Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/3134332e302e34382e302f32322d3332203d3e20323633353434.roa
File:                     3134332e302e34382e302f32322d3332203d3e20323633353434.roa (raw, json)
Hash identifier:          b+ZKP3C2C3BvwRAxjBfYySjUPJFEVA4ZUtx/EgjNy0g=
Subject key identifier:   11:BB:AF:16:E8:6B:B8:CB:F5:9B:48:78:03:AC:9B:8E:70:DF:18:A6
Certificate issuer:       /CN=9741D1A029B32962563B5C5BA3B3C73B198E65B4
Certificate serial:       67402597692ABD3377399DAAF6470B5BBD7B1127
Authority key identifier: 97:41:D1:A0:29:B3:29:62:56:3B:5C:5B:A3:B3:C7:3B:19:8E:65:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9741D1A029B32962563B5C5BA3B3C73B198E65B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/3134332e302e34382e302f32322d3332203d3e20323633353434.roa
Signing time:             Wed 03 Jul 2024 14:11:43 +0000
ROA not before:           Wed 03 Jul 2024 14:06:43 +0000
ROA not after:            Wed 02 Jul 2025 14:11:43 +0000
asID:                     263544
IP address blocks:        143.0.48.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/9741D1A029B32962563B5C5BA3B3C73B198E65B4.crl
                          rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/9741D1A029B32962563B5C5BA3B3C73B198E65B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9741D1A029B32962563B5C5BA3B3C73B198E65B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:18:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:40:25:97:69:2a:bd:33:77:39:9d:aa:f6:47:0b:5b:bd:7b:11:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9741D1A029B32962563B5C5BA3B3C73B198E65B4
        Validity
            Not Before: Jul  3 14:06:43 2024 GMT
            Not After : Jul  2 14:11:43 2025 GMT
        Subject: CN=11BBAF16E86BB8CBF59B487803AC9B8E70DF18A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:23:99:86:5e:a0:8f:16:67:a3:c8:4a:c8:f7:
                    aa:6a:e4:b6:c0:9b:38:c7:6c:50:a1:de:63:14:06:
                    bf:99:40:43:ca:62:7c:d6:74:19:7e:45:0c:fb:91:
                    0e:2f:b0:7a:60:e9:79:be:12:80:5f:b2:d1:9c:1e:
                    18:7c:12:87:b6:29:bd:af:fe:b1:8c:5e:f4:a1:02:
                    02:de:b5:04:21:7a:c8:42:ca:d3:59:23:4a:c4:6f:
                    5e:82:22:e9:19:db:33:a0:b9:8f:19:c0:1c:53:2f:
                    a5:44:ae:43:30:75:fd:ba:9f:8a:2e:66:6e:81:7d:
                    98:4f:47:4d:1d:7e:45:1c:33:9f:50:0b:e6:4a:c8:
                    b5:e8:b7:5a:34:50:76:30:06:b8:28:f2:da:ca:0e:
                    d3:08:d9:e5:95:c3:a1:c4:2c:d1:78:f8:65:ae:e5:
                    6a:59:57:83:c4:bf:c7:20:bc:68:a3:79:72:64:25:
                    81:74:88:af:0d:3b:0d:3a:24:59:74:70:c7:38:03:
                    a2:33:2e:ae:f1:70:29:73:48:e2:20:d9:95:d6:f8:
                    62:81:59:8d:3f:26:8b:db:a4:53:80:fc:38:96:6e:
                    d0:8b:7a:5a:5a:66:4d:06:61:f1:88:05:d7:9f:09:
                    13:02:a2:b9:4b:71:b6:73:75:d3:05:28:69:99:67:
                    08:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:BB:AF:16:E8:6B:B8:CB:F5:9B:48:78:03:AC:9B:8E:70:DF:18:A6
            X509v3 Authority Key Identifier:
                keyid:97:41:D1:A0:29:B3:29:62:56:3B:5C:5B:A3:B3:C7:3B:19:8E:65:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/9741D1A029B32962563B5C5BA3B3C73B198E65B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9741D1A029B32962563B5C5BA3B3C73B198E65B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/3134332e302e34382e302f32322d3332203d3e20323633353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:54:7a:30:28:9e:50:c0:11:3f:88:da:5f:6b:ca:ab:0d:23:
         b2:2b:97:12:9a:e9:2f:4b:95:aa:8f:5c:5a:92:8b:61:1a:10:
         76:f8:74:0c:37:4b:41:1c:1c:e9:31:ef:38:03:bd:9b:e3:88:
         66:bd:cc:58:34:4c:eb:a4:3e:65:fc:14:25:6e:ac:ca:ec:f4:
         0e:53:59:ab:f2:e8:6f:9b:ff:4f:93:e4:0d:44:69:14:f9:a9:
         a8:6d:95:1f:29:29:d7:f0:c9:4f:cc:52:05:12:c1:25:88:ba:
         a3:d8:4c:3b:2a:3b:69:8b:7e:a6:a1:55:67:5e:fb:6a:ea:c6:
         6c:9d:27:8c:d6:f7:38:50:e3:5b:4e:e7:d6:68:ba:26:54:4c:
         a4:8f:7d:e0:27:46:ba:cd:8d:b6:31:d5:2b:d0:b5:19:c2:69:
         55:bc:2e:16:44:fe:ca:a6:9f:b0:26:d4:50:9a:2b:78:58:58:
         c8:45:a2:3a:87:af:7b:c7:51:31:9f:a4:a2:d8:d7:e8:3c:a5:
         df:17:8c:b9:85:05:eb:9f:b1:cf:39:e7:34:65:e6:f7:1a:5b:
         e5:e5:d0:02:ed:d6:cc:16:0f:9f:f2:0b:19:2f:c2:d1:b3:99:
         e6:be:36:3f:0c:2c:8e:00:6d:85:ef:d7:4d:b0:9f:79:18:d6:
         0d:7e:1f:6e
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUZ0All2kqvTN3OZ2q9kcLW717EScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc0MUQxQTAyOUIzMjk2MjU2M0I1QzVCQTNCM0M3M0Ix
OThFNjVCNDAeFw0yNDA3MDMxNDA2NDNaFw0yNTA3MDIxNDExNDNaMDMxMTAvBgNV
BAMTKDExQkJBRjE2RTg2QkI4Q0JGNTlCNDg3ODAzQUM5QjhFNzBERjE4QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrI5mGXqCPFmejyErI96pq5LbA
mzjHbFCh3mMUBr+ZQEPKYnzWdBl+RQz7kQ4vsHpg6Xm+EoBfstGcHhh8Eoe2Kb2v
/rGMXvShAgLetQQheshCytNZI0rEb16CIukZ2zOguY8ZwBxTL6VErkMwdf26n4ou
Zm6BfZhPR00dfkUcM59QC+ZKyLXot1o0UHYwBrgo8trKDtMI2eWVw6HELNF4+GWu
5WpZV4PEv8cgvGijeXJkJYF0iK8NOw06JFl0cMc4A6IzLq7xcClzSOIg2ZXW+GKB
WY0/JovbpFOA/DiWbtCLelpaZk0GYfGIBdefCRMCorlLcbZzddMFKGmZZwijAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUEbuvFuhruMv1m0h4A6ybjnDfGKYwHwYDVR0j
BBgwFoAUl0HRoCmzKWJWO1xbo7PHOxmOZbQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEFGcWhQM3pSejJ4UjY5WUhvTXJ0WW5XczE1dnM2ZVgzTEZrRHkyNVJH
V3gvMC85NzQxRDFBMDI5QjMyOTYyNTYzQjVDNUJBM0IzQzczQjE5OEU2NUI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk3NDFEMUEwMjlCMzI5NjI1
NjNCNUM1QkEzQjNDNzNCMTk4RTY1QjQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhBRnFoUDN6UnoyeFI2OVlIb01ydFluV3MxNXZzNmVYM0xGa0R5MjVSR1d4LzAv
MzEzNDMzMmUzMDJlMzQzODJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMyMzYzMzM1
MzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAo8AMDANBgkqhkiG9w0BAQsFAAOCAQEAYVR6MCieUMAR
P4jaX2vKqw0jsiuXEprpL0uVqo9cWpKLYRoQdvh0DDdLQRwc6THvOAO9m+OIZr3M
WDRM66Q+ZfwUJW6syuz0DlNZq/Lob5v/T5PkDURpFPmpqG2VHykp1/DJT8xSBRLB
JYi6o9hMOyo7aYt+pqFVZ177aurGbJ0njNb3OFDjW07n1mi6JlRMpI994CdGus2N
tjHVK9C1GcJpVbwuFkT+yqafsCbUUJoreFhYyEWiOoeve8dRMZ+kotjX6Dyl3xeM
uYUF65+xzznnNGXm9xpb5eXQAu3WzBYPn/ILGS/C0bOZ5r42PwwsjgBthe/XTbCf
eRjWDX4fbg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:38 2024 by rpki-client on console-ams.rpki-client.org