Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/1/3230312e37312e3139362e302f32322d3234203d3e20323730323933.roa
File:                     3230312e37312e3139362e302f32322d3234203d3e20323730323933.roa (raw, json)
Hash identifier:          YbW4opRAfVdeZFfF3XziyNFZNuBurwHc6L3ufPEH8DY=
Subject key identifier:   C4:93:4A:12:86:B0:8F:53:2E:7F:72:07:8A:3A:EE:84:FE:F4:67:9D
Certificate issuer:       /CN=BAE765972DA3D51F7AB70A1D27716AF50D94C94B
Certificate serial:       638060CD39C2E0385A5EAE2732A9F170BC5AC8C7
Authority key identifier: BA:E7:65:97:2D:A3:D5:1F:7A:B7:0A:1D:27:71:6A:F5:0D:94:C9:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE765972DA3D51F7AB70A1D27716AF50D94C94B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/1/3230312e37312e3139362e302f32322d3234203d3e20323730323933.roa
Signing time:             Thu 04 Apr 2024 17:52:09 +0000
ROA not before:           Thu 04 Apr 2024 17:47:09 +0000
ROA not after:            Thu 03 Apr 2025 17:52:09 +0000
asID:                     270293
IP address blocks:        201.71.196.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/1/BAE765972DA3D51F7AB70A1D27716AF50D94C94B.crl
                          rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/1/BAE765972DA3D51F7AB70A1D27716AF50D94C94B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE765972DA3D51F7AB70A1D27716AF50D94C94B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:39:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:80:60:cd:39:c2:e0:38:5a:5e:ae:27:32:a9:f1:70:bc:5a:c8:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAE765972DA3D51F7AB70A1D27716AF50D94C94B
        Validity
            Not Before: Apr  4 17:47:09 2024 GMT
            Not After : Apr  3 17:52:09 2025 GMT
        Subject: CN=C4934A1286B08F532E7F72078A3AEE84FEF4679D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:79:db:dd:c5:e8:03:2a:cf:ac:13:9d:8b:81:
                    9a:94:89:29:e2:36:54:5a:3c:9b:ad:2f:3e:35:d8:
                    60:3b:c0:83:a6:11:88:68:77:48:ce:c5:40:b0:31:
                    26:c6:c8:4f:7f:4c:70:61:f2:a0:fb:b5:ae:3d:c0:
                    79:e6:08:00:80:b9:a3:9f:d5:a1:9f:ed:6e:a2:8e:
                    d8:7f:8f:eb:e4:77:81:71:ef:45:54:fe:c3:37:2e:
                    ee:78:ef:82:24:61:44:3d:6c:60:65:a0:ab:90:f9:
                    34:1b:cd:b1:6f:b4:47:a1:7a:b3:f2:fc:e6:20:46:
                    27:fe:30:21:89:e7:67:41:60:82:aa:24:d7:a9:ce:
                    a8:94:c7:b0:ae:27:af:94:a6:17:96:9a:c1:58:35:
                    cd:6b:72:4d:c1:f7:84:86:2d:60:ab:00:c4:d7:3c:
                    cc:0a:35:57:21:1a:9a:76:12:b1:b8:39:a0:af:9f:
                    e8:9f:16:4c:7a:81:8c:1c:cc:d7:9b:cf:a8:35:73:
                    f3:eb:b6:89:4e:40:1e:c2:e9:6f:8b:d4:6f:eb:9b:
                    0c:ea:de:8f:43:fa:ba:18:8d:09:b6:0e:cc:b5:3b:
                    e0:39:84:f7:4e:ad:64:c7:93:6f:3c:a6:d5:a6:a7:
                    b3:88:fd:81:26:eb:df:59:5c:f8:2e:0b:74:06:3c:
                    93:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:93:4A:12:86:B0:8F:53:2E:7F:72:07:8A:3A:EE:84:FE:F4:67:9D
            X509v3 Authority Key Identifier:
                keyid:BA:E7:65:97:2D:A3:D5:1F:7A:B7:0A:1D:27:71:6A:F5:0D:94:C9:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/1/BAE765972DA3D51F7AB70A1D27716AF50D94C94B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE765972DA3D51F7AB70A1D27716AF50D94C94B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uLpsbFtPnQMZGNDFYqbHd1kRKKFqoJhLae957tQQtPx/1/3230312e37312e3139362e302f32322d3234203d3e20323730323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:ed:5b:01:50:b3:80:56:09:bb:50:0e:ff:34:3b:79:41:eb:
         72:39:02:a1:dd:70:aa:73:72:9c:92:dc:3f:89:af:ca:ed:62:
         48:61:7c:51:a3:ab:97:9f:e2:0b:93:e3:d1:4c:42:bf:78:3c:
         03:a4:0d:ff:f3:ed:51:9c:5d:52:49:90:6d:b2:bd:df:c5:d7:
         34:80:11:c5:9f:29:f8:f6:2c:c2:67:e8:8f:ab:51:9f:fc:63:
         0a:e6:7c:97:6e:b4:73:e7:e5:01:37:33:f8:22:a0:31:6a:cb:
         37:77:32:c9:1a:21:2a:56:c8:fa:7a:0b:17:2c:b3:d6:87:8e:
         97:3f:e3:db:5e:aa:35:e3:d4:3a:3c:0d:d0:8e:9e:0c:80:5f:
         12:7f:d1:e4:ae:7b:46:a2:e5:7d:b4:d3:fa:24:9c:28:dd:92:
         31:08:7b:06:25:1a:92:41:dd:d8:94:b4:e7:bd:59:ac:f2:de:
         0d:93:3e:b8:2f:81:24:90:7d:0f:dd:32:48:b0:90:ed:58:70:
         0e:e4:2f:24:ae:2b:6f:f2:60:61:1f:e4:2f:6c:b5:3d:7a:94:
         da:a6:f1:1a:9f:37:e9:d6:b8:64:c8:01:42:19:2f:03:bf:ff:
         c9:c0:d7:21:c3:0c:d8:96:96:78:62:0b:86:2a:74:68:2c:2f:
         94:a4:87:be
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUY4BgzTnC4DhaXq4nMqnxcLxayMcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFFNzY1OTcyREEzRDUxRjdBQjcwQTFEMjc3MTZBRjUw
RDk0Qzk0QjAeFw0yNDA0MDQxNzQ3MDlaFw0yNTA0MDMxNzUyMDlaMDMxMTAvBgNV
BAMTKEM0OTM0QTEyODZCMDhGNTMyRTdGNzIwNzhBM0FFRTg0RkVGNDY3OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVedvdxegDKs+sE52LgZqUiSni
NlRaPJutLz412GA7wIOmEYhod0jOxUCwMSbGyE9/THBh8qD7ta49wHnmCACAuaOf
1aGf7W6ijth/j+vkd4Fx70VU/sM3Lu5474IkYUQ9bGBloKuQ+TQbzbFvtEeherPy
/OYgRif+MCGJ52dBYIKqJNepzqiUx7CuJ6+UpheWmsFYNc1rck3B94SGLWCrAMTX
PMwKNVchGpp2ErG4OaCvn+ifFkx6gYwczNebz6g1c/PrtolOQB7C6W+L1G/rmwzq
3o9D+roYjQm2Dsy1O+A5hPdOrWTHk288ptWmp7OI/YEm699ZXPguC3QGPJPBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUxJNKEoawj1Muf3IHijruhP70Z50wHwYDVR0j
BBgwFoAUuudlly2j1R96twodJ3Fq9Q2UyUswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHVMcHNiRnRQblFNWkdOREZZcWJIZDFrUktLRnFvSmhMYWU5NTd0UVF0
UHgvMS9CQUU3NjU5NzJEQTNENTFGN0FCNzBBMUQyNzcxNkFGNTBEOTRDOTRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBRTc2NTk3MkRBM0Q1MUY3
QUI3MEExRDI3NzE2QUY1MEQ5NEM5NEIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh1THBzYkZ0UG5RTVpHTkRGWXFiSGQxa1JLS0Zxb0poTGFlOTU3dFFRdFB4LzEv
MzIzMDMxMmUzNzMxMmUzMTM5MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzAzMjM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALJR8QwDQYJKoZIhvcNAQELBQADggEBAHPtWwFQ
s4BWCbtQDv80O3lB63I5AqHdcKpzcpyS3D+Jr8rtYkhhfFGjq5ef4guT49FMQr94
PAOkDf/z7VGcXVJJkG2yvd/F1zSAEcWfKfj2LMJn6I+rUZ/8YwrmfJdutHPn5QE3
M/gioDFqyzd3MskaISpWyPp6Cxcss9aHjpc/49teqjXj1Do8DdCOngyAXxJ/0eSu
e0ai5X200/oknCjdkjEIewYlGpJB3diUtOe9Wazy3g2TPrgvgSSQfQ/dMkiwkO1Y
cA7kLySuK2/yYGEf5C9stT16lNqm8RqfN+nWuGTIAUIZLwO//8nA1yHDDNiWlnhi
C4YqdGgsL5Skh74=
-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:50 2024 by rpki-client on console-fra.rpki-client.org