Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/1/3133382e39392e37302e302f32332d3233203d3e20323634313630.roa
File:                     3133382e39392e37302e302f32332d3233203d3e20323634313630.roa (raw, json)
Hash identifier:          BatR1SeggrGQX+zDi3Mwhjk4IlMJZMnqNIjJtmUNKhw=
Subject key identifier:   A9:EC:AD:96:19:E1:33:55:73:CA:46:49:CE:85:2B:84:AA:C3:92:3B
Certificate issuer:       /CN=D80B6511B8BED418F67049DBA7A902EA0E950AD0
Certificate serial:       3DB97AD0EE999DD1BE0DE58D047E7CB6F8D8A182
Authority key identifier: D8:0B:65:11:B8:BE:D4:18:F6:70:49:DB:A7:A9:02:EA:0E:95:0A:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D80B6511B8BED418F67049DBA7A902EA0E950AD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/1/3133382e39392e37302e302f32332d3233203d3e20323634313630.roa
Signing time:             Thu 04 Apr 2024 18:39:53 +0000
ROA not before:           Thu 04 Apr 2024 18:34:53 +0000
ROA not after:            Thu 03 Apr 2025 18:39:53 +0000
asID:                     264160
IP address blocks:        138.99.70.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/1/D80B6511B8BED418F67049DBA7A902EA0E950AD0.crl
                          rsync://rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/1/D80B6511B8BED418F67049DBA7A902EA0E950AD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D80B6511B8BED418F67049DBA7A902EA0E950AD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 21:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:b9:7a:d0:ee:99:9d:d1:be:0d:e5:8d:04:7e:7c:b6:f8:d8:a1:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D80B6511B8BED418F67049DBA7A902EA0E950AD0
        Validity
            Not Before: Apr  4 18:34:53 2024 GMT
            Not After : Apr  3 18:39:53 2025 GMT
        Subject: CN=A9ECAD9619E1335573CA4649CE852B84AAC3923B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ee:8c:1a:dd:88:a7:b0:ca:d2:9f:5c:3e:c7:
                    ef:fc:5e:5a:d8:72:c4:1e:11:bd:71:01:35:93:ef:
                    fe:8b:85:40:71:33:34:b3:eb:5d:2f:09:1b:a5:17:
                    2d:05:75:09:73:1a:8a:75:e2:1c:ed:f0:4c:06:4b:
                    e8:6b:5a:ed:66:d7:6b:67:b4:7f:22:75:28:b1:48:
                    ed:6e:9a:8b:e0:d2:7b:ad:f5:f2:23:57:4f:b4:89:
                    95:ab:b4:53:3f:84:6e:f9:98:12:76:e8:e2:68:22:
                    e6:3f:a7:c9:09:4e:75:8a:ca:f4:07:d5:45:80:4b:
                    de:32:50:34:fc:9c:9c:5e:a4:0a:ec:8a:7f:fd:d7:
                    f4:c1:6d:86:04:1f:ec:c4:eb:1d:a9:9a:e4:41:54:
                    50:a6:0b:8b:3f:b3:07:ed:37:c0:62:ec:82:9f:57:
                    e2:09:26:c7:12:54:0c:65:c0:90:78:73:12:23:de:
                    b6:24:ff:40:d0:5b:ae:50:cd:7f:83:95:48:63:1a:
                    b9:cf:c5:3f:87:e8:38:90:41:44:b5:f9:c8:64:50:
                    75:7c:d4:b2:c7:81:84:f2:25:a7:95:a4:6b:6e:85:
                    88:53:8f:91:1c:d6:e3:1d:83:70:59:b6:7a:ae:c8:
                    b5:9f:62:88:4d:5a:92:44:60:a5:29:2e:83:a1:0a:
                    40:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:EC:AD:96:19:E1:33:55:73:CA:46:49:CE:85:2B:84:AA:C3:92:3B
            X509v3 Authority Key Identifier:
                keyid:D8:0B:65:11:B8:BE:D4:18:F6:70:49:DB:A7:A9:02:EA:0E:95:0A:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/1/D80B6511B8BED418F67049DBA7A902EA0E950AD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D80B6511B8BED418F67049DBA7A902EA0E950AD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/1/3133382e39392e37302e302f32332d3233203d3e20323634313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:da:d8:b8:3d:04:74:92:fd:0d:94:b3:6f:75:5a:0a:22:81:
         a2:57:af:0a:82:34:47:b0:6c:83:1c:ba:5e:b2:29:98:ce:ab:
         cd:3d:f1:1f:d1:bf:b5:1f:93:28:90:6a:76:c1:6d:62:53:06:
         28:a3:04:3c:8c:2b:7f:53:a2:68:65:13:78:82:dc:6e:64:bf:
         e5:ec:43:32:6c:06:74:85:c3:8e:7d:6a:12:a6:87:e7:0f:ce:
         d4:d1:6e:94:fa:3a:1d:98:02:6a:11:fb:6b:00:f1:ea:9f:61:
         37:02:5f:16:18:e9:3e:07:bf:1e:03:03:30:b3:b6:ef:66:0c:
         0a:bb:4b:7e:21:dc:16:3d:ea:25:72:1c:68:ec:30:4c:b0:81:
         f9:38:8a:76:82:35:3a:4d:b1:0e:0c:7c:78:2d:b9:8b:cb:12:
         90:7f:7c:b8:da:e0:e8:f1:61:e0:0d:82:d7:27:b4:e8:10:83:
         0f:ba:fc:90:1d:3d:6e:83:4b:82:45:73:48:ff:2f:8f:a2:71:
         71:4b:b2:53:5c:8b:dd:22:f1:6c:59:66:e6:b3:e5:74:bb:96:
         61:e7:27:50:6f:b8:89:52:4c:82:be:a1:80:20:c1:84:fb:ac:
         fa:58:70:ab:29:63:ba:00:6c:da:0f:82:b2:e0:42:af:88:c4:
         57:ad:bd:0d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPbl60O6ZndG+DeWNBH58tvjYoYIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDgwQjY1MTFCOEJFRDQxOEY2NzA0OURCQTdBOTAyRUEw
RTk1MEFEMDAeFw0yNDA0MDQxODM0NTNaFw0yNTA0MDMxODM5NTNaMDMxMTAvBgNV
BAMTKEE5RUNBRDk2MTlFMTMzNTU3M0NBNDY0OUNFODUyQjg0QUFDMzkyM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS7owa3YinsMrSn1w+x+/8XlrY
csQeEb1xATWT7/6LhUBxMzSz610vCRulFy0FdQlzGop14hzt8EwGS+hrWu1m12tn
tH8idSixSO1umovg0nut9fIjV0+0iZWrtFM/hG75mBJ26OJoIuY/p8kJTnWKyvQH
1UWAS94yUDT8nJxepArsin/91/TBbYYEH+zE6x2pmuRBVFCmC4s/swftN8Bi7IKf
V+IJJscSVAxlwJB4cxIj3rYk/0DQW65QzX+DlUhjGrnPxT+H6DiQQUS1+chkUHV8
1LLHgYTyJaeVpGtuhYhTj5Ec1uMdg3BZtnquyLWfYohNWpJEYKUpLoOhCkAzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUqeytlhnhM1VzykZJzoUrhKrDkjswHwYDVR0j
BBgwFoAU2AtlEbi+1Bj2cEnbp6kC6g6VCtAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnhXWVJSOXlWdUxoelB6ZVhFYkpBVW9VNjNjOTdmUEYxSEZBRTRmTnl0
V3ovMS9EODBCNjUxMUI4QkVENDE4RjY3MDQ5REJBN0E5MDJFQTBFOTUwQUQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4MEI2NTExQjhCRUQ0MThG
NjcwNDlEQkE3QTkwMkVBMEU5NTBBRDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J4V1lSUjl5VnVMaHpQemVYRWJKQVVvVTYzYzk3ZlBGMUhGQUU0Zk55dFd6LzEv
MzEzMzM4MmUzOTM5MmUzNzMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM0
MzEzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBimNGMA0GCSqGSIb3DQEBCwUAA4IBAQCq2ti4PQR0
kv0NlLNvdVoKIoGiV68KgjRHsGyDHLpesimYzqvNPfEf0b+1H5MokGp2wW1iUwYo
owQ8jCt/U6JoZRN4gtxuZL/l7EMybAZ0hcOOfWoSpofnD87U0W6U+jodmAJqEftr
APHqn2E3Al8WGOk+B78eAwMws7bvZgwKu0t+IdwWPeolchxo7DBMsIH5OIp2gjU6
TbEODHx4LbmLyxKQf3y42uDo8WHgDYLXJ7ToEIMPuvyQHT1ug0uCRXNI/y+PonFx
S7JTXIvdIvFsWWbms+V0u5Zh5ydQb7iJUkyCvqGAIMGE+6z6WHCrKWO6AGzaD4Ky
4EKviMRXrb0N
-----END CERTIFICATE-----
Generated at Sat Sep 28 20:51:18 2024 by rpki-client on console-fra.rpki-client.org