Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3138392e31342e302e302f31382d3234203d3e203232363839.roa
File:                     3138392e31342e302e302f31382d3234203d3e203232363839.roa (raw, json)
Hash identifier:          yXJjiuEsVEbQSEBZC85wIoW39RDWasn49lG7Wi0SAgQ=
Subject key identifier:   12:29:D7:E4:2F:89:1B:44:08:01:E0:2D:10:03:ED:34:D8:F0:0C:C6
Certificate issuer:       /CN=B6DD0286E17B756E91475332E495995F85C36F08
Certificate serial:       044EFA5615DEA059AA280F0D8A3980DFC2255E4B
Authority key identifier: B6:DD:02:86:E1:7B:75:6E:91:47:53:32:E4:95:99:5F:85:C3:6F:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3138392e31342e302e302f31382d3234203d3e203232363839.roa
Signing time:             Fri 05 Apr 2024 01:35:15 +0000
ROA not before:           Fri 05 Apr 2024 01:30:15 +0000
ROA not after:            Fri 04 Apr 2025 01:35:15 +0000
asID:                     22689
IP address blocks:        189.14.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.crl
                          rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:29:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:4e:fa:56:15:de:a0:59:aa:28:0f:0d:8a:39:80:df:c2:25:5e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6DD0286E17B756E91475332E495995F85C36F08
        Validity
            Not Before: Apr  5 01:30:15 2024 GMT
            Not After : Apr  4 01:35:15 2025 GMT
        Subject: CN=1229D7E42F891B440801E02D1003ED34D8F00CC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:dc:f9:0c:38:c0:90:5f:c8:ef:ac:76:52:9b:
                    d6:9c:2c:28:c9:2c:10:0d:f9:53:9b:6d:d4:33:74:
                    45:a5:e9:04:98:54:2d:e5:76:0d:2e:97:c7:81:52:
                    40:47:81:74:b9:fe:ca:38:99:21:79:64:33:68:e4:
                    3b:2f:39:52:b0:39:54:22:21:14:9b:28:bf:ef:d9:
                    d0:fe:95:e8:a8:99:50:96:13:10:ec:cb:ed:c8:40:
                    95:61:07:5d:b1:f9:bd:1c:ac:9d:54:23:20:5e:1f:
                    74:38:e7:8c:0c:0f:83:ef:ed:f8:dc:ad:3d:cd:b7:
                    2f:52:45:47:08:ea:c3:bd:d0:ef:09:da:99:e8:19:
                    ff:e1:0b:47:c8:5e:b1:5e:04:c9:7b:69:0c:8e:90:
                    22:b9:a6:0e:5b:40:b9:6c:fd:30:f8:ac:a4:60:c9:
                    d6:c1:dc:13:70:c7:cd:82:0a:1f:ae:a8:8d:6e:20:
                    36:43:a5:a3:16:ec:19:41:53:bb:35:38:50:f7:20:
                    ba:a0:cb:80:fb:25:94:2c:0d:c6:01:1e:55:0d:56:
                    c4:0f:ea:53:19:7e:19:8f:2f:9d:de:07:73:27:42:
                    ec:48:6c:d9:d3:57:51:ad:fe:2f:91:fc:a4:f1:f2:
                    8b:e6:44:42:b5:46:24:e3:4a:c1:e8:9f:81:71:b8:
                    a3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:29:D7:E4:2F:89:1B:44:08:01:E0:2D:10:03:ED:34:D8:F0:0C:C6
            X509v3 Authority Key Identifier:
                keyid:B6:DD:02:86:E1:7B:75:6E:91:47:53:32:E4:95:99:5F:85:C3:6F:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3138392e31342e302e302f31382d3234203d3e203232363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b5:37:b6:77:b5:70:ca:b3:d6:6b:01:38:b8:0d:b6:99:40:a8:
         65:36:07:93:01:08:b2:87:1b:5c:4a:96:ce:2e:94:10:63:bb:
         c7:3d:10:0b:ce:9f:30:1f:d3:e8:8b:e8:91:ea:c1:91:4a:0a:
         76:d2:b5:e1:41:cc:4e:06:ae:51:d6:19:73:d8:b2:85:ac:a3:
         c1:e3:f5:3d:c1:c4:b6:34:01:a0:4c:41:27:21:10:e1:ca:da:
         bb:57:1d:18:09:77:56:de:ef:1f:34:e1:3d:89:a3:d2:42:6a:
         af:53:d7:f0:98:7b:b2:dd:e9:9b:e0:6f:28:48:d0:8e:c3:e7:
         3a:73:30:da:a8:95:c5:0d:da:e4:aa:cf:41:21:7f:9a:ac:26:
         08:72:bb:7c:ac:77:e3:8a:6a:2e:cb:7b:18:81:39:12:b2:1d:
         23:95:f8:ac:7e:e2:33:f9:37:c0:d2:4f:19:00:ff:66:79:ff:
         c9:a4:11:17:67:ec:59:4a:2a:96:ce:92:65:7b:b0:26:f0:a5:
         9e:a1:b1:c2:f4:45:58:e0:83:8c:1c:c8:65:94:48:af:8e:14:
         f4:2d:20:df:91:58:48:1d:29:86:1f:7a:c2:9e:e9:46:ce:06:
         2b:8e:ea:0f:2e:0f:af:07:15:fe:f0:c0:cf:2c:d7:80:9d:50:
         41:67:d3:e0
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUBE76VhXeoFmqKA8NijmA38IlXkswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZERDAyODZFMTdCNzU2RTkxNDc1MzMyRTQ5NTk5NUY4
NUMzNkYwODAeFw0yNDA0MDUwMTMwMTVaFw0yNTA0MDQwMTM1MTVaMDMxMTAvBgNV
BAMTKDEyMjlEN0U0MkY4OTFCNDQwODAxRTAyRDEwMDNFRDM0RDhGMDBDQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM3PkMOMCQX8jvrHZSm9acLCjJ
LBAN+VObbdQzdEWl6QSYVC3ldg0ul8eBUkBHgXS5/so4mSF5ZDNo5DsvOVKwOVQi
IRSbKL/v2dD+leiomVCWExDsy+3IQJVhB12x+b0crJ1UIyBeH3Q454wMD4Pv7fjc
rT3Nty9SRUcI6sO90O8J2pnoGf/hC0fIXrFeBMl7aQyOkCK5pg5bQLls/TD4rKRg
ydbB3BNwx82CCh+uqI1uIDZDpaMW7BlBU7s1OFD3ILqgy4D7JZQsDcYBHlUNVsQP
6lMZfhmPL53eB3MnQuxIbNnTV1Gt/i+R/KTx8ovmREK1RiTjSsHon4FxuKPRAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUEinX5C+JG0QIAeAtEAPtNNjwDMYwHwYDVR0j
BBgwFoAUtt0ChuF7dW6RR1My5JWZX4XDbwgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0VtRFBqeWR2YTdlNHVkZHhMdDlhY21ONjJ4UjE1ZVYzVU1zZ3hWVWs3
NlMvMS9CNkREMDI4NkUxN0I3NTZFOTE0NzUzMzJFNDk1OTk1Rjg1QzM2RjA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I2REQwMjg2RTE3Qjc1NkU5
MTQ3NTMzMkU0OTU5OTVGODVDMzZGMDguY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdFbURQanlkdmE3ZTR1ZGR4THQ5YWNtTjYyeFIxNWVWM1VNc2d4VlVrNzZTLzEv
MzEzODM5MmUzMTM0MmUzMDJlMzAyZjMxMzgyZDMyMzQyMDNkM2UyMDMyMzIzNjM4
Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAa9DgAwDQYJKoZIhvcNAQELBQADggEBALU3tne1cMqz1msB
OLgNtplAqGU2B5MBCLKHG1xKls4ulBBju8c9EAvOnzAf0+iL6JHqwZFKCnbSteFB
zE4GrlHWGXPYsoWso8Hj9T3BxLY0AaBMQSchEOHK2rtXHRgJd1be7x804T2Jo9JC
aq9T1/CYe7Ld6ZvgbyhI0I7D5zpzMNqolcUN2uSqz0Ehf5qsJghyu3ysd+OKai7L
exiBORKyHSOV+Kx+4jP5N8DSTxkA/2Z5/8mkERdn7FlKKpbOkmV7sCbwpZ6hscL0
RVjgg4wcyGWUSK+OFPQtIN+RWEgdKYYfesKe6UbOBiuO6g8uD68HFf7wwM8s14Cd
UEFn0+A=
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:08 2024 by rpki-client on console-fra.rpki-client.org