Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/2/3139322e3134302e35322e302f32322d3332203d3e20323636323033.roa
File:                     3139322e3134302e35322e302f32322d3332203d3e20323636323033.roa (raw, json)
Hash identifier:          11ga6PxyceuPBWQjlF12bM6gMQFY+WtV+tCuyrseGso=
Subject key identifier:   60:A0:D4:17:30:D3:3F:1F:19:A5:B3:72:5E:B5:AA:91:B3:65:A0:02
Certificate issuer:       /CN=54F744F07A36F2FE5C93C58CFAF4814D208822F0
Certificate serial:       046EC25769C3EFACF32F7A051A0F1798C85E428A
Authority key identifier: 54:F7:44:F0:7A:36:F2:FE:5C:93:C5:8C:FA:F4:81:4D:20:88:22:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54F744F07A36F2FE5C93C58CFAF4814D208822F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/2/3139322e3134302e35322e302f32322d3332203d3e20323636323033.roa
Signing time:             Thu 04 Apr 2024 03:08:51 +0000
ROA not before:           Thu 04 Apr 2024 03:03:51 +0000
ROA not after:            Thu 03 Apr 2025 03:08:51 +0000
asID:                     266203
IP address blocks:        192.140.52.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/2/54F744F07A36F2FE5C93C58CFAF4814D208822F0.crl
                          rsync://rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/2/54F744F07A36F2FE5C93C58CFAF4814D208822F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54F744F07A36F2FE5C93C58CFAF4814D208822F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 01:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:6e:c2:57:69:c3:ef:ac:f3:2f:7a:05:1a:0f:17:98:c8:5e:42:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54F744F07A36F2FE5C93C58CFAF4814D208822F0
        Validity
            Not Before: Apr  4 03:03:51 2024 GMT
            Not After : Apr  3 03:08:51 2025 GMT
        Subject: CN=60A0D41730D33F1F19A5B3725EB5AA91B365A002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:65:51:10:39:37:25:b7:76:fc:fd:89:25:b7:
                    87:ba:12:c2:2b:25:de:dc:c9:d5:e1:c0:4a:07:a5:
                    0e:90:27:1c:00:4c:6e:a4:26:89:9a:ad:6b:1c:ce:
                    45:b7:4a:cb:cc:e6:bd:c0:3a:ee:fd:90:9a:47:cc:
                    e6:8b:7b:03:7b:79:28:74:85:f4:ca:ec:c5:02:2f:
                    01:36:59:7c:13:51:54:ab:bb:2e:94:42:ab:b0:6a:
                    02:da:80:c7:35:fd:16:ec:90:06:8c:54:50:32:b5:
                    20:22:32:e1:42:35:c3:d6:0e:7b:74:62:fb:8d:37:
                    a1:62:b5:da:d9:d3:c5:e2:ce:9c:b8:6e:52:54:9b:
                    06:39:37:b7:64:34:75:4d:2d:67:be:b6:a0:7a:e0:
                    a8:f3:01:3c:26:e7:91:ea:08:56:6b:e8:98:0b:39:
                    55:48:dc:84:e1:4f:ad:79:46:4f:b3:0f:bf:f0:5f:
                    dd:bf:c0:fb:9f:9e:7c:2a:81:69:c8:0f:4e:4e:34:
                    82:b2:be:80:40:cb:47:28:0a:7d:4e:9f:e3:b1:3e:
                    f2:ee:73:f9:7b:f1:59:b9:f5:40:40:c5:e0:7b:56:
                    42:97:b6:4e:8f:3c:02:ae:8f:f8:92:55:59:d9:54:
                    9c:d0:d7:ef:82:90:d7:3f:eb:dc:71:19:0c:c4:4e:
                    90:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A0:D4:17:30:D3:3F:1F:19:A5:B3:72:5E:B5:AA:91:B3:65:A0:02
            X509v3 Authority Key Identifier:
                keyid:54:F7:44:F0:7A:36:F2:FE:5C:93:C5:8C:FA:F4:81:4D:20:88:22:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/2/54F744F07A36F2FE5C93C58CFAF4814D208822F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54F744F07A36F2FE5C93C58CFAF4814D208822F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9v26k818DE6MKRXdU8ggQu5KVMnjFgNS2nAqmyzigH4B/2/3139322e3134302e35322e302f32322d3332203d3e20323636323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:e9:ae:a6:0f:05:3f:1b:f8:8e:18:f8:c8:2e:b2:eb:b8:60:
         9d:b7:4c:6b:6c:70:75:4a:10:b4:7a:2e:2a:41:84:17:73:1a:
         ee:57:f3:b5:cb:83:2d:a8:93:ef:85:5c:17:c8:60:5e:f5:97:
         79:a0:c2:f3:6f:9a:9f:58:c4:99:21:f4:cd:31:ab:61:f3:12:
         a4:94:a2:9f:30:a8:69:3b:9a:0e:83:c1:a7:7e:c3:1a:b0:9f:
         f4:f4:0c:97:31:d8:52:60:f1:56:b7:d2:2c:c2:f3:c8:82:16:
         a7:0f:a9:4a:9f:ae:37:dc:ea:fb:2e:8c:53:9b:f2:f8:7e:56:
         fb:9d:c3:92:7f:2a:09:59:9b:73:78:6a:76:63:f3:10:3b:39:
         3f:53:b5:c1:7f:6d:a4:ff:11:1f:66:b8:c3:7e:69:45:fd:f7:
         74:22:5a:1d:fd:70:fd:54:6b:cc:97:1e:7f:16:1c:36:50:0b:
         12:83:1b:42:3b:34:48:3c:e0:74:b1:64:47:09:e5:a8:28:e2:
         06:47:1b:5f:b9:fb:7d:19:4d:a9:43:e6:7a:cc:e0:71:44:0e:
         19:3b:45:73:2d:a2:38:7c:e2:3f:7d:13:e4:4c:11:40:38:36:
         78:78:e6:39:9a:99:ab:27:3d:72:4b:13:17:6a:51:0c:13:bb:
         06:5b:97:5c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBG7CV2nD76zzL3oFGg8XmMheQoowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRGNzQ0RjA3QTM2RjJGRTVDOTNDNThDRkFGNDgxNEQy
MDg4MjJGMDAeFw0yNDA0MDQwMzAzNTFaFw0yNTA0MDMwMzA4NTFaMDMxMTAvBgNV
BAMTKDYwQTBENDE3MzBEMzNGMUYxOUE1QjM3MjVFQjVBQTkxQjM2NUEwMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ZVEQOTclt3b8/Yklt4e6EsIr
Jd7cydXhwEoHpQ6QJxwATG6kJomarWsczkW3SsvM5r3AOu79kJpHzOaLewN7eSh0
hfTK7MUCLwE2WXwTUVSruy6UQquwagLagMc1/RbskAaMVFAytSAiMuFCNcPWDnt0
YvuNN6FitdrZ08Xizpy4blJUmwY5N7dkNHVNLWe+tqB64KjzATwm55HqCFZr6JgL
OVVI3IThT615Rk+zD7/wX92/wPufnnwqgWnID05ONIKyvoBAy0coCn1On+OxPvLu
c/l78Vm59UBAxeB7VkKXtk6PPAKuj/iSVVnZVJzQ1++CkNc/69xxGQzETpCDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUYKDUFzDTPx8ZpbNyXrWqkbNloAIwHwYDVR0j
BBgwFoAUVPdE8Ho28v5ck8WM+vSBTSCIIvAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXYyNms4MThERTZNS1JYZFU4Z2dRdTVLVk1uakZnTlMybkFxbXl6aWdI
NEIvMi81NEY3NDRGMDdBMzZGMkZFNUM5M0M1OENGQUY0ODE0RDIwODgyMkYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU0Rjc0NEYwN0EzNkYyRkU1
QzkzQzU4Q0ZBRjQ4MTREMjA4ODIyRjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl2MjZrODE4REU2TUtSWGRVOGdnUXU1S1ZNbmpGZ05TMm5BcW15emlnSDRCLzIv
MzEzOTMyMmUzMTM0MzAyZTM1MzIyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzYzMjMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALAjDQwDQYJKoZIhvcNAQELBQADggEBAJ7prqYP
BT8b+I4Y+Mgusuu4YJ23TGtscHVKELR6LipBhBdzGu5X87XLgy2ok++FXBfIYF71
l3mgwvNvmp9YxJkh9M0xq2HzEqSUop8wqGk7mg6Dwad+wxqwn/T0DJcx2FJg8Va3
0izC88iCFqcPqUqfrjfc6vsujFOb8vh+Vvudw5J/KglZm3N4anZj8xA7OT9TtcF/
baT/ER9muMN+aUX993QiWh39cP1Ua8yXHn8WHDZQCxKDG0I7NEg84HSxZEcJ5ago
4gZHG1+5+30ZTalD5nrM4HFEDhk7RXMtojh84j99E+RMEUA4Nnh45jmamasnPXJL
ExdqUQwTuwZbl1w=
-----END CERTIFICATE-----
Generated at Sat Jun 29 00:11:00 2024 by rpki-client on console-fra.rpki-client.org