Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/3133312e3130302e3134342e302f32322d3234203d3e20323634333831.roa
File:                     3133312e3130302e3134342e302f32322d3234203d3e20323634333831.roa (raw, json)
Hash identifier:          7K5koXP2lkTQwGQIx6ATyC6S8FPXctdA7jtAduODiy0=
Subject key identifier:   94:73:6F:23:D4:E8:3C:71:EE:34:BD:83:4F:54:57:71:29:C4:16:1C
Certificate issuer:       /CN=91C18D88BD49D07FD42CF259DD3F33070A6BE869
Certificate serial:       3F02B836A9FAE7C1EFE9E65540168798CB187455
Authority key identifier: 91:C1:8D:88:BD:49:D0:7F:D4:2C:F2:59:DD:3F:33:07:0A:6B:E8:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/3133312e3130302e3134342e302f32322d3234203d3e20323634333831.roa
Signing time:             Thu 04 Apr 2024 13:30:55 +0000
ROA not before:           Thu 04 Apr 2024 13:25:55 +0000
ROA not after:            Thu 03 Apr 2025 13:30:55 +0000
asID:                     264381
IP address blocks:        131.100.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.crl
                          rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:42:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:02:b8:36:a9:fa:e7:c1:ef:e9:e6:55:40:16:87:98:cb:18:74:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C18D88BD49D07FD42CF259DD3F33070A6BE869
        Validity
            Not Before: Apr  4 13:25:55 2024 GMT
            Not After : Apr  3 13:30:55 2025 GMT
        Subject: CN=94736F23D4E83C71EE34BD834F54577129C4161C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:18:92:09:b4:ac:52:66:16:3b:fb:5f:25:67:
                    ad:4d:71:62:18:29:8b:3f:34:40:40:97:ea:01:11:
                    3b:1e:68:85:2c:9e:ec:f8:ab:31:c2:6b:e1:20:07:
                    aa:bb:43:b7:f8:0e:d7:08:8a:cb:54:aa:5c:2b:fe:
                    eb:ee:14:ce:88:91:21:5e:b7:53:81:45:07:d6:1d:
                    eb:fa:0a:96:f2:3f:c9:b9:4f:bb:1e:9f:fc:d4:a6:
                    a6:2e:61:39:8e:c5:f2:35:f1:c1:af:de:fa:3c:fb:
                    72:d2:2c:35:2b:e6:8a:d7:30:05:7a:14:da:4e:22:
                    42:bc:05:3e:f6:4c:58:11:66:b8:5f:88:bd:af:cb:
                    9e:ec:aa:3f:d1:8d:ab:56:e1:ce:af:2f:bd:25:08:
                    b2:68:e2:ac:cd:82:a9:6d:3e:63:46:69:ca:97:ce:
                    e3:3d:0a:52:fa:e6:02:04:46:79:ab:eb:34:cc:e5:
                    4f:bf:c1:1c:37:fd:a6:c6:a4:e7:2e:8f:5c:be:50:
                    40:de:9f:21:da:38:1d:8c:4c:06:a0:df:84:1a:9a:
                    49:43:76:b2:4e:cf:71:e6:e8:f2:9b:21:ae:23:74:
                    b3:a6:1a:c7:da:b4:8d:95:11:fc:9d:ab:19:d8:35:
                    86:91:8e:8d:fb:ec:79:c2:cd:bc:56:28:b0:de:be:
                    0f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:73:6F:23:D4:E8:3C:71:EE:34:BD:83:4F:54:57:71:29:C4:16:1C
            X509v3 Authority Key Identifier:
                keyid:91:C1:8D:88:BD:49:D0:7F:D4:2C:F2:59:DD:3F:33:07:0A:6B:E8:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/3133312e3130302e3134342e302f32322d3234203d3e20323634333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:e3:73:93:a2:7a:b3:cf:f3:be:b5:a3:70:ca:1e:22:08:6e:
         41:0c:e8:c9:f9:d6:9e:f1:54:96:95:f0:db:bf:d6:1a:19:a0:
         4a:14:e7:29:ab:d8:a6:54:f8:4f:91:72:4b:f1:fa:bf:c9:97:
         77:3a:a0:e5:61:42:27:4b:6b:ff:58:d0:eb:25:b4:c1:d6:85:
         ae:17:ee:37:31:20:19:42:f8:88:95:6e:57:2c:9e:1b:14:f1:
         c2:e5:c2:69:0a:cb:be:22:39:a1:06:38:bb:88:a7:6e:b9:3a:
         af:61:f5:5a:fe:9a:95:ec:8b:f8:50:18:a9:5f:73:1b:4e:51:
         51:2a:5f:29:b9:60:99:c3:dd:f3:25:e6:9f:69:12:28:ac:8e:
         4c:7d:34:0a:98:05:d7:b3:62:f8:e1:49:0e:37:f7:26:49:a1:
         28:82:88:65:8e:36:8f:34:01:7f:41:51:a0:24:08:3b:70:8b:
         ce:3f:bd:1a:9b:62:50:77:2e:19:a9:43:87:e0:c8:bf:2f:b0:
         f5:69:2f:5e:2f:f9:42:05:27:da:69:dd:e6:df:fc:12:83:a2:
         25:d0:3c:c8:bb:2a:07:59:13:4e:59:8d:d5:cf:99:98:0d:8d:
         90:24:a5:1a:82:53:02:43:33:2b:ff:fa:2a:46:b6:e3:04:39:
         27:5a:4e:6b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUPwK4Nqn658Hv6eZVQBaHmMsYdFUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFDMThEODhCRDQ5RDA3RkQ0MkNGMjU5REQzRjMzMDcw
QTZCRTg2OTAeFw0yNDA0MDQxMzI1NTVaFw0yNTA0MDMxMzMwNTVaMDMxMTAvBgNV
BAMTKDk0NzM2RjIzRDRFODNDNzFFRTM0QkQ4MzRGNTQ1NzcxMjlDNDE2MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDGJIJtKxSZhY7+18lZ61NcWIY
KYs/NEBAl+oBETseaIUsnuz4qzHCa+EgB6q7Q7f4DtcIistUqlwr/uvuFM6IkSFe
t1OBRQfWHev6CpbyP8m5T7sen/zUpqYuYTmOxfI18cGv3vo8+3LSLDUr5orXMAV6
FNpOIkK8BT72TFgRZrhfiL2vy57sqj/RjatW4c6vL70lCLJo4qzNgqltPmNGacqX
zuM9ClL65gIERnmr6zTM5U+/wRw3/abGpOcuj1y+UEDenyHaOB2MTAag34QamklD
drJOz3Hm6PKbIa4jdLOmGsfatI2VEfydqxnYNYaRjo377HnCzbxWKLDevg8DAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUlHNvI9ToPHHuNL2DT1RXcSnEFhwwHwYDVR0j
BBgwFoAUkcGNiL1J0H/ULPJZ3T8zBwpr6GkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHZ5MlJjVmlYcGUyUFhkeDkzWVlMRWhMTEJxNHBQZEJLaDlRWTZiMlk2
bWcvMS85MUMxOEQ4OEJENDlEMDdGRDQyQ0YyNTlERDNGMzMwNzBBNkJFODY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxQzE4RDg4QkQ0OUQwN0ZE
NDJDRjI1OUREM0YzMzA3MEE2QkU4NjkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh2eTJSY1ZpWHBlMlBYZHg5M1lZTEVoTExCcTRwUGRCS2g5UVk2YjJZNm1nLzEv
MzEzMzMxMmUzMTMwMzAyZTMxMzQzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNDMzMzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoNkkDANBgkqhkiG9w0BAQsFAAOCAQEAqeNz
k6J6s8/zvrWjcMoeIghuQQzoyfnWnvFUlpXw27/WGhmgShTnKavYplT4T5FyS/H6
v8mXdzqg5WFCJ0tr/1jQ6yW0wdaFrhfuNzEgGUL4iJVuVyyeGxTxwuXCaQrLviI5
oQY4u4inbrk6r2H1Wv6aleyL+FAYqV9zG05RUSpfKblgmcPd8yXmn2kSKKyOTH00
CpgF17Ni+OFJDjf3JkmhKIKIZY42jzQBf0FRoCQIO3CLzj+9GptiUHcuGalDh+DI
vy+w9WkvXi/5QgUn2mnd5t/8EoOiJdA8yLsqB1kTTlmN1c+ZmA2NkCSlGoJTAkMz
K//6Kka24wQ5J1pOaw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:54 2024 by rpki-client on console-fra.rpki-client.org