Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/3132382e3230312e3135362e302f32322d3232203d3e20323636363335.roa
File:                     3132382e3230312e3135362e302f32322d3232203d3e20323636363335.roa (raw, json)
Hash identifier:          a8mnM+dK8hMZYRkNMkAig4HD2rkSTabZQw2UZiqUxeU=
Subject key identifier:   70:EE:B7:1F:D9:27:B7:3C:93:EE:57:62:4F:5D:8E:D2:83:4B:DB:A2
Certificate issuer:       /CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
Certificate serial:       38D815E9DC23DE80C1632FCD9D61038B10C89F80
Authority key identifier: EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/3132382e3230312e3135362e302f32322d3232203d3e20323636363335.roa
Signing time:             Thu 04 Apr 2024 02:34:38 +0000
ROA not before:           Thu 04 Apr 2024 02:29:38 +0000
ROA not after:            Thu 03 Apr 2025 02:34:38 +0000
asID:                     266635
IP address blocks:        128.201.156.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.crl
                          rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:d8:15:e9:dc:23:de:80:c1:63:2f:cd:9d:61:03:8b:10:c8:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
        Validity
            Not Before: Apr  4 02:29:38 2024 GMT
            Not After : Apr  3 02:34:38 2025 GMT
        Subject: CN=70EEB71FD927B73C93EE57624F5D8ED2834BDBA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9b:1d:d1:92:c3:26:f9:31:54:f8:f3:0c:d1:
                    b2:35:55:f7:7b:3a:1f:f3:21:8b:79:a4:ec:a0:c3:
                    24:af:40:97:85:06:45:f2:f6:9a:e4:8d:68:ac:83:
                    d4:f3:b1:99:7a:bf:84:7d:85:d9:87:fd:0c:eb:41:
                    3f:f3:07:d1:19:0a:0e:35:b0:89:c1:05:3e:b5:16:
                    43:df:b5:b4:96:49:c9:be:8a:11:f6:6c:60:d6:3e:
                    6b:3c:ef:4d:f5:b5:26:6b:60:fa:34:6b:0c:18:d4:
                    c9:d8:de:1c:a2:b8:d8:44:4f:54:f5:cf:87:67:09:
                    3b:f4:55:e7:44:73:78:7c:b0:48:2f:36:1d:fb:19:
                    b3:52:6c:35:37:78:f4:9d:2c:13:7b:19:fb:64:69:
                    f4:cc:b4:c6:54:e5:37:db:e1:4b:a7:ac:9a:16:86:
                    48:e4:49:c2:31:38:87:a9:db:a3:ca:27:69:85:89:
                    02:7b:19:c3:ba:54:98:11:ad:9c:f9:61:a8:bc:3a:
                    f7:17:1b:2a:3b:7c:7b:79:78:cc:a0:48:c3:6e:ee:
                    f6:93:fd:13:f1:77:bc:10:8d:54:42:d7:56:66:8f:
                    60:3e:55:bc:35:35:f1:9a:6d:38:2e:da:dc:43:7a:
                    c8:de:a4:2d:d0:85:5c:41:d8:74:15:4b:fb:87:85:
                    e2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:EE:B7:1F:D9:27:B7:3C:93:EE:57:62:4F:5D:8E:D2:83:4B:DB:A2
            X509v3 Authority Key Identifier:
                keyid:EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/3132382e3230312e3135362e302f32322d3232203d3e20323636363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:f1:68:52:f3:06:d6:4b:b7:98:a9:b2:d5:38:85:57:01:47:
         03:3f:25:93:77:17:3e:72:81:fd:ba:6b:36:44:55:32:02:c5:
         b0:f6:d1:aa:f2:74:16:79:1c:1d:cc:e2:7d:b1:61:b0:c9:7c:
         a7:84:5d:8f:be:36:47:35:4f:ed:7a:ee:25:3e:39:32:73:19:
         d5:1a:a9:3c:37:32:0f:3a:dd:34:96:91:ea:73:47:42:c0:92:
         1c:86:01:f3:83:43:d2:8e:15:c0:81:a0:f4:f5:65:09:0c:17:
         90:3b:53:fb:3a:15:72:e6:4c:74:6f:63:71:16:5b:e3:4f:87:
         60:f1:12:76:de:d4:8e:64:a3:ba:0d:37:ac:18:b3:45:e9:86:
         b0:4f:c1:62:a6:1d:d2:31:f8:42:7d:cd:fe:6f:97:d9:57:21:
         19:e2:33:f6:f4:37:e8:79:99:c6:4a:e7:86:27:4c:89:40:d9:
         ea:88:ac:d7:84:42:e5:d9:4d:96:86:23:a3:bd:96:15:51:43:
         83:3c:18:a5:9a:cb:6f:4f:75:00:43:5f:1d:40:0f:86:ec:cf:
         3f:32:ed:0d:58:d6:b6:73:c0:75:e2:f2:6c:9f:3b:21:6c:e4:
         71:38:0d:e7:b5:7c:3e:b4:32:75:09:cb:36:c9:d2:84:a2:a3:
         e0:59:49:c2
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUONgV6dwj3oDBYy/NnWEDixDIn4AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUExOEE4NkE5QkYzQzhDRjJDOTIzRDQxQzQ0ODlBMDA0
MzkyQUJGQjAeFw0yNDA0MDQwMjI5MzhaFw0yNTA0MDMwMjM0MzhaMDMxMTAvBgNV
BAMTKDcwRUVCNzFGRDkyN0I3M0M5M0VFNTc2MjRGNUQ4RUQyODM0QkRCQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVmx3RksMm+TFU+PMM0bI1Vfd7
Oh/zIYt5pOygwySvQJeFBkXy9prkjWisg9TzsZl6v4R9hdmH/QzrQT/zB9EZCg41
sInBBT61FkPftbSWScm+ihH2bGDWPms87031tSZrYPo0awwY1MnY3hyiuNhET1T1
z4dnCTv0VedEc3h8sEgvNh37GbNSbDU3ePSdLBN7GftkafTMtMZU5Tfb4UunrJoW
hkjkScIxOIep26PKJ2mFiQJ7GcO6VJgRrZz5Yai8OvcXGyo7fHt5eMygSMNu7vaT
/RPxd7wQjVRC11Zmj2A+Vbw1NfGabTgu2txDesjepC3QhVxB2HQVS/uHheJRAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUcO63H9kntzyT7ldiT12O0oNL26IwHwYDVR0j
BBgwFoAU6hioapvzyM8skj1BxEiaAEOSq/swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2JqanN0RHNkczdRdENjcmRnZXpUREJ0ZjFaY1VVYURLTjViOE1UMVE2
VEEvMS9FQTE4QTg2QTlCRjNDOENGMkM5MjNENDFDNDQ4OUEwMDQzOTJBQkZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBMThBODZBOUJGM0M4Q0Yy
QzkyM0Q0MUM0NDg5QTAwNDM5MkFCRkIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdiampzdERzZHM3UXRDY3JkZ2V6VERCdGYxWmNVVWFES041YjhNVDFRNlRBLzEv
MzEzMjM4MmUzMjMwMzEyZTMxMzUzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNjM2MzMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoDJnDANBgkqhkiG9w0BAQsFAAOCAQEADfFo
UvMG1ku3mKmy1TiFVwFHAz8lk3cXPnKB/bprNkRVMgLFsPbRqvJ0FnkcHczifbFh
sMl8p4Rdj742RzVP7XruJT45MnMZ1RqpPDcyDzrdNJaR6nNHQsCSHIYB84ND0o4V
wIGg9PVlCQwXkDtT+zoVcuZMdG9jcRZb40+HYPESdt7UjmSjug03rBizRemGsE/B
YqYd0jH4Qn3N/m+X2VchGeIz9vQ36HmZxkrnhidMiUDZ6ois14RC5dlNloYjo72W
FVFDgzwYpZrLb091AENfHUAPhuzPPzLtDVjWtnPAdeLybJ87IWzkcTgN57V8PrQy
dQnLNsnShKKj4FlJwg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:38 2024 by rpki-client on console-ams.rpki-client.org