Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3139312e3234322e3132382e302f31392d3234203d3e203238363637.roa
File:                     3139312e3234322e3132382e302f31392d3234203d3e203238363637.roa (raw, json)
Hash identifier:          iqIcmB1CnQsMlJH3ogz/ocl2kbD0mmtk36ZAWzLvGhc=
Subject key identifier:   F3:4B:A0:1F:E8:25:17:57:E2:4D:64:C1:37:1C:1E:23:21:6C:33:E5
Certificate issuer:       /CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
Certificate serial:       3AEA2E73D719E2D0C4CE82876ED6F9E4F81F01C5
Authority key identifier: BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3139312e3234322e3132382e302f31392d3234203d3e203238363637.roa
Signing time:             Mon 25 Nov 2024 17:03:55 +0000
ROA not before:           Mon 25 Nov 2024 16:58:55 +0000
ROA not after:            Mon 24 Nov 2025 17:03:55 +0000
asID:                     28667
IP address blocks:        191.242.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl
                          rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ea:2e:73:d7:19:e2:d0:c4:ce:82:87:6e:d6:f9:e4:f8:1f:01:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA413927001E29F4D18A0C0FCE1C467924EA1B6B
        Validity
            Not Before: Nov 25 16:58:55 2024 GMT
            Not After : Nov 24 17:03:55 2025 GMT
        Subject: CN=F34BA01FE8251757E24D64C1371C1E23216C33E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:26:a5:f6:0b:96:0e:54:09:c4:6d:af:24:ed:
                    91:96:6d:e9:d1:3e:9c:3f:5d:18:dd:14:30:d5:98:
                    7c:51:41:36:7f:09:0d:3d:4f:7e:d6:e9:84:e5:23:
                    6d:f6:1c:09:c0:50:26:30:d4:ea:e9:31:68:93:c7:
                    d0:25:9b:aa:c5:71:50:b7:ac:c0:57:e1:b3:d8:ea:
                    ef:f5:ed:b7:8c:c5:c0:31:38:6b:7d:29:a4:cd:23:
                    62:e7:bb:a0:36:63:80:6b:0e:78:94:59:03:ce:9d:
                    f9:36:a3:aa:3c:5d:9c:6b:ca:4b:1a:90:91:1f:6e:
                    1b:da:69:6c:8e:b8:3f:67:b8:b1:10:c5:fd:96:ed:
                    ec:e2:b0:e9:ac:42:f6:ef:f8:1f:ca:b9:cd:3a:a3:
                    7d:4c:a8:5d:90:46:04:50:23:d3:d4:46:b8:22:dc:
                    80:1d:d3:82:8c:02:66:5e:ec:5f:9e:65:5a:73:1c:
                    8a:04:dd:9f:b2:f7:cd:4e:95:f0:30:c7:30:3a:57:
                    8a:e8:b9:ee:d7:19:eb:bf:5c:bf:d8:69:3f:8d:c6:
                    48:46:2f:97:ef:92:49:03:f3:e9:6a:93:83:14:23:
                    94:64:f2:8a:90:bb:ae:75:0c:43:99:41:bc:f9:4e:
                    bd:8c:f4:3c:66:a2:51:33:9d:31:fd:ab:c1:22:80:
                    01:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:4B:A0:1F:E8:25:17:57:E2:4D:64:C1:37:1C:1E:23:21:6C:33:E5
            X509v3 Authority Key Identifier:
                keyid:BA:41:39:27:00:1E:29:F4:D1:8A:0C:0F:CE:1C:46:79:24:EA:1B:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA413927001E29F4D18A0C0FCE1C467924EA1B6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/3/3139312e3234322e3132382e302f31392d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9f:7e:9e:53:cd:ca:48:be:74:42:54:ab:da:09:9f:c6:dd:d4:
