Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8KsayBfyizchxPtUX4uHaTqmip7ygL91Jaxv9Pw9KKZE/0/3230312e372e3138382e302f32342d3234203d3e203238363034.roa
File:                     3230312e372e3138382e302f32342d3234203d3e203238363034.roa (raw, json)
Hash identifier:          +qoc7rrVvMRaaZngcL0H3bQ/ikTzWOhMrMiQa/0nscA=
Subject key identifier:   6F:6C:B4:54:B2:EF:05:AB:42:92:02:37:C1:48:BE:86:93:E1:94:DB
Certificate issuer:       /CN=2ABA0459E992F662FCFC3A1DA24387258CF36F21
Certificate serial:       7CC848B0F8F8C230551E4E01E226A4BDC09A8D9F
Authority key identifier: 2A:BA:04:59:E9:92:F6:62:FC:FC:3A:1D:A2:43:87:25:8C:F3:6F:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ABA0459E992F662FCFC3A1DA24387258CF36F21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8KsayBfyizchxPtUX4uHaTqmip7ygL91Jaxv9Pw9KKZE/0/3230312e372e3138382e302f32342d3234203d3e203238363034.roa
Signing time:             Tue 03 Sep 2024 19:22:48 +0000
ROA not before:           Tue 03 Sep 2024 19:17:48 +0000
ROA not after:            Tue 02 Sep 2025 19:22:48 +0000
asID:                     28604
IP address blocks:        201.7.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8KsayBfyizchxPtUX4uHaTqmip7ygL91Jaxv9Pw9KKZE/0/2ABA0459E992F662FCFC3A1DA24387258CF36F21.crl
                          rsync://rpki-repo.registro.br/repo/8KsayBfyizchxPtUX4uHaTqmip7ygL91Jaxv9Pw9KKZE/0/2ABA0459E992F662FCFC3A1DA24387258CF36F21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ABA0459E992F662FCFC3A1DA24387258CF36F21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 15:19:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c8:48:b0:f8:f8:c2:30:55:1e:4e:01:e2:26:a4:bd:c0:9a:8d:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ABA0459E992F662FCFC3A1DA24387258CF36F21
        Validity
            Not Before: Sep  3 19:17:48 2024 GMT
            Not After : Sep  2 19:22:48 2025 GMT
        Subject: CN=6F6CB454B2EF05AB42920237C148BE8693E194DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9e:09:c0:72:6c:25:29:c3:f8:bd:c8:34:fa:
                    ad:a5:68:81:2a:72:3a:3d:02:4d:b8:c0:36:24:c9:
                    e6:4d:1d:60:fc:70:2a:4a:dc:44:ca:95:33:25:6c:
                    a0:dc:f3:02:33:01:09:7e:e4:dc:47:f2:50:bc:3a:
                    75:10:d2:e3:9a:11:a0:25:d5:7a:b1:1f:ce:e7:f1:
                    28:4c:0b:88:12:c9:4b:fa:36:52:68:93:f4:e7:72:
                    b2:21:e5:f9:7c:5d:d2:c2:be:5c:27:e6:e1:0d:57:
                    4f:a1:67:25:25:71:55:bd:47:c7:98:93:fc:cd:51:
                    7e:6d:14:ea:b9:11:b6:5d:dc:0f:d5:a0:9b:f2:6b:
                    7a:41:30:8a:ad:b0:53:35:75:ae:14:b8:77:ef:69:
                    53:6e:7f:ee:cd:29:7c:a2:75:92:44:02:de:56:03:
                    de:c9:d6:69:0e:e0:f0:88:67:e0:dd:fd:ee:7c:c2:
                    5c:82:e3:2f:44:22:6d:2a:66:03:3e:42:61:22:9e:
                    d8:0c:96:1c:50:9f:d3:e4:6c:7a:64:0e:1a:ce:de:
                    35:f3:47:4d:b4:f3:0a:c4:26:b1:29:c5:b7:e2:ac:
                    51:4c:cd:ad:aa:15:c0:3c:12:18:23:3e:88:02:d6:
                    ff:1e:a4:fd:46:bc:37:f0:e3:91:db:ed:38:e7:89:
                    ca:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:6C:B4:54:B2:EF:05:AB:42:92:02:37:C1:48:BE:86:93:E1:94:DB
            X509v3 Authority Key Identifier:
                keyid:2A:BA:04:59:E9:92:F6:62:FC:FC:3A:1D:A2:43:87:25:8C:F3:6F:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8KsayBfyizchxPtUX4uHaTqmip7ygL91Jaxv9Pw9KKZE/0/2ABA0459E992F662FCFC3A1DA24387258CF36F21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ABA0459E992F662FCFC3A1DA24387258CF36F21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8KsayBfyizchxPtUX4uHaTqmip7ygL91Jaxv9Pw9KKZE/0/3230312e372e3138382e302f32342d3234203d3e203238363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.7.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:4c:d2:f0:b3:49:4d:1d:f9:fe:65:18:7a:0d:38:e2:62:69:
         ce:d0:23:72:be:8b:0f:eb:7f:f6:e2:85:ea:eb:79:77:ae:7f:
         99:aa:1d:58:14:71:bd:79:d6:8e:66:d2:0f:ae:b0:d2:f8:c4:
         88:77:58:48:53:13:cf:3a:8e:0d:97:af:e3:e5:6d:ae:89:ab:
         ac:40:b5:4b:c2:d7:a1:06:6b:ef:d5:d9:4f:40:3b:8f:00:0d:
         0f:89:92:2c:2f:d5:f3:48:b2:4a:f0:b8:53:b7:2e:9b:a7:32:
         86:8a:95:96:ed:a9:2a:e1:be:23:4a:ed:fe:2c:8c:2f:a6:3a:
         fc:55:42:43:d1:8e:c6:da:21:12:0f:7f:37:96:a9:ce:97:6f:
         9d:7f:68:74:f5:46:2e:5d:e4:10:c4:4b:3d:ab:4f:04:9c:54:
         3e:d6:ce:29:6f:f9:29:4c:d5:5f:47:dd:34:e7:ec:b5:ee:77:
         14:72:be:48:91:df:c7:ee:40:78:0b:4e:e0:55:1c:88:8c:38:
         e7:7d:c7:af:e4:89:c1:91:9d:a5:88:86:7d:b6:53:19:8d:78:
         52:8b:7d:a0:74:bf:b2:29:80:4c:80:b4:39:86:e7:7d:e4:31:
         31:ac:98:c4:a4:db:71:c8:fa:55:34:7b:99:be:19:fc:73:7d:
         03:2c:75:de
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUfMhIsPj4wjBVHk4B4iakvcCajZ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkFCQTA0NTlFOTkyRjY2MkZDRkMzQTFEQTI0Mzg3MjU4
Q0YzNkYyMTAeFw0yNDA5MDMxOTE3NDhaFw0yNTA5MDIxOTIyNDhaMDMxMTAvBgNV
BAMTKDZGNkNCNDU0QjJFRjA1QUI0MjkyMDIzN0MxNDhCRTg2OTNFMTk0REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPngnAcmwlKcP4vcg0+q2laIEq
cjo9Ak24wDYkyeZNHWD8cCpK3ETKlTMlbKDc8wIzAQl+5NxH8lC8OnUQ0uOaEaAl
1XqxH87n8ShMC4gSyUv6NlJok/TncrIh5fl8XdLCvlwn5uENV0+hZyUlcVW9R8eY
k/zNUX5tFOq5EbZd3A/VoJvya3pBMIqtsFM1da4UuHfvaVNuf+7NKXyidZJEAt5W
A97J1mkO4PCIZ+Dd/e58wlyC4y9EIm0qZgM+QmEintgMlhxQn9PkbHpkDhrO3jXz
R0208wrEJrEpxbfirFFMza2qFcA8EhgjPogC1v8epP1GvDfw45Hb7TjnicoXAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUb2y0VLLvBatCkgI3wUi+hpPhlNswHwYDVR0j
BBgwFoAUKroEWemS9mL8/DodokOHJYzzbyEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEtzYXlCZnlpemNoeFB0VVg0dUhhVHFtaXA3eWdMOTFKYXh2OVB3OUtL
WkUvMC8yQUJBMDQ1OUU5OTJGNjYyRkNGQzNBMURBMjQzODcyNThDRjM2RjIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBQkEwNDU5RTk5MkY2NjJG
Q0ZDM0ExREEyNDM4NzI1OENGMzZGMjEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhLc2F5QmZ5aXpjaHhQdFVYNHVIYVRxbWlwN3lnTDkxSmF4djlQdzlLS1pFLzAv
MzIzMDMxMmUzNzJlMzEzODM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODM2
MzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAMkHvDANBgkqhkiG9w0BAQsFAAOCAQEAEEzS8LNJTR35
/mUYeg044mJpztAjcr6LD+t/9uKF6ut5d65/maodWBRxvXnWjmbSD66w0vjEiHdY
SFMTzzqODZev4+VtromrrEC1S8LXoQZr79XZT0A7jwAND4mSLC/V80iySvC4U7cu
m6cyhoqVlu2pKuG+I0rt/iyML6Y6/FVCQ9GOxtohEg9/N5apzpdvnX9odPVGLl3k
EMRLPatPBJxUPtbOKW/5KUzVX0fdNOfste53FHK+SJHfx+5AeAtO4FUciIw4533H
r+SJwZGdpYiGfbZTGY14Uot9oHS/simATIC0OYbnfeQxMayYxKTbccj6VTR7mb4Z
/HN9Ayx13g==
-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:21 2024 by rpki-client on console-fra.rpki-client.org