVKUWJ5dldxaVVwamM5U0RMMkxMcVlLaVE4aDNTQlV1dHk0TGNr
UkovMC85MTZCMjY4OUU1NEQyNDhDNjAyMEJDMzBGREExMjJGMjVCMTRGRTg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNkIyNjg5RTU0RDI0OEM2
MDIwQkMzMEZEQTEyMkYyNUIxNEZFODcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZqa2k1SlFieXZXcWlVcGpjOVNETDJMTHFZS2lROGgzU0JVdXR5NExja1JKLzAv
MzEzMzM4MmUzOTM5MmUzMTM2MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzMjMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKY6QwDQYJKoZIhvcNAQELBQADggEBAC3glGTw
EgUWJbaRufGaT7e3DgYN46ANzmVxRPn++9EAGhTA+itqyIXhlYIM0JL1NLj/rq7n
IHceVAwWC+xNjnT3gDR5SWOzP5HvmSNgXYTmRHCsRLVi/EujQcbpu/wnuSbvZ6IX
q9Jtsjq0jbLVTDkh7NfvnJGBE46rtlKWhdF4qO8koKbk1B9E+9cUxD5wn3NXPzQW
5QzGpfqktD5eaO0Yhfhpuv9jzE+gpbw2bCRjehPGbGitygt51qXvjb4LSPPCRAMW
JT6nk4m++HqA6IRZQcbM/1pZFtqKLOz8bIAjnoneScGk8/wYkmiltwS2y/sfA7PZ
Ip4o+H2MfHAWS/M=
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:13 2024 by rpki-client on console-ams.rpki-client.org