Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233322e302f32312d3231203d3e20323633343834.roa
File:                     3139312e3234322e3233322e302f32312d3231203d3e20323633343834.roa (raw, json)
Hash identifier:          NPfwXWD8JroThP3E8w8a7HiW8qLAY/6tu31Ltbulemg=
Subject key identifier:   6A:37:78:B4:68:0D:BB:6C:1F:11:C0:62:61:69:61:45:26:BC:22:22
Certificate issuer:       /CN=02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16
Certificate serial:       5F60430D14D8B4EA0E0BEE48D730BEADBA962F49
Authority key identifier: 02:A1:DA:D3:EF:C0:EE:0E:D4:7E:89:C1:1A:1C:A4:51:51:F6:8C:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233322e302f32312d3231203d3e20323633343834.roa
Signing time:             Fri 01 Nov 2024 13:44:28 +0000
ROA not before:           Fri 01 Nov 2024 13:39:28 +0000
ROA not after:            Fri 31 Oct 2025 13:44:28 +0000
asID:                     263484
IP address blocks:        191.242.232.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.crl
                          rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:60:43:0d:14:d8:b4:ea:0e:0b:ee:48:d7:30:be:ad:ba:96:2f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16
        Validity
            Not Before: Nov  1 13:39:28 2024 GMT
            Not After : Oct 31 13:44:28 2025 GMT
        Subject: CN=6A3778B4680DBB6C1F11C0626169614526BC2222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d8:38:0e:89:8e:a3:97:fc:03:84:ba:d9:de:
                    17:1e:bf:0f:7b:00:14:05:59:dc:05:5a:15:28:0b:
                    68:6a:0b:47:f3:ac:78:fa:5c:87:d8:4e:8f:c6:18:
                    29:10:43:8e:7f:a8:ff:65:16:a6:eb:2c:54:36:55:
                    a7:12:7c:18:89:50:07:9d:82:f7:52:c2:97:45:7a:
                    56:97:c8:a3:1e:11:c3:5b:2d:c1:31:29:66:ba:8c:
                    85:ec:82:98:69:c0:bc:ab:45:48:e0:1e:37:3c:3a:
                    65:0a:ad:84:0b:c5:c9:eb:d9:78:cb:c5:e3:ce:ca:
                    1a:e5:01:a5:41:a7:85:9f:58:82:3a:33:65:48:35:
                    cd:ce:8f:dd:10:83:44:e4:5b:0d:9e:90:b4:bc:68:
                    52:5f:b4:1a:eb:6c:2d:29:4c:48:29:d6:84:04:f2:
                    29:81:04:17:99:1f:ce:f4:24:cc:9a:a9:55:11:09:
                    0b:48:c0:ca:08:d7:16:9e:66:52:d6:f0:5d:dd:3e:
                    28:3b:2d:7f:7d:68:e0:dd:69:36:28:f7:4a:39:37:
                    34:8c:0a:65:0a:aa:f2:c8:5c:73:85:db:82:6a:f8:
                    4e:54:dd:32:d4:c6:23:77:77:ea:1d:b9:79:32:76:
                    92:4d:6b:71:41:22:2d:9f:6c:ad:ea:18:17:67:f1:
                    a5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:37:78:B4:68:0D:BB:6C:1F:11:C0:62:61:69:61:45:26:BC:22:22
            X509v3 Authority Key Identifier:
                keyid:02:A1:DA:D3:EF:C0:EE:0E:D4:7E:89:C1:1A:1C:A4:51:51:F6:8C:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233322e302f32312d3231203d3e20323633343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a1:68:4b:9c:dd:2d:c6:52:4c:47:c9:8e:d7:19:99:d7:10:9d:
         ff:20:14:2a:c5:01:a6:21:e4:76:8f:ef:bb:c9:85:21:54:45:
         86:71:8e:fa:01:37:08:f1:e5:8c:10:7a:cd:23:04:94:9c:31:
         6b:1c:7e:8f:fa:37:f3:c7:25:36:31:45:de:07:9d:88:cf:81:
         5a:2f:b6:7e:b1:c7:ec:72:7f:c6:5d:bb:6b:f2:fc:33:e3:09:
         58:88:52:88:6d:6b:f2:1b:01:09:d3:bb:4e:c3:b2:d1:28:13:
         e8:b5:13:83:0d:ec:c9:a0:e7:ff:ea:63:31:55:9e:91:20:07:
         38:60:49:b4:77:2a:66:30:e7:17:ca:48:09:aa:9a:19:39:e5:
         ec:89:08:c0:0f:17:98:de:cb:91:24:24:69:c2:cd:1d:18:5e:
         90:7d:e7:e6:72:f4:31:a2:24:ba:f2:b1:ea:6c:59:fe:04:55:
         d2:03:3f:94:c9:e7:c9:23:71:2c:50:39:ca:a8:07:60:bd:fe:
         b2:0a:92:cc:58:16:c3:59:f6:17:b6:9c:6a:5d:5a:b7:f8:0e:
         fd:c7:d2:4b:d0:76:67:5e:30:61:f3:92:b2:05:43:f3:70:0b:
         06:2c:9c:f6:74:e1:1d:f4:e1:02:ab:22:55:d7:19:53:76:2b:
         f6:d9:62:16
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUX2BDDRTYtOoOC+5I1zC+rbqWL0kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDJBMURBRDNFRkMwRUUwRUQ0N0U4OUMxMUExQ0E0NTE1
MUY2OEMxNjAeFw0yNDExMDExMzM5MjhaFw0yNTEwMzExMzQ0MjhaMDMxMTAvBgNV
BAMTKDZBMzc3OEI0NjgwREJCNkMxRjExQzA2MjYxNjk2MTQ1MjZCQzIyMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS2DgOiY6jl/wDhLrZ3hcevw97
ABQFWdwFWhUoC2hqC0fzrHj6XIfYTo/GGCkQQ45/qP9lFqbrLFQ2VacSfBiJUAed
gvdSwpdFelaXyKMeEcNbLcExKWa6jIXsgphpwLyrRUjgHjc8OmUKrYQLxcnr2XjL
xePOyhrlAaVBp4WfWII6M2VINc3Oj90Qg0TkWw2ekLS8aFJftBrrbC0pTEgp1oQE
8imBBBeZH870JMyaqVURCQtIwMoI1xaeZlLW8F3dPig7LX99aODdaTYo90o5NzSM
CmUKqvLIXHOF24Jq+E5U3TLUxiN3d+oduXkydpJNa3FBIi2fbK3qGBdn8aVDAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUajd4tGgNu2wfEcBiYWlhRSa8IiIwHwYDVR0j
BBgwFoAUAqHa0+/A7g7UfonBGhykUVH2jBYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXNGaXJNc0tZa05oRkRiblZydTF6aGhyUnZHRWdxOTV4WmNOa0hwNEN2
WVIvMC8wMkExREFEM0VGQzBFRTBFRDQ3RTg5QzExQTFDQTQ1MTUxRjY4QzE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyQTFEQUQzRUZDMEVFMEVE
NDdFODlDMTFBMUNBNDUxNTFGNjhDMTYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FzRmlyTXNLWWtOaEZEYm5WcnUxemhoclJ2R0VncTk1eFpjTmtIcDRDdllSLzAv
MzEzOTMxMmUzMjM0MzIyZTMyMzMzMjJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMy
MzYzMzM0MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEA7/y6DANBgkqhkiG9w0BAQsFAAOCAQEAoWhL
nN0txlJMR8mO1xmZ1xCd/yAUKsUBpiHkdo/vu8mFIVRFhnGO+gE3CPHljBB6zSME
lJwxaxx+j/o388clNjFF3gediM+BWi+2frHH7HJ/xl27a/L8M+MJWIhSiG1r8hsB
CdO7TsOy0SgT6LUTgw3syaDn/+pjMVWekSAHOGBJtHcqZjDnF8pICaqaGTnl7IkI
wA8XmN7LkSQkacLNHRhekH3n5nL0MaIkuvKx6mxZ/gRV0gM/lMnnySNxLFA5yqgH
YL3+sgqSzFgWw1n2F7acal1at/gO/cfSS9B2Z14wYfOSsgVD83ALBiyc9nThHfTh
AqsiVdcZU3Yr9tliFg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:40 2024 by rpki-client on console-ams.rpki-client.org