Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3138342e302f32312d3231203d3e20323633333338.roa
File:                     3139312e33362e3138342e302f32312d3231203d3e20323633333338.roa (raw, json)
Hash identifier:          olu+XBJ5jop2SvBcWAqkjljU+a936f1e1kDOW7TkFHo=
Subject key identifier:   D6:9E:ED:36:26:AC:B8:61:56:6D:28:2E:CD:8E:75:90:CB:23:49:2D
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       54C83F6F89F864D9160B4EA81758A42734E64864
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3138342e302f32312d3231203d3e20323633333338.roa
Signing time:             Thu 16 May 2024 11:38:23 +0000
ROA not before:           Thu 16 May 2024 11:33:23 +0000
ROA not after:            Thu 15 May 2025 11:38:23 +0000
asID:                     263338
IP address blocks:        191.36.184.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl
                          rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c8:3f:6f:89:f8:64:d9:16:0b:4e:a8:17:58:a4:27:34:e6:48:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: May 16 11:33:23 2024 GMT
            Not After : May 15 11:38:23 2025 GMT
        Subject: CN=D69EED3626ACB861566D282ECD8E7590CB23492D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:73:95:9f:41:0a:ff:58:16:ff:63:c2:76:ac:
                    f0:ad:df:d1:6b:5e:1c:33:98:03:1f:89:b3:16:d0:
                    a5:06:b0:0c:37:8a:32:2f:7e:16:10:cf:5f:3c:88:
                    48:61:5c:d0:b2:60:6e:ec:1e:2e:09:aa:d9:bb:9d:
                    b1:c8:7a:f1:58:f7:e1:91:11:73:6d:e5:bf:b0:c2:
                    96:90:cd:75:ed:5b:97:3c:33:c8:0e:72:98:fc:bc:
                    77:2a:34:1c:f6:02:38:d1:9c:25:b4:71:a0:49:0b:
                    df:f6:14:64:f1:25:8b:e3:9f:97:15:97:b6:53:bc:
                    3b:a9:7e:ea:ec:df:6c:8a:e2:5c:11:66:d4:2d:da:
                    8d:4d:bd:48:6f:dc:42:01:02:ad:dc:8f:b2:d2:f4:
                    4d:ae:04:1a:24:fb:98:ba:f4:18:55:46:36:4b:cc:
                    5c:ae:df:0b:0b:39:35:76:f5:8c:62:31:fc:06:8a:
                    62:0b:45:87:ab:34:cf:ff:b8:7d:83:9f:7e:91:a5:
                    37:d0:31:31:40:00:86:5a:de:f1:20:cb:37:2d:05:
                    d6:30:c0:a4:03:15:05:6a:5e:4e:2d:ed:ac:2e:3f:
                    5c:98:7e:49:3f:c4:23:54:57:5e:f5:1f:d5:fa:b9:
                    22:01:38:61:c0:94:b0:e0:22:70:dd:57:88:18:af:
                    19:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:9E:ED:36:26:AC:B8:61:56:6D:28:2E:CD:8E:75:90:CB:23:49:2D
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3138342e302f32312d3231203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5e:cf:97:8b:05:b3:14:33:fc:42:b0:a3:73:c7:7c:47:a4:36:
         17:bb:13:18:ce:8a:ab:c0:10:e9:7b:be:65:e1:99:ab:16:9a:
         e7:cb:8e:97:60:fc:4b:b0:59:f5:a1:ed:b2:5f:97:8b:63:ce:
         07:d5:ec:be:54:f1:8a:e5:c7:64:ba:63:58:ac:8c:1e:c8:c1:
         e5:cf:c5:84:42:f9:f7:6a:11:01:e7:ed:cd:84:4f:61:6a:0a:
         bb:6d:6f:57:17:ee:0b:07:fd:17:ed:d0:36:e8:ae:df:fb:87:
         af:d8:6b:b1:80:86:f2:f8:a9:11:5e:42:69:9f:dc:9f:e6:56:
         b8:2a:2b:fb:14:3d:1c:78:b0:e8:75:4e:84:15:64:de:7f:6d:
         30:65:61:67:75:11:ab:9d:53:63:cf:ae:06:3a:e0:8c:a0:d7:
         f4:97:24:72:ec:6c:50:cd:3e:59:b7:25:c7:90:8a:8e:93:62:
         ad:64:65:be:8b:e8:55:13:31:28:cd:1b:a4:8d:75:78:3e:68:
         a7:ac:95:94:1c:76:c7:a4:dd:8d:bc:9d:0b:15:3a:58:fb:e8:
         50:9c:b4:24:bc:4a:5b:f6:49:8f:fa:49:4c:d6:66:a4:b8:15:
         dd:d2:c4:6b:93:b5:2b:50:c9:ee:6a:29:0e:63:88:e8:e1:6c:
         8b:bf:12:34
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVMg/b4n4ZNkWC06oF1ikJzTmSGQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0I0NjM4NTNFQTRBQzAxMkJEOUYzMTk0Q0ZBMzNBRjMy
NTkxREYwQjAeFw0yNDA1MTYxMTMzMjNaFw0yNTA1MTUxMTM4MjNaMDMxMTAvBgNV
BAMTKEQ2OUVFRDM2MjZBQ0I4NjE1NjZEMjgyRUNEOEU3NTkwQ0IyMzQ5MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTc5WfQQr/WBb/Y8J2rPCt39Fr
XhwzmAMfibMW0KUGsAw3ijIvfhYQz188iEhhXNCyYG7sHi4Jqtm7nbHIevFY9+GR
EXNt5b+wwpaQzXXtW5c8M8gOcpj8vHcqNBz2AjjRnCW0caBJC9/2FGTxJYvjn5cV
l7ZTvDupfurs32yK4lwRZtQt2o1NvUhv3EIBAq3cj7LS9E2uBBok+5i69BhVRjZL
zFyu3wsLOTV29YxiMfwGimILRYerNM//uH2Dn36RpTfQMTFAAIZa3vEgyzctBdYw
wKQDFQVqXk4t7awuP1yYfkk/xCNUV171H9X6uSIBOGHAlLDgInDdV4gYrxnfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU1p7tNiasuGFWbSguzY51kMsjSS0wHwYDVR0j
BBgwFoAUe0Y4U+pKwBK9nzGUz6M68yWR3wswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXZwOXc4Z2hZY2JWZURlZnZNRENDaGJZVEdvZXB1WEVua1lNcWVRWlAx
UEQvMC83QjQ2Mzg1M0VBNEFDMDEyQkQ5RjMxOTRDRkEzM0FGMzI1OTFERjBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdCNDYzODUzRUE0QUMwMTJC
RDlGMzE5NENGQTMzQUYzMjU5MURGMEIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F2cDl3OGdoWWNiVmVEZWZ2TURDQ2hiWVRHb2VwdVhFbmtZTXFlUVpQMVBELzAv
MzEzOTMxMmUzMzM2MmUzMTM4MzQyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM2
MzMzMzMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO/JLgwDQYJKoZIhvcNAQELBQADggEBAF7Pl4sF
sxQz/EKwo3PHfEekNhe7ExjOiqvAEOl7vmXhmasWmufLjpdg/EuwWfWh7bJfl4tj
zgfV7L5U8Yrlx2S6Y1isjB7IweXPxYRC+fdqEQHn7c2ET2FqCrttb1cX7gsH/Rft
0Dbort/7h6/Ya7GAhvL4qRFeQmmf3J/mVrgqK/sUPRx4sOh1ToQVZN5/bTBlYWd1
EaudU2PPrgY64Iyg1/SXJHLsbFDNPlm3JceQio6TYq1kZb6L6FUTMSjNG6SNdXg+
aKeslZQcdsek3Y28nQsVOlj76FCctCS8Slv2SY/6SUzWZqS4Fd3SxGuTtStQye5q
KQ5jiOjhbIu/EjQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:20 2024 by rpki-client on console-fra.rpki-client.org