Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/3230302e3132342e38382e302f32342d3234203d3e20323730323735.roa
File:                     3230302e3132342e38382e302f32342d3234203d3e20323730323735.roa (raw, json)
Hash identifier:          m51gKRFmm84IAxEaWpEFrJLhW/x7oJhWCaQtj4sSXr0=
Subject key identifier:   DB:F0:63:E1:5A:A1:83:C9:EF:47:56:A7:8D:15:11:C7:D2:C9:75:F5
Certificate issuer:       /CN=1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6
Certificate serial:       142DFA03109FEC60B19FA12E1CF4123F7472EFA9
Authority key identifier: 1A:50:5F:A7:6D:FA:4D:23:0C:9E:04:A9:1C:C5:9D:7C:F8:1D:72:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/3230302e3132342e38382e302f32342d3234203d3e20323730323735.roa
Signing time:             Thu 04 Apr 2024 06:00:38 +0000
ROA not before:           Thu 04 Apr 2024 05:55:38 +0000
ROA not after:            Thu 03 Apr 2025 06:00:38 +0000
asID:                     270275
IP address blocks:        200.124.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.crl
                          rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:2d:fa:03:10:9f:ec:60:b1:9f:a1:2e:1c:f4:12:3f:74:72:ef:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6
        Validity
            Not Before: Apr  4 05:55:38 2024 GMT
            Not After : Apr  3 06:00:38 2025 GMT
        Subject: CN=DBF063E15AA183C9EF4756A78D1511C7D2C975F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e9:27:e2:b4:5d:8d:c3:65:a8:a3:cb:6c:60:
                    20:6d:da:c9:42:86:54:1e:cc:68:3d:0f:cb:09:97:
                    01:74:e5:a8:6c:29:1e:c6:10:d9:9e:0a:c8:e9:78:
                    ad:71:62:eb:46:eb:e9:09:ac:64:64:5d:4a:2b:02:
                    64:08:3b:18:ea:02:1a:bc:8d:c1:8e:30:0d:25:5f:
                    fe:2c:fa:ed:67:6f:65:16:62:ff:b7:c1:54:c5:72:
                    b0:40:5c:20:e3:43:25:a9:57:22:6d:af:f6:b6:e9:
                    99:71:9b:12:95:bd:0e:c0:d9:a7:b0:59:28:3e:9f:
                    8f:2d:a4:8e:23:83:4a:59:61:fd:13:f4:e5:e0:93:
                    d6:28:81:ae:9d:e7:12:05:7b:3f:7a:cb:ae:d3:55:
                    33:ce:03:67:0a:89:1d:06:7b:01:26:00:9e:15:c5:
                    5b:bf:54:f7:7d:08:29:d5:d1:3e:99:1d:21:f9:27:
                    70:7e:9c:27:8f:d1:0a:71:1d:e7:78:15:fc:e2:aa:
                    7d:c0:12:3d:b9:b4:02:0c:3a:a0:7e:56:a2:0a:dd:
                    b6:01:f5:b4:5b:b4:19:b0:cd:69:55:67:58:0d:ff:
                    5d:2d:91:87:e3:86:4c:0c:70:d6:0e:17:11:9f:00:
                    fa:71:97:cd:b9:65:3b:8f:8a:f2:af:5e:4d:e9:c6:
                    7d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F0:63:E1:5A:A1:83:C9:EF:47:56:A7:8D:15:11:C7:D2:C9:75:F5
            X509v3 Authority Key Identifier:
                keyid:1A:50:5F:A7:6D:FA:4D:23:0C:9E:04:A9:1C:C5:9D:7C:F8:1D:72:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/3230302e3132342e38382e302f32342d3234203d3e20323730323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:63:72:ad:1e:2c:66:a9:00:e5:ba:29:c9:c8:7f:13:28:9b:
         2f:c4:6f:a2:a4:69:76:1c:1c:4b:0a:56:c9:01:a7:58:6e:6e:
         6d:62:21:be:be:1b:73:22:d0:20:69:25:3c:e3:81:49:6e:bd:
         b4:af:b9:c3:82:ec:1c:5c:67:15:52:6d:2d:df:a9:20:40:d6:
         94:2a:34:96:4f:2c:bc:d4:a2:a5:c7:86:ba:95:3a:06:7f:f7:
         f8:51:6b:d1:62:fe:6b:61:d8:dd:bf:aa:64:5e:39:37:18:9b:
         e7:7b:0d:c5:94:e1:3e:49:c9:9f:1c:43:47:37:be:b2:d3:47:
         b1:e7:e9:46:03:2a:7b:3a:31:be:94:8a:b9:58:7f:4f:3e:68:
         0a:59:ec:71:ab:9a:e0:dc:dd:75:f5:5f:ab:e9:67:6f:e1:19:
         04:78:6b:f9:c5:9c:96:37:8e:0a:c7:b2:bb:28:79:c7:f6:6f:
         07:fe:f4:88:7a:ed:eb:2d:9c:ef:45:0e:0d:33:fe:a7:05:ef:
         f1:3b:7d:8c:c6:21:47:e7:f8:01:46:ce:55:99:e9:bf:30:a1:
         c0:b9:78:32:d3:f3:cf:91:1e:9d:10:8e:c4:c9:44:38:d8:13:
         33:84:85:2d:5f:c7:6e:4e:db:c7:e3:3e:43:04:02:30:7c:82:
         30:fc:fa:3c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFC36AxCf7GCxn6EuHPQSP3Ry76kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE1MDVGQTc2REZBNEQyMzBDOUUwNEE5MUNDNTlEN0NG
ODFENzJCNjAeFw0yNDA0MDQwNTU1MzhaFw0yNTA0MDMwNjAwMzhaMDMxMTAvBgNV
BAMTKERCRjA2M0UxNUFBMTgzQzlFRjQ3NTZBNzhEMTUxMUM3RDJDOTc1RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv6SfitF2Nw2Woo8tsYCBt2slC
hlQezGg9D8sJlwF05ahsKR7GENmeCsjpeK1xYutG6+kJrGRkXUorAmQIOxjqAhq8
jcGOMA0lX/4s+u1nb2UWYv+3wVTFcrBAXCDjQyWpVyJtr/a26ZlxmxKVvQ7A2aew
WSg+n48tpI4jg0pZYf0T9OXgk9Yoga6d5xIFez96y67TVTPOA2cKiR0GewEmAJ4V
xVu/VPd9CCnV0T6ZHSH5J3B+nCeP0QpxHed4Ffziqn3AEj25tAIMOqB+VqIK3bYB
9bRbtBmwzWlVZ1gN/10tkYfjhkwMcNYOFxGfAPpxl825ZTuPivKvXk3pxn0vAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU2/Bj4Vqhg8nvR1anjRURx9LJdfUwHwYDVR0j
BBgwFoAUGlBfp236TSMMngSpHMWdfPgdcrYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXYyVHB3Y3FqdXV3QU42WFgyVjhkYkxXUUR2cThHUUMyS1VyTGZQYkxr
cnAvMS8xQTUwNUZBNzZERkE0RDIzMEM5RTA0QTkxQ0M1OUQ3Q0Y4MUQ3MkI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBNTA1RkE3NkRGQTREMjMw
QzlFMDRBOTFDQzU5RDdDRjgxRDcyQjYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F2MlRwd2NxanV1d0FONlhYMlY4ZGJMV1FEdnE4R1FDMktVckxmUGJMa3JwLzEv
MzIzMDMwMmUzMTMyMzQyZTM4MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzMjM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADIfFgwDQYJKoZIhvcNAQELBQADggEBAGhjcq0e
LGapAOW6KcnIfxMomy/Eb6KkaXYcHEsKVskBp1hubm1iIb6+G3Mi0CBpJTzjgUlu
vbSvucOC7BxcZxVSbS3fqSBA1pQqNJZPLLzUoqXHhrqVOgZ/9/hRa9Fi/mth2N2/
qmReOTcYm+d7DcWU4T5JyZ8cQ0c3vrLTR7Hn6UYDKns6Mb6UirlYf08+aApZ7HGr
muDc3XX1X6vpZ2/hGQR4a/nFnJY3jgrHsrsoecf2bwf+9Ih67estnO9FDg0z/qcF
7/E7fYzGIUfn+AFGzlWZ6b8wocC5eDLT88+RHp0QjsTJRDjYEzOEhS1fx25O28fj
PkMEAjB8gjD8+jw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:02 2024 by rpki-client on console-ams.rpki-client.org