Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/1/3139312e3234322e3234342e302f32322d3332203d3e20323633313535.roa
File:                     3139312e3234322e3234342e302f32322d3332203d3e20323633313535.roa (raw, json)
Hash identifier:          4FLkkp53vmyfeW8K5dazoLWiUYpUKvtalcYr4gzfw5g=
Subject key identifier:   68:97:C8:48:01:61:47:1E:89:6E:16:ED:9F:E7:EB:72:E4:02:09:AB
Certificate issuer:       /CN=B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8
Certificate serial:       242B4A06977A420F7E4DF03457AD66BDD61F55D3
Authority key identifier: B6:EB:3D:EA:1B:11:3D:80:89:F2:EB:7F:26:A5:2C:BA:BA:6D:F2:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/1/3139312e3234322e3234342e302f32322d3332203d3e20323633313535.roa
Signing time:             Wed 03 Apr 2024 22:46:47 +0000
ROA not before:           Wed 03 Apr 2024 22:41:47 +0000
ROA not after:            Wed 02 Apr 2025 22:46:47 +0000
asID:                     263155
IP address blocks:        191.242.244.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/1/B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8.crl
                          rsync://rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/1/B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:2b:4a:06:97:7a:42:0f:7e:4d:f0:34:57:ad:66:bd:d6:1f:55:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8
        Validity
            Not Before: Apr  3 22:41:47 2024 GMT
            Not After : Apr  2 22:46:47 2025 GMT
        Subject: CN=6897C8480161471E896E16ED9FE7EB72E40209AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b2:e2:af:1f:93:ae:e8:ef:19:6d:4b:ed:26:
                    72:0b:9e:0f:2e:4f:69:8d:11:e7:ec:a7:c5:f3:94:
                    c8:c7:70:a8:85:5b:d3:28:2d:e2:2c:1f:0e:8a:c6:
                    a4:0b:de:f5:70:8f:a5:d2:0c:8b:8a:7b:7e:62:de:
                    d5:6b:8c:1d:8c:7a:ea:d8:5b:82:36:58:be:1d:74:
                    e0:b5:80:b9:b2:f7:7a:80:ae:e5:8d:31:28:98:9a:
                    7f:0f:2e:af:be:08:69:8d:1e:57:9b:4b:ca:93:6b:
                    ab:d2:24:b1:e1:cd:47:3d:3b:aa:c1:bd:63:ae:c0:
                    91:2a:a5:61:57:68:e8:9c:11:1c:41:04:a4:71:c5:
                    d8:e2:c5:78:8a:d5:9d:58:fb:75:dd:eb:7c:5b:c1:
                    9f:34:11:ae:85:f0:8b:15:0d:bb:27:c0:c9:f5:3c:
                    47:ef:d8:05:57:d5:66:92:54:93:99:73:83:80:d1:
                    9f:6b:da:b7:af:11:76:aa:88:b0:bf:dd:1a:e5:c7:
                    a4:a7:af:24:c0:0b:cb:b2:ea:fe:fc:bf:75:98:42:
                    98:e2:78:cc:e7:cb:b7:32:2a:63:0e:eb:bc:b5:7f:
                    32:23:c1:20:8b:c8:20:73:34:a2:01:8a:29:2b:f8:
                    5f:78:af:68:bf:8c:72:a5:cc:47:5e:33:6f:f8:1a:
                    eb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:97:C8:48:01:61:47:1E:89:6E:16:ED:9F:E7:EB:72:E4:02:09:AB
            X509v3 Authority Key Identifier:
