Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3230392e302f32342d3234203d3e20323633313031.roa
File:                     3138362e3232352e3230392e302f32342d3234203d3e20323633313031.roa (raw, json)
Hash identifier:          Ve0t5RapW1L40dfkJU0SSY+aQzD98jVCxt2tG0X5ng0=
Subject key identifier:   A3:E2:43:C2:03:27:54:2D:A2:EA:54:FD:70:8A:AB:E1:37:E6:EA:6E
Certificate issuer:       /CN=0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43
Certificate serial:       0894E22DB2934F4C52A5C7366553F8AFF98F1B89
Authority key identifier: 0F:29:5E:9A:03:BD:F7:FF:2D:0A:B2:3B:8D:77:ED:EC:F9:B5:9C:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3230392e302f32342d3234203d3e20323633313031.roa
Signing time:             Thu 04 Apr 2024 01:08:39 +0000
ROA not before:           Thu 04 Apr 2024 01:03:39 +0000
ROA not after:            Thu 03 Apr 2025 01:08:39 +0000
asID:                     263101
IP address blocks:        186.225.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.crl
                          rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:29:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:94:e2:2d:b2:93:4f:4c:52:a5:c7:36:65:53:f8:af:f9:8f:1b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43
        Validity
            Not Before: Apr  4 01:03:39 2024 GMT
            Not After : Apr  3 01:08:39 2025 GMT
        Subject: CN=A3E243C20327542DA2EA54FD708AABE137E6EA6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:63:83:9a:8f:63:54:e6:e2:6d:41:2e:89:66:
                    c4:28:53:69:3f:30:39:95:3e:c6:03:8c:ba:80:17:
                    93:ad:b8:2e:aa:d6:67:f4:24:fe:80:69:a1:ee:01:
                    74:73:33:b7:a1:b3:92:03:94:93:1f:e9:51:7e:4f:
                    04:8d:fa:04:f7:d0:54:fa:f8:de:9e:6f:72:da:b6:
                    99:9a:93:46:90:f2:21:ef:41:c4:8b:08:3c:72:ab:
                    06:25:2a:4a:fb:4e:e8:1a:6d:72:69:b9:df:7d:fc:
                    c0:c4:df:8a:0e:3a:7d:91:d0:66:87:4b:a8:ef:0e:
                    f8:4d:70:dc:c1:a4:bf:fb:c7:5d:dc:90:7c:a1:9b:
                    fa:3e:4f:7b:8f:ac:31:40:8c:81:6a:d0:cd:18:3d:
                    f8:0f:42:14:53:9b:9e:c1:98:08:54:4b:9b:dd:e5:
                    02:f2:44:da:8c:0f:12:b2:07:5e:10:53:59:78:53:
                    fd:8e:a2:5a:cc:2d:23:24:c3:b3:50:40:55:2f:dd:
                    25:e9:60:ad:ed:e0:89:91:a2:8d:a2:51:82:ba:a5:
                    72:34:4f:7c:1c:a1:0d:ee:6e:99:ae:38:65:1d:38:
                    21:4a:b3:48:64:6e:ee:a0:a0:ee:c8:e1:99:27:9f:
                    b7:06:f7:fb:81:88:29:d1:c0:ff:71:70:34:2a:8b:
                    33:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E2:43:C2:03:27:54:2D:A2:EA:54:FD:70:8A:AB:E1:37:E6:EA:6E
            X509v3 Authority Key Identifier:
                keyid:0F:29:5E:9A:03:BD:F7:FF:2D:0A:B2:3B:8D:77:ED:EC:F9:B5:9C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/3138362e3232352e3230392e302f32342d3234203d3e20323633313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:68:ea:c6:83:ce:b6:f2:00:ec:6c:cd:3d:3f:9b:93:a6:79:
         46:a0:dc:39:ca:0f:62:12:a9:e7:21:86:96:d5:ff:02:92:73:
         9e:59:26:55:21:90:07:ac:ee:7c:a1:0f:bc:67:4c:0a:9a:a1:
         ac:9a:b4:b1:2c:37:8c:b9:22:23:42:2b:df:92:9a:40:db:43:
         a6:36:6d:60:13:9f:64:5b:5d:22:35:fc:2d:15:56:55:0f:61:
         af:d2:39:6b:ce:9a:53:e3:43:72:b2:95:cb:f9:07:da:d5:67:
         39:09:45:21:a3:94:ec:4f:c4:db:ba:fd:bc:1b:65:cf:ff:e6:
         86:88:74:a8:50:a8:7d:3f:90:81:bf:ba:3d:47:1e:52:61:a3:
         d3:f2:d3:98:fc:19:73:97:2b:a2:07:0f:5b:8f:8d:86:25:e9:
         c5:7b:50:17:b8:79:48:64:25:bc:1d:17:1d:d2:28:38:9c:b2:
         02:0e:d3:cb:16:bf:cb:6b:61:33:fa:73:07:47:df:1d:eb:db:
         f0:3e:84:95:cb:e1:78:7c:8b:3e:77:a2:bd:ef:35:fa:e1:32:
         0f:e5:35:2b:ae:3f:82:26:b3:d1:eb:bf:75:7e:1b:a1:79:83:
         83:21:56:49:69:d2:c9:d0:8b:7c:7c:6f:c0:21:ec:9a:57:e8:
         01:c1:e2:72
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUCJTiLbKTT0xSpcc2ZVP4r/mPG4kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEYyOTVFOUEwM0JERjdGRjJEMEFCMjNCOEQ3N0VERUNG
OUI1OUM0MzAeFw0yNDA0MDQwMTAzMzlaFw0yNTA0MDMwMTA4MzlaMDMxMTAvBgNV
BAMTKEEzRTI0M0MyMDMyNzU0MkRBMkVBNTRGRDcwOEFBQkUxMzdFNkVBNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRY4Oaj2NU5uJtQS6JZsQoU2k/
MDmVPsYDjLqAF5OtuC6q1mf0JP6AaaHuAXRzM7ehs5IDlJMf6VF+TwSN+gT30FT6
+N6eb3Latpmak0aQ8iHvQcSLCDxyqwYlKkr7TugabXJpud99/MDE34oOOn2R0GaH
S6jvDvhNcNzBpL/7x13ckHyhm/o+T3uPrDFAjIFq0M0YPfgPQhRTm57BmAhUS5vd
5QLyRNqMDxKyB14QU1l4U/2OolrMLSMkw7NQQFUv3SXpYK3t4ImRoo2iUYK6pXI0
T3wcoQ3ubpmuOGUdOCFKs0hkbu6goO7I4Zknn7cG9/uBiCnRwP9xcDQqizM9AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUo+JDwgMnVC2i6lT9cIqr4Tfm6m4wHwYDVR0j
BBgwFoAUDylemgO99/8tCrI7jXft7Pm1nEMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXRmNUxKRUNhenBEYXZTTkh6d3JtMThoWERYS0pSaExpOUJhTFY2MVZB
YzMvMS8wRjI5NUU5QTAzQkRGN0ZGMkQwQUIyM0I4RDc3RURFQ0Y5QjU5QzQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGMjk1RTlBMDNCREY3RkYy
RDBBQjIzQjhENzdFREVDRjlCNTlDNDMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F0ZjVMSkVDYXpwRGF2U05IendybTE4aFhEWEtKUmhMaTlCYUxWNjFWQWMzLzEv
MzEzODM2MmUzMjMyMzUyZTMyMzAzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzMxMzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALrh0TANBgkqhkiG9w0BAQsFAAOCAQEAHGjq
xoPOtvIA7GzNPT+bk6Z5RqDcOcoPYhKp5yGGltX/ApJznlkmVSGQB6zufKEPvGdM
CpqhrJq0sSw3jLkiI0Ir35KaQNtDpjZtYBOfZFtdIjX8LRVWVQ9hr9I5a86aU+ND
crKVy/kH2tVnOQlFIaOU7E/E27r9vBtlz//mhoh0qFCofT+Qgb+6PUceUmGj0/LT
mPwZc5crogcPW4+NhiXpxXtQF7h5SGQlvB0XHdIoOJyyAg7Tyxa/y2thM/pzB0ff
Hevb8D6ElcvheHyLPneive81+uEyD+U1K64/giaz0eu/dX4boXmDgyFWSWnSydCL
fHxvwCHsmlfoAcHicg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:28 2024 by rpki-client on console-fra.rpki-client.org