Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/1/3134332e3230382e32302e302f32322d3234203d3e20323634303735.roa
File:                     3134332e3230382e32302e302f32322d3234203d3e20323634303735.roa (raw, json)
Hash identifier:          3fjsSW3SPxIQYWK8rPR66xpLB3M4MIH22zS3moBeV4g=
Subject key identifier:   CA:3D:5F:0F:21:4D:CF:0D:93:0C:37:F0:EA:67:0E:FB:DE:A6:79:1A
Certificate issuer:       /CN=3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28
Certificate serial:       5C57F7A8947A09C44A409567CFF3A39C95504F71
Authority key identifier: 3B:5D:14:FF:9C:C2:B6:E6:1B:A5:F7:39:AA:5B:4A:7A:8E:CC:7A:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/1/3134332e3230382e32302e302f32322d3234203d3e20323634303735.roa
Signing time:             Thu 04 Apr 2024 08:59:27 +0000
ROA not before:           Thu 04 Apr 2024 08:54:27 +0000
ROA not after:            Thu 03 Apr 2025 08:59:27 +0000
asID:                     264075
IP address blocks:        143.208.20.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/1/3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28.crl
                          rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/1/3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:57:f7:a8:94:7a:09:c4:4a:40:95:67:cf:f3:a3:9c:95:50:4f:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28
        Validity
            Not Before: Apr  4 08:54:27 2024 GMT
            Not After : Apr  3 08:59:27 2025 GMT
        Subject: CN=CA3D5F0F214DCF0D930C37F0EA670EFBDEA6791A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a0:56:d9:24:4a:07:9f:14:ec:51:62:3e:8d:
                    04:13:f9:0c:73:40:c2:5d:f8:03:33:ef:55:cc:96:
                    5c:62:22:32:cc:95:9e:c2:e4:25:6c:92:bb:7b:13:
                    71:25:c7:5a:85:82:c8:98:7d:21:f5:ed:89:f4:ea:
                    a8:da:98:7d:2b:86:58:ee:de:49:17:05:5b:c5:bd:
                    d0:e3:8d:14:8d:42:03:65:96:3d:75:58:0c:59:8c:
                    1a:28:23:5f:74:94:80:d4:07:92:03:1c:c9:27:51:
                    ee:92:08:6f:90:4f:85:fd:84:bf:3f:43:d2:5a:c8:
                    24:62:35:09:52:ca:3e:56:79:63:8f:0e:bf:4d:98:
                    41:f2:e5:4d:76:1a:f4:13:07:96:bd:54:44:9c:2e:
                    42:f7:c9:9d:31:3f:50:d2:20:e3:43:26:02:f9:35:
                    ef:3b:c6:b1:48:48:02:ed:f0:cb:be:b7:6b:80:08:
                    90:4d:aa:57:48:e6:c8:34:5b:11:d5:58:16:ff:ca:
                    f2:9b:0c:5a:6b:10:e8:34:ca:d3:3b:d7:cd:85:d1:
                    d9:d5:e4:8b:c1:73:91:0e:ab:26:04:8f:55:cb:d4:
                    5a:25:90:be:26:2a:46:99:42:98:6e:5c:33:eb:5f:
                    2c:e3:83:09:00:61:b1:e3:d5:a0:24:48:04:41:e6:
                    d0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:3D:5F:0F:21:4D:CF:0D:93:0C:37:F0:EA:67:0E:FB:DE:A6:79:1A
            X509v3 Authority Key Identifier:
                keyid:3B:5D:14:FF:9C:C2:B6:E6:1B:A5:F7:39:AA:5B:4A:7A:8E:CC:7A:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/1/3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5D14FF9CC2B6E61BA5F739AA5B4A7A8ECC7A28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6n6g1kPuD58BeSVkX7Gu4SKi5QWXy19oTpvpvi3c3kjt/1/3134332e3230382e32302e302f32322d3234203d3e20323634303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:83:eb:d6:a7:d7:5d:49:46:23:ad:73:a3:ff:17:05:ff:52:
         1e:b0:f6:e0:d7:aa:38:88:b8:97:f2:cc:02:2a:8c:04:02:bb:
         fb:54:bf:6d:31:44:ac:ed:0a:0a:79:68:88:22:aa:53:67:36:
         4e:a2:5e:59:79:8b:7c:49:82:ba:80:4f:3d:37:d7:cf:cc:9b:
         c7:0c:07:3f:0d:2e:19:85:9a:11:68:f3:62:33:ce:07:0e:cb:
         ba:0e:f7:6f:29:44:be:fe:14:27:53:4e:c5:41:7c:a0:d3:c8:
         ee:ce:2e:fa:3e:b6:a1:75:92:1c:da:6d:07:9c:de:96:43:4e:
         dc:3f:cd:9e:ca:b0:4a:9c:9b:8b:bd:4b:5b:52:a1:b7:3a:23:
         dc:70:29:e4:2e:36:b1:3e:d4:d3:07:8e:15:74:f9:1d:ff:9e:
         82:b3:7a:5c:d0:e0:e1:54:c8:13:18:3f:a2:22:e2:d0:ea:22:
         1f:be:75:7e:83:70:5f:c6:c5:04:9c:53:67:26:19:71:57:d8:
         ef:80:e3:fd:86:9e:4e:b6:2e:82:cb:54:6f:b4:35:b3:4a:e6:
         38:90:e7:18:f8:88:f4:bc:34:37:f4:fc:44:78:56:1e:9a:68:
         49:b4:45:99:7e:44:dc:d7:4c:ac:bd:e5:3c:fa:55:69:e6:62:
         d0:3d:5a:da
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXFf3qJR6CcRKQJVnz/OjnJVQT3EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I1RDE0RkY5Q0MyQjZFNjFCQTVGNzM5QUE1QjRBN0E4
RUNDN0EyODAeFw0yNDA0MDQwODU0MjdaFw0yNTA0MDMwODU5MjdaMDMxMTAvBgNV
BAMTKENBM0Q1RjBGMjE0RENGMEQ5MzBDMzdGMEVBNjcwRUZCREVBNjc5MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOoFbZJEoHnxTsUWI+jQQT+Qxz
QMJd+AMz71XMllxiIjLMlZ7C5CVskrt7E3Elx1qFgsiYfSH17Yn06qjamH0rhlju
3kkXBVvFvdDjjRSNQgNllj11WAxZjBooI190lIDUB5IDHMknUe6SCG+QT4X9hL8/
Q9JayCRiNQlSyj5WeWOPDr9NmEHy5U12GvQTB5a9VEScLkL3yZ0xP1DSIONDJgL5
Ne87xrFISALt8Mu+t2uACJBNqldI5sg0WxHVWBb/yvKbDFprEOg0ytM7182F0dnV
5IvBc5EOqyYEj1XL1FolkL4mKkaZQphuXDPrXyzjgwkAYbHj1aAkSARB5tBNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUyj1fDyFNzw2TDDfw6mcO+96meRowHwYDVR0j
BBgwFoAUO10U/5zCtuYbpfc5qltKeo7MeigwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNm42ZzFrUHVENThCZVNWa1g3R3U0U0tpNVFXWHkxOW9UcHZwdmkzYzNr
anQvMS8zQjVEMTRGRjlDQzJCNkU2MUJBNUY3MzlBQTVCNEE3QThFQ0M3QTI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNCNUQxNEZGOUNDMkI2RTYx
QkE1RjczOUFBNUI0QTdBOEVDQzdBMjguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZuNmcxa1B1RDU4QmVTVmtYN0d1NFNLaTVRV1h5MTlvVHB2cHZpM2Mza2p0LzEv
MzEzNDMzMmUzMjMwMzgyZTMyMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzQzMDM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKP0BQwDQYJKoZIhvcNAQELBQADggEBABCD69an
111JRiOtc6P/FwX/Uh6w9uDXqjiIuJfyzAIqjAQCu/tUv20xRKztCgp5aIgiqlNn
Nk6iXll5i3xJgrqATz0318/Mm8cMBz8NLhmFmhFo82IzzgcOy7oO928pRL7+FCdT
TsVBfKDTyO7OLvo+tqF1khzabQec3pZDTtw/zZ7KsEqcm4u9S1tSobc6I9xwKeQu
NrE+1NMHjhV0+R3/noKzelzQ4OFUyBMYP6Ii4tDqIh++dX6DcF/GxQScU2cmGXFX
2O+A4/2Gnk62LoLLVG+0NbNK5jiQ5xj4iPS8NDf0/ER4Vh6aaEm0RZl+RNzXTKy9
5Tz6VWnmYtA9Wto=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:38 2024 by rpki-client on console-fra.rpki-client.org