Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/3132382e3230312e3135362e302f32332d3233203d3e20323636363335.roa
File:                     3132382e3230312e3135362e302f32332d3233203d3e20323636363335.roa (raw, json)
Hash identifier:          dZXYZTa7EuiLybrP62w3C6I87D6meMYUDdCavotQesY=
Subject key identifier:   27:A3:E9:EF:52:2D:95:90:72:50:24:97:13:1A:13:5A:E5:61:D8:7D
Certificate issuer:       /CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
Certificate serial:       7A35A0B9D88D231985012FF8E232536CF6737CE9
Authority key identifier: EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/3132382e3230312e3135362e302f32332d3233203d3e20323636363335.roa
Signing time:             Thu 04 Apr 2024 02:34:39 +0000
ROA not before:           Thu 04 Apr 2024 02:29:39 +0000
ROA not after:            Thu 03 Apr 2025 02:34:39 +0000
asID:                     266635
IP address blocks:        128.201.156.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.crl
                          rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:35:a0:b9:d8:8d:23:19:85:01:2f:f8:e2:32:53:6c:f6:73:7c:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
        Validity
            Not Before: Apr  4 02:29:39 2024 GMT
            Not After : Apr  3 02:34:39 2025 GMT
        Subject: CN=27A3E9EF522D959072502497131A135AE561D87D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:47:61:20:ae:ee:f6:d3:6e:5e:a2:6a:65:79:
                    96:a5:dc:b7:8e:65:4b:a0:aa:b1:9a:81:06:67:e0:
                    df:dc:e2:7b:16:31:c7:56:cb:7b:56:c1:04:b0:80:
                    10:9f:18:19:db:55:8d:b9:04:ee:6c:46:a5:5d:db:
                    64:0c:04:ee:d9:8c:06:02:2f:ab:39:cb:28:77:85:
                    01:95:3f:89:24:16:0b:ef:00:88:ef:22:71:9d:b9:
                    da:28:44:0d:7e:c5:ad:3d:7c:cf:07:f6:4e:e8:86:
                    4b:b9:84:de:1f:84:cf:83:55:32:1f:fb:49:da:b9:
                    87:f1:b5:e8:3c:92:1f:72:87:b3:37:b7:cd:2f:d3:
                    d2:47:c3:19:b4:f8:92:13:9b:15:35:cd:08:c5:78:
                    aa:17:e6:66:29:19:26:4b:9b:8a:3a:fe:5c:e2:04:
                    44:c8:3b:ab:6a:7c:db:4a:56:f4:a9:0c:a7:42:b0:
                    6b:3e:b0:79:c7:58:12:7f:55:a8:9d:53:90:b1:f2:
                    b9:da:46:ac:ac:43:54:ef:86:77:f6:e5:eb:8d:95:
                    28:24:67:d6:33:af:cb:9c:ea:97:c3:e1:58:cd:c1:
                    5e:46:21:fa:45:4a:3e:54:a6:4a:14:6e:a0:b3:5c:
                    82:a3:f6:d0:f0:74:59:a7:f7:ac:9f:e8:1d:a5:d9:
                    d8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A3:E9:EF:52:2D:95:90:72:50:24:97:13:1A:13:5A:E5:61:D8:7D
            X509v3 Authority Key Identifier:
                keyid:EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/3132382e3230312e3135362e302f32332d3233203d3e20323636363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:d2:92:fd:c0:23:31:1f:b9:73:e9:41:18:da:be:e0:77:56:
         ff:48:ec:8a:80:db:42:1f:40:35:11:42:bc:e8:d8:56:ba:5a:
         cb:97:2a:57:f9:e7:60:b3:fc:ee:81:fa:e7:7c:21:97:a5:d6:
         f6:0b:2f:73:6c:75:17:d9:e9:55:86:8a:cb:0b:d0:1f:df:8d:
         40:9b:68:07:34:aa:3c:de:6c:ca:dc:d5:62:d9:9e:2d:00:c7:
         bd:f4:70:72:fc:6e:3a:05:6b:bf:2d:e5:4d:af:85:5f:ca:91:
         2d:e5:1f:85:5f:22:d1:63:bc:ab:31:ee:8c:a0:68:12:2e:a3:
         2e:0a:23:04:6c:c8:02:dd:83:ae:07:35:2c:f8:0f:0b:fe:48:
         f1:9f:49:eb:0f:17:df:0d:01:c2:50:38:bc:78:5f:9a:83:9b:
         f8:b5:61:aa:78:c8:a6:43:ac:8a:51:76:f2:5d:0f:4f:05:03:
         f4:ee:ec:c1:e3:df:4c:f2:26:37:ae:55:98:27:05:ad:ad:53:
         f4:9c:50:69:b2:94:1e:30:39:e8:8b:be:5e:0d:0e:86:c4:a9:
         f3:22:8f:63:33:4b:0e:e4:4a:44:82:a5:bc:dd:c9:ca:60:1c:
         e8:59:d4:1b:11:d9:89:0e:17:86:34:d5:89:47:a6:d1:10:80:
         22:fb:f4:b3
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUejWgudiNIxmFAS/44jJTbPZzfOkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUExOEE4NkE5QkYzQzhDRjJDOTIzRDQxQzQ0ODlBMDA0
MzkyQUJGQjAeFw0yNDA0MDQwMjI5MzlaFw0yNTA0MDMwMjM0MzlaMDMxMTAvBgNV
BAMTKDI3QTNFOUVGNTIyRDk1OTA3MjUwMjQ5NzEzMUExMzVBRTU2MUQ4N0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+R2Egru72025eompleZal3LeO
ZUugqrGagQZn4N/c4nsWMcdWy3tWwQSwgBCfGBnbVY25BO5sRqVd22QMBO7ZjAYC
L6s5yyh3hQGVP4kkFgvvAIjvInGdudooRA1+xa09fM8H9k7ohku5hN4fhM+DVTIf
+0nauYfxteg8kh9yh7M3t80v09JHwxm0+JITmxU1zQjFeKoX5mYpGSZLm4o6/lzi
BETIO6tqfNtKVvSpDKdCsGs+sHnHWBJ/VaidU5Cx8rnaRqysQ1Tvhnf25euNlSgk
Z9Yzr8uc6pfD4VjNwV5GIfpFSj5UpkoUbqCzXIKj9tDwdFmn96yf6B2l2diRAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUJ6Pp71ItlZByUCSXExoTWuVh2H0wHwYDVR0j
BBgwFoAU6hioapvzyM8skj1BxEiaAEOSq/swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2JqanN0RHNkczdRdENjcmRnZXpUREJ0ZjFaY1VVYURLTjViOE1UMVE2
VEEvMS9FQTE4QTg2QTlCRjNDOENGMkM5MjNENDFDNDQ4OUEwMDQzOTJBQkZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBMThBODZBOUJGM0M4Q0Yy
QzkyM0Q0MUM0NDg5QTAwNDM5MkFCRkIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdiampzdERzZHM3UXRDY3JkZ2V6VERCdGYxWmNVVWFES041YjhNVDFRNlRBLzEv
MzEzMjM4MmUzMjMwMzEyZTMxMzUzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNjM2MzMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYDJnDANBgkqhkiG9w0BAQsFAAOCAQEADtKS
/cAjMR+5c+lBGNq+4HdW/0jsioDbQh9ANRFCvOjYVrpay5cqV/nnYLP87oH653wh
l6XW9gsvc2x1F9npVYaKywvQH9+NQJtoBzSqPN5sytzVYtmeLQDHvfRwcvxuOgVr
vy3lTa+FX8qRLeUfhV8i0WO8qzHujKBoEi6jLgojBGzIAt2Drgc1LPgPC/5I8Z9J
6w8X3w0BwlA4vHhfmoOb+LVhqnjIpkOsilF28l0PTwUD9O7swePfTPImN65VmCcF
ra1T9JxQabKUHjA56Iu+Xg0OhsSp8yKPYzNLDuRKRIKlvN3JymAc6FnUGxHZiQ4X
hjTViUem0RCAIvv0sw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:16 2024 by rpki-client on console-fra.rpki-client.org