Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kjAN1kodZy7qUaSDkEFu9gGZPaDSk65P5VnrL91tmU3/1/3139312e352e3136302e302f32322d3234203d3e20323633353338.roa
File:                     3139312e352e3136302e302f32322d3234203d3e20323633353338.roa (raw, json)
Hash identifier:          yoJLz4xhOtCvEJGjxAklRFyx8zyCBDYblWZt3qmWlxM=
Subject key identifier:   E4:C5:1E:A9:A0:BE:F2:F7:B2:03:D3:CE:F1:05:10:ED:9D:AB:41:1C
Certificate issuer:       /CN=CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D
Certificate serial:       0F5157B78405DBAD70C618AEDE137E6990F7EF17
Authority key identifier: CC:60:DA:1E:F5:FA:BD:27:EA:2D:75:A5:AB:50:36:8E:C3:CC:5C:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kjAN1kodZy7qUaSDkEFu9gGZPaDSk65P5VnrL91tmU3/1/3139312e352e3136302e302f32322d3234203d3e20323633353338.roa
Signing time:             Thu 04 Apr 2024 02:27:48 +0000
ROA not before:           Thu 04 Apr 2024 02:22:48 +0000
ROA not after:            Thu 03 Apr 2025 02:27:48 +0000
asID:                     263538
IP address blocks:        191.5.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kjAN1kodZy7qUaSDkEFu9gGZPaDSk65P5VnrL91tmU3/1/CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D.crl
                          rsync://rpki-repo.registro.br/repo/8kjAN1kodZy7qUaSDkEFu9gGZPaDSk65P5VnrL91tmU3/1/CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:51:57:b7:84:05:db:ad:70:c6:18:ae:de:13:7e:69:90:f7:ef:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D
        Validity
            Not Before: Apr  4 02:22:48 2024 GMT
            Not After : Apr  3 02:27:48 2025 GMT
        Subject: CN=E4C51EA9A0BEF2F7B203D3CEF10510ED9DAB411C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:11:fb:48:d9:06:a1:a4:87:86:f7:41:11:d8:
                    63:42:58:af:32:9e:93:78:8c:b4:46:dc:c8:97:0d:
                    af:21:22:d2:b6:fb:47:af:49:d5:25:d9:75:38:23:
                    0b:45:85:d8:8f:08:f0:78:c7:57:81:50:83:f1:c1:
                    26:6f:81:a6:16:8c:52:79:4f:02:28:db:3e:48:e3:
                    29:bf:01:f1:95:4f:d5:56:00:c1:45:f2:3c:69:45:
                    7e:f4:b2:53:3f:13:a5:20:9f:a7:08:c2:bc:c9:a7:
                    d9:f8:a7:4e:e9:63:77:b6:c8:37:fe:82:d4:7c:59:
                    e1:9b:1a:f9:89:a7:2a:d4:0f:94:ce:4e:a7:31:57:
                    8b:18:40:5a:b6:56:ef:7f:1d:ec:5f:06:67:ff:11:
                    9d:c3:00:06:32:29:d0:6a:f4:81:7e:49:cb:11:3f:
                    ce:83:64:d9:89:c3:9a:de:79:aa:e4:93:e7:21:f4:
                    91:44:82:49:e4:6e:3d:0e:e4:cb:f1:df:2a:b7:02:
                    9c:1a:ff:cd:7c:00:49:8d:32:1e:01:79:c4:97:00:
                    6c:c3:b7:8e:11:31:19:5c:ae:6a:e7:45:77:f4:38:
                    fe:10:2a:e2:fb:25:9c:90:d1:f2:be:22:c5:f3:6f:
                    df:6b:d5:0c:9e:e3:0e:c2:35:24:a5:55:05:41:59:
                    5d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C5:1E:A9:A0:BE:F2:F7:B2:03:D3:CE:F1:05:10:ED:9D:AB:41:1C
            X509v3 Authority Key Identifier:
