Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/3139312e33372e3133392e302f32342d3234203d3e20323633333630.roa
File:                     3139312e33372e3133392e302f32342d3234203d3e20323633333630.roa (raw, json)
Hash identifier:          1ZnhM1VBhD2mangEegytp1dvQwJSkeO6KvG6LtIT3A4=
Subject key identifier:   6B:99:04:71:FE:91:7D:8A:8B:32:0D:95:DE:23:00:D3:F1:C6:3A:83
Certificate issuer:       /CN=A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739
Certificate serial:       067194B4B6CD1AF426C5D9316E579FCA18E90C03
Authority key identifier: A5:B9:54:E5:2C:A1:BB:ED:8E:8A:DF:B0:02:AA:37:9A:BF:8B:37:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/3139312e33372e3133392e302f32342d3234203d3e20323633333630.roa
Signing time:             Thu 04 Apr 2024 02:25:07 +0000
ROA not before:           Thu 04 Apr 2024 02:20:07 +0000
ROA not after:            Thu 03 Apr 2025 02:25:07 +0000
asID:                     263360
IP address blocks:        191.37.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739.crl
                          rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:71:94:b4:b6:cd:1a:f4:26:c5:d9:31:6e:57:9f:ca:18:e9:0c:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739
        Validity
            Not Before: Apr  4 02:20:07 2024 GMT
            Not After : Apr  3 02:25:07 2025 GMT
        Subject: CN=6B990471FE917D8A8B320D95DE2300D3F1C63A83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2e:89:af:1c:3d:3d:bd:38:4f:f9:63:0a:7a:
                    81:63:31:e2:de:43:f5:c4:15:2d:cc:39:ef:c7:70:
                    56:46:cd:d6:e9:67:9f:80:3d:53:ee:c1:5d:af:80:
                    6f:0e:72:8d:6d:c9:e2:fc:6b:af:04:8a:32:02:50:
                    b9:2c:fa:bb:a0:7b:54:6a:04:9a:19:f8:e4:4f:08:
                    c7:1e:fe:b3:c5:b0:cd:92:13:13:f4:58:c6:cb:03:
                    3d:a8:dc:a0:ef:7f:39:25:d2:cd:65:31:ea:88:e6:
                    2b:41:65:67:0d:cd:15:ac:ad:c9:3c:4a:64:9a:6c:
                    ad:ba:6c:3d:d4:94:05:02:a3:14:19:52:5a:95:31:
                    5e:80:ee:a3:36:b5:3b:e6:81:a8:a6:10:ea:09:26:
                    ff:4a:ed:5b:83:19:8f:be:4b:f6:46:46:8a:fe:46:
                    64:e1:12:02:a2:df:f4:2f:d2:b4:92:56:b2:a8:31:
                    cd:88:39:ea:7d:e4:29:a1:18:2d:d8:9a:18:0a:e6:
                    6c:da:e3:b3:07:91:13:c9:b3:e8:80:97:fb:f2:27:
                    a5:18:96:bd:cc:a2:e5:db:f9:5a:f5:d5:2b:02:98:
                    58:e9:94:d4:11:58:4f:86:87:4d:a5:6b:2e:a8:2d:
                    30:6e:54:dc:d1:25:07:c2:bc:67:67:e0:b0:77:57:
                    f3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:99:04:71:FE:91:7D:8A:8B:32:0D:95:DE:23:00:D3:F1:C6:3A:83
            X509v3 Authority Key Identifier:
                keyid:A5:B9:54:E5:2C:A1:BB:ED:8E:8A:DF:B0:02:AA:37:9A:BF:8B:37:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/3139312e33372e3133392e302f32342d3234203d3e20323633333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:19:2e:a9:81:39:d9:39:35:ec:e4:8e:ac:3e:5d:59:e5:5f:
         bd:e6:38:81:5b:b8:e4:91:7c:47:4f:e7:f9:fd:12:ab:87:31:
         a0:d2:c8:75:b7:42:38:78:12:98:8b:32:76:8e:6f:d1:f7:19:
         8b:a7:7e:e6:65:43:1a:c0:ed:aa:24:40:62:5f:a8:9f:bd:52:
         11:62:2e:51:33:7f:51:b5:f8:13:07:d2:35:c9:af:e2:aa:23:
         8e:45:e7:41:e8:34:5a:45:ad:71:dc:26:9d:d6:81:c8:03:94:
         06:77:9d:45:41:a6:34:e9:f0:f4:1a:1b:98:9a:d5:43:42:7a:
         61:06:28:92:ef:ed:d6:c9:a2:88:b1:d1:8c:3a:0f:fc:a3:8b:
         a8:8b:b2:f7:a4:75:6a:53:1f:02:07:19:f1:90:68:de:a9:88:
         6c:2b:a6:e3:d8:75:d3:a1:45:54:92:34:61:b7:2c:24:47:a7:
         a7:1d:4e:62:b2:81:e3:b5:f0:d5:6a:46:27:63:b3:19:15:69:
         ea:4d:5b:2f:42:2c:5a:78:43:78:76:e1:a6:b3:f7:12:8e:bf:
         3a:ad:a1:7b:4e:0a:ba:cf:7d:31:4c:2f:fa:6b:30:c2:82:12:
         d2:35:54:fc:7b:a2:b9:e3:9b:2d:90:25:c1:8c:b6:8a:22:75:
         81:de:0d:98
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBnGUtLbNGvQmxdkxblefyhjpDAMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTVCOTU0RTUyQ0ExQkJFRDhFOEFERkIwMDJBQTM3OUFC
RjhCMzczOTAeFw0yNDA0MDQwMjIwMDdaFw0yNTA0MDMwMjI1MDdaMDMxMTAvBgNV
BAMTKDZCOTkwNDcxRkU5MTdEOEE4QjMyMEQ5NURFMjMwMEQzRjFDNjNBODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQLomvHD09vThP+WMKeoFjMeLe
Q/XEFS3MOe/HcFZGzdbpZ5+APVPuwV2vgG8Oco1tyeL8a68EijICULks+ruge1Rq
BJoZ+ORPCMce/rPFsM2SExP0WMbLAz2o3KDvfzkl0s1lMeqI5itBZWcNzRWsrck8
SmSabK26bD3UlAUCoxQZUlqVMV6A7qM2tTvmgaimEOoJJv9K7VuDGY++S/ZGRor+
RmThEgKi3/Qv0rSSVrKoMc2IOep95CmhGC3YmhgK5mza47MHkRPJs+iAl/vyJ6UY
lr3MouXb+Vr11SsCmFjplNQRWE+Gh02lay6oLTBuVNzRJQfCvGdn4LB3V/M3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUa5kEcf6RfYqLMg2V3iMA0/HGOoMwHwYDVR0j
BBgwFoAUpblU5Syhu+2Oit+wAqo3mr+LNzkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHBKM296eFpIZ1R0V3RYTUpZRUZoOTVmRjd0enAxU0RHdWkyS2FETWhm
RXkvMS9BNUI5NTRFNTJDQTFCQkVEOEU4QURGQjAwMkFBMzc5QUJGOEIzNzM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1Qjk1NEU1MkNBMUJCRUQ4
RThBREZCMDAyQUEzNzlBQkY4QjM3MzkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhwSjNvenhaSGdUdFd0WE1KWUVGaDk1ZkY3dHpwMVNER3VpMkthRE1oZkV5LzEv
MzEzOTMxMmUzMzM3MmUzMTMzMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMzM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC/JYswDQYJKoZIhvcNAQELBQADggEBAJ0ZLqmB
Odk5Nezkjqw+XVnlX73mOIFbuOSRfEdP5/n9EquHMaDSyHW3Qjh4EpiLMnaOb9H3
GYunfuZlQxrA7aokQGJfqJ+9UhFiLlEzf1G1+BMH0jXJr+KqI45F50HoNFpFrXHc
Jp3WgcgDlAZ3nUVBpjTp8PQaG5ia1UNCemEGKJLv7dbJooix0Yw6D/yji6iLsvek
dWpTHwIHGfGQaN6piGwrpuPYddOhRVSSNGG3LCRHp6cdTmKygeO18NVqRidjsxkV
aepNWy9CLFp4Q3h24aaz9xKOvzqtoXtOCrrPfTFML/prMMKCEtI1VPx7ornjmy2Q
JcGMtooidYHeDZg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:33 2024 by rpki-client on console-fra.rpki-client.org