Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M2RabgEEPNDw9ix5c9xsZxQSv3yfoz8sfAvzzt9Vhdh/0/3136382e3233322e3234342e302f32322d3332203d3e20323634393632.roa
File:                     3136382e3233322e3234342e302f32322d3332203d3e20323634393632.roa (raw, json)
Hash identifier:          lCYvONR2j3wyMcGKTDvjcE3aaGHOyskW7uBwuVIbV+Q=
Subject key identifier:   2E:09:59:1E:C8:4E:A7:22:6B:BE:C3:0F:E6:3B:4C:2E:9D:22:A3:25
Certificate issuer:       /CN=FC93D5F23F5E9335318DBEC8ED80F7DE508DA5BD
Certificate serial:       3321AAC3A746C458BEDEE407875EB0E19DEBC1A1
Authority key identifier: FC:93:D5:F2:3F:5E:93:35:31:8D:BE:C8:ED:80:F7:DE:50:8D:A5:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC93D5F23F5E9335318DBEC8ED80F7DE508DA5BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M2RabgEEPNDw9ix5c9xsZxQSv3yfoz8sfAvzzt9Vhdh/0/3136382e3233322e3234342e302f32322d3332203d3e20323634393632.roa
Signing time:             Mon 11 Nov 2024 18:14:19 +0000
ROA not before:           Mon 11 Nov 2024 18:09:19 +0000
ROA not after:            Mon 10 Nov 2025 18:14:19 +0000
asID:                     264962
IP address blocks:        168.232.244.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M2RabgEEPNDw9ix5c9xsZxQSv3yfoz8sfAvzzt9Vhdh/0/FC93D5F23F5E9335318DBEC8ED80F7DE508DA5BD.crl
                          rsync://rpki-repo.registro.br/repo/9M2RabgEEPNDw9ix5c9xsZxQSv3yfoz8sfAvzzt9Vhdh/0/FC93D5F23F5E9335318DBEC8ED80F7DE508DA5BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC93D5F23F5E9335318DBEC8ED80F7DE508DA5BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:21:aa:c3:a7:46:c4:58:be:de:e4:07:87:5e:b0:e1:9d:eb:c1:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC93D5F23F5E9335318DBEC8ED80F7DE508DA5BD
        Validity
            Not Before: Nov 11 18:09:19 2024 GMT
            Not After : Nov 10 18:14:19 2025 GMT
        Subject: CN=2E09591EC84EA7226BBEC30FE63B4C2E9D22A325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ff:56:35:af:f5:2d:8f:6b:19:fd:ab:46:1f:
                    8a:ca:91:4f:7c:ad:ec:2b:22:5f:48:1c:69:5d:fd:
                    4e:57:ad:b0:c6:a3:af:13:75:27:41:97:7c:16:08:
                    59:32:e4:fa:60:fe:66:ab:03:68:a2:2e:00:a9:12:
                    01:2a:f4:ea:d3:80:f6:3f:c8:a3:53:4d:6c:d3:58:
                    26:81:ac:b5:40:92:7d:5f:ad:d3:53:71:86:30:6c:
                    c7:cd:96:7b:35:a5:fa:81:48:2e:7e:20:db:ea:12:
                    e4:ce:27:cb:e2:a4:8b:b2:1b:41:6d:bd:f4:b3:3a:
                    8e:9c:7f:d1:35:e8:4a:6b:2d:81:38:66:ce:d8:17:
                    52:2a:1c:dd:85:42:88:ef:91:f2:4d:33:17:b7:bd:
                    ca:81:06:3f:f8:c3:ae:6e:e1:ef:d8:bd:63:c7:83:
                    df:45:4c:46:52:e8:ee:d7:db:2d:69:7b:1d:57:c0:
                    7d:cb:2b:4b:30:9d:c6:aa:68:7b:b0:72:33:ae:5a:
                    9e:6d:17:15:b9:62:4b:43:38:f2:37:f0:18:71:e6:
                    73:cc:f1:f5:e8:57:8d:2a:c8:b1:3f:c4:d4:9a:ed:
                    91:e6:74:7d:f4:71:78:16:17:e8:18:2b:db:d4:c6:
                    f6:56:ca:65:60:c7:70:85:88:9e:b8:b1:54:34:84:
                    5c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:09:59:1E:C8:4E:A7:22:6B:BE:C3:0F:E6:3B:4C:2E:9D:22:A3:25
            X509v3 Authority Key Identifier:
                keyid:FC:93:D5:F2:3F:5E:93:35:31:8D:BE:C8:ED:80:F7:DE:50:8D:A5:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M2RabgEEPNDw9ix5c9xsZxQSv3yfoz8sfAvzzt9Vhdh/0/FC93D5F23F5E9335318DBEC8ED80F7DE508DA5BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC93D5F23F5E9335318DBEC8ED80F7DE508DA5BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M2RabgEEPNDw9ix5c9xsZxQSv3yfoz8sfAvzzt9Vhdh/0/3136382e3233322e3234342e302f32322d3332203d3e20323634393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:db:11:dd:45:6f:fc:fe:d1:be:96:50:46:c8:bc:e0:ed:16:
         f3:25:5e:69:3d:b1:e8:f7:5e:f4:72:7f:80:82:0d:05:a2:e4:
         18:84:46:a9:b9:58:dd:18:ea:fc:3b:47:b1:55:57:84:32:36:
         bc:14:9c:95:1f:ce:9a:f7:b7:b2:c7:ed:ba:5d:6a:dd:10:43:
         46:09:54:ee:7c:1c:2b:cc:93:c5:49:31:5f:a6:8b:58:da:70:
         ef:58:d4:28:40:d7:10:c7:1e:87:a1:a0:bf:b0:99:48:25:f7:
         4c:30:eb:d3:02:e3:48:68:81:7c:bf:49:fc:63:ad:39:de:e0:
         70:69:01:31:29:52:f9:39:8f:ba:6b:99:7e:46:2f:94:11:eb:
         ef:4c:0d:62:7b:f4:16:2c:9b:80:ca:bd:9c:bf:61:c5:a5:65:
         8c:57:a2:ce:3e:37:1e:9e:7a:45:5d:d0:a4:cb:de:bb:15:b5:
         0e:7b:93:61:11:f7:a0:8a:d3:06:a2:51:68:c2:7c:5e:a4:85:
         76:7a:0a:26:b5:60:96:d8:cb:04:7c:d7:5c:08:63:59:6e:0f:
         73:84:0a:1a:d2:1b:64:ed:ae:5c:2b:b6:e2:7b:8f:24:9d:80:
         cf:3e:d1:5d:64:d2:3e:42:7c:dd:0a:49:04:f1:80:92:61:83:
         a6:22:36:51
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUMyGqw6dGxFi+3uQHh16w4Z3rwaEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkM5M0Q1RjIzRjVFOTMzNTMxOERCRUM4RUQ4MEY3REU1
MDhEQTVCRDAeFw0yNDExMTExODA5MTlaFw0yNTExMTAxODE0MTlaMDMxMTAvBgNV
BAMTKDJFMDk1OTFFQzg0RUE3MjI2QkJFQzMwRkU2M0I0QzJFOUQyMkEzMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0/1Y1r/Utj2sZ/atGH4rKkU98
rewrIl9IHGld/U5XrbDGo68TdSdBl3wWCFky5Ppg/marA2iiLgCpEgEq9OrTgPY/
yKNTTWzTWCaBrLVAkn1frdNTcYYwbMfNlns1pfqBSC5+INvqEuTOJ8vipIuyG0Ft
vfSzOo6cf9E16EprLYE4Zs7YF1IqHN2FQojvkfJNMxe3vcqBBj/4w65u4e/YvWPH
g99FTEZS6O7X2y1pex1XwH3LK0swncaqaHuwcjOuWp5tFxW5YktDOPI38Bhx5nPM
8fXoV40qyLE/xNSa7ZHmdH30cXgWF+gYK9vUxvZWymVgx3CFiJ64sVQ0hFwNAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQULglZHshOpyJrvsMP5jtMLp0ioyUwHwYDVR0j
BBgwFoAU/JPV8j9ekzUxjb7I7YD33lCNpb0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU0yUmFiZ0VFUE5EdzlpeDVjOXhzWnhRU3YzeWZvejhzZkF2enp0OVZo
ZGgvMC9GQzkzRDVGMjNGNUU5MzM1MzE4REJFQzhFRDgwRjdERTUwOERBNUJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZDOTNENUYyM0Y1RTkzMzUz
MThEQkVDOEVEODBGN0RFNTA4REE1QkQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNMlJhYmdFRVBORHc5aXg1Yzl4c1p4UVN2M3lmb3o4c2ZBdnp6dDlWaGRoLzAv
MzEzNjM4MmUzMjMzMzIyZTMyMzQzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzNDM5MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjo9DANBgkqhkiG9w0BAQsFAAOCAQEAodsR
3UVv/P7RvpZQRsi84O0W8yVeaT2x6Pde9HJ/gIINBaLkGIRGqblY3Rjq/DtHsVVX
hDI2vBSclR/Omve3ssftul1q3RBDRglU7nwcK8yTxUkxX6aLWNpw71jUKEDXEMce
h6Ggv7CZSCX3TDDr0wLjSGiBfL9J/GOtOd7gcGkBMSlS+TmPumuZfkYvlBHr70wN
Ynv0FiybgMq9nL9hxaVljFeizj43Hp56RV3QpMveuxW1DnuTYRH3oIrTBqJRaMJ8
XqSFdnoKJrVgltjLBHzXXAhjWW4Pc4QKGtIbZO2uXCu24nuPJJ2Azz7RXWTSPkJ8
3QpJBPGAkmGDpiI2UQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:06 2024 by rpki-client on console-fra.rpki-client.org