         69:d3:6a:c4:c2:6a:12:64:7e:e0:06:7a:d7:fe:2c:8a:92:91:
         39:9a:f5:d9:80:9c:a1:04:60:31:2e:0d:75:55:7f:19:e6:18:
         30:55:d2:f6:66:d3:3a:8f:15:2c:93:a0:a3:6d:ad:7d:0e:75:
         d0:bf:84:4d:e8:1b:3a:02:76:53:f8:4a:76:3e:e0:15:62:ab:
         cd:50:18:b8:0c:e6:b0:5b:26:c9:d9:20:f7:45:6d:80:dc:2d:
         19:da:59:72:36:aa:54:af:95:d9:2f:cd:aa:b1:ef:82:3c:e8:
         12:90:23:e6:32:f4:85:09:ed:3d:ce:68:74:19:ec:e4:ed:9b:
         f1:cc:07:35:02:52:48:40:07:27:5b:9c:3b:03:3b:06:0b:5e:
         8c:a8:66:c8:99:35:cb:9b:b4:72:83:65:ce:2c:fc:73:8e:e5:
         a0:fe:5e:6a:f4:ff:cd:16:ce:5b:bc:c7:f6:cc:cf:8d:ba:79:
         9f:41:18:89:d8:6f:2c:42:de:f5:9d:84:d8:8d:e9:77:75:7e:
         be:48:f9:9e:5e:98:d1:8b:47:17:a9:fe:e7:85:cb:67:2e:7b:
         d6:8b:c1:e5:d8:cb:85:86:07:79:0d:03:88:93:d5:0e:c3:a1:
         0e:1a:7b:71
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOuouc9cZ4tDEzoKHbtb55PgfAcUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkE0MTM5MjcwMDFFMjlGNEQxOEEwQzBGQ0UxQzQ2Nzky
NEVBMUI2QjAeFw0yNDExMjUxNjU4NTVaFw0yNTExMjQxNzAzNTVaMDMxMTAvBgNV
BAMTKEYzNEJBMDFGRTgyNTE3NTdFMjRENjRDMTM3MUMxRTIzMjE2QzMzRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdJqX2C5YOVAnEba8k7ZGWbenR
Ppw/XRjdFDDVmHxRQTZ/CQ09T37W6YTlI232HAnAUCYw1OrpMWiTx9Alm6rFcVC3
rMBX4bPY6u/17beMxcAxOGt9KaTNI2Lnu6A2Y4BrDniUWQPOnfk2o6o8XZxryksa
kJEfbhvaaWyOuD9nuLEQxf2W7ezisOmsQvbv+B/Kuc06o31MqF2QRgRQI9PURrgi
3IAd04KMAmZe7F+eZVpzHIoE3Z+y981OlfAwxzA6V4roue7XGeu/XL/YaT+NxkhG
L5fvkkkD8+lqk4MUI5Rk8oqQu651DEOZQbz5Tr2M9DxmolEznTH9q8EigAFxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU80ugH+glF1fiTWTBNxweIyFsM+UwHwYDVR0j
BBgwFoAUukE5JwAeKfTRigwPzhxGeSTqG2swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHI5OHZaMU5BektKS1FtSEpNQWppcG9NbVlMNmdaYjVSM2doWEdEbWNG
R04vMy9CQTQxMzkyNzAwMUUyOUY0RDE4QTBDMEZDRTFDNDY3OTI0RUExQjZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBNDEzOTI3MDAxRTI5RjRE
MThBMEMwRkNFMUM0Njc5MjRFQTFCNkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhyOTh2WjFOQXpLSktRbUhKTUFqaXBvTW1ZTDZnWmI1UjNnaFhHRG1jRkdOLzMv
MzEzOTMxMmUzMjM0MzIyZTMxMzIzODJlMzAyZjMxMzkyZDMyMzQyMDNkM2UyMDMy
MzgzNjM2Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAW/8oAwDQYJKoZIhvcNAQELBQADggEBAJ9+nlPN
yki+dEJUq9oJn8bd1GnTasTCahJkfuAGetf+LIqSkTma9dmAnKEEYDEuDXVVfxnm
GDBV0vZm0zqPFSyToKNtrX0OddC/hE3oGzoCdlP4SnY+4BViq81QGLgM5rBbJsnZ
IPdFbYDcLRnaWXI2qlSvldkvzaqx74I86BKQI+Yy9IUJ7T3OaHQZ7OTtm/HMBzUC
UkhABydbnDsDOwYLXoyoZsiZNcubtHKDZc4s/HOO5aD+Xmr0/80Wzlu8x/bMz426
eZ9BGInYbyxC3vWdhNiN6Xd1fr5I+Z5emNGLRxep/ueFy2cue9aLweXYy4WGB3kN
A4iT1Q7DoQ4ae3E=
-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:34 2024 by rpki-client on console-ams.rpki-client.org