Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/2/3138392e35302e36302e302f32322d3234203d3e20323730393633.roa
File:                     3138392e35302e36302e302f32322d3234203d3e20323730393633.roa (raw, json)
Hash identifier:          5srwJbY9XP+Kff4fo2NUrbkDmJjLhPaKlXaT+Guozrw=
Subject key identifier:   F6:4D:E9:CC:56:76:6B:9A:86:A5:F3:D5:95:13:90:07:3A:EA:50:FA
Certificate issuer:       /CN=B8BF37906635F24C2D247EFC8F28584994678276
Certificate serial:       756AF6BE02CB1B6ABC2A4AEC8F59AB34C3130E9C
Authority key identifier: B8:BF:37:90:66:35:F2:4C:2D:24:7E:FC:8F:28:58:49:94:67:82:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF37906635F24C2D247EFC8F28584994678276.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/2/3138392e35302e36302e302f32322d3234203d3e20323730393633.roa
Signing time:             Thu 04 Apr 2024 23:06:40 +0000
ROA not before:           Thu 04 Apr 2024 23:01:40 +0000
ROA not after:            Thu 03 Apr 2025 23:06:40 +0000
asID:                     270963
IP address blocks:        189.50.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/2/B8BF37906635F24C2D247EFC8F28584994678276.crl
                          rsync://rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/2/B8BF37906635F24C2D247EFC8F28584994678276.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF37906635F24C2D247EFC8F28584994678276.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:6a:f6:be:02:cb:1b:6a:bc:2a:4a:ec:8f:59:ab:34:c3:13:0e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8BF37906635F24C2D247EFC8F28584994678276
        Validity
            Not Before: Apr  4 23:01:40 2024 GMT
            Not After : Apr  3 23:06:40 2025 GMT
        Subject: CN=F64DE9CC56766B9A86A5F3D5951390073AEA50FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e3:ec:01:fc:4f:e5:27:8b:e5:3b:e8:8d:d7:
                    ad:79:f9:b6:c1:46:76:39:1f:84:1b:72:8e:c5:73:
                    76:25:9c:6c:a3:9a:ae:f8:39:34:aa:e9:85:d2:46:
                    45:ad:fa:2a:9e:99:0d:5d:40:76:82:f5:cf:30:36:
                    f0:87:db:93:01:d3:7b:d1:90:fe:2d:40:0c:28:70:
                    9c:b0:b4:e6:47:59:36:b4:80:1e:fa:bb:1c:61:ec:
                    b0:cf:43:21:fb:14:70:12:05:9d:2a:a6:78:1c:49:
                    46:da:cb:13:98:d3:fb:6a:60:2c:ad:d1:27:93:8b:
                    da:18:0c:ce:dc:8b:32:7a:b2:d7:f5:21:5a:86:a7:
                    f4:a1:c1:30:be:ad:e2:2c:f6:9b:8d:c0:a2:59:57:
                    1a:6a:d4:bc:5c:0d:56:d2:c5:f2:18:35:e9:28:4d:
                    f5:bc:9c:c3:b3:b0:9c:11:bf:c1:20:49:9d:8c:76:
                    4c:c8:2d:0f:0e:53:c7:61:d3:37:1a:ad:28:ad:51:
                    be:34:c9:d0:49:2a:db:69:25:49:69:f4:37:78:80:
                    e2:92:96:21:9e:31:8b:3e:ed:2d:67:ad:19:90:7c:
                    61:35:72:e0:de:f3:ed:e5:bc:99:2a:ad:27:5a:71:
                    8d:94:6e:9a:ef:79:c1:53:9f:5d:a8:27:6e:32:bf:
                    c2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:4D:E9:CC:56:76:6B:9A:86:A5:F3:D5:95:13:90:07:3A:EA:50:FA
            X509v3 Authority Key Identifier:
                keyid:B8:BF:37:90:66:35:F2:4C:2D:24:7E:FC:8F:28:58:49:94:67:82:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/2/B8BF37906635F24C2D247EFC8F28584994678276.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF37906635F24C2D247EFC8F28584994678276.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/2/3138392e35302e36302e302f32322d3234203d3e20323730393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:de:08:be:d5:88:01:bf:09:24:5e:53:69:14:b8:be:79:e2:
         45:18:4c:3b:35:ba:4e:f4:fd:03:5b:1c:bf:e8:8a:87:c0:14:
         5e:39:ba:b4:95:cf:15:f4:7e:3b:cc:bf:2a:4c:0b:de:4f:85:
         19:b0:95:77:b4:a5:f2:a8:62:11:93:c4:e3:2b:63:c0:d4:d8:
         e9:51:cb:8f:90:b3:da:ae:cf:ae:dc:0e:06:c7:6e:20:34:7e:
         1e:2f:01:88:a6:f2:da:53:41:f2:56:01:6c:1d:d8:87:03:28:
         bb:d2:8c:2d:01:5b:7d:53:58:a7:bd:f1:01:3c:a6:25:b1:e4:
         f0:58:9e:90:46:57:6f:63:96:42:e5:83:53:4d:2b:8a:26:f8:
         e5:9c:ab:91:40:6c:4f:aa:2e:4b:7d:5d:75:33:f3:2a:36:79:
         e8:9d:b1:86:69:ff:20:80:35:0d:43:6c:77:e3:5d:27:a7:de:
         7a:ef:7e:6a:d2:3d:73:f5:43:d4:b0:8e:3e:c8:1a:a5:55:bc:
         80:72:08:bc:e2:46:77:4b:50:2d:ff:76:aa:f9:ab:c1:59:cd:
         ae:6b:61:8b:54:90:78:a3:ed:67:77:cf:a0:54:57:ff:96:b2:
         35:36:7f:b9:8a:87:7b:68:e3:95:f4:ff:b3:d2:9e:f2:30:70:
         1c:5a:42:51
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdWr2vgLLG2q8Kkrsj1mrNMMTDpwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhCRjM3OTA2NjM1RjI0QzJEMjQ3RUZDOEYyODU4NDk5
NDY3ODI3NjAeFw0yNDA0MDQyMzAxNDBaFw0yNTA0MDMyMzA2NDBaMDMxMTAvBgNV
BAMTKEY2NERFOUNDNTY3NjZCOUE4NkE1RjNENTk1MTM5MDA3M0FFQTUwRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI4+wB/E/lJ4vlO+iN1615+bbB
RnY5H4Qbco7Fc3YlnGyjmq74OTSq6YXSRkWt+iqemQ1dQHaC9c8wNvCH25MB03vR
kP4tQAwocJywtOZHWTa0gB76uxxh7LDPQyH7FHASBZ0qpngcSUbayxOY0/tqYCyt
0SeTi9oYDM7cizJ6stf1IVqGp/ShwTC+reIs9puNwKJZVxpq1LxcDVbSxfIYNeko
TfW8nMOzsJwRv8EgSZ2MdkzILQ8OU8dh0zcarSitUb40ydBJKttpJUlp9Dd4gOKS
liGeMYs+7S1nrRmQfGE1cuDe8+3lvJkqrSdacY2UbprvecFTn12oJ24yv8JtAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9k3pzFZ2a5qGpfPVlROQBzrqUPowHwYDVR0j
BBgwFoAUuL83kGY18kwtJH78jyhYSZRngnYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUpvemRmYnExWVZQUWlmOXMxYmlqNlVRdXYxRjVqRm8xTW4yREJlREVD
WXQvMi9COEJGMzc5MDY2MzVGMjRDMkQyNDdFRkM4RjI4NTg0OTk0Njc4Mjc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4QkYzNzkwNjYzNUYyNEMy
RDI0N0VGQzhGMjg1ODQ5OTQ2NzgyNzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlKb3pkZmJxMVlWUFFpZjlzMWJpajZVUXV2MUY1akZvMU1uMkRCZURFQ1l0LzIv
MzEzODM5MmUzNTMwMmUzNjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMw
MzkzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCvTI8MA0GCSqGSIb3DQEBCwUAA4IBAQBs3gi+1YgB
vwkkXlNpFLi+eeJFGEw7NbpO9P0DWxy/6IqHwBReObq0lc8V9H47zL8qTAveT4UZ
sJV3tKXyqGIRk8TjK2PA1NjpUcuPkLPars+u3A4Gx24gNH4eLwGIpvLaU0HyVgFs
HdiHAyi70owtAVt9U1invfEBPKYlseTwWJ6QRldvY5ZC5YNTTSuKJvjlnKuRQGxP
qi5LfV11M/MqNnnonbGGaf8ggDUNQ2x3410np956735q0j1z9UPUsI4+yBqlVbyA
cgi84kZ3S1At/3aq+avBWc2ua2GLVJB4o+1nd8+gVFf/lrI1Nn+5iod7aOOV9P+z
0p7yMHAcWkJR
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:34 2024 by rpki-client on console-fra.rpki-client.org