Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233362e302f32342d3234203d3e20323633343834.roa
File:                     3139312e3234322e3233362e302f32342d3234203d3e20323633343834.roa (raw, json)
Hash identifier:          huc5W3EZ1oIi9qFpphZ4wbMbAPGderGGHdtkcvlDo1E=
Subject key identifier:   ED:7D:EC:63:14:34:B3:97:AC:58:51:40:C0:F8:27:22:77:C4:4F:3F
Certificate issuer:       /CN=02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16
Certificate serial:       35BEEE71CD0EA2CA1717357D0B3445277139AD6E
Authority key identifier: 02:A1:DA:D3:EF:C0:EE:0E:D4:7E:89:C1:1A:1C:A4:51:51:F6:8C:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233362e302f32342d3234203d3e20323633343834.roa
Signing time:             Fri 01 Nov 2024 13:45:34 +0000
ROA not before:           Fri 01 Nov 2024 13:40:34 +0000
ROA not after:            Fri 31 Oct 2025 13:45:34 +0000
asID:                     263484
IP address blocks:        191.242.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.crl
                          rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:be:ee:71:cd:0e:a2:ca:17:17:35:7d:0b:34:45:27:71:39:ad:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16
        Validity
            Not Before: Nov  1 13:40:34 2024 GMT
            Not After : Oct 31 13:45:34 2025 GMT
        Subject: CN=ED7DEC631434B397AC585140C0F8272277C44F3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2e:c1:67:0b:ba:c5:2c:76:5d:6d:b5:91:93:
                    36:7b:b9:36:14:a7:5f:a2:32:8a:a0:70:fd:2c:9f:
                    9a:fe:52:cb:de:93:a4:e2:e1:3a:90:35:7e:66:a3:
                    9c:4e:78:f0:47:70:b6:b4:0f:d3:6a:30:b4:54:65:
                    66:e4:b1:08:d9:f2:d6:fc:2d:b3:e9:65:90:ec:0d:
                    34:aa:a3:9b:93:b6:9f:2f:4a:93:0e:a5:84:f3:34:
                    bb:7a:55:bd:0e:8f:26:ab:98:f4:fb:8d:73:1e:15:
                    8a:23:68:2b:34:59:1b:62:35:2a:6e:64:9a:f4:9b:
                    0b:80:15:d3:d7:69:64:b2:21:97:6f:9b:9e:8d:01:
                    a0:f4:59:be:39:6d:63:fa:fb:8b:a5:93:b4:2c:b5:
                    0a:21:75:ce:3b:1e:74:ae:6b:a2:b0:d9:e8:d6:4d:
                    b7:bc:b7:fb:df:b2:6d:f9:da:20:4d:28:73:fc:11:
                    83:d0:ef:b1:4a:f5:48:1b:86:d9:0d:51:a2:ac:cc:
                    61:4c:4a:79:63:60:87:6b:c5:5d:f3:b6:04:aa:2e:
                    bb:97:91:a9:df:a6:ee:f5:10:4d:0d:89:88:8a:83:
                    1d:1e:ac:19:25:65:f0:11:0c:f6:fa:01:d5:4d:84:
                    30:cf:fa:79:81:f7:85:52:75:ed:dd:a6:68:38:c9:
                    1b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:7D:EC:63:14:34:B3:97:AC:58:51:40:C0:F8:27:22:77:C4:4F:3F
            X509v3 Authority Key Identifier:
                keyid:02:A1:DA:D3:EF:C0:EE:0E:D4:7E:89:C1:1A:1C:A4:51:51:F6:8C:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02A1DAD3EFC0EE0ED47E89C11A1CA45151F68C16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233362e302f32342d3234203d3e20323633343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:7f:ce:43:8b:3a:f7:4b:07:4e:e9:6d:49:22:8b:a2:44:8e:
         c9:c1:01:e2:8d:08:25:15:11:93:e8:5c:dd:4b:d3:35:ef:77:
         cd:08:02:ec:26:d7:ae:89:66:a6:80:5d:1c:ef:4c:1f:80:dd:
         26:9c:a6:e3:72:ce:3e:26:d9:93:ef:40:d9:b1:ef:81:8e:32:
         93:e5:20:6d:3b:25:93:41:ae:c5:bf:d5:8e:46:cd:57:e3:2d:
         1d:7d:90:7b:7f:71:8c:50:09:40:c4:f6:d0:92:fc:b6:68:6e:
         9f:3e:e7:8a:45:3a:0f:f8:fd:6a:93:36:c2:78:f4:04:ab:57:
         16:c9:32:f5:10:b5:d3:54:04:9a:cc:a8:fe:0f:e7:f9:5d:58:
         27:83:f9:de:e0:f0:7c:9f:f5:34:c9:82:f4:15:24:8b:d1:27:
         3f:73:de:08:20:4c:9b:75:86:ae:15:ab:bd:05:5d:c2:bb:10:
         03:33:49:c0:75:b6:81:17:c4:ee:5b:b2:b5:26:57:f4:4a:db:
         a3:8d:dd:7b:4f:3d:7b:61:df:02:fa:1a:1c:2f:6b:60:7c:e2:
         1c:fd:0b:15:99:6e:78:08:fc:d0:03:6f:4a:58:c1:2c:ea:b9:
         89:32:e8:0f:20:2d:08:fc:b7:bd:a5:d8:09:7b:e5:c7:bb:9e:
         0c:b7:ba:87
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUNb7ucc0OosoXFzV9CzRFJ3E5rW4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDJBMURBRDNFRkMwRUUwRUQ0N0U4OUMxMUExQ0E0NTE1
MUY2OEMxNjAeFw0yNDExMDExMzQwMzRaFw0yNTEwMzExMzQ1MzRaMDMxMTAvBgNV
BAMTKEVEN0RFQzYzMTQzNEIzOTdBQzU4NTE0MEMwRjgyNzIyNzdDNDRGM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9LsFnC7rFLHZdbbWRkzZ7uTYU
p1+iMoqgcP0sn5r+Usvek6Ti4TqQNX5mo5xOePBHcLa0D9NqMLRUZWbksQjZ8tb8
LbPpZZDsDTSqo5uTtp8vSpMOpYTzNLt6Vb0OjyarmPT7jXMeFYojaCs0WRtiNSpu
ZJr0mwuAFdPXaWSyIZdvm56NAaD0Wb45bWP6+4ulk7QstQohdc47HnSua6Kw2ejW
Tbe8t/vfsm352iBNKHP8EYPQ77FK9UgbhtkNUaKszGFMSnljYIdrxV3ztgSqLruX
kanfpu71EE0NiYiKgx0erBklZfARDPb6AdVNhDDP+nmB94VSde3dpmg4yRuxAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU7X3sYxQ0s5esWFFAwPgnInfETz8wHwYDVR0j
BBgwFoAUAqHa0+/A7g7UfonBGhykUVH2jBYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXNGaXJNc0tZa05oRkRiblZydTF6aGhyUnZHRWdxOTV4WmNOa0hwNEN2
WVIvMC8wMkExREFEM0VGQzBFRTBFRDQ3RTg5QzExQTFDQTQ1MTUxRjY4QzE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyQTFEQUQzRUZDMEVFMEVE
NDdFODlDMTFBMUNBNDUxNTFGNjhDMTYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FzRmlyTXNLWWtOaEZEYm5WcnUxemhoclJ2R0VncTk1eFpjTmtIcDRDdllSLzAv
MzEzOTMxMmUzMjM0MzIyZTMyMzMzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM0MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL/y7DANBgkqhkiG9w0BAQsFAAOCAQEATX/O
Q4s690sHTultSSKLokSOycEB4o0IJRURk+hc3UvTNe93zQgC7CbXrolmpoBdHO9M
H4DdJpym43LOPibZk+9A2bHvgY4yk+UgbTslk0Guxb/VjkbNV+MtHX2Qe39xjFAJ
QMT20JL8tmhunz7nikU6D/j9apM2wnj0BKtXFsky9RC101QEmsyo/g/n+V1YJ4P5
3uDwfJ/1NMmC9BUki9EnP3PeCCBMm3WGrhWrvQVdwrsQAzNJwHW2gRfE7luytSZX
9Erbo43de089e2HfAvoaHC9rYHziHP0LFZlueAj80ANvSljBLOq5iTLoDyAtCPy3
vaXYCXvlx7ueDLe6hw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:55 2024 by rpki-client on console-fra.rpki-client.org