Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/1/3139312e3234312e34382e302f32322d3234203d3e20323633363636.roa
File:                     3139312e3234312e34382e302f32322d3234203d3e20323633363636.roa (raw, json)
Hash identifier:          lRSLaoyzxom9KHsrQlG15HbmBtmWbHoF971xioDTdO8=
Subject key identifier:   0D:C5:80:D2:95:54:F5:10:06:6F:BE:ED:CA:C2:23:66:8D:21:21:18
Certificate issuer:       /CN=08D977485835B00780D91B6CA4A1090CDA5D9B10
Certificate serial:       0E31BDBEACE7178CFDE19ED42C23B28FF0BD7E70
Authority key identifier: 08:D9:77:48:58:35:B0:07:80:D9:1B:6C:A4:A1:09:0C:DA:5D:9B:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08D977485835B00780D91B6CA4A1090CDA5D9B10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/1/3139312e3234312e34382e302f32322d3234203d3e20323633363636.roa
Signing time:             Thu 04 Apr 2024 15:05:03 +0000
ROA not before:           Thu 04 Apr 2024 15:00:03 +0000
ROA not after:            Thu 03 Apr 2025 15:05:03 +0000
asID:                     263666
IP address blocks:        191.241.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/1/08D977485835B00780D91B6CA4A1090CDA5D9B10.crl
                          rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/1/08D977485835B00780D91B6CA4A1090CDA5D9B10.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08D977485835B00780D91B6CA4A1090CDA5D9B10.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 14:31:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:31:bd:be:ac:e7:17:8c:fd:e1:9e:d4:2c:23:b2:8f:f0:bd:7e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08D977485835B00780D91B6CA4A1090CDA5D9B10
        Validity
            Not Before: Apr  4 15:00:03 2024 GMT
            Not After : Apr  3 15:05:03 2025 GMT
        Subject: CN=0DC580D29554F510066FBEEDCAC223668D212118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d3:d2:b8:02:3d:56:2d:d6:da:e9:b5:86:db:
                    bd:68:e3:7b:71:06:2c:86:b9:ef:05:ec:14:f3:14:
                    07:be:5d:32:dd:db:6d:ec:62:c9:f9:a5:c7:d7:4e:
                    62:1f:e0:7c:5e:cd:fa:b4:aa:93:8e:a1:d2:c7:71:
                    62:8c:d7:bc:b6:df:73:0e:d3:47:1c:54:f2:2d:5a:
                    e6:70:00:3c:85:59:14:e1:6e:20:07:50:fb:a2:40:
                    8b:11:36:ad:72:7a:5a:ef:36:a0:0c:07:04:67:62:
                    85:be:fe:15:53:27:7a:8d:7d:32:8d:1a:00:98:36:
                    aa:91:7d:d2:8b:04:b6:ec:41:c1:8d:85:70:1b:13:
                    a7:43:e7:7a:06:15:a2:bd:59:93:c7:82:d9:cb:5d:
                    f4:d1:98:60:e8:fb:a2:29:68:13:6b:d1:c5:2b:08:
                    57:cb:f3:b3:a2:cf:89:ba:af:e2:0b:98:65:52:84:
                    df:b0:8b:8b:ff:60:fb:06:13:ef:67:51:22:16:dc:
                    f1:98:5d:cb:8d:70:f5:7c:d3:08:f9:54:b4:a4:38:
                    ad:b9:e0:21:47:fe:d4:b2:36:02:c3:4a:c8:77:9a:
                    05:bb:cd:f1:47:cb:da:e8:e0:23:c5:2d:7b:1e:a4:
                    c2:5e:f6:9f:24:a8:8d:1a:43:5c:58:4c:18:70:48:
                    93:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C5:80:D2:95:54:F5:10:06:6F:BE:ED:CA:C2:23:66:8D:21:21:18
            X509v3 Authority Key Identifier:
