Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/3138372e3130332e3230302e302f32342d3234203d3e20323730353234.roa
File:                     3138372e3130332e3230302e302f32342d3234203d3e20323730353234.roa (raw, json)
Hash identifier:          cwucaPzMuDQo6gn/VR9HfOvJNChmKvVLu9Vhfx0SB9M=
Subject key identifier:   FD:2A:CE:1B:A8:C8:EF:48:47:DE:C5:7C:F2:16:BE:1F:5D:D2:EC:D4
Certificate issuer:       /CN=E89EB7A1453A9E12420421FDDFC20FAA638EFA1C
Certificate serial:       284814BF1C226987634A8819432BC59AEC2D1514
Authority key identifier: E8:9E:B7:A1:45:3A:9E:12:42:04:21:FD:DF:C2:0F:AA:63:8E:FA:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E89EB7A1453A9E12420421FDDFC20FAA638EFA1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/3138372e3130332e3230302e302f32342d3234203d3e20323730353234.roa
Signing time:             Tue 13 Aug 2024 12:57:45 +0000
ROA not before:           Tue 13 Aug 2024 12:52:45 +0000
ROA not after:            Tue 12 Aug 2025 12:57:45 +0000
asID:                     270524
IP address blocks:        187.103.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/E89EB7A1453A9E12420421FDDFC20FAA638EFA1C.crl
                          rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/E89EB7A1453A9E12420421FDDFC20FAA638EFA1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E89EB7A1453A9E12420421FDDFC20FAA638EFA1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:48:14:bf:1c:22:69:87:63:4a:88:19:43:2b:c5:9a:ec:2d:15:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E89EB7A1453A9E12420421FDDFC20FAA638EFA1C
        Validity
            Not Before: Aug 13 12:52:45 2024 GMT
            Not After : Aug 12 12:57:45 2025 GMT
        Subject: CN=FD2ACE1BA8C8EF4847DEC57CF216BE1F5DD2ECD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ff:a8:20:e6:b5:80:82:8d:9d:58:0f:ef:98:
                    ae:ad:94:95:75:62:9a:5a:3a:d7:16:22:22:5f:df:
                    f6:0c:26:17:f6:9e:77:aa:ce:98:56:4d:c9:43:b6:
                    1d:5a:5f:22:6f:99:5a:5e:66:3e:c5:07:67:37:cd:
                    2b:d4:77:6e:bc:18:a9:6e:8c:f7:78:83:2f:f6:cd:
                    b2:41:ba:36:33:c0:96:7e:ab:76:ed:ff:74:a9:38:
                    b1:15:3f:d6:e4:f1:f5:51:1e:9e:a3:60:3c:5e:89:
                    ee:1d:13:b4:5a:20:e6:29:96:c1:0f:08:71:81:dc:
                    48:a9:57:a3:24:33:26:88:83:a6:ad:c4:ad:25:76:
                    4a:a7:0b:59:fe:a7:e6:01:ce:6c:4f:33:77:58:41:
                    7d:bd:15:d7:72:3d:d5:63:e9:ba:f5:48:81:8f:82:
                    d8:e7:82:ee:71:c2:60:45:3b:b6:23:29:cc:d9:af:
                    b9:62:b0:2b:bb:51:4b:a6:a6:ae:f1:71:dd:85:94:
                    60:68:bf:b6:3c:4b:af:9b:42:a8:13:74:87:12:ee:
                    43:de:b7:a4:d6:8a:01:a1:9b:1a:3d:da:60:7c:77:
                    65:ef:86:2f:cb:09:a0:cb:2c:69:2f:b6:9e:53:4e:
                    c0:9c:25:a5:33:65:16:48:d5:d7:ae:06:25:d6:96:
                    d9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:2A:CE:1B:A8:C8:EF:48:47:DE:C5:7C:F2:16:BE:1F:5D:D2:EC:D4
            X509v3 Authority Key Identifier:
                keyid:E8:9E:B7:A1:45:3A:9E:12:42:04:21:FD:DF:C2:0F:AA:63:8E:FA:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/E89EB7A1453A9E12420421FDDFC20FAA638EFA1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E89EB7A1453A9E12420421FDDFC20FAA638EFA1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93uYLRTsxtKHFYjM5MZmgTXAQnvyGs2g5twDYUpkff1o/0/3138372e3130332e3230302e302f32342d3234203d3e20323730353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:99:8d:67:26:62:d3:1d:d9:01:4d:c7:f1:ab:ac:1b:ea:77:
         eb:a2:d4:27:d1:a2:38:f7:d7:d9:23:5d:8f:af:fe:d2:00:c5:
         61:68:94:6d:9e:2c:a6:8d:47:8f:57:94:56:42:59:1c:e7:05:
         26:69:f3:64:f0:be:0f:7e:59:6f:c3:d2:0d:3d:11:aa:38:99:
         01:58:0b:c0:da:a9:76:39:81:8b:93:41:64:eb:65:82:80:df:
         07:19:6e:8e:f3:13:14:7c:9c:e3:25:08:3d:af:93:98:4f:e1:
         ff:63:78:ac:bd:4b:8c:cb:9e:b0:a9:85:ac:6d:20:67:c1:1c:
         3c:e5:47:dc:a3:78:c0:36:7a:de:b5:26:4b:1d:21:d8:12:65:
         47:5b:c6:da:14:13:2a:87:ba:4b:a0:5f:94:0f:5e:c9:5c:52:
         95:f0:79:59:bb:7f:71:dc:a6:0d:70:01:b2:c8:d1:7d:8c:0b:
         50:ba:d3:0d:0e:c1:0c:27:fb:81:ee:94:48:88:90:2e:ce:50:
         8b:e8:03:d9:09:44:0e:56:76:5d:0e:cd:30:c6:29:9d:31:95:
         3e:7c:0d:01:fa:81:10:5b:fd:63:53:63:a9:da:f9:4b:05:1f:
         7c:84:b5:86:b8:49:1b:ff:7a:5d:e2:46:b0:08:63:37:5b:b9:
         33:c8:1a:53
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUKEgUvxwiaYdjSogZQyvFmuwtFRQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg5RUI3QTE0NTNBOUUxMjQyMDQyMUZEREZDMjBGQUE2
MzhFRkExQzAeFw0yNDA4MTMxMjUyNDVaFw0yNTA4MTIxMjU3NDVaMDMxMTAvBgNV
BAMTKEZEMkFDRTFCQThDOEVGNDg0N0RFQzU3Q0YyMTZCRTFGNUREMkVDRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD/6gg5rWAgo2dWA/vmK6tlJV1
YppaOtcWIiJf3/YMJhf2nneqzphWTclDth1aXyJvmVpeZj7FB2c3zSvUd268GKlu
jPd4gy/2zbJBujYzwJZ+q3bt/3SpOLEVP9bk8fVRHp6jYDxeie4dE7RaIOYplsEP
CHGB3EipV6MkMyaIg6atxK0ldkqnC1n+p+YBzmxPM3dYQX29FddyPdVj6br1SIGP
gtjngu5xwmBFO7YjKczZr7lisCu7UUumpq7xcd2FlGBov7Y8S6+bQqgTdIcS7kPe
t6TWigGhmxo92mB8d2Xvhi/LCaDLLGkvtp5TTsCcJaUzZRZI1deuBiXWltnDAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU/SrOG6jI70hH3sV88ha+H13S7NQwHwYDVR0j
BBgwFoAU6J63oUU6nhJCBCH938IPqmOO+hwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTN1WUxSVHN4dEtIRllqTTVNWm1nVFhBUW52eUdzMmc1dHdEWVVwa2Zm
MW8vMC9FODlFQjdBMTQ1M0E5RTEyNDIwNDIxRkRERkMyMEZBQTYzOEVGQTFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U4OUVCN0ExNDUzQTlFMTI0
MjA0MjFGRERGQzIwRkFBNjM4RUZBMUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzkzdVlMUlRzeHRLSEZZak01TVptZ1RYQVFudnlHczJnNXR3RFlVcGtmZjFvLzAv
MzEzODM3MmUzMTMwMzMyZTMyMzAzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMDM1MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALtnyDANBgkqhkiG9w0BAQsFAAOCAQEAvJmN
ZyZi0x3ZAU3H8ausG+p366LUJ9GiOPfX2SNdj6/+0gDFYWiUbZ4spo1Hj1eUVkJZ
HOcFJmnzZPC+D35Zb8PSDT0RqjiZAVgLwNqpdjmBi5NBZOtlgoDfBxlujvMTFHyc
4yUIPa+TmE/h/2N4rL1LjMuesKmFrG0gZ8EcPOVH3KN4wDZ63rUmSx0h2BJlR1vG
2hQTKoe6S6BflA9eyVxSlfB5Wbt/cdymDXABssjRfYwLULrTDQ7BDCf7ge6USIiQ
Ls5Qi+gD2QlEDlZ2XQ7NMMYpnTGVPnwNAfqBEFv9Y1Njqdr5SwUffIS1hrhJG/96
XeJGsAhjN1u5M8gaUw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:04 2024 by rpki-client on console-fra.rpki-client.org