Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/3231362e39382e3231362e302f32342d3234203d3e20323636323236.roa
File:                     3231362e39382e3231362e302f32342d3234203d3e20323636323236.roa (raw, json)
Hash identifier:          8BzCi6jnicyUmeh80fs8pNGn/tQYK+/lGozVLx0/fCU=
Subject key identifier:   CE:27:30:69:2D:6E:24:11:BC:EE:63:D9:30:EE:13:0C:9A:5D:92:F2
Certificate issuer:       /CN=049A7D9E6745910CF5F3435E31224EA7BBDE9280
Certificate serial:       131EECC536EE0403108D06E3A208179680CC3B3E
Authority key identifier: 04:9A:7D:9E:67:45:91:0C:F5:F3:43:5E:31:22:4E:A7:BB:DE:92:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/3231362e39382e3231362e302f32342d3234203d3e20323636323236.roa
Signing time:             Thu 04 Apr 2024 14:59:44 +0000
ROA not before:           Thu 04 Apr 2024 14:54:44 +0000
ROA not after:            Thu 03 Apr 2025 14:59:44 +0000
asID:                     266226
IP address blocks:        216.98.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.crl
                          rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:1e:ec:c5:36:ee:04:03:10:8d:06:e3:a2:08:17:96:80:cc:3b:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049A7D9E6745910CF5F3435E31224EA7BBDE9280
        Validity
            Not Before: Apr  4 14:54:44 2024 GMT
            Not After : Apr  3 14:59:44 2025 GMT
        Subject: CN=CE2730692D6E2411BCEE63D930EE130C9A5D92F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f0:fb:7b:bc:f7:36:07:ec:27:f8:54:77:9d:
                    aa:15:6e:59:01:33:96:31:a9:54:ed:3b:2e:47:8a:
                    7b:df:ea:00:7e:1c:b3:d4:b2:ee:8e:ca:76:48:55:
                    95:e3:cd:61:53:e4:3c:fe:be:21:2e:da:97:f2:72:
                    cd:c6:60:5d:26:f6:27:d4:72:0c:a9:b8:fc:b7:43:
                    4c:da:53:8c:12:2c:c3:15:e7:c5:58:fb:52:56:5e:
                    5f:0f:e4:fb:41:0b:fd:ee:7e:7f:e2:a6:3a:09:9a:
                    de:be:cf:12:dc:c9:3e:64:07:f6:35:58:7b:c7:04:
                    26:36:30:a9:09:2f:8e:2e:14:0a:6c:5a:5e:36:6a:
                    4f:5f:12:04:42:0b:52:a4:b4:71:63:39:71:a7:8e:
                    59:03:07:e8:cf:6a:61:a1:ac:62:1e:77:25:ec:0f:
                    ab:f2:e6:91:c9:88:4a:1d:17:a2:20:6a:8d:cd:da:
                    3b:b3:11:74:cd:68:cf:20:ac:36:51:c2:7a:0e:b7:
                    b9:cc:f2:27:ad:f7:90:8f:e1:9d:4e:01:cb:86:3e:
                    75:15:b7:46:3e:ed:73:21:e0:b1:8d:35:6d:b0:38:
                    b7:37:0b:df:71:09:b3:7b:3f:e9:91:a2:cb:53:e8:
                    46:ed:de:20:2d:25:62:7a:da:22:f5:dd:27:37:54:
                    a2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:27:30:69:2D:6E:24:11:BC:EE:63:D9:30:EE:13:0C:9A:5D:92:F2
            X509v3 Authority Key Identifier:
                keyid:04:9A:7D:9E:67:45:91:0C:F5:F3:43:5E:31:22:4E:A7:BB:DE:92:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/3231362e39382e3231362e302f32342d3234203d3e20323636323236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.98.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:94:35:67:78:15:b5:7b:7f:31:66:09:b0:d4:d8:46:f0:25:
         e4:7e:68:6d:4c:d5:3f:6f:4d:9e:d0:09:c9:0a:c7:e1:81:20:
         eb:9e:49:ef:4a:e3:9e:17:65:e2:f2:c0:fb:4d:76:30:ec:c3:
         38:65:e8:10:8b:b7:b3:9e:d2:bc:b7:57:29:16:a6:76:94:2f:
         df:7e:2c:d7:6b:b9:32:7e:0a:f7:44:e1:9b:55:2b:f7:37:fc:
         5e:1a:70:34:f9:69:23:8c:ad:82:12:2a:8e:e2:f5:75:a1:13:
         18:8e:1a:5a:48:c1:9a:8d:af:b7:64:46:d9:f7:b5:0b:76:bf:
         eb:50:d2:81:ae:ae:ca:0a:34:c9:77:5e:84:14:fb:00:bb:78:
         de:47:14:80:4b:8d:ba:de:7e:52:4e:52:e9:85:70:d4:de:c0:
         43:0c:31:7e:f9:e9:ae:73:f2:25:4b:b5:88:24:0c:ab:fd:e5:
         64:53:a2:3c:db:45:22:9a:ce:f2:ec:eb:0d:96:26:50:ee:bb:
         87:ad:89:6d:64:64:5c:66:1c:ec:c4:36:8a:06:75:56:46:b4:
         49:05:4a:72:57:d9:bf:a2:69:7f:f7:4b:d1:58:17:f7:6d:74:
         d4:cf:5c:ee:c3:3f:58:5b:75:6c:6a:22:b3:b8:45:f0:70:fa:
         c9:f1:7a:ff
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEx7sxTbuBAMQjQbjoggXloDMOz4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ5QTdEOUU2NzQ1OTEwQ0Y1RjM0MzVFMzEyMjRFQTdC
QkRFOTI4MDAeFw0yNDA0MDQxNDU0NDRaFw0yNTA0MDMxNDU5NDRaMDMxMTAvBgNV
BAMTKENFMjczMDY5MkQ2RTI0MTFCQ0VFNjNEOTMwRUUxMzBDOUE1RDkyRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC88Pt7vPc2B+wn+FR3naoVblkB
M5YxqVTtOy5Hinvf6gB+HLPUsu6OynZIVZXjzWFT5Dz+viEu2pfycs3GYF0m9ifU
cgypuPy3Q0zaU4wSLMMV58VY+1JWXl8P5PtBC/3ufn/ipjoJmt6+zxLcyT5kB/Y1
WHvHBCY2MKkJL44uFApsWl42ak9fEgRCC1KktHFjOXGnjlkDB+jPamGhrGIedyXs
D6vy5pHJiEodF6Igao3N2juzEXTNaM8grDZRwnoOt7nM8iet95CP4Z1OAcuGPnUV
t0Y+7XMh4LGNNW2wOLc3C99xCbN7P+mRostT6Ebt3iAtJWJ62iL13Sc3VKLjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUzicwaS1uJBG87mPZMO4TDJpdkvIwHwYDVR0j
BBgwFoAUBJp9nmdFkQz180NeMSJOp7vekoAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEJrOFhpdUFpekdCeWpnQjI4Vm5FcU5CbmlTc3luN2NNY1QxNXlDSjFy
eWgvMS8wNDlBN0Q5RTY3NDU5MTBDRjVGMzQzNUUzMTIyNEVBN0JCREU5MjgwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0OUE3RDlFNjc0NTkxMENG
NUYzNDM1RTMxMjI0RUE3QkJERTkyODAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhCazhYaXVBaXpHQnlqZ0IyOFZuRXFOQm5pU3N5bjdjTWNUMTV5Q0oxcnloLzEv
MzIzMTM2MmUzOTM4MmUzMjMxMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzMjMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADYYtgwDQYJKoZIhvcNAQELBQADggEBAHSUNWd4
FbV7fzFmCbDU2EbwJeR+aG1M1T9vTZ7QCckKx+GBIOueSe9K454XZeLywPtNdjDs
wzhl6BCLt7Oe0ry3VykWpnaUL99+LNdruTJ+CvdE4ZtVK/c3/F4acDT5aSOMrYIS
Ko7i9XWhExiOGlpIwZqNr7dkRtn3tQt2v+tQ0oGursoKNMl3XoQU+wC7eN5HFIBL
jbreflJOUumFcNTewEMMMX756a5z8iVLtYgkDKv95WRTojzbRSKazvLs6w2WJlDu
u4etiW1kZFxmHOzENooGdVZGtEkFSnJX2b+iaX/3S9FYF/dtdNTPXO7DP1hbdWxq
IrO4RfBw+snxev8=
-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:02 2024 by rpki-client on console-fra.rpki-client.org