Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3139312e3234332e38392e302f32342d3234203d3e203238323130.roa
File:                     3139312e3234332e38392e302f32342d3234203d3e203238323130.roa (raw, json)
Hash identifier:          Yj8VmTs2uQmvr86otHyuBgPshiEffLzdggOGAQhg7iQ=
Subject key identifier:   F4:94:32:F7:F3:20:E6:07:C2:58:D3:64:AD:7D:B8:AA:EA:BD:13:A0
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       3D64DEDCF023C4CC00E8A8EF27F1A376C07A89C7
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3139312e3234332e38392e302f32342d3234203d3e203238323130.roa
Signing time:             Thu 04 Apr 2024 04:37:47 +0000
ROA not before:           Thu 04 Apr 2024 04:32:47 +0000
ROA not after:            Thu 03 Apr 2025 04:37:47 +0000
asID:                     28210
IP address blocks:        191.243.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:64:de:dc:f0:23:c4:cc:00:e8:a8:ef:27:f1:a3:76:c0:7a:89:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Apr  4 04:32:47 2024 GMT
            Not After : Apr  3 04:37:47 2025 GMT
        Subject: CN=F49432F7F320E607C258D364AD7DB8AAEABD13A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e6:b9:4a:fc:c5:70:5d:f2:b8:12:23:44:56:
                    8a:32:ad:ef:69:76:a5:12:14:31:49:62:fc:81:de:
                    16:3a:81:0d:a4:e3:40:69:52:e8:21:71:1d:ae:14:
                    59:9b:ad:23:d3:d1:4e:f7:95:c3:55:c6:4e:5b:b5:
                    3d:85:1a:ef:23:44:ff:ce:80:30:e9:43:cd:8d:ca:
                    bd:27:92:81:af:5b:4c:26:b7:4f:05:3e:17:b0:8b:
                    86:ce:1c:8a:ac:ca:a6:62:77:8e:ff:e1:01:d6:21:
                    18:fe:2e:d4:3e:fb:10:29:76:36:c1:a3:1a:80:35:
                    f4:87:d8:23:1a:ce:34:67:fc:50:1c:61:d9:85:a9:
                    ad:8f:b1:89:b1:24:c8:e4:87:98:9b:cd:ae:54:6a:
                    36:e1:3b:9d:25:11:19:b1:86:a8:89:cb:b0:bd:8b:
                    86:36:ad:42:df:c8:6e:e0:32:41:d5:4d:e1:8a:2c:
                    0b:70:65:4a:92:80:20:87:20:10:41:b9:09:95:8b:
                    5c:4c:98:f0:28:e2:a1:6b:f4:83:56:6f:76:46:b8:
                    e7:9a:29:88:97:e8:b5:cf:ed:44:d9:70:c9:4f:94:
                    67:d3:93:fe:e4:f3:d1:14:0a:6b:16:25:b6:c7:13:
                    29:b6:20:26:22:44:da:74:5a:81:c0:c0:d7:df:4d:
                    48:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:94:32:F7:F3:20:E6:07:C2:58:D3:64:AD:7D:B8:AA:EA:BD:13:A0
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/3139312e3234332e38392e302f32342d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:04:44:64:65:d7:84:06:0c:dc:fe:eb:82:70:1d:4c:90:26:
         b9:7a:e2:f3:d8:e5:01:3d:a3:5a:a9:76:91:56:09:f1:bc:3c:
         f8:fa:db:a1:6a:27:a5:56:35:c4:69:66:5b:99:ec:44:85:b8:
         5f:35:df:f5:89:6e:31:d1:45:6a:bc:56:e5:50:75:2a:e3:84:
         c4:35:7c:b7:16:80:f1:ed:fd:3a:45:2e:ba:79:22:a6:f2:b9:
         a6:b7:38:0b:b6:b9:01:ac:ed:5a:e5:95:de:f9:b2:ea:45:04:
         af:d8:8b:0b:3f:59:83:bb:1d:06:3e:66:38:e6:ca:ee:b7:e6:
         95:e4:75:78:80:f2:cb:1e:69:02:66:f5:4c:6d:3b:a6:c4:07:
         ea:b7:9a:51:f1:74:bc:d9:25:8d:b3:cb:a0:b0:bc:63:cf:d3:
         8b:4c:fc:94:aa:4a:c4:4a:3b:4f:69:61:f8:09:58:f5:bd:ca:
         cd:f1:1d:fc:e2:3d:7c:9b:84:4e:f6:e0:b3:d5:93:4c:7b:ea:
         c5:db:51:bf:78:a9:11:ff:fe:c1:2f:2e:57:ad:92:65:1b:6d:
         ea:67:55:b5:22:3a:4c:db:14:ce:c5:ab:07:22:d8:fd:b8:7f:
         e0:df:6b:8b:e1:88:fa:43:1e:20:fd:26:0f:db:64:8e:e5:71:
         03:ed:59:33
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPWTe3PAjxMwA6KjvJ/GjdsB6iccwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYxQ0FCNjVCQURBRDc1RkY0OUNGOENFNTRBRTc1NzM3
MUQxQzRBQTAeFw0yNDA0MDQwNDMyNDdaFw0yNTA0MDMwNDM3NDdaMDMxMTAvBgNV
BAMTKEY0OTQzMkY3RjMyMEU2MDdDMjU4RDM2NEFEN0RCOEFBRUFCRDEzQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC75rlK/MVwXfK4EiNEVooyre9p
dqUSFDFJYvyB3hY6gQ2k40BpUughcR2uFFmbrSPT0U73lcNVxk5btT2FGu8jRP/O
gDDpQ82Nyr0nkoGvW0wmt08FPhewi4bOHIqsyqZid47/4QHWIRj+LtQ++xApdjbB
oxqANfSH2CMazjRn/FAcYdmFqa2PsYmxJMjkh5ibza5UajbhO50lERmxhqiJy7C9
i4Y2rULfyG7gMkHVTeGKLAtwZUqSgCCHIBBBuQmVi1xMmPAo4qFr9INWb3ZGuOea
KYiX6LXP7UTZcMlPlGfTk/7k89EUCmsWJbbHEym2ICYiRNp0WoHAwNffTUgxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9JQy9/Mg5gfCWNNkrX24quq9E6AwHwYDVR0j
BBgwFoAUphyrZbra11/0nPjOVK51c3HRxKowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVFmeFJydGhFV3dtMXc3WVNmWUU5V2Q2NDFWMW5hWGRrdUtrQXRDOHFn
YVYvMS9BNjFDQUI2NUJBREFENzVGRjQ5Q0Y4Q0U1NEFFNzU3MzcxRDFDNEFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2MUNBQjY1QkFEQUQ3NUZG
NDlDRjhDRTU0QUU3NTczNzFEMUM0QUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlRZnhScnRoRVd3bTF3N1lTZllFOVdkNjQxVjFuYVhka3VLa0F0QzhxZ2FWLzEv
MzEzOTMxMmUzMjM0MzMyZTM4MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzIzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAv/NZMA0GCSqGSIb3DQEBCwUAA4IBAQCOBERkZdeE
Bgzc/uuCcB1MkCa5euLz2OUBPaNaqXaRVgnxvDz4+tuhaielVjXEaWZbmexEhbhf
Nd/1iW4x0UVqvFblUHUq44TENXy3FoDx7f06RS66eSKm8rmmtzgLtrkBrO1a5ZXe
+bLqRQSv2IsLP1mDux0GPmY45srut+aV5HV4gPLLHmkCZvVMbTumxAfqt5pR8XS8
2SWNs8ugsLxjz9OLTPyUqkrESjtPaWH4CVj1vcrN8R384j18m4RO9uCz1ZNMe+rF
21G/eKkR//7BLy5XrZJlG23qZ1W1IjpM2xTOxasHItj9uH/g32uL4Yj6Qx4g/SYP
22SO5XED7Vkz
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:21 2024 by rpki-client on console-ams.rpki-client.org