                keyid:08:D9:77:48:58:35:B0:07:80:D9:1B:6C:A4:A1:09:0C:DA:5D:9B:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/1/08D977485835B00780D91B6CA4A1090CDA5D9B10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08D977485835B00780D91B6CA4A1090CDA5D9B10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/1/3139312e3234312e34382e302f32322d3234203d3e20323633363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:f0:08:8e:9b:b6:7b:1e:80:fe:78:ec:d6:12:66:b0:58:6a:
         8a:67:8f:c6:cc:5d:f2:e6:38:cc:74:91:2c:fa:4f:b2:bf:27:
         85:df:8e:f1:aa:99:26:d2:e5:29:04:74:cf:b6:40:8a:1b:ee:
         b6:ef:2c:bd:90:77:df:2c:a4:01:3c:59:16:c4:76:dc:a6:7f:
         d3:96:c8:67:d9:eb:8d:79:40:78:02:6d:28:b5:5e:b9:8d:34:
         2c:4d:a3:d3:d9:c5:b2:78:0e:75:e1:bf:2d:6e:4a:57:ee:5e:
         2d:16:07:e9:7e:19:5a:53:eb:9a:ab:7f:0c:00:ab:d8:e6:22:
         6d:cd:88:a3:bc:79:31:f7:7b:45:8f:7c:f4:fa:9c:74:c4:02:
         3b:63:ad:61:17:89:08:fe:98:4d:6d:f0:c6:be:7c:0b:5e:88:
         e0:4c:63:f6:67:ce:ca:f0:75:f7:e8:2e:a3:f5:92:a2:dd:d5:
         d2:61:c8:9d:0e:15:1e:c7:27:f5:3d:92:d1:ce:49:a9:f1:75:
         bf:d3:cf:33:1f:b9:c4:bf:a2:5c:b6:b6:ae:26:a6:65:4b:2b:
         d8:7e:6a:1d:cd:c5:76:44:d7:a0:5c:ab:33:b4:84:2b:3c:7a:
         7d:e1:00:9f:d1:e1:e3:a1:54:ce:bf:7a:25:54:da:00:28:e2:
         0a:de:6c:a9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDjG9vqznF4z94Z7ULCOyj/C9fnAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhEOTc3NDg1ODM1QjAwNzgwRDkxQjZDQTRBMTA5MENE
QTVEOUIxMDAeFw0yNDA0MDQxNTAwMDNaFw0yNTA0MDMxNTA1MDNaMDMxMTAvBgNV
BAMTKDBEQzU4MEQyOTU1NEY1MTAwNjZGQkVFRENBQzIyMzY2OEQyMTIxMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF09K4Aj1WLdba6bWG271o43tx
BiyGue8F7BTzFAe+XTLd223sYsn5pcfXTmIf4Hxezfq0qpOOodLHcWKM17y233MO
00ccVPItWuZwADyFWRThbiAHUPuiQIsRNq1yelrvNqAMBwRnYoW+/hVTJ3qNfTKN
GgCYNqqRfdKLBLbsQcGNhXAbE6dD53oGFaK9WZPHgtnLXfTRmGDo+6IpaBNr0cUr
CFfL87Oiz4m6r+ILmGVShN+wi4v/YPsGE+9nUSIW3PGYXcuNcPV80wj5VLSkOK25
4CFH/tSyNgLDSsh3mgW7zfFHy9ro4CPFLXsepMJe9p8kqI0aQ1xYTBhwSJNJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUDcWA0pVU9RAGb77tysIjZo0hIRgwHwYDVR0j
BBgwFoAUCNl3SFg1sAeA2RtspKEJDNpdmxAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnh5M3ZyN1A4emtxWTdEVnJrdG5qWEhNUW53bWI0cXB2cWtGcTlKZG1m
c0IvMS8wOEQ5Nzc0ODU4MzVCMDA3ODBEOTFCNkNBNEExMDkwQ0RBNUQ5QjEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4RDk3NzQ4NTgzNUIwMDc4
MEQ5MUI2Q0E0QTEwOTBDREE1RDlCMTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J4eTN2cjdQOHprcVk3RFZya3RualhITVFud21iNHFwdnFrRnE5SmRtZnNCLzEv
MzEzOTMxMmUzMjM0MzEyZTM0MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzMzNjM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK/8TAwDQYJKoZIhvcNAQELBQADggEBAHTwCI6b
tnsegP547NYSZrBYaopnj8bMXfLmOMx0kSz6T7K/J4XfjvGqmSbS5SkEdM+2QIob
7rbvLL2Qd98spAE8WRbEdtymf9OWyGfZ6415QHgCbSi1XrmNNCxNo9PZxbJ4DnXh
vy1uSlfuXi0WB+l+GVpT65qrfwwAq9jmIm3NiKO8eTH3e0WPfPT6nHTEAjtjrWEX
iQj+mE1t8Ma+fAteiOBMY/ZnzsrwdffoLqP1kqLd1dJhyJ0OFR7HJ/U9ktHOSanx
db/TzzMfucS/oly2tq4mpmVLK9h+ah3NxXZE16BcqzO0hCs8en3hAJ/R4eOhVM6/
eiVU2gAo4grebKk=
-----END CERTIFICATE-----
Generated at Fri Jun 28 15:42:22 2024 by rpki-client on console-fra.rpki-client.org