Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzrov4tx5WjiAB6qFykPZTFjoZ9Uzxv6rUiiUhJUWTbE/0/3139322e3134342e3132302e302f32322d3332203d3e20323636323137.roa
File:                     3139322e3134342e3132302e302f32322d3332203d3e20323636323137.roa (raw, json)
Hash identifier:          5DHms3oF7Nxx4G/n5aI3ROt0Xd49fcOfnSZJUAICiyw=
Subject key identifier:   CE:98:0E:AE:B3:83:11:F2:53:4B:BB:3B:58:D2:E3:D3:66:2C:75:0E
Certificate issuer:       /CN=5744E945CF5532C0BDD7C4EC46A744AA22A13C70
Certificate serial:       67F48ACCF9F15D5E2ABB32EFB3CF882A9ADAFD0C
Authority key identifier: 57:44:E9:45:CF:55:32:C0:BD:D7:C4:EC:46:A7:44:AA:22:A1:3C:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5744E945CF5532C0BDD7C4EC46A744AA22A13C70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzrov4tx5WjiAB6qFykPZTFjoZ9Uzxv6rUiiUhJUWTbE/0/3139322e3134342e3132302e302f32322d3332203d3e20323636323137.roa
Signing time:             Wed 09 Oct 2024 18:42:24 +0000
ROA not before:           Wed 09 Oct 2024 18:37:24 +0000
ROA not after:            Wed 08 Oct 2025 18:42:24 +0000
asID:                     266217
IP address blocks:        192.144.120.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bzrov4tx5WjiAB6qFykPZTFjoZ9Uzxv6rUiiUhJUWTbE/0/5744E945CF5532C0BDD7C4EC46A744AA22A13C70.crl
                          rsync://rpki-repo.registro.br/repo/Bzrov4tx5WjiAB6qFykPZTFjoZ9Uzxv6rUiiUhJUWTbE/0/5744E945CF5532C0BDD7C4EC46A744AA22A13C70.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5744E945CF5532C0BDD7C4EC46A744AA22A13C70.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f4:8a:cc:f9:f1:5d:5e:2a:bb:32:ef:b3:cf:88:2a:9a:da:fd:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5744E945CF5532C0BDD7C4EC46A744AA22A13C70
        Validity
            Not Before: Oct  9 18:37:24 2024 GMT
            Not After : Oct  8 18:42:24 2025 GMT
        Subject: CN=CE980EAEB38311F2534BBB3B58D2E3D3662C750E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ab:50:b3:a0:4c:c2:62:ce:7b:f6:71:d4:60:
                    87:58:be:f0:f3:51:cb:0b:8b:81:2e:60:18:5e:5f:
                    47:6a:a0:a8:2a:52:22:d4:64:24:c7:e0:3b:84:fd:
                    2e:b2:67:ed:a0:99:85:76:ec:f0:b7:cf:52:0a:ce:
                    c3:4c:5f:73:99:69:9e:36:93:9b:a7:42:2c:44:a9:
                    df:90:d3:3f:42:4c:ed:6f:28:94:4b:70:51:1d:85:
                    27:4e:1d:50:7a:4c:f8:a1:63:2c:27:59:09:63:72:
                    a7:39:da:2f:8d:95:8b:82:f0:99:c9:06:19:5e:59:
                    94:c4:e7:37:74:99:6e:8f:cc:8d:30:61:ff:1a:c2:
                    da:5f:51:19:01:fd:24:a9:8c:b0:83:d0:6a:d2:79:
                    10:a9:74:34:12:eb:bf:f4:02:6b:bd:5d:df:b5:3c:
                    42:5c:9b:be:0b:e3:d6:a0:7a:e8:78:9a:3b:12:3d:
                    90:11:24:d5:ae:76:af:a9:ed:ca:e3:d2:80:5b:aa:
                    7e:75:b5:98:b7:be:61:bc:b6:0c:a0:c3:db:54:d2:
                    a3:71:2c:34:54:11:3f:75:58:a3:73:ec:3e:63:88:
                    fb:45:96:5c:88:cb:21:09:aa:3a:c4:88:9a:9d:b4:
                    3d:09:1f:d7:c0:58:a7:46:a7:ed:0d:7e:0c:78:7c:
                    27:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:98:0E:AE:B3:83:11:F2:53:4B:BB:3B:58:D2:E3:D3:66:2C:75:0E
            X509v3 Authority Key Identifier:
                keyid:57:44:E9:45:CF:55:32:C0:BD:D7:C4:EC:46:A7:44:AA:22:A1:3C:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzrov4tx5WjiAB6qFykPZTFjoZ9Uzxv6rUiiUhJUWTbE/0/5744E945CF5532C0BDD7C4EC46A744AA22A13C70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5744E945CF5532C0BDD7C4EC46A744AA22A13C70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzrov4tx5WjiAB6qFykPZTFjoZ9Uzxv6rUiiUhJUWTbE/0/3139322e3134342e3132302e302f32322d3332203d3e20323636323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:b3:92:14:cd:70:f9:04:e0:4d:65:41:a7:23:95:f0:32:16:
         0b:a4:a7:34:13:49:60:34:0c:a1:8f:3f:24:13:c2:93:14:2c:
         d6:3e:a4:43:eb:f2:b0:a7:be:29:3f:cd:00:ff:66:75:1f:cd:
         82:80:1d:8d:6f:b1:91:79:72:fa:ed:2d:7b:ca:bd:05:92:9a:
         54:63:2a:7c:7d:f8:a8:f9:5b:de:58:67:a5:f3:08:50:f6:11:
         b5:7b:55:af:1b:a1:b0:da:16:1f:5c:75:c8:91:3e:3e:0b:2c:
         b5:78:2b:46:7d:77:25:76:7c:1