                keyid:B6:EB:3D:EA:1B:11:3D:80:89:F2:EB:7F:26:A5:2C:BA:BA:6D:F2:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/1/B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6EB3DEA1B113D8089F2EB7F26A52CBABA6DF2D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/1/3139312e3234322e3234342e302f32322d3332203d3e20323633313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:6b:29:be:14:45:72:86:65:ec:12:b8:4b:c1:9f:6b:76:e0:
         fc:11:3c:99:4d:d8:c6:9b:39:3c:2b:42:09:e3:75:2d:c4:ef:
         17:5d:00:83:0e:25:14:4f:ba:7c:31:9a:bf:40:00:d4:3a:f1:
         81:f1:7e:8d:92:dd:7d:da:97:cb:31:86:5d:f4:e8:28:65:24:
         a8:68:ff:6a:62:bd:67:c9:85:b7:19:e3:0f:53:e1:78:0b:4f:
         2c:aa:5d:e7:4a:4b:a1:21:3d:22:3a:ea:41:cb:41:de:25:0a:
         05:82:f8:d1:6d:67:76:54:64:29:6b:88:f5:61:74:19:50:0f:
         88:35:ef:cc:9d:c0:11:c4:e7:7d:a4:3b:45:fe:d9:fc:f6:07:
         7d:f8:ab:b7:a9:45:cd:db:1c:6c:f2:a4:e2:a2:e7:7f:8a:dd:
         a7:a9:47:3c:01:54:57:60:8d:10:52:15:98:0f:35:8e:6e:48:
         70:52:b2:d5:5c:9a:3d:d0:a9:de:48:30:5b:a4:d1:a5:fc:b8:
         bd:e3:67:12:ab:f8:e8:d7:15:5a:42:42:64:9f:2c:fa:c7:4c:
         9f:ff:d3:ce:90:2d:e5:bf:5f:28:20:a0:5d:e3:d3:66:f3:17:
         09:6c:8b:b5:c9:d5:ac:25:d8:a4:d3:e3:7d:39:ed:36:1a:31:
         fb:10:0e:16
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJCtKBpd6Qg9+TfA0V61mvdYfVdMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZFQjNERUExQjExM0Q4MDg5RjJFQjdGMjZBNTJDQkFC
QTZERjJEODAeFw0yNDA0MDMyMjQxNDdaFw0yNTA0MDIyMjQ2NDdaMDMxMTAvBgNV
BAMTKDY4OTdDODQ4MDE2MTQ3MUU4OTZFMTZFRDlGRTdFQjcyRTQwMjA5QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCsuKvH5Ou6O8ZbUvtJnILng8u
T2mNEefsp8XzlMjHcKiFW9MoLeIsHw6KxqQL3vVwj6XSDIuKe35i3tVrjB2MeurY
W4I2WL4ddOC1gLmy93qAruWNMSiYmn8PLq++CGmNHlebS8qTa6vSJLHhzUc9O6rB
vWOuwJEqpWFXaOicERxBBKRxxdjixXiK1Z1Y+3Xd63xbwZ80Ea6F8IsVDbsnwMn1
PEfv2AVX1WaSVJOZc4OA0Z9r2revEXaqiLC/3Rrlx6SnryTAC8uy6v78v3WYQpji
eMzny7cyKmMO67y1fzIjwSCLyCBzNKIBiikr+F94r2i/jHKlzEdeM2/4GutdAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUaJfISAFhRx6Jbhbtn+frcuQCCaswHwYDVR0j
BBgwFoAUtus96hsRPYCJ8ut/JqUsurpt8tgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3ZTSnhIOTVhaHFNTFUyNGpjOHN5akRpVDF1Nm1XQmRCUnJGdzd2YThH
Y3ovMS9CNkVCM0RFQTFCMTEzRDgwODlGMkVCN0YyNkE1MkNCQUJBNkRGMkQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I2RUIzREVBMUIxMTNEODA4
OUYyRUI3RjI2QTUyQ0JBQkE2REYyRDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd2U0p4SDk1YWhxTUxVMjRqYzhzeWpEaVQxdTZtV0JkQlJyRnc3dmE4R2N6LzEv
MzEzOTMxMmUzMjM0MzIyZTMyMzQzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzMzMxMzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAr/y9DANBgkqhkiG9w0BAQsFAAOCAQEACGsp
vhRFcoZl7BK4S8Gfa3bg/BE8mU3Yxps5PCtCCeN1LcTvF10Agw4lFE+6fDGav0AA
1DrxgfF+jZLdfdqXyzGGXfToKGUkqGj/amK9Z8mFtxnjD1PheAtPLKpd50pLoSE9
IjrqQctB3iUKBYL40W1ndlRkKWuI9WF0GVAPiDXvzJ3AEcTnfaQ7Rf7Z/PYHffir
t6lFzdscbPKk4qLnf4rdp6lHPAFUV2CNEFIVmA81jm5IcFKy1VyaPdCp3kgwW6TR
pfy4veNnEqv46NcVWkJCZJ8s+sdMn//TzpAt5b9fKCCgXePTZvMXCWyLtcnVrCXY
pNPjfTntNhox+xAOFg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:09 2024 by rpki-client on console-fra.rpki-client.org