Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/3139322e3134342e3130302e302f32322d3234203d3e20323636323131.roa
File:                     3139322e3134342e3130302e302f32322d3234203d3e20323636323131.roa (raw, json)
Hash identifier:          6NZpJdlzx+yT8ULoZ/mZONQfSDCFZPrUDU/yVYUTtUo=
Subject key identifier:   68:77:31:75:07:C6:A9:17:44:A8:0E:7C:9A:40:73:3F:AE:51:5D:FE
Certificate issuer:       /CN=F5B3CC6963F291D11F0193BD27FC4E83D14592B9
Certificate serial:       14E21F445CE173457B8EA4A7125E3A90A32EBDC5
Authority key identifier: F5:B3:CC:69:63:F2:91:D1:1F:01:93:BD:27:FC:4E:83:D1:45:92:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/3139322e3134342e3130302e302f32322d3234203d3e20323636323131.roa
Signing time:             Wed 03 Apr 2024 18:32:01 +0000
ROA not before:           Wed 03 Apr 2024 18:27:01 +0000
ROA not after:            Wed 02 Apr 2025 18:32:01 +0000
asID:                     266211
IP address blocks:        192.144.100.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.crl
                          rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e2:1f:44:5c:e1:73:45:7b:8e:a4:a7:12:5e:3a:90:a3:2e:bd:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5B3CC6963F291D11F0193BD27FC4E83D14592B9
        Validity
            Not Before: Apr  3 18:27:01 2024 GMT
            Not After : Apr  2 18:32:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ad:c0:78:0c:01:28:07:7b:7d:53:b8:76:43:
                    a0:2b:d9:3a:82:7b:96:d1:a7:3e:19:b6:52:c2:a9:
                    3a:44:04:06:84:24:a1:3e:90:a1:9e:22:ab:07:ca:
                    cb:ee:b9:3d:54:72:2f:b7:09:79:a7:24:a6:dc:29:
                    cd:42:76:39:2c:05:8e:5b:97:f5:22:bd:3d:3d:63:
                    07:ce:18:e2:93:67:4c:ae:60:b4:a7:55:ca:48:e9:
                    bd:ad:18:53:77:bd:0b:a2:d0:90:55:05:1c:c5:7f:
                    6d:46:43:8e:07:ea:51:36:fc:13:5c:c0:7e:b7:04:
                    a0:00:ea:91:d7:48:29:94:a1:a6:d5:f4:a2:15:36:
                    78:21:a5:32:55:a8:8f:0d:3c:6c:51:de:8f:dd:2d:
                    60:99:63:93:30:ce:aa:fc:70:7d:ee:b5:36:7f:49:
                    a6:26:9b:dd:84:4b:16:8a:6f:98:b2:e0:8f:9e:1c:
                    f8:d8:7a:1c:84:d0:b3:92:f7:aa:15:c1:d1:16:c5:
                    33:60:bc:30:63:4c:de:29:74:71:2f:42:1b:d0:00:
                    4b:b5:29:e0:7d:c2:87:3f:11:63:f4:23:9c:66:fa:
                    ca:d4:c1:02:18:eb:61:07:87:fd:58:d5:93:5e:ef:
                    c7:30:13:62:48:20:95:1e:1a:3c:4d:1d:ef:ec:c9:
                    11:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:77:31:75:07:C6:A9:17:44:A8:0E:7C:9A:40:73:3F:AE:51:5D:FE
            X509v3 Authority Key Identifier:
                keyid:F5:B3:CC:69:63:F2:91:D1:1F:01:93:BD:27:FC:4E:83:D1:45:92:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5B3CC6963F291D11F0193BD27FC4E83D14592B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/1/3139322e3134342e3130302e302f32322d3234203d3e20323636323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:3e:2c:29:b1:60:c3:7f:d5:5c:98:6b:8a:1e:40:56:e3:54:
         25:b5:f3:31:b1:84:ab:90:bd:89:66:b2:41:ce:d2:75:87:a5:
         fb:93:22:32:74:6c:c9:eb:75:9f:a3:75:40:12:0d:a3:74:5c:
         c9:91:24:db:72:8f:5a:c9:50:f6:5e:c8:17:5b:0f:38:2c:3a:
         4f:90:03:b1:f8:d0:8c:c4:0b:95:cd:05:48:50:05:01:b4:0f:
         a2:fc:1d:09:0f:aa:7b:84:0f:24:2c:e8:a7:e8:70:0f:d9:bb:
         7f:b0:80:93:d1:d1:5d:36:c9:d0:77:31:88:00:d1:05:38:0e:
         0b:19:54:4b:a2:a0:71:ca:5b:48:eb:93:de:c3:1b:4e:ba:7f:
         16:c8:9d:1c:8d:4b:d7:9f:2f:47:c4:90:dd:53:55:86:56:9a:
         65:a8:d2:70:5e:db:74:72:19:e4:c2:6e:71:bb:f2:50:38:f0:
         67:fe:e9:f2:b7:9d:ba:43:36:e8:ae:d2:b8:54:94:3b:60:55:
         1b:c3:c2:31:da:6d:a1:a8:9b:13:1e:5c:72:90:5d:33:2d:75:
         7b:47:55:ee:e1:e5:28:46:a4:84:08:c6:b0:d1:8f:6b:d8:4e:
         3f:80:0c:35:56:e2:d3:e6:3e:53:2a:56:cb:ca:55:72:83:ad:
         01:f3:c9:5e
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUFOIfRFzhc0V7jqSnEl46kKMuvcUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjVCM0NDNjk2M0YyOTFEMTFGMDE5M0JEMjdGQzRFODNE
MTQ1OTJCOTAeFw0yNDA0MDMxODI3MDFaFw0yNTA0MDIxODMyMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTZBREMwNzgwQzAxMjgwNzdC
N0Q1M0I4NzY0M0EwMkJEOTNBODI3Qjk2RDFBNzNFMTlCNjUyQzJBOTNBNDQwNDA2
ODQyNEExM0U5MEExOUUyMkFCMDdDQUNCRUVCOTNENTQ3MjJGQjcwOTc5QTcyNEE2
REMyOUNENDI3NjM5MkMwNThFNUI5N0Y1MjJCRDNEM0Q2MzA3Q0UxOEUyOTM2NzRD
QUU2MEI0QTc1NUNBNDhFOUJEQUQxODUzNzdCRDBCQTJEMDkwNTUwNTFDQzU3RjZE
NDY0MzhFMDdFQTUxMzZGQzEzNUNDMDdFQjcwNEEwMDBFQTkxRDc0ODI5OTRBMUE2
RDVGNEEyMTUzNjc4MjFBNTMyNTVBODhGMEQzQzZDNTFERThGREQyRDYwOTk2Mzkz
MzBDRUFBRkM3MDdERUVCNTM2N0Y0OUE2MjY5QkREODQ0QjE2OEE2Rjk4QjJFMDhG
OUUxQ0Y4RDg3QTFDODREMEIzOTJGN0FBMTVDMUQxMTZDNTMzNjBCQzMwNjM0Q0RF
Mjk3NDcxMkY0MjFCRDAwMDRCQjUyOUUwN0RDMjg3M0YxMTYzRjQyMzlDNjZGQUNB
RDRDMTAyMThFQjYxMDc4N0ZENThENTkzNUVFRkM3MzAxMzYyNDgyMDk1MUUxQTND
NEQxREVGRUNDOTExNUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEApq3AeAwBKAd7fVO4dkOgK9k6gnuW0ac+GbZSwqk6RAQGhCShPpCh
niKrB8rL7rk9VHIvtwl5pySm3CnNQnY5LAWOW5f1Ir09PWMHzhjik2dMrmC0p1XK
SOm9rRhTd70LotCQVQUcxX9tRkOOB+pRNvwTXMB+twSgAOqR10gplKGm1fSiFTZ4
IaUyVaiPDTxsUd6P3S1gmWOTMM6q/HB97rU2f0mmJpvdhEsWim+YsuCPnhz42Hoc
hNCzkveqFcHRFsUzYLwwY0zeKXRxL0Ib0ABLtSngfcKHPxFj9COcZvrK1MECGOth
B4f9WNWTXu/HMBNiSCCVHho8TR3v7MkRXQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FGh3MXUHxqkXRKgOfJpAcz+uUV3+MB8GA1UdIwQYMBaAFPWzzGlj8pHRHwGTvSf8
ToPRRZK5MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FWR0h2M2dmUnlCcnJx
c0ZZSFpXa2VuSGo2WXBtd1cyWmNVWVNTZGNVOXh3LzEvRjVCM0NDNjk2M0YyOTFE
MTFGMDE5M0JEMjdGQzRFODNEMTQ1OTJCOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9GNUIzQ0M2OTYzRjI5MUQxMUYwMTkzQkQyN0ZDNEU4M0QxNDU5
MkI5LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BVkdIdjNnZlJ5QnJycXNGWUha
V2tlbkhqNllwbXdXMlpjVVlTU2RjVTl4dy8xLzMxMzkzMjJlMzEzNDM0MmUzMTMw
MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzYzMjMxMzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BALAkGQwDQYJKoZIhvcNAQELBQADggEBAJc+LCmxYMN/1VyYa4oeQFbjVCW18zGx
hKuQvYlmskHO0nWHpfuTIjJ0bMnrdZ+jdUASDaN0XMmRJNtyj1rJUPZeyBdbDzgs
Ok+QA7H40IzEC5XNBUhQBQG0D6L8HQkPqnuEDyQs6KfocA/Zu3+wgJPR0V02ydB3
MYgA0QU4DgsZVEuioHHKW0jrk97DG066fxbInRyNS9efL0fEkN1TVYZWmmWo0nBe
23RyGeTCbnG78lA48Gf+6fK3nbpDNuiu0rhUlDtgVRvDwjHabaGomxMeXHKQXTMt
dXtHVe7h5ShGpIQIxrDRj2vYTj+ADDVW4tPmPlMqVsvKVXKDrQHzyV4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:56 2024 by rpki-client on console-fra.rpki-client.org