Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/83XpBpWDBzKmTJD1fTakfSVr2bnPNv1B2NbNgdUpQa4u/0/3134332e3230322e34382e302f32322d3234203d3e20323632353436.roa
File:                     3134332e3230322e34382e302f32322d3234203d3e20323632353436.roa (raw, json)
Hash identifier:          4yuIMpYbu5Q26VYmOBh+ltMlxfL3KMRtVufhlUIY8uU=
Subject key identifier:   3F:1B:F3:9B:29:61:74:09:EB:4B:9F:53:1E:43:14:BB:94:BB:4A:02
Certificate issuer:       /CN=7601FABE684263D9F7C5334E8ACFF4C84F5491C4
Certificate serial:       610CC2F170E2F15D9B3D1824F4906EB9099AAF5D
Authority key identifier: 76:01:FA:BE:68:42:63:D9:F7:C5:33:4E:8A:CF:F4:C8:4F:54:91:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7601FABE684263D9F7C5334E8ACFF4C84F5491C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/83XpBpWDBzKmTJD1fTakfSVr2bnPNv1B2NbNgdUpQa4u/0/3134332e3230322e34382e302f32322d3234203d3e20323632353436.roa
Signing time:             Mon 28 Oct 2024 17:00:18 +0000
ROA not before:           Mon 28 Oct 2024 16:55:18 +0000
ROA not after:            Mon 27 Oct 2025 17:00:18 +0000
asID:                     262546
IP address blocks:        143.202.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/83XpBpWDBzKmTJD1fTakfSVr2bnPNv1B2NbNgdUpQa4u/0/7601FABE684263D9F7C5334E8ACFF4C84F5491C4.crl
                          rsync://rpki-repo.registro.br/repo/83XpBpWDBzKmTJD1fTakfSVr2bnPNv1B2NbNgdUpQa4u/0/7601FABE684263D9F7C5334E8ACFF4C84F5491C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7601FABE684263D9F7C5334E8ACFF4C84F5491C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:38:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0c:c2:f1:70:e2:f1:5d:9b:3d:18:24:f4:90:6e:b9:09:9a:af:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7601FABE684263D9F7C5334E8ACFF4C84F5491C4
        Validity
            Not Before: Oct 28 16:55:18 2024 GMT
            Not After : Oct 27 17:00:18 2025 GMT
        Subject: CN=3F1BF39B29617409EB4B9F531E4314BB94BB4A02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:72:ee:92:34:4a:34:fa:0a:c2:c0:48:a3:46:
                    e4:c0:02:c9:1c:d8:a0:4b:58:30:9a:f0:33:7b:a1:
                    cd:48:00:ec:3f:7e:1e:ef:65:9b:85:de:6c:06:b0:
                    41:f5:0f:84:ce:54:b6:43:37:ac:02:8e:db:7d:c4:
                    59:93:bc:0b:09:73:99:a2:73:47:0f:ab:81:51:45:
                    84:4e:4a:45:f3:6f:ce:23:67:e4:3f:ed:87:e1:ce:
                    70:e5:59:f7:1e:87:12:51:a3:f7:35:52:b9:3e:07:
                    6c:9c:14:56:1c:31:de:d3:1f:f4:67:2a:6a:31:e0:
                    ed:45:55:17:18:4e:27:a4:01:cd:f0:19:5e:c9:8b:
                    a9:8b:bc:b9:04:0b:dd:8c:1b:ea:a7:d1:e0:02:07:
                    e0:f0:1c:77:76:19:dc:70:ff:9c:3c:23:ed:80:92:
                    77:60:6a:e3:6b:1d:c7:86:07:59:01:62:49:24:b8:
                    4a:ee:76:c1:b1:c3:a0:b9:cb:b3:43:7d:57:89:2a:
                    96:7c:2d:ec:9f:2f:5a:ec:a6:b5:e2:cc:e6:8e:ba:
                    bc:52:87:d8:a8:b5:c9:b5:5f:8d:a7:51:71:85:94:
                    75:38:81:db:de:98:70:f3:7e:ac:2e:68:07:38:f4:
                    d5:ac:80:7f:bb:2d:8f:38:f1:f5:7e:35:69:23:0e:
                    62:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:1B:F3:9B:29:61:74:09:EB:4B:9F:53:1E:43:14:BB:94:BB:4A:02
            X509v3 Authority Key Identifier:
                keyid:76:01:FA:BE:68:42:63:D9:F7:C5:33:4E:8A:CF:F4:C8:4F:54:91:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/83XpBpWDBzKmTJD1fTakfSVr2bnPNv1B2NbNgdUpQa4u/0/7601FABE684263D9F7C5334E8ACFF4C84F5491C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7601FABE684263D9F7C5334E8ACFF4C84F5491C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/83XpBpWDBzKmTJD1fTakfSVr2bnPNv1B2NbNgdUpQa4u/0/3134332e3230322e34382e302f32322d3234203d3e20323632353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:e0:3f:df:f9:f2:63:75:cd:a4:5f:3b:72:52:b2:1c:8b:15:
         70:6e:f7:36:b8:c4:f9:e8:b1:28:4d:9c:9c:12:39:a4:13:77:
         9e:c2:f3:76:cc:43:c7:80:e6:35:2c:6a:11:be:ea:35:c6:ce:
         37:d3:ce:91:d9:f8:95:06:ce:09:b8:db:08:9b:f3:b2:ff:05:
         64:f5:46:1b:50:5d:ce:5f:aa:79:83:e0:14:5d:d0:fa:39:3b:
         10:c3:b0:b1:3b:2e:3b:dc:1a:1e:55:82:f4:13:5e:f3:50:aa:
         b5:7d:58:f2:89:5e:52:09:c7:17:01:72:80:91:e5:6c:3e:1d:
         aa:c3:2f:96:b6:61:dd:7c:9b:b4:c4:bf:7e:f9:1a:23:2f:65:
         46:6d:3d:d8:e9:75:1b:1d:1c:bf:5b:be:02:2d:b9:44:ec:ad:
         04:f0:6f:cd:ec:19:2d:41:64:d9:66:72:ef:6a:a7:22:32:99:
         af:dc:e9:f5:9e:a2:10:cd:cf:ec:c2:b1:a4:25:88:a1:eb:7c:
         9c:87:f2:9a:73:fc:4f:22:06:82:99:b7:90:bf:5a:a4:e2:81:
         d3:05:a8:d0:8e:49:94:18:ee:74:1a:93:f2:c5:dc:dc:98:01:
         34:9c:c1:bb:8f:48:57:2e:cb:c7:4a:2e:91:57:3f:43:a7:5f:
         e0:55:7f:c2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYQzC8XDi8V2bPRgk9JBuuQmar10wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzYwMUZBQkU2ODQyNjNEOUY3QzUzMzRFOEFDRkY0Qzg0
RjU0OTFDNDAeFw0yNDEwMjgxNjU1MThaFw0yNTEwMjcxNzAwMThaMDMxMTAvBgNV
BAMTKDNGMUJGMzlCMjk2MTc0MDlFQjRCOUY1MzFFNDMxNEJCOTRCQjRBMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxcu6SNEo0+grCwEijRuTAAskc
2KBLWDCa8DN7oc1IAOw/fh7vZZuF3mwGsEH1D4TOVLZDN6wCjtt9xFmTvAsJc5mi
c0cPq4FRRYROSkXzb84jZ+Q/7YfhznDlWfcehxJRo/c1Urk+B2ycFFYcMd7TH/Rn
Kmox4O1FVRcYTiekAc3wGV7Ji6mLvLkEC92MG+qn0eACB+DwHHd2Gdxw/5w8I+2A
kndgauNrHceGB1kBYkkkuErudsGxw6C5y7NDfVeJKpZ8LeyfL1rsprXizOaOurxS
h9iotcm1X42nUXGFlHU4gdvemHDzfqwuaAc49NWsgH+7LY848fV+NWkjDmIDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPxvzmylhdAnrS59THkMUu5S7SgIwHwYDVR0j
BBgwFoAUdgH6vmhCY9n3xTNOis/0yE9UkcQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODNYcEJwV0RCekttVEpEMWZUYWtmU1ZyMmJuUE52MUIyTmJOZ2RVcFFh
NHUvMC83NjAxRkFCRTY4NDI2M0Q5RjdDNTMzNEU4QUNGRjRDODRGNTQ5MUM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc2MDFGQUJFNjg0MjYzRDlG
N0M1MzM0RThBQ0ZGNEM4NEY1NDkxQzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzgzWHBCcFdEQnpLbVRKRDFmVGFrZlNWcjJiblBOdjFCMk5iTmdkVXBRYTR1LzAv
MzEzNDMzMmUzMjMwMzIyZTM0MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNTM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKPyjAwDQYJKoZIhvcNAQELBQADggEBACHgP9/5
8mN1zaRfO3JSshyLFXBu9za4xPnosShNnJwSOaQTd57C83bMQ8eA5jUsahG+6jXG
zjfTzpHZ+JUGzgm42wib87L/BWT1RhtQXc5fqnmD4BRd0Po5OxDDsLE7LjvcGh5V
gvQTXvNQqrV9WPKJXlIJxxcBcoCR5Ww+HarDL5a2Yd18m7TEv375GiMvZUZtPdjp
dRsdHL9bvgItuUTsrQTwb83sGS1BZNlmcu9qpyIyma/c6fWeohDNz+zCsaQliKHr
fJyH8ppz/E8iBoKZt5C/WqTigdMFqNCOSZQY7nQak/LF3NyYATScwbuPSFcuy8dK
LpFXP0OnX+BVf8I=
-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:04 2024 by rpki-client on console-fra.rpki-client.org