Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/3139312e33372e3138322e302f32342d3234203d3e20323633333639.roa
File:                     3139312e33372e3138322e302f32342d3234203d3e20323633333639.roa (raw, json)
Hash identifier:          B6FU5e96X0GhYuWk4NpT2rN3aemLptB+LZnMcXQugdI=
Subject key identifier:   9A:B3:03:1F:B2:99:07:55:49:26:71:83:B0:AC:B1:B1:3F:56:B4:B8
Certificate issuer:       /CN=7F9FA1F28DCA0698B3EC18364A64EE88284031A3
Certificate serial:       410406AD1EFEC1FD6F564C27FAD93CD489824962
Authority key identifier: 7F:9F:A1:F2:8D:CA:06:98:B3:EC:18:36:4A:64:EE:88:28:40:31:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/3139312e33372e3138322e302f32342d3234203d3e20323633333639.roa
Signing time:             Thu 04 Apr 2024 02:17:49 +0000
ROA not before:           Thu 04 Apr 2024 02:12:49 +0000
ROA not after:            Thu 03 Apr 2025 02:17:49 +0000
asID:                     263369
IP address blocks:        191.37.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.crl
                          rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:17:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:04:06:ad:1e:fe:c1:fd:6f:56:4c:27:fa:d9:3c:d4:89:82:49:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F9FA1F28DCA0698B3EC18364A64EE88284031A3
        Validity
            Not Before: Apr  4 02:12:49 2024 GMT
            Not After : Apr  3 02:17:49 2025 GMT
        Subject: CN=9AB3031FB299075549267183B0ACB1B13F56B4B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9c:0c:16:38:b5:4d:1e:d8:c7:cb:bb:16:c0:
                    06:b4:3a:b6:02:24:f1:ec:78:b9:02:16:9f:51:7d:
                    3d:fc:d6:d2:b1:ad:80:fa:ce:2d:2d:a8:62:7f:4c:
                    83:25:b0:8f:19:55:52:05:73:8f:01:3e:b7:b9:91:
                    1d:20:b2:eb:17:df:eb:f5:3b:8b:55:4e:09:1b:f0:
                    08:75:e3:bf:3e:a5:6e:a6:4d:13:e3:c5:f0:4a:99:
                    b7:0b:cb:3f:d0:a2:6d:41:65:45:3a:f3:c2:0c:6f:
                    21:e2:f1:21:97:8f:a2:ae:b4:b5:23:31:d2:ce:ba:
                    9c:f5:96:24:2c:5d:e5:44:c9:2a:6c:20:c8:79:30:
                    4d:ec:08:dc:c3:5e:06:32:3e:37:39:c9:e6:0b:4f:
                    51:ae:a2:31:a8:97:2e:d7:3c:53:70:6b:10:f5:e7:
                    9c:8d:a2:ed:2a:68:bd:09:51:d8:d7:bf:21:6c:7a:
                    a3:8e:a5:d6:34:42:1d:d4:9e:52:99:fb:74:71:3b:
                    23:43:2c:e8:dc:4c:07:18:f9:fa:12:df:80:26:d3:
                    96:50:a7:f9:4c:45:e3:48:16:8a:b8:c4:a5:33:67:
                    4f:5d:ee:3d:b5:55:20:df:9d:36:c2:9f:de:7b:1d:
                    29:7c:c2:95:bb:67:43:ae:8d:04:6c:ef:88:2a:d1:
                    be:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B3:03:1F:B2:99:07:55:49:26:71:83:B0:AC:B1:B1:3F:56:B4:B8
            X509v3 Authority Key Identifier:
                keyid:7F:9F:A1:F2:8D:CA:06:98:B3:EC:18:36:4A:64:EE:88:28:40:31:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F9FA1F28DCA0698B3EC18364A64EE88284031A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/1/3139312e33372e3138322e302f32342d3234203d3e20323633333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:78:46:b3:d0:dc:9a:99:71:5f:02:2d:df:d3:ee:da:dc:8a:
         aa:8b:a2:34:7d:38:33:14:3c:31:fc:5a:41:d8:b9:f3:3c:a0:
         ef:6b:41:e9:7e:d7:0b:8b:cb:56:b5:04:fd:0c:77:c8:a1:15:
         b4:f3:6b:a1:67:c4:76:b5:58:9f:7f:26:0d:58:fc:43:6b:68:
         98:66:6e:1b:18:93:a3:fd:53:0d:77:40:2c:41:96:15:ad:ea:
         ef:4a:bc:28:07:0f:f6:8b:fd:87:6d:3c:f0:4c:0e:93:51:93:
         86:f1:5c:b8:d9:c6:0e:4b:10:65:bc:6d:cd:0c:90:6a:ed:5f:
         12:13:d2:ee:38:8e:96:a3:d3:3d:8a:2a:64:6e:99:23:89:97:
         29:20:ae:f1:c0:60:43:47:2a:28:da:ac:22:62:8e:fa:b5:98:
         b0:e2:d5:48:db:0c:92:0f:90:a0:7b:32:9b:38:28:27:38:0e:
         a7:8e:8f:ab:44:c7:a1:ef:11:6e:1a:79:99:5f:96:44:4c:b5:
         ab:a4:b4:3e:40:ec:70:f7:70:c9:cc:66:23:de:a0:a5:66:56:
         f8:f4:30:aa:da:60:4e:12:ba:c7:74:e2:d9:16:f4:8d:99:7e:
         b2:92:a9:e5:ca:e4:bc:55:16:3d:4c:70:ff:5e:cf:0a:2b:3d:
         00:12:fc:8b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQQQGrR7+wf1vVkwn+tk81ImCSWIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Y5RkExRjI4RENBMDY5OEIzRUMxODM2NEE2NEVFODgy
ODQwMzFBMzAeFw0yNDA0MDQwMjEyNDlaFw0yNTA0MDMwMjE3NDlaMDMxMTAvBgNV
BAMTKDlBQjMwMzFGQjI5OTA3NTU0OTI2NzE4M0IwQUNCMUIxM0Y1NkI0QjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXnAwWOLVNHtjHy7sWwAa0OrYC
JPHseLkCFp9RfT381tKxrYD6zi0tqGJ/TIMlsI8ZVVIFc48BPre5kR0gsusX3+v1
O4tVTgkb8Ah1478+pW6mTRPjxfBKmbcLyz/Qom1BZUU688IMbyHi8SGXj6KutLUj
MdLOupz1liQsXeVEySpsIMh5ME3sCNzDXgYyPjc5yeYLT1GuojGoly7XPFNwaxD1
55yNou0qaL0JUdjXvyFseqOOpdY0Qh3UnlKZ+3RxOyNDLOjcTAcY+foS34Am05ZQ
p/lMReNIFoq4xKUzZ09d7j21VSDfnTbCn957HSl8wpW7Z0OujQRs74gq0b7vAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmrMDH7KZB1VJJnGDsKyxsT9WtLgwHwYDVR0j
BBgwFoAUf5+h8o3KBpiz7Bg2SmTuiChAMaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODE4a1lFY3lXb2h4UzlLYWF0d3prZFU1SEh6ZVk2UnA0Qzg3dnBCMzNT
bVEvMS83RjlGQTFGMjhEQ0EwNjk4QjNFQzE4MzY0QTY0RUU4ODI4NDAzMUEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdGOUZBMUYyOERDQTA2OThC
M0VDMTgzNjRBNjRFRTg4Mjg0MDMxQTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzgxOGtZRWN5V29oeFM5S2FhdHd6a2RVNUhIemVZNlJwNEM4N3ZwQjMzU21RLzEv
MzEzOTMxMmUzMzM3MmUzMTM4MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMzM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC/JbYwDQYJKoZIhvcNAQELBQADggEBADZ4RrPQ
3JqZcV8CLd/T7trciqqLojR9ODMUPDH8WkHYufM8oO9rQel+1wuLy1a1BP0Md8ih
FbTza6FnxHa1WJ9/Jg1Y/ENraJhmbhsYk6P9Uw13QCxBlhWt6u9KvCgHD/aL/Ydt
PPBMDpNRk4bxXLjZxg5LEGW8bc0MkGrtXxIT0u44jpaj0z2KKmRumSOJlykgrvHA
YENHKijarCJijvq1mLDi1UjbDJIPkKB7Mps4KCc4DqeOj6tEx6HvEW4aeZlflkRM
tauktD5A7HD3cMnMZiPeoKVmVvj0MKraYE4Susd04tkW9I2ZfrKSqeXK5LxVFj1M
cP9ezworPQAS/Is=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:07 2024 by rpki-client on console-fra.rpki-client.org