Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AD4ThvuBsBYGEjJKHXJHt632XLa56TmXgxptJYfg6bTE/0/3139312e3234322e36342e302f32312d3332203d3e20323633343733.roa
File:                     3139312e3234322e36342e302f32312d3332203d3e20323633343733.roa (raw, json)
Hash identifier:          dh62SwpCLg4Xi3GMbWIAu66UaiCufGZsKgk5JK7bDHI=
Subject key identifier:   EB:D9:A2:BD:B3:C0:31:2C:E8:6C:6A:48:DA:9B:07:28:13:6D:C0:69
Certificate issuer:       /CN=1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53
Certificate serial:       1C69A71EF6A6BA6A35D1F701B0A8F6DF7D984025
Authority key identifier: 19:20:A0:AD:22:86:EB:26:B5:D8:87:A0:E2:DA:2E:52:90:F7:AD:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AD4ThvuBsBYGEjJKHXJHt632XLa56TmXgxptJYfg6bTE/0/3139312e3234322e36342e302f32312d3332203d3e20323633343733.roa
Signing time:             Tue 03 Sep 2024 22:39:53 +0000
ROA not before:           Tue 03 Sep 2024 22:34:53 +0000
ROA not after:            Tue 02 Sep 2025 22:39:53 +0000
asID:                     263473
IP address blocks:        191.242.64.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AD4ThvuBsBYGEjJKHXJHt632XLa56TmXgxptJYfg6bTE/0/1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53.crl
                          rsync://rpki-repo.registro.br/repo/AD4ThvuBsBYGEjJKHXJHt632XLa56TmXgxptJYfg6bTE/0/1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:04:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:69:a7:1e:f6:a6:ba:6a:35:d1:f7:01:b0:a8:f6:df:7d:98:40:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53
        Validity
            Not Before: Sep  3 22:34:53 2024 GMT
            Not After : Sep  2 22:39:53 2025 GMT
        Subject: CN=EBD9A2BDB3C0312CE86C6A48DA9B0728136DC069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:52:35:5d:28:36:7f:79:07:17:0d:5a:be:f9:
                    57:ef:b5:82:27:da:fa:2d:36:dd:21:cb:c3:1e:ff:
                    63:f6:7d:79:93:f5:54:35:47:c3:4b:50:f7:e0:1b:
                    05:d6:1c:cd:c9:e9:ef:2e:ba:52:4c:6b:eb:41:eb:
                    b4:bb:7d:29:91:d7:34:77:bb:df:16:38:31:39:cc:
                    c8:63:46:fb:5b:fe:15:d1:3e:3f:92:d3:09:c0:ae:
                    cd:83:93:17:ed:f8:59:fd:2b:f4:ae:0d:20:48:96:
                    50:e8:ee:b2:5f:25:5e:fe:21:53:d4:58:9c:44:bb:
                    3e:4a:a7:06:e7:3e:d1:4a:71:5e:00:88:0f:f1:40:
                    af:5c:87:6a:dd:d7:23:84:5b:8d:85:73:29:44:19:
                    29:b3:f9:64:e9:80:40:11:44:a0:64:59:75:7f:c6:
                    fe:00:ac:50:47:c3:53:d8:9d:57:d6:11:b9:4b:80:
                    14:64:9b:ae:9e:65:2a:fa:68:bd:5c:5a:d2:3a:bd:
                    f5:10:b9:61:6a:dc:b6:ff:b2:c5:d5:4b:29:e3:15:
                    76:63:cf:15:eb:5e:31:b8:33:c9:1c:43:09:6b:fe:
                    ae:c2:70:b7:28:38:41:ea:c5:6c:44:c9:3e:a0:e4:
                    ff:4b:02:02:94:d5:88:52:f0:70:01:9c:a9:68:0b:
                    94:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D9:A2:BD:B3:C0:31:2C:E8:6C:6A:48:DA:9B:07:28:13:6D:C0:69
            X509v3 Authority Key Identifier:
                keyid:19:20:A0:AD:22:86:EB:26:B5:D8:87:A0:E2:DA:2E:52:90:F7:AD:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AD4ThvuBsBYGEjJKHXJHt632XLa56TmXgxptJYfg6bTE/0/1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1920A0AD2286EB26B5D887A0E2DA2E5290F7AD53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AD4ThvuBsBYGEjJKHXJHt632XLa56TmXgxptJYfg6bTE/0/3139312e3234322e36342e302f32312d3332203d3e20323633343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         99:81:e4:f9:f7:39:78:42:9f:ea:33:27:9c:b8:77:88:63:e6:
         51:45:38:9c:37:7f:04:8e:14:3a:ea:7e:07:4f:e8:67:4a:01:
         9f:02:02:2c:7a:65:95:65:5b:e8:81:48:11:9d:b4:7e:1b:ab:
         38:c5:4a:83:8f:13:25:a7:e6:c1:46:3b:70:ed:a8:66:19:aa:
         8d:42:bb:5a:3e:c4:e9:e7:78:5a:64:d6:98:a5:03:37:d6:3d:
         ca:6d:56:f7:52:ea:67:f4:dd:73:8a:f3:38:67:36:16:9b:d2:
         2c:83:89:77:92:16:b9:a6:0e:3f:a2:76:2a:6a:7c:26:39:f6:
         c5:f8:3b:e3:1d:bb:9b:13:8a:54:67:ca:33:dc:2b:7e:b0:37:
         7e:71:7d:c6:f3:3e:6b:38:7e:dd:e2:57:76:61:41:b0:d5:a6:
         85:05:9d:a7:58:1f:40:d4:87:8f:83:59:0f:ce:34:e8:63:32:
         7c:da:8e:64:0c:df:6e:bc:2d:0e:ae:eb:2a:d5:15:b0:11:0b:
         d0:4a:2b:bd:b1:28:e9:40:ee:ca:8a:8c:74:cc:e3:78:ba:72:
         e0:70:ed:70:58:84:a7:da:4a:6c:00:aa:c6:dc:7d:a1:3e:c2:
         6b:26:de:ff:fc:63:61:87:da:d9:cc:81:62:8e:e9:5e:df:2e:
         2b:22:ab:ec
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHGmnHvamumo10fcBsKj2332YQCUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTkyMEEwQUQyMjg2RUIyNkI1RDg4N0EwRTJEQTJFNTI5
MEY3QUQ1MzAeFw0yNDA5MDMyMjM0NTNaFw0yNTA5MDIyMjM5NTNaMDMxMTAvBgNV
BAMTKEVCRDlBMkJEQjNDMDMxMkNFODZDNkE0OERBOUIwNzI4MTM2REMwNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNUjVdKDZ/eQcXDVq++VfvtYIn
2votNt0hy8Me/2P2fXmT9VQ1R8NLUPfgGwXWHM3J6e8uulJMa+tB67S7fSmR1zR3
u98WODE5zMhjRvtb/hXRPj+S0wnArs2Dkxft+Fn9K/SuDSBIllDo7rJfJV7+IVPU
WJxEuz5KpwbnPtFKcV4AiA/xQK9ch2rd1yOEW42FcylEGSmz+WTpgEARRKBkWXV/
xv4ArFBHw1PYnVfWEblLgBRkm66eZSr6aL1cWtI6vfUQuWFq3Lb/ssXVSynjFXZj
zxXrXjG4M8kcQwlr/q7CcLcoOEHqxWxEyT6g5P9LAgKU1YhS8HABnKloC5RdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU69mivbPAMSzobGpI2psHKBNtwGkwHwYDVR0j
BBgwFoAUGSCgrSKG6ya12Ieg4touUpD3rVMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUQ0VGh2dUJzQllHRWpKS0hYSkh0NjMyWExhNTZUbVhneHB0SllmZzZi
VEUvMC8xOTIwQTBBRDIyODZFQjI2QjVEODg3QTBFMkRBMkU1MjkwRjdBRDUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5MjBBMEFEMjI4NkVCMjZC
NUQ4ODdBMEUyREEyRTUyOTBGN0FENTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FENFRodnVCc0JZR0VqSktIWEpIdDYzMlhMYTU2VG1YZ3hwdEpZZmc2YlRFLzAv
MzEzOTMxMmUzMjM0MzIyZTM2MzQyZTMwMmYzMjMxMmQzMzMyMjAzZDNlMjAzMjM2
MzMzNDM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO/8kAwDQYJKoZIhvcNAQELBQADggEBAJmB5Pn3
OXhCn+ozJ5y4d4hj5lFFOJw3fwSOFDrqfgdP6GdKAZ8CAix6ZZVlW+iBSBGdtH4b
qzjFSoOPEyWn5sFGO3DtqGYZqo1Cu1o+xOnneFpk1pilAzfWPcptVvdS6mf03XOK
8zhnNhab0iyDiXeSFrmmDj+idipqfCY59sX4O+Mdu5sTilRnyjPcK36wN35xfcbz
Pms4ft3iV3ZhQbDVpoUFnadYH0DUh4+DWQ/ONOhjMnzajmQM3268LQ6u6yrVFbAR
C9BKK72xKOlA7sqKjHTM43i6cuBw7XBYhKfaSmwAqsbcfaE+wmsm3v/8Y2GH2tnM
gWKO6V7fLisiq+w=
-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:34 2024 by rpki-client on console-ams.rpki-client.org