Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138392e312e3137362e302f32302d3234203d3e203238363637.roa
File:                     3138392e312e3137362e302f32302d3234203d3e203238363637.roa (raw, json)
Hash identifier:          HWDsQz0MaLk7m95bw3F9dJ3V8i7S5iFxBqSITnzwz+c=
Subject key identifier:   DF:AB:5C:93:4A:CC:E6:76:1C:65:C8:3B:58:8A:BE:76:9A:8C:4B:7B
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       35BA8FCCBD8CA4FDFE63AE79D1FB80674CB45FB3
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138392e312e3137362e302f32302d3234203d3e203238363637.roa
Signing time:             Mon 25 Nov 2024 17:04:07 +0000
ROA not before:           Mon 25 Nov 2024 16:59:07 +0000
ROA not after:            Mon 24 Nov 2025 17:04:07 +0000
asID:                     28667
IP address blocks:        189.1.176.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ba:8f:cc:bd:8c:a4:fd:fe:63:ae:79:d1:fb:80:67:4c:b4:5f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:59:07 2024 GMT
            Not After : Nov 24 17:04:07 2025 GMT
        Subject: CN=DFAB5C934ACCE6761C65C83B588ABE769A8C4B7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1f:c8:44:23:b9:20:f2:1c:23:1e:b9:a2:f5:
                    b5:f2:e9:46:74:33:57:3f:84:d7:8f:fb:b6:aa:0b:
                    62:d2:df:8b:95:c7:3c:6e:58:e6:15:05:47:a4:ad:
                    dd:da:22:1a:2b:3c:8c:2a:f6:1f:76:10:ff:0e:86:
                    21:91:60:4c:c9:07:90:31:77:63:e7:23:fe:85:77:
                    a9:77:03:82:64:20:c4:a3:76:90:4c:49:7f:a5:86:
                    c0:81:3a:fa:c0:50:6d:06:a7:23:18:b4:ec:47:bf:
                    62:3f:d4:4e:e0:53:5b:15:7e:dd:9a:b2:36:e3:25:
                    84:a3:a2:9b:be:6c:38:90:15:df:c4:b8:bb:e8:a2:
                    6c:91:b7:c6:b2:88:3a:d6:0f:7e:00:f8:ef:fc:82:
                    b2:28:94:f6:41:a3:29:0d:24:35:fd:27:e2:7b:38:
                    0f:bf:9c:72:87:e9:17:ae:61:21:44:ad:84:4c:ca:
                    87:e0:46:17:66:11:06:32:e6:75:b0:90:1e:08:dd:
                    a9:4d:ab:e7:28:a6:8f:97:2a:ce:8d:6f:5e:89:d0:
                    57:58:37:0b:c8:eb:15:73:95:38:2b:9e:f7:25:9d:
                    78:bc:5c:26:c8:fe:42:f4:68:c4:fe:5d:b8:20:e2:
                    98:e4:95:52:75:00:fa:9c:9f:6e:a1:de:c5:df:fe:
                    0a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:AB:5C:93:4A:CC:E6:76:1C:65:C8:3B:58:8A:BE:76:9A:8C:4B:7B
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3138392e312e3137362e302f32302d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.1.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         77:51:92:a9:f1:b3:ed:18:c2:ef:52:d9:e6:63:a5:d9:90:0f:
         7e:4f:4f:e2:d4:b6:09:e3:9f:6f:89:64:52:53:20:df:17:cc:
         d0:43:3b:be:4b:47:00:79:0c:fd:5d:43:36:1b:72:e6:ed:e1:
         b1:7c:cc:b2:f9:70:9b:a7:39:2b:61:34:c8:25:98:55:66:45:
         ab:2d:c0:59:ae:b9:64:ab:6e:24:d0:36:ef:58:17:75:21:9b:
         ce:68:6f:48:7d:53:5b:46:9a:b1:0a:62:b9:8d:00:76:40:59:
         78:ea:bb:8f:2d:30:1f:09:39:18:93:79:43:b9:f4:bd:7f:96:
         5d:0c:4b:38:ef:e7:b0:69:7b:ea:58:31:f0:dd:4d:f3:04:58:
         e0:d6:0f:c6:37:63:7c:14:d2:d2:19:be:66:7d:44:94:00:08:
         83:df:02:26:cf:91:fc:10:d5:9b:19:1a:b4:39:10:1f:b2:43:
         2d:ef:ce:29:5b:08:90:3e:40:24:80:88:82:37:48:24:8a:8e:
         8d:ce:23:77:9a:20:c7:62:c3:85:3c:cc:13:ea:c9:12:45:3d:
         d5:de:4d:c3:4d:cd:27:ef:a6:05:d5:3e:83:42:f5:10:65:9c:
         d2:a4:3f:1f:76:80:2d:90:9f:83:2a:0c:8a:8a:13:cc:30:16:
         4c:3e:84:aa
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUNbqPzL2MpP3+Y6550fuAZ0y0X7MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkE0MTM5MjcwMDFFMjlGNEQxOEEwQzBGQ0UxQzQ2Nzky
NEVBMUI2QjAeFw0yNDExMjUxNjU5MDdaFw0yNTExMjQxNzA0MDdaMDMxMTAvBgNV
BAMTKERGQUI1QzkzNEFDQ0U2NzYxQzY1QzgzQjU4OEFCRTc2OUE4QzRCN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbH8hEI7kg8hwjHrmi9bXy6UZ0
M1c/hNeP+7aqC2LS34uVxzxuWOYVBUekrd3aIhorPIwq9h92EP8OhiGRYEzJB5Ax
d2PnI/6Fd6l3A4JkIMSjdpBMSX+lhsCBOvrAUG0GpyMYtOxHv2I/1E7gU1sVft2a
sjbjJYSjopu+bDiQFd/EuLvoomyRt8ayiDrWD34A+O/8grIolPZBoykNJDX9J+J7
OA+/nHKH6ReuYSFErYRMyofgRhdmEQYy5nWwkB4I3alNq+copo+XKs6Nb16J0FdY
NwvI6xVzlTgrnvclnXi8XCbI/kL0aMT+Xbgg4pjklVJ1APqcn26h3sXf/gqhAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU36tck0rM5nYcZcg7WIq+dpqMS3swHwYDVR0j
BBgwFoAUukE5JwAeKfTRigwPzhxGeSTqG2swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHI5OHZaMU5BektKS1FtSEpNQWppcG9NbVlMNmdaYjVSM2doWEdEbWNG
R04vMy9CQTQxMzkyNzAwMUUyOUY0RDE4QTBDMEZDRTFDNDY3OTI0RUExQjZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBNDEzOTI3MDAxRTI5RjRE
MThBMEMwRkNFMUM0Njc5MjRFQTFCNkIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhyOTh2WjFOQXpLSktRbUhKTUFqaXBvTW1ZTDZnWmI1UjNnaFhHRG1jRkdOLzMv
MzEzODM5MmUzMTJlMzEzNzM2MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzODM2
MzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBL0BsDANBgkqhkiG9w0BAQsFAAOCAQEAd1GSqfGz7RjC
71LZ5mOl2ZAPfk9P4tS2CeOfb4lkUlMg3xfM0EM7vktHAHkM/V1DNhty5u3hsXzM
svlwm6c5K2E0yCWYVWZFqy3AWa65ZKtuJNA271gXdSGbzmhvSH1TW0aasQpiuY0A
dkBZeOq7jy0wHwk5GJN5Q7n0vX+WXQxLOO/nsGl76lgx8N1N8wRY4NYPxjdjfBTS
0hm+Zn1ElAAIg98CJs+R/BDVmxkatDkQH7JDLe/OKVsIkD5AJICIgjdIJIqOjc4j
d5ogx2LDhTzME+rJEkU91d5Nw03NJ++mBdU+g0L1EGWc0qQ/H3aALZCfgyoMiooT
zDAWTD6Eqg==
-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:40 2024 by rpki-client on console-fra.rpki-client.org