                keyid:CC:60:DA:1E:F5:FA:BD:27:EA:2D:75:A5:AB:50:36:8E:C3:CC:5C:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kjAN1kodZy7qUaSDkEFu9gGZPaDSk65P5VnrL91tmU3/1/CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC60DA1EF5FABD27EA2D75A5AB50368EC3CC5C4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kjAN1kodZy7qUaSDkEFu9gGZPaDSk65P5VnrL91tmU3/1/3139312e352e3136302e302f32322d3234203d3e20323633353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:0d:3b:02:0d:96:3c:e4:13:d7:ce:bc:c5:db:09:85:d3:d6:
         39:f0:e0:31:4b:1e:dd:55:8d:53:41:cc:1b:3e:17:27:a5:80:
         f2:4c:6b:4e:2c:0b:41:51:44:42:9f:45:a6:86:90:5d:f7:44:
         e5:29:d5:4a:f0:eb:ab:0a:7d:e2:52:12:0e:e8:59:d8:c2:30:
         3c:05:d5:ef:07:7e:52:8d:a7:f3:e3:c9:64:ed:6f:04:f5:bc:
         6e:10:13:63:ac:27:d4:dd:c1:58:b5:94:ae:84:00:80:3c:73:
         74:a0:ec:b7:7c:b1:8a:a2:50:8d:b6:a0:c3:e6:71:a9:81:b5:
         1b:5a:9d:0d:3e:81:77:58:f4:5f:be:f4:ac:07:f8:37:93:b5:
         dc:26:b5:8c:56:d4:22:e3:57:5d:84:4f:00:18:33:da:2f:ee:
         2c:43:2c:81:3d:ae:c2:14:d9:19:0b:b1:85:39:ee:5c:7c:bc:
         46:28:64:b3:52:23:6b:13:53:dc:cc:cf:aa:69:b7:01:cc:6f:
         b4:78:91:04:f7:1d:ce:79:ce:ae:fb:11:44:50:03:5d:7f:a7:
         0b:f2:9b:f4:05:90:83:0f:ee:b3:93:45:1c:5f:93:84:9c:24:
         7f:02:32:e6:30:85:5c:e3:ba:fa:04:d8:08:37:28:3c:15:22:
         ec:62:61:c2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUD1FXt4QF261wxhiu3hN+aZD37xcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0M2MERBMUVGNUZBQkQyN0VBMkQ3NUE1QUI1MDM2OEVD
M0NDNUM0RDAeFw0yNDA0MDQwMjIyNDhaFw0yNTA0MDMwMjI3NDhaMDMxMTAvBgNV
BAMTKEU0QzUxRUE5QTBCRUYyRjdCMjAzRDNDRUYxMDUxMEVEOURBQjQxMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/EftI2QahpIeG90ER2GNCWK8y
npN4jLRG3MiXDa8hItK2+0evSdUl2XU4IwtFhdiPCPB4x1eBUIPxwSZvgaYWjFJ5
TwIo2z5I4ym/AfGVT9VWAMFF8jxpRX70slM/E6Ugn6cIwrzJp9n4p07pY3e2yDf+
gtR8WeGbGvmJpyrUD5TOTqcxV4sYQFq2Vu9/HexfBmf/EZ3DAAYyKdBq9IF+ScsR
P86DZNmJw5reearkk+ch9JFEgknkbj0O5Mvx3yq3Apwa/818AEmNMh4BecSXAGzD
t44RMRlcrmrnRXf0OP4QKuL7JZyQ0fK+IsXzb99r1Qye4w7CNSSlVQVBWV0tAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU5MUeqaC+8veyA9PO8QUQ7Z2rQRwwHwYDVR0j
BBgwFoAUzGDaHvX6vSfqLXWlq1A2jsPMXE0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtqQU4xa29kWnk3cVVhU0RrRUZ1OWdHWlBhRFNrNjVQNVZuckw5MXRt
VTMvMS9DQzYwREExRUY1RkFCRDI3RUEyRDc1QTVBQjUwMzY4RUMzQ0M1QzRELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDNjBEQTFFRjVGQUJEMjdF
QTJENzVBNUFCNTAzNjhFQzNDQzVDNEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrakFOMWtvZFp5N3FVYVNEa0VGdTlnR1pQYURTazY1UDVWbnJMOTF0bVUzLzEv
MzEzOTMxMmUzNTJlMzEzNjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMz
MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCvwWgMA0GCSqGSIb3DQEBCwUAA4IBAQBSDTsCDZY8
5BPXzrzF2wmF09Y58OAxSx7dVY1TQcwbPhcnpYDyTGtOLAtBUURCn0WmhpBd90Tl
KdVK8OurCn3iUhIO6FnYwjA8BdXvB35Sjafz48lk7W8E9bxuEBNjrCfU3cFYtZSu
hACAPHN0oOy3fLGKolCNtqDD5nGpgbUbWp0NPoF3WPRfvvSsB/g3k7XcJrWMVtQi
41ddhE8AGDPaL+4sQyyBPa7CFNkZC7GFOe5cfLxGKGSzUiNrE1PczM+qabcBzG+0
eJEE9x3Oec6u+xFEUANdf6cL8pv0BZCDD+6zk0UcX5OEnCR/AjLmMIVc47r6BNgI
Nyg8FSLsYmHC
-----END CERTIFICATE-----
Generated at Sat Sep 28 08:18:34 2024 by rpki-client on console-ams.rpki-client.org