Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/1/3138372e3132312e3135362e302f32332d3233203d3e20323730393138.roa
File:                     3138372e3132312e3135362e302f32332d3233203d3e20323730393138.roa (raw, json)
Hash identifier:          atqzuGnGCf8VEQfdLCF7gj0j6UzzIH30tKkiLntKl2Y=
Subject key identifier:   16:E9:52:8F:DF:2B:15:7B:A3:37:87:8C:3D:69:3D:2A:3E:D4:6C:8A
Certificate issuer:       /CN=B9C9E4CB9E4C59B28CE8A09B5F1643D7130DA6D7
Certificate serial:       6900C36E2D49890382673F1657A0BF880D8C11AB
Authority key identifier: B9:C9:E4:CB:9E:4C:59:B2:8C:E8:A0:9B:5F:16:43:D7:13:0D:A6:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9C9E4CB9E4C59B28CE8A09B5F1643D7130DA6D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/1/3138372e3132312e3135362e302f32332d3233203d3e20323730393138.roa
Signing time:             Wed 03 Apr 2024 18:31:42 +0000
ROA not before:           Wed 03 Apr 2024 18:26:42 +0000
ROA not after:            Wed 02 Apr 2025 18:31:42 +0000
asID:                     270918
IP address blocks:        187.121.156.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/1/B9C9E4CB9E4C59B28CE8A09B5F1643D7130DA6D7.crl
                          rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/1/B9C9E4CB9E4C59B28CE8A09B5F1643D7130DA6D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9C9E4CB9E4C59B28CE8A09B5F1643D7130DA6D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:00:c3:6e:2d:49:89:03:82:67:3f:16:57:a0:bf:88:0d:8c:11:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9C9E4CB9E4C59B28CE8A09B5F1643D7130DA6D7
        Validity
            Not Before: Apr  3 18:26:42 2024 GMT
            Not After : Apr  2 18:31:42 2025 GMT
        Subject: CN=16E9528FDF2B157BA337878C3D693D2A3ED46C8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:83:32:d4:06:11:2b:74:27:94:81:20:87:9d:
                    ea:aa:63:a8:4b:51:6b:b8:ca:72:8d:47:6e:91:d0:
                    dd:49:b2:4c:19:33:c8:14:09:28:97:bc:96:63:4c:
                    2d:2c:c0:56:82:ca:a9:7e:e7:b4:16:69:a0:be:c8:
                    ed:63:cd:88:ff:e0:4d:98:2d:08:19:24:67:46:79:
                    7d:17:03:90:ce:0b:09:1a:e0:de:56:8b:af:a3:10:
                    b5:44:4e:4e:f0:14:e8:2f:8f:8e:36:f8:9a:55:0e:
                    be:e5:a1:84:72:ae:50:2f:b9:cd:4d:85:b0:02:1e:
                    d2:00:85:94:b1:84:70:5f:46:4b:fa:0a:11:23:75:
                    2b:5a:82:d7:f4:a0:6d:9b:4a:fe:25:c1:14:a7:c8:
                    74:ab:18:05:ee:72:91:31:5b:b5:27:ce:3e:ca:cc:
                    9b:77:56:45:e1:1d:11:02:e0:1e:a4:5c:fe:fa:ec:
                    56:fd:85:ac:4c:64:a3:fb:24:de:52:c0:b7:f4:63:
                    f1:09:9b:07:6e:33:08:ac:48:23:cc:e7:40:27:9f:
                    26:4c:e1:8d:ad:95:98:07:6a:09:8c:8f:39:67:d6:
                    27:78:12:36:b3:ee:dd:c1:69:7c:ed:3d:2e:df:34:
                    01:e8:f6:60:5f:c4:fd:2d:8b:3c:b4:08:e3:b8:2f:
                    f8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E9:52:8F:DF:2B:15:7B:A3:37:87:8C:3D:69:3D:2A:3E:D4:6C:8A
            X509v3 Authority Key Identifier:
                keyid:B9:C9:E4:CB:9E:4C:59:B2:8C:E8:A0:9B:5F:16:43:D7:13:0D:A6:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/1/B9C9E4CB9E4C59B28CE8A09B5F1643D7130DA6D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9C9E4CB9E4C59B28CE8A09B5F1643D7130DA6D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BL8dbUynovJKpEEEty5HjmRpgiGYw29f1gs7KEUiRF8c/1/3138372e3132312e3135362e302f32332d3233203d3e20323730393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         dc:4b:fc:1a:2b:aa:ed:49:07:cc:a0:60:57:13:75:84:6e:82:
         09:74:5d:28:d7:e6:98:f8:1c:35:ec:aa:80:82:ed:07:cc:1a:
         10:22:15:68:59:b3:16:da:7c:c4:af:58:86:92:77:e8:77:a5:
         33:79:0a:94:9a:a3:d6:2c:36:3c:c6:1c:2e:cc:72:34:63:a6:
         8c:18:6d:77:9e:3b:62:f4:f9:5d:01:8b:62:21:f8:1a:36:a8:
         ec:da:c3:37:f2:1e:18:f3:14:b3:42:87:b1:f1:88:fb:20:6f:
         40:57:c8:c2:47:3c:be:b9:1e:33:7f:ce:a7:19:2a:e3:af:ca:
         f4:13:29:bc:5b:f6:84:49:23:5e:b5:0e:72:2e:07:dc:e7:47:
         93:35:9a:42:4b:05:57:a7:c6:00:ac:77:54:14:58:c8:41:fd:
         f5:2b:44:76:b5:cb:30:ae:c2:96:b4:b4:3d:d0:e0:a5:0a:19:
         8b:43:64:9b:06:49:db:96:d6:bf:e0:b1:6d:4c:ba:08:85:d8:
         c2:5f:1f:e8:42:c2:46:5b:77:8b:5e:a3:9d:64:53:d0:62:cc:
         99:23:30:49:52:05:73:36:bf:5a:5a:2f:0e:38:c5:75:37:45:
         30:97:58:ab:d8:0e:57:8c:c4:c9:ee:91:4a:5a:6b:10:0b:07:
         27:31:d3:b4
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUaQDDbi1JiQOCZz8WV6C/iA2MEaswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlDOUU0Q0I5RTRDNTlCMjhDRThBMDlCNUYxNjQzRDcx
MzBEQTZENzAeFw0yNDA0MDMxODI2NDJaFw0yNTA0MDIxODMxNDJaMDMxMTAvBgNV
BAMTKDE2RTk1MjhGREYyQjE1N0JBMzM3ODc4QzNENjkzRDJBM0VENDZDOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjgzLUBhErdCeUgSCHneqqY6hL
UWu4ynKNR26R0N1JskwZM8gUCSiXvJZjTC0swFaCyql+57QWaaC+yO1jzYj/4E2Y
LQgZJGdGeX0XA5DOCwka4N5Wi6+jELVETk7wFOgvj442+JpVDr7loYRyrlAvuc1N
hbACHtIAhZSxhHBfRkv6ChEjdStagtf0oG2bSv4lwRSnyHSrGAXucpExW7Unzj7K
zJt3VkXhHREC4B6kXP767Fb9haxMZKP7JN5SwLf0Y/EJmwduMwisSCPM50AnnyZM
4Y2tlZgHagmMjzln1id4Ejaz7t3BaXztPS7fNAHo9mBfxP0tizy0COO4L/i7AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUFulSj98rFXujN4eMPWk9Kj7UbIowHwYDVR0j
BBgwFoAUucnky55MWbKM6KCbXxZD1xMNptcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkw4ZGJVeW5vdkpLcEVFRXR5NUhqbVJwZ2lHWXcyOWYxZ3M3S0VVaVJG
OGMvMS9COUM5RTRDQjlFNEM1OUIyOENFOEEwOUI1RjE2NDNENzEzMERBNkQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5QzlFNENCOUU0QzU5QjI4
Q0U4QTA5QjVGMTY0M0Q3MTMwREE2RDcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JMOGRiVXlub3ZKS3BFRUV0eTVIam1ScGdpR1l3MjlmMWdzN0tFVWlSRjhjLzEv
MzEzODM3MmUzMTMyMzEyZTMxMzUzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzczMDM5MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbt5nDANBgkqhkiG9w0BAQsFAAOCAQEA3Ev8
Giuq7UkHzKBgVxN1hG6CCXRdKNfmmPgcNeyqgILtB8waECIVaFmzFtp8xK9YhpJ3
6HelM3kKlJqj1iw2PMYcLsxyNGOmjBhtd547YvT5XQGLYiH4Gjao7NrDN/IeGPMU
s0KHsfGI+yBvQFfIwkc8vrkeM3/Opxkq46/K9BMpvFv2hEkjXrUOci4H3OdHkzWa
QksFV6fGAKx3VBRYyEH99StEdrXLMK7ClrS0PdDgpQoZi0NkmwZJ25bWv+CxbUy6
CIXYwl8f6ELCRlt3i16jnWRT0GLMmSMwSVIFcza/WlovDjjFdTdFMJdYq9gOV4zE
ye6RSlprEAsHJzHTtA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:13 2024 by rpki-client on console-ams.rpki-client.org