Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/AS262691.roa
File:                     AS262691.roa (raw, json)
Hash identifier:          Ed6Lxv/8iMv9SOOXIPQHmRdimPXlKgp9j9DYOHvgQJA=
Subject key identifier:   F6:6F:37:F9:8E:B4:98:89:B7:D1:0A:97:60:AF:0F:4E:F1:3F:8C:49
Certificate issuer:       /CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
Certificate serial:       719CCCE79CE47E4372C081D8E8B29354EF9DB90F
Authority key identifier: E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/AS262691.roa
Signing time:             Fri 08 Nov 2024 17:54:54 +0000
ROA not before:           Fri 08 Nov 2024 17:49:54 +0000
ROA not after:            Fri 07 Nov 2025 17:54:54 +0000
asID:                     262691
IP address blocks:        131.108.200.0/22 maxlen: 22
                          131.108.200.0/23 maxlen: 23
                          131.108.200.0/24 maxlen: 24
                          131.108.201.0/24 maxlen: 24
                          131.108.202.0/23 maxlen: 23
                          131.108.202.0/24 maxlen: 24
                          131.108.203.0/24 maxlen: 24
                          177.72.20.0/22 maxlen: 22
                          177.72.20.0/23 maxlen: 23
                          177.72.20.0/24 maxlen: 24
                          177.72.21.0/24 maxlen: 24
                          177.72.22.0/23 maxlen: 23
                          177.72.22.0/24 maxlen: 24
                          177.72.23.0/24 maxlen: 24
                          177.87.204.0/22 maxlen: 22
                          177.87.204.0/23 maxlen: 23
                          177.87.204.0/24 maxlen: 24
                          177.87.205.0/24 maxlen: 24
                          177.87.206.0/23 maxlen: 23
                          177.87.206.0/24 maxlen: 24
                          177.87.207.0/24 maxlen: 24
                          179.108.192.0/19 maxlen: 19
                          179.108.192.0/20 maxlen: 20
                          179.108.192.0/21 maxlen: 21
                          179.108.192.0/22 maxlen: 22
                          179.108.192.0/23 maxlen: 23
                          179.108.192.0/24 maxlen: 24
                          179.108.193.0/24 maxlen: 24
                          179.108.194.0/23 maxlen: 23
                          179.108.194.0/24 maxlen: 24
                          179.108.195.0/24 maxlen: 24
                          179.108.196.0/22 maxlen: 22
                          179.108.196.0/23 maxlen: 23
                          179.108.196.0/24 maxlen: 24
                          179.108.197.0/24 maxlen: 24
                          179.108.198.0/23 maxlen: 23
                          179.108.198.0/24 maxlen: 24
                          179.108.199.0/24 maxlen: 24
                          179.108.200.0/21 maxlen: 21
                          179.108.200.0/22 maxlen: 22
                          179.108.200.0/23 maxlen: 23
                          179.108.200.0/24 maxlen: 24
                          179.108.201.0/24 maxlen: 24
                          179.108.202.0/23 maxlen: 23
                          179.108.202.0/24 maxlen: 24
                          179.108.203.0/24 maxlen: 24
                          179.108.204.0/22 maxlen: 22
                          179.108.204.0/23 maxlen: 23
                          179.108.204.0/24 maxlen: 24
                          179.108.205.0/24 maxlen: 24
                          179.108.206.0/23 maxlen: 23
                          179.108.206.0/24 maxlen: 24
                          179.108.207.0/24 maxlen: 24
                          179.108.208.0/20 maxlen: 20
                          179.108.208.0/21 maxlen: 21
                          179.108.208.0/22 maxlen: 22
                          179.108.208.0/23 maxlen: 23
                          179.108.208.0/24 maxlen: 24
                          179.108.209.0/24 maxlen: 24
                          179.108.210.0/23 maxlen: 23
                          179.108.210.0/24 maxlen: 24
                          179.108.211.0/24 maxlen: 24
                          179.108.212.0/22 maxlen: 22
                          179.108.212.0/23 maxlen: 23
                          179.108.212.0/24 maxlen: 24
                          179.108.214.0/23 maxlen: 23
                          179.108.216.0/21 maxlen: 21
                          179.108.216.0/22 maxlen: 22
                          179.108.216.0/23 maxlen: 23
                          179.108.218.0/23 maxlen: 23
                          179.108.220.0/22 maxlen: 22
                          179.108.220.0/23 maxlen: 23
                          179.108.220.0/24 maxlen: 24
                          179.108.222.0/23 maxlen: 23
                          179.108.224.0/20 maxlen: 20
                          179.108.224.0/21 maxlen: 21
                          179.108.224.0/22 maxlen: 22
                          179.108.224.0/23 maxlen: 23
                          179.108.226.0/23 maxlen: 23
                          179.108.228.0/22 maxlen: 22
                          179.108.228.0/23 maxlen: 23
                          179.108.230.0/23 maxlen: 23
                          179.108.232.0/21 maxlen: 21
                          179.108.232.0/22 maxlen: 22
                          179.108.232.0/23 maxlen: 23
                          179.108.234.0/23 maxlen: 23
                          179.108.236.0/22 maxlen: 22
                          179.108.236.0/23 maxlen: 23
                          179.108.238.0/23 maxlen: 23
                          186.194.208.0/20 maxlen: 20
                          186.194.208.0/21 maxlen: 21
                          186.194.208.0/22 maxlen: 22
                          186.194.208.0/23 maxlen: 23
                          186.194.210.0/23 maxlen: 23
                          186.194.212.0/22 maxlen: 22
                          186.194.212.0/23 maxlen: 23
                          186.194.214.0/23 maxlen: 23
                          186.194.216.0/21 maxlen: 21
                          186.194.216.0/22 maxlen: 22
                          186.194.216.0/23 maxlen: 23
                          186.194.218.0/23 maxlen: 23
                          186.194.220.0/22 maxlen: 22
                          186.194.220.0/23 maxlen: 23
                          186.194.222.0/23 maxlen: 23
                          186.224.48.0/22 maxlen: 22
                          186.224.48.0/24 maxlen: 24
                          186.224.52.0/23 maxlen: 23
                          186.224.54.0/24 maxlen: 24
                          186.224.56.0/21 maxlen: 21
                          187.94.192.0/20 maxlen: 20
                          187.94.192.0/21 maxlen: 21
                          187.94.192.0/22 maxlen: 22
                          187.94.192.0/23 maxlen: 23
                          187.94.192.0/24 maxlen: 24
                          187.94.194.0/23 maxlen: 23
                          187.94.196.0/22 maxlen: 22
                          187.94.196.0/23 maxlen: 23
                          187.94.198.0/23 maxlen: 23
                          187.94.200.0/21 maxlen: 21
                          187.94.200.0/22 maxlen: 22
                          187.94.200.0/23 maxlen: 23
                          187.94.202.0/23 maxlen: 23
                          187.94.203.0/24 maxlen: 24
                          187.94.204.0/22 maxlen: 22
                          187.94.204.0/23 maxlen: 23
                          187.94.206.0/23 maxlen: 23
                          2804:1cd8::/32 maxlen: 32
                          2804:1cd8:3::/48 maxlen: 48
                          2804:1cd8:c000::/36 maxlen: 36
                          2804:1cd8:d000::/36 maxlen: 36
                          2804:1cd8:e000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl
                          rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:9c:cc:e7:9c:e4:7e:43:72:c0:81:d8:e8:b2:93:54:ef:9d:b9:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A
        Validity
            Not Before: Nov  8 17:49:54 2024 GMT
            Not After : Nov  7 17:54:54 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:21:df:10:f8:30:ae:b8:3e:f3:70:fb:1f:60:
                    df:bd:ae:85:0f:1d:8f:46:46:e2:6c:ef:4a:14:df:
                    2c:07:69:94:b9:76:be:a4:ee:cc:d3:59:6f:57:9e:
                    1a:b5:d8:a6:16:17:2c:77:62:00:7a:68:9e:8e:c5:
                    b5:d2:e0:98:39:75:df:f5:2d:b4:c3:dc:0d:c8:50:
                    bb:d4:3f:d6:9a:6b:79:47:7d:d8:5c:18:7a:87:22:
                    d4:2c:c0:36:8c:ab:7a:8e:36:78:7f:92:a1:f7:15:
                    f2:c1:87:a4:99:ef:94:53:af:82:2e:ed:db:eb:79:
                    9e:73:4b:d6:0c:91:9f:fe:60:5b:11:73:70:14:6c:
                    8c:db:5e:d2:36:e1:41:7b:af:1e:5c:5f:06:1e:0c:
                    b1:5b:23:35:45:a7:4a:72:38:6c:a9:bc:67:c3:16:
                    39:9c:02:ec:a5:90:a0:ba:37:8d:71:80:71:53:60:
                    b3:de:87:8a:cf:eb:97:3d:b7:09:f5:37:da:47:fe:
                    98:bd:34:f2:65:76:51:42:d2:4e:01:5c:f3:9a:e8:
                    bf:93:e2:40:f2:2d:03:cb:88:a5:9c:86:d2:93:2f:
                    8d:55:8b:2b:02:0d:10:4a:34:20:c8:26:21:a7:a5:
                    ac:b5:94:c9:05:0a:36:df:98:80:b6:f4:05:05:c9:
                    1f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:6F:37:F9:8E:B4:98:89:B7:D1:0A:97:60:AF:0F:4E:F1:3F:8C:49
            X509v3 Authority Key Identifier:
                keyid:E9:57:89:E8:AC:DC:2D:59:5B:E3:3B:4A:0D:21:B6:DA:3C:A6:0B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E95789E8ACDC2D595BE33B4A0D21B6DA3CA60B4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/1/AS262691.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.200.0/22
                  177.72.20.0/22
                  177.87.204.0/22
                  179.108.192.0-179.108.239.255
                  186.194.208.0/20
                  186.224.48.0-186.224.54.255
                  186.224.56.0/21
                  187.94.192.0/20
                IPv6:
                  2804:1cd8::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:5d:26:73:8f:4b:66:bf:cb:62:33:26:a3:2f:4d:2f:1c:bc:
         b6:80:42:81:46:bf:d4:66:b2:9a:84:4b:b2:1c:91:9d:fb:a6:
         12:7c:fa:a9:c8:de:df:83:e3:f2:32:58:74:7b:2a:e1:1e:cc:
         0b:f2:56:2f:d5:d1:91:e8:dd:87:49:e9:a3:3e:5b:8a:2e:dd:
         6c:bd:ec:0e:d5:16:1e:6a:ff:6b:cd:50:cc:d8:85:db:56:4c:
         dd:54:01:66:e0:b8:16:df:cc:9e:7c:30:c3:7a:61:f3:04:c1:
         6f:0c:24:e0:e2:77:2a:17:f2:8a:b4:e3:82:f8:36:95:f3:78:
         9d:20:56:c1:04:ff:5c:6e:f9:ab:5d:01:3e:47:a5:e9:38:6c:
         3a:fd:ad:5f:07:82:2d:cf:8d:68:28:20:78:d9:83:32:fc:9c:
         9d:05:f0:44:d8:e0:44:67:ee:4a:06:d0:f4:f1:7f:7e:51:90:
         21:50:91:d6:a1:c6:d1:65:af:6d:f6:74:79:97:de:8a:6a:2f:
         a2:5c:38:92:76:43:64:43:3b:1c:a9:96:b4:2c:15:97:11:d2:
         bc:bd:08:11:d4:c3:58:b9:bb:b1:37:cc:a9:35:96:65:d5:e2:
         e7:fd:44:c2:36:25:79:43:03:82:f4:20:43:a4:27:e3:a2:c1:
         bd:17:11:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:17 2024 by rpki-client on console-fra.rpki-client.org