Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3138392e302f32342d3234203d3e20323633333338.roa
File:                     3139312e33362e3138392e302f32342d3234203d3e20323633333338.roa (raw, json)
Hash identifier:          8mofB6aGj0cksl4TGzqQ1fR1AGE25xkpKUiMx8V2D7s=
Subject key identifier:   E1:05:45:4A:E9:31:CB:0B:FD:F7:E4:C8:B8:82:89:51:8C:DC:B9:54
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       56890BA8705D90D6F59AC4359F29AD4FCF4E3E81
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3138392e302f32342d3234203d3e20323633333338.roa
Signing time:             Fri 18 Oct 2024 11:52:35 +0000
ROA not before:           Fri 18 Oct 2024 11:47:35 +0000
ROA not after:            Fri 17 Oct 2025 11:52:35 +0000
asID:                     263338
IP address blocks:        191.36.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl
                          rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:89:0b:a8:70:5d:90:d6:f5:9a:c4:35:9f:29:ad:4f:cf:4e:3e:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: Oct 18 11:47:35 2024 GMT
            Not After : Oct 17 11:52:35 2025 GMT
        Subject: CN=E105454AE931CB0BFDF7E4C8B88289518CDCB954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:6f:1d:41:24:e0:bf:8d:62:14:5c:02:2e:1f:
                    64:9f:b5:2b:99:e0:27:97:de:71:af:0d:43:da:15:
                    23:4a:42:e1:eb:ae:44:1d:40:70:d0:82:fa:2e:87:
                    bb:01:31:2c:02:a0:a7:bc:72:d6:b4:9f:eb:6a:01:
                    5b:f2:5a:36:ab:1c:7d:eb:5c:ab:6a:b5:96:c4:1a:
                    c2:87:51:57:ba:b9:cc:52:ff:43:9a:1f:a3:b5:9c:
                    66:36:67:c8:00:a0:01:55:7e:c2:8f:bf:58:7b:e4:
                    58:91:2d:94:14:9c:00:9a:57:00:e8:7a:18:8d:87:
                    25:21:6f:e0:54:53:60:77:b3:b0:d6:be:d0:94:b6:
                    64:f9:2b:ec:8c:04:1c:e1:58:e6:2b:25:76:47:8a:
                    f9:de:7c:a3:5f:11:82:63:b7:47:c4:c5:62:d2:da:
                    71:62:45:20:d4:4f:6e:1f:4f:d4:a4:10:2e:b0:9e:
                    88:cd:17:91:fb:28:68:e4:a5:35:6d:74:d2:e3:e4:
                    83:40:2d:fb:95:ea:41:0f:c5:43:a7:76:bc:0b:2f:
                    f0:31:7f:57:08:8d:e4:8a:ad:79:33:d4:c9:fa:fd:
                    cc:19:2b:f6:9c:b3:4b:ca:cc:d7:ef:ad:47:b7:f4:
                    6f:c7:c8:1f:d3:8f:a3:6e:1a:d1:36:a1:35:b7:8f:
                    6c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:05:45:4A:E9:31:CB:0B:FD:F7:E4:C8:B8:82:89:51:8C:DC:B9:54
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/3139312e33362e3138392e302f32342d3234203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:65:e0:5e:b6:97:86:9c:29:c5:04:0e:06:36:24:ba:00:2b:
         fb:43:2b:1b:f3:32:aa:ea:7a:92:84:e7:90:9d:83:20:90:1d:
         e2:14:51:0b:dc:d8:2b:c3:0d:f0:c2:b7:30:3a:a0:be:03:b0:
         3f:74:65:39:f9:e8:ce:1d:6e:46:f1:df:d7:a9:1e:65:89:5d:
         d9:24:16:62:3e:d3:3a:b4:d6:ae:8f:12:9e:81:82:b6:1b:43:
         47:f9:df:75:aa:1d:70:0a:e7:6c:91:d3:38:d4:0a:48:dc:5d:
         c5:ef:54:7a:03:9b:8e:62:b1:55:75:67:7f:d1:4e:99:b4:6b:
         71:c6:01:57:b2:4c:f2:aa:93:fb:34:f4:83:31:3e:41:0a:2e:
         89:60:61:33:60:44:1f:c0:45:c6:75:a3:fd:1e:1b:02:8b:b5:
         ec:59:bb:24:f2:64:12:1e:07:c2:16:e5:5e:84:7a:4f:3f:b1:
         57:f8:8f:e3:94:6a:50:89:c2:25:8d:e3:67:d0:40:16:1d:e2:
         fe:84:89:74:0e:33:9e:62:31:5f:51:14:0d:ef:5a:8c:fc:30:
         34:60:0c:9e:06:00:a9:2e:63:e6:fe:40:f1:ae:47:c8:75:1c:
         46:0b:82:56:8f:88:47:9f:f0:53:c2:75:3b:3b:45:dd:93:2a:
         52:cb:d2:f5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVokLqHBdkNb1msQ1nymtT89OPoEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0I0NjM4NTNFQTRBQzAxMkJEOUYzMTk0Q0ZBMzNBRjMy
NTkxREYwQjAeFw0yNDEwMTgxMTQ3MzVaFw0yNTEwMTcxMTUyMzVaMDMxMTAvBgNV
BAMTKEUxMDU0NTRBRTkzMUNCMEJGREY3RTRDOEI4ODI4OTUxOENEQ0I5NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD9bx1BJOC/jWIUXAIuH2SftSuZ
4CeX3nGvDUPaFSNKQuHrrkQdQHDQgvouh7sBMSwCoKe8cta0n+tqAVvyWjarHH3r
XKtqtZbEGsKHUVe6ucxS/0OaH6O1nGY2Z8gAoAFVfsKPv1h75FiRLZQUnACaVwDo
ehiNhyUhb+BUU2B3s7DWvtCUtmT5K+yMBBzhWOYrJXZHivnefKNfEYJjt0fExWLS
2nFiRSDUT24fT9SkEC6wnojNF5H7KGjkpTVtdNLj5INALfuV6kEPxUOndrwLL/Ax
f1cIjeSKrXkz1Mn6/cwZK/acs0vKzNfvrUe39G/HyB/Tj6NuGtE2oTW3j2xBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU4QVFSukxywv99+TIuIKJUYzcuVQwHwYDVR0j
BBgwFoAUe0Y4U+pKwBK9nzGUz6M68yWR3wswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXZwOXc4Z2hZY2JWZURlZnZNRENDaGJZVEdvZXB1WEVua1lNcWVRWlAx
UEQvMC83QjQ2Mzg1M0VBNEFDMDEyQkQ5RjMxOTRDRkEzM0FGMzI1OTFERjBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdCNDYzODUzRUE0QUMwMTJC
RDlGMzE5NENGQTMzQUYzMjU5MURGMEIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F2cDl3OGdoWWNiVmVEZWZ2TURDQ2hiWVRHb2VwdVhFbmtZTXFlUVpQMVBELzAv
MzEzOTMxMmUzMzM2MmUzMTM4MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMzMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC/JL0wDQYJKoZIhvcNAQELBQADggEBADJl4F62
l4acKcUEDgY2JLoAK/tDKxvzMqrqepKE55CdgyCQHeIUUQvc2CvDDfDCtzA6oL4D
sD90ZTn56M4dbkbx39epHmWJXdkkFmI+0zq01q6PEp6BgrYbQ0f533WqHXAK52yR
0zjUCkjcXcXvVHoDm45isVV1Z3/RTpm0a3HGAVeyTPKqk/s09IMxPkEKLolgYTNg
RB/ARcZ1o/0eGwKLtexZuyTyZBIeB8IW5V6Eek8/sVf4j+OUalCJwiWN42fQQBYd
4v6EiXQOM55iMV9RFA3vWoz8MDRgDJ4GAKkuY+b+QPGuR8h1HEYLglaPiEef8FPC
dTs7Rd2TKlLL0vU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:00:26 2024 by rpki-client on console-ams.rpki-client.org