Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/3138312e3139312e3234302e302f32322d3232203d3e20323637343536.roa
File:                     3138312e3139312e3234302e302f32322d3232203d3e20323637343536.roa (raw, json)
Hash identifier:          +XMievcqlvi3wTgS4tyRS4k7Rl8q7W2cl80/wY4PpkY=
Subject key identifier:   AC:C1:E9:AB:61:D9:AA:9B:F9:95:01:4A:0E:3B:FB:78:A2:40:69:0C
Certificate issuer:       /CN=76E1848CDA572B37FCF5D9FC2F32072BAB9072B2
Certificate serial:       36EC1E07159F7E83BBFF7D4CE5775AE41B4B8C6B
Authority key identifier: 76:E1:84:8C:DA:57:2B:37:FC:F5:D9:FC:2F:32:07:2B:AB:90:72:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/3138312e3139312e3234302e302f32322d3232203d3e20323637343536.roa
Signing time:             Tue 24 Sep 2024 11:56:02 +0000
ROA not before:           Tue 24 Sep 2024 11:51:02 +0000
ROA not after:            Tue 23 Sep 2025 11:56:02 +0000
asID:                     267456
IP address blocks:        181.191.240.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.crl
                          rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ec:1e:07:15:9f:7e:83:bb:ff:7d:4c:e5:77:5a:e4:1b:4b:8c:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76E1848CDA572B37FCF5D9FC2F32072BAB9072B2
        Validity
            Not Before: Sep 24 11:51:02 2024 GMT
            Not After : Sep 23 11:56:02 2025 GMT
        Subject: CN=ACC1E9AB61D9AA9BF995014A0E3BFB78A240690C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:98:3b:8f:e7:9f:31:4c:07:e9:dc:a2:55:75:
                    a5:d3:69:95:17:a1:d1:7f:c8:71:72:fd:8a:75:29:
                    e1:23:c5:a6:1d:d1:6e:d0:03:02:8f:5b:8f:27:29:
                    f9:b6:68:e3:f3:37:43:4c:46:ae:89:18:1c:8a:5c:
                    e5:14:c4:e1:76:fb:aa:64:50:25:66:fb:5e:68:e1:
                    ac:73:11:8b:70:fd:86:0d:1a:4d:3d:71:99:5e:70:
                    13:15:05:57:93:9b:18:f2:0c:a9:84:1c:cc:6c:7d:
                    23:cb:6d:c8:e8:9c:bf:0e:a7:30:2f:3d:cf:aa:72:
                    a3:bd:58:6c:3c:29:6f:75:63:3a:6a:3e:1c:64:72:
                    5b:a3:0b:5a:85:97:eb:6e:54:dc:de:de:0a:4e:82:
                    63:fe:4f:76:82:25:f6:d4:50:47:8a:85:e6:73:87:
                    51:12:b9:c7:b1:92:ed:fe:40:ec:ba:9a:f1:83:28:
                    17:f2:35:fb:f7:46:c2:ee:6c:a2:fb:9c:fc:06:7a:
                    48:ba:d4:34:ec:57:38:c9:c7:af:62:7d:66:ee:4b:
                    d8:65:3e:79:bb:b0:68:88:df:75:77:c3:c6:35:e5:
                    1a:d2:1f:7e:e1:d3:2b:bc:e3:20:05:89:da:91:eb:
                    b9:74:bd:4b:3a:ac:6c:99:d8:50:8a:ee:2f:dd:46:
                    bb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C1:E9:AB:61:D9:AA:9B:F9:95:01:4A:0E:3B:FB:78:A2:40:69:0C
            X509v3 Authority Key Identifier:
                keyid:76:E1:84:8C:DA:57:2B:37:FC:F5:D9:FC:2F:32:07:2B:AB:90:72:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/3138312e3139312e3234302e302f32322d3232203d3e20323637343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:11:49:c7:57:0b:2e:2c:1d:41:b0:e5:09:82:53:ac:a7:8e:
         9e:f9:33:82:33:50:d2:7a:7e:0a:82:70:0a:2b:e6:c5:b7:f7:
         32:0c:3f:fd:72:a1:89:ee:24:7b:ff:32:be:5c:43:53:f1:30:
         75:30:ad:90:b1:7e:1a:51:ae:6d:c9:c1:3b:7b:54:5f:f0:ff:
         2c:26:03:57:e1:da:59:27:0c:10:44:68:b5:1e:4e:09:0d:b4:
         ac:74:b0:63:90:99:21:41:b6:87:f9:73:b1:f7:c6:09:d5:37:
         2d:41:e2:bf:31:53:e3:b4:20:c6:9a:a5:92:8f:b2:b1:cf:80:
         a9:25:89:7c:37:83:bf:f9:8a:96:fc:8a:73:ee:60:1e:69:ce:
         ad:1a:44:27:20:a4:52:24:e4:76:1d:d0:0e:84:64:4e:97:db:
         68:3b:77:2e:84:dc:86:3c:b9:18:86:3e:40:d8:39:ef:19:f4:
         d0:b2:5f:f1:04:cf:36:34:08:0b:83:15:0a:03:99:27:4d:5a:
         7a:25:64:64:83:6f:fa:f6:e4:f7:79:83:1d:49:80:5d:c3:ad:
         d1:1d:d8:3c:c3:83:13:54:63:c7:41:84:da:1a:c4:b3:51:c3:
         cc:f2:b0:c3:9e:27:62:1d:94:6a:5b:3b:4d:56:a1:3b:be:fc:
         b9:bc:db:95
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUNuweBxWffoO7/31M5Xda5BtLjGswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzZFMTg0OENEQTU3MkIzN0ZDRjVEOUZDMkYzMjA3MkJB
QjkwNzJCMjAeFw0yNDA5MjQxMTUxMDJaFw0yNTA5MjMxMTU2MDJaMDMxMTAvBgNV
BAMTKEFDQzFFOUFCNjFEOUFBOUJGOTk1MDE0QTBFM0JGQjc4QTI0MDY5MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSmDuP558xTAfp3KJVdaXTaZUX
odF/yHFy/Yp1KeEjxaYd0W7QAwKPW48nKfm2aOPzN0NMRq6JGByKXOUUxOF2+6pk
UCVm+15o4axzEYtw/YYNGk09cZlecBMVBVeTmxjyDKmEHMxsfSPLbcjonL8OpzAv
Pc+qcqO9WGw8KW91YzpqPhxkclujC1qFl+tuVNze3gpOgmP+T3aCJfbUUEeKheZz
h1ESucexku3+QOy6mvGDKBfyNfv3RsLubKL7nPwGeki61DTsVzjJx69ifWbuS9hl
Pnm7sGiI33V3w8Y15RrSH37h0yu84yAFidqR67l0vUs6rGyZ2FCK7i/dRruPAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUrMHpq2HZqpv5lQFKDjv7eKJAaQwwHwYDVR0j
BBgwFoAUduGEjNpXKzf89dn8LzIHK6uQcrIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXVCZGI1eDhFYWpRVDlMTmExeUd4MUpmNWszbjZ2emI1blBZOW93cDFz
ZUIvMC83NkUxODQ4Q0RBNTcyQjM3RkNGNUQ5RkMyRjMyMDcyQkFCOTA3MkIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc2RTE4NDhDREE1NzJCMzdG
Q0Y1RDlGQzJGMzIwNzJCQUI5MDcyQjIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl1QmRiNXg4RWFqUVQ5TE5hMXlHeDFKZjVrM242dnpiNW5QWTlvd3Axc2VCLzAv
MzEzODMxMmUzMTM5MzEyZTMyMzQzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNzM0MzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArW/8DANBgkqhkiG9w0BAQsFAAOCAQEAIhFJ
x1cLLiwdQbDlCYJTrKeOnvkzgjNQ0np+CoJwCivmxbf3Mgw//XKhie4ke/8yvlxD
U/EwdTCtkLF+GlGubcnBO3tUX/D/LCYDV+HaWScMEERotR5OCQ20rHSwY5CZIUG2
h/lzsffGCdU3LUHivzFT47Qgxpqlko+ysc+AqSWJfDeDv/mKlvyKc+5gHmnOrRpE
JyCkUiTkdh3QDoRkTpfbaDt3LoTchjy5GIY+QNg57xn00LJf8QTPNjQIC4MVCgOZ
J01aeiVkZINv+vbk93mDHUmAXcOt0R3YPMODE1Rjx0GE2hrEs1HDzPKww54nYh2U
als7TVahO778ubzblQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:01 2024 by rpki-client on console-fra.rpki-client.org