Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/3137302e38312e34342e302f32322d3234203d3e20323634333831.roa
File:                     3137302e38312e34342e302f32322d3234203d3e20323634333831.roa (raw, json)
Hash identifier:          4MpiAl+q6/AgdWLA7n7TLHze18KuKTaI+5VoPSquCZc=
Subject key identifier:   F4:0C:C5:FA:97:C7:EA:A6:2A:32:0A:25:4C:A6:18:94:48:F8:C5:95
Certificate issuer:       /CN=91C18D88BD49D07FD42CF259DD3F33070A6BE869
Certificate serial:       1321C656266BAADDC0899D71A812BAB793395ACF
Authority key identifier: 91:C1:8D:88:BD:49:D0:7F:D4:2C:F2:59:DD:3F:33:07:0A:6B:E8:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/3137302e38312e34342e302f32322d3234203d3e20323634333831.roa
Signing time:             Thu 04 Apr 2024 13:30:56 +0000
ROA not before:           Thu 04 Apr 2024 13:25:56 +0000
ROA not after:            Thu 03 Apr 2025 13:30:56 +0000
asID:                     264381
IP address blocks:        170.81.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.crl
                          rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:42:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:21:c6:56:26:6b:aa:dd:c0:89:9d:71:a8:12:ba:b7:93:39:5a:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C18D88BD49D07FD42CF259DD3F33070A6BE869
        Validity
            Not Before: Apr  4 13:25:56 2024 GMT
            Not After : Apr  3 13:30:56 2025 GMT
        Subject: CN=F40CC5FA97C7EAA62A320A254CA6189448F8C595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d4:8c:d5:cb:33:17:7d:41:e7:23:52:79:cc:
                    10:9c:5f:0c:22:84:d0:4c:bb:89:ec:29:cd:65:97:
                    44:30:a0:bd:fe:ca:b9:97:42:0d:4f:d5:a2:54:76:
                    f3:82:44:0a:ed:f7:c4:49:77:b9:b8:a2:8b:d1:df:
                    d5:72:e5:f7:df:b7:e6:84:3d:5f:cd:5b:f5:4e:6a:
                    44:4d:47:33:10:2b:8e:13:ed:a6:9a:ad:6f:49:04:
                    b3:51:22:dd:87:fa:73:af:dd:aa:df:c5:f5:99:72:
                    2e:c8:f5:a9:e7:bb:b9:3a:2d:f7:ee:a5:96:a2:04:
                    bc:b8:20:0f:8a:a7:26:4a:75:8c:6e:eb:84:15:61:
                    1a:4a:94:58:0b:43:b0:31:b3:14:9e:f1:7d:ae:95:
                    a3:20:a9:3d:14:d4:e9:33:fc:86:a1:3b:02:73:bb:
                    76:16:ee:29:ca:ba:d1:19:5d:9e:9e:1b:c9:61:56:
                    27:53:61:94:ee:6e:e9:42:8e:8a:cf:f9:2e:1a:d1:
                    da:31:21:74:fd:2d:8a:58:29:bf:85:7d:98:b0:04:
                    24:3d:56:b2:76:5d:04:bf:b8:df:b1:a3:6f:03:f9:
                    26:4a:91:7d:27:30:dd:f0:96:cf:d5:b3:9d:29:ac:
                    71:65:e6:b2:23:44:ee:89:98:c5:d8:bb:d6:76:5a:
                    ff:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:0C:C5:FA:97:C7:EA:A6:2A:32:0A:25:4C:A6:18:94:48:F8:C5:95
            X509v3 Authority Key Identifier:
                keyid:91:C1:8D:88:BD:49:D0:7F:D4:2C:F2:59:DD:3F:33:07:0A:6B:E8:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/3137302e38312e34342e302f32322d3234203d3e20323634333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:51:ff:7f:96:48:92:ef:03:e6:f6:53:d1:3a:d0:ad:60:38:
         05:1a:8f:c6:61:35:89:bd:eb:9c:4c:b5:5e:52:b6:4a:59:8f:
         9c:70:c7:25:09:ae:92:7f:da:9b:59:f5:22:8d:a6:a8:35:f9:
         fc:0e:7a:47:ac:78:5d:46:64:e2:83:b7:4d:ff:05:8f:7e:b3:
         40:e1:e5:a2:95:e9:68:55:22:17:8a:02:e1:c3:c1:a9:a3:66:
         12:9f:3a:15:bf:02:c5:aa:0a:e8:02:6c:3d:9d:17:b5:20:6e:
         97:6a:9c:96:9a:60:59:5d:08:bf:5a:f0:fe:17:31:f3:e9:f8:
         de:27:d2:23:b1:40:84:8c:93:f2:9a:27:5f:09:15:da:a2:51:
         2e:0e:2a:91:83:85:7c:36:e4:48:7e:bd:9f:9e:3d:c1:20:2e:
         c5:ad:56:4c:27:74:4e:2e:29:60:53:18:fe:a9:be:45:34:f6:
         46:96:f5:c0:33:f2:19:1d:31:05:20:c8:77:08:09:b5:1f:37:
         00:13:22:10:a7:3b:17:7a:eb:eb:56:81:33:aa:2c:6f:15:28:
         f7:b9:37:f0:df:9b:9a:42:ef:e8:e8:b9:5b:cb:1b:ea:d6:90:
         09:3d:f4:f4:56:a5:ac:92:bc:a9:c3:bc:7d:03:d1:62:aa:15:
         a1:61:64:83
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEyHGViZrqt3AiZ1xqBK6t5M5Ws8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFDMThEODhCRDQ5RDA3RkQ0MkNGMjU5REQzRjMzMDcw
QTZCRTg2OTAeFw0yNDA0MDQxMzI1NTZaFw0yNTA0MDMxMzMwNTZaMDMxMTAvBgNV
BAMTKEY0MENDNUZBOTdDN0VBQTYyQTMyMEEyNTRDQTYxODk0NDhGOEM1OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/1IzVyzMXfUHnI1J5zBCcXwwi
hNBMu4nsKc1ll0QwoL3+yrmXQg1P1aJUdvOCRArt98RJd7m4oovR39Vy5ffft+aE
PV/NW/VOakRNRzMQK44T7aaarW9JBLNRIt2H+nOv3arfxfWZci7I9annu7k6Lffu
pZaiBLy4IA+KpyZKdYxu64QVYRpKlFgLQ7AxsxSe8X2ulaMgqT0U1Okz/IahOwJz
u3YW7inKutEZXZ6eG8lhVidTYZTubulCjorP+S4a0doxIXT9LYpYKb+FfZiwBCQ9
VrJ2XQS/uN+xo28D+SZKkX0nMN3wls/Vs50prHFl5rIjRO6JmMXYu9Z2Wv9RAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9AzF+pfH6qYqMgolTKYYlEj4xZUwHwYDVR0j
BBgwFoAUkcGNiL1J0H/ULPJZ3T8zBwpr6GkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHZ5MlJjVmlYcGUyUFhkeDkzWVlMRWhMTEJxNHBQZEJLaDlRWTZiMlk2
bWcvMS85MUMxOEQ4OEJENDlEMDdGRDQyQ0YyNTlERDNGMzMwNzBBNkJFODY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxQzE4RDg4QkQ0OUQwN0ZE
NDJDRjI1OUREM0YzMzA3MEE2QkU4NjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh2eTJSY1ZpWHBlMlBYZHg5M1lZTEVoTExCcTRwUGRCS2g5UVk2YjJZNm1nLzEv
MzEzNzMwMmUzODMxMmUzNDM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0
MzMzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqlEsMA0GCSqGSIb3DQEBCwUAA4IBAQASUf9/lkiS
7wPm9lPROtCtYDgFGo/GYTWJveucTLVeUrZKWY+ccMclCa6Sf9qbWfUijaaoNfn8
DnpHrHhdRmTig7dN/wWPfrNA4eWileloVSIXigLhw8Gpo2YSnzoVvwLFqgroAmw9
nRe1IG6XapyWmmBZXQi/WvD+FzHz6fjeJ9IjsUCEjJPymidfCRXaolEuDiqRg4V8
NuRIfr2fnj3BIC7FrVZMJ3ROLilgUxj+qb5FNPZGlvXAM/IZHTEFIMh3CAm1HzcA
EyIQpzsXeuvrVoEzqixvFSj3uTfw35uaQu/o6Llbyxvq1pAJPfT0VqWskrypw7x9
A9FiqhWhYWSD
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:54 2024 by rpki-client on console-fra.rpki-client.org