Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3230312e3231362e3130342e302f32322d3332203d3e20323732363435.roa
File:                     3230312e3231362e3130342e302f32322d3332203d3e20323732363435.roa (raw, json)
Hash identifier:          R/VPwXu/0POjfjltlV6mgQmUYlYRsaEZt8QkWI7T33o=
Subject key identifier:   A0:30:85:00:4A:3F:F8:85:D6:46:E0:C5:17:4C:BA:DD:84:B6:D9:59
Certificate issuer:       /CN=B7BC2675026F7F7542C7252D1D9F98C819A12C98
Certificate serial:       189339CA578C96BCF100CACB66023A4C0A5C9413
Authority key identifier: B7:BC:26:75:02:6F:7F:75:42:C7:25:2D:1D:9F:98:C8:19:A1:2C:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7BC2675026F7F7542C7252D1D9F98C819A12C98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3230312e3231362e3130342e302f32322d3332203d3e20323732363435.roa
Signing time:             Fri 25 Oct 2024 04:33:28 +0000
ROA not before:           Fri 25 Oct 2024 04:28:28 +0000
ROA not after:            Fri 24 Oct 2025 04:33:28 +0000
asID:                     272645
IP address blocks:        201.216.104.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/B7BC2675026F7F7542C7252D1D9F98C819A12C98.crl
                          rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/B7BC2675026F7F7542C7252D1D9F98C819A12C98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7BC2675026F7F7542C7252D1D9F98C819A12C98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:93:39:ca:57:8c:96:bc:f1:00:ca:cb:66:02:3a:4c:0a:5c:94:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7BC2675026F7F7542C7252D1D9F98C819A12C98
        Validity
            Not Before: Oct 25 04:28:28 2024 GMT
            Not After : Oct 24 04:33:28 2025 GMT
        Subject: CN=A03085004A3FF885D646E0C5174CBADD84B6D959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ff:4c:57:ca:60:07:dc:9c:05:39:6f:f8:eb:
                    95:6e:ca:49:e8:01:00:50:dd:1c:b9:98:9a:75:9e:
                    01:b7:ef:ea:47:e5:e5:e7:9e:6e:eb:c0:eb:73:9f:
                    c6:c1:ca:fd:e5:54:20:20:15:60:d6:08:d8:43:9f:
                    42:fa:d7:83:53:14:c4:6b:d3:96:04:f5:d9:ed:93:
                    38:08:4f:95:15:2d:eb:e3:4b:37:be:7f:ac:8f:44:
                    70:bb:31:36:f0:77:dd:cf:8a:60:cb:1f:e0:9a:49:
                    a1:5c:11:bc:0b:4f:33:c5:c2:41:4a:08:e9:14:17:
                    aa:c5:9d:79:ba:d0:d8:5d:5d:93:73:ad:c9:12:ae:
                    33:f1:39:5d:4a:2e:ec:ce:d7:90:ac:1a:90:d7:47:
                    84:98:a7:ed:fb:cd:d2:ac:02:0c:91:9c:92:1a:20:
                    b3:39:d6:44:53:ba:a7:b0:87:5a:74:6a:73:50:05:
                    16:f5:7b:e2:54:b8:e0:7b:b1:ba:83:03:fa:28:8c:
                    ca:2a:aa:dc:ea:a9:06:5c:88:6f:99:66:72:0c:7c:
                    88:38:d7:1e:77:7b:be:ca:ef:43:03:12:22:71:f3:
                    b5:53:39:4a:ab:a4:6a:07:0b:a8:47:e7:f8:57:e9:
                    1a:14:a5:56:72:fa:a2:1f:4a:8b:0b:b7:74:f1:a0:
                    14:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:30:85:00:4A:3F:F8:85:D6:46:E0:C5:17:4C:BA:DD:84:B6:D9:59
            X509v3 Authority Key Identifier:
                keyid:B7:BC:26:75:02:6F:7F:75:42:C7:25:2D:1D:9F:98:C8:19:A1:2C:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/B7BC2675026F7F7542C7252D1D9F98C819A12C98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7BC2675026F7F7542C7252D1D9F98C819A12C98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3230312e3231362e3130342e302f32322d3332203d3e20323732363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:32:3a:20:ad:ad:b4:2c:7d:27:c5:7e:5b:c5:68:18:63:d5:
         15:6f:06:52:d9:60:37:c8:3c:df:16:ec:6d:a4:f9:6a:83:49:
         58:25:e7:de:2c:19:57:d5:83:39:35:eb:af:cc:06:35:75:55:
         84:00:4a:1c:b5:7b:50:e2:34:2a:0e:1c:ae:4c:20:af:5a:e8:
         b0:5b:b3:3e:b3:4e:51:64:02:67:a7:e1:80:b8:92:4a:89:d9:
         ee:be:32:a2:7c:76:09:3d:b3:eb:8c:1a:20:cc:7a:cf:a6:9d:
         b1:6c:e8:b0:e1:05:24:2d:98:72:88:4e:59:f2:af:87:ac:df:
         91:23:20:d1:ce:fa:4a:cd:b3:43:1a:0f:50:40:10:a6:7a:0a:
         13:00:dd:e7:69:dc:d7:26:29:a4:64:5b:ff:b0:87:57:6e:c4:
         2a:7d:12:fe:ea:59:31:aa:c4:38:dd:70:7b:a8:52:9a:ee:43:
         5a:5a:35:47:a3:60:8e:62:18:6d:c6:2c:13:b6:8d:36:1e:7f:
         c4:4e:ba:52:7c:d2:56:94:30:46:eb:fe:3a:99:8e:66:81:97:
         86:99:50:cd:ce:14:db:cb:ef:32:3f:31:95:aa:c2:59:8d:8b:
         ba:ab:b4:06:b3:8b:1a:4f:2d:a6:a7:42:27:c8:20:63:80:9c:
         48:37:68:b1
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUGJM5yleMlrzxAMrLZgI6TApclBMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdCQzI2NzUwMjZGN0Y3NTQyQzcyNTJEMUQ5Rjk4Qzgx
OUExMkM5ODAeFw0yNDEwMjUwNDI4MjhaFw0yNTEwMjQwNDMzMjhaMDMxMTAvBgNV
BAMTKEEwMzA4NTAwNEEzRkY4ODVENjQ2RTBDNTE3NENCQUREODRCNkQ5NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL/0xXymAH3JwFOW/465Vuykno
AQBQ3Ry5mJp1ngG37+pH5eXnnm7rwOtzn8bByv3lVCAgFWDWCNhDn0L614NTFMRr
05YE9dntkzgIT5UVLevjSze+f6yPRHC7MTbwd93PimDLH+CaSaFcEbwLTzPFwkFK
COkUF6rFnXm60NhdXZNzrckSrjPxOV1KLuzO15CsGpDXR4SYp+37zdKsAgyRnJIa
ILM51kRTuqewh1p0anNQBRb1e+JUuOB7sbqDA/oojMoqqtzqqQZciG+ZZnIMfIg4
1x53e77K70MDEiJx87VTOUqrpGoHC6hH5/hX6RoUpVZy+qIfSosLt3TxoBR1AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUoDCFAEo/+IXWRuDFF0y63YS22VkwHwYDVR0j
BBgwFoAUt7wmdQJvf3VCxyUtHZ+YyBmhLJgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWl6UFdReGRRaXlUdmFmN3lKcWh6NWZYRlNwVVJTd2l1QlRCMXdza0ha
NEIvMC9CN0JDMjY3NTAyNkY3Rjc1NDJDNzI1MkQxRDlGOThDODE5QTEyQzk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I3QkMyNjc1MDI2RjdGNzU0
MkM3MjUyRDFEOUY5OEM4MTlBMTJDOTguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlpelBXUXhkUWl5VHZhZjd5SnFoejVmWEZTcFVSU3dpdUJUQjF3c2tIWjRCLzAv
MzIzMDMxMmUzMjMxMzYyZTMxMzAzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzczMjM2MzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAsnYaDANBgkqhkiG9w0BAQsFAAOCAQEACjI6
IK2ttCx9J8V+W8VoGGPVFW8GUtlgN8g83xbsbaT5aoNJWCXn3iwZV9WDOTXrr8wG
NXVVhABKHLV7UOI0Kg4crkwgr1rosFuzPrNOUWQCZ6fhgLiSSonZ7r4yonx2CT2z
64waIMx6z6adsWzosOEFJC2YcohOWfKvh6zfkSMg0c76Ss2zQxoPUEAQpnoKEwDd
52nc1yYppGRb/7CHV27EKn0S/upZMarEON1we6hSmu5DWlo1R6NgjmIYbcYsE7aN
Nh5/xE66UnzSVpQwRuv+OpmOZoGXhplQzc4U28vvMj8xlarCWY2Luqu0BrOLGk8t
pqdCJ8ggY4CcSDdosQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:34 2024 by rpki-client on console-ams.rpki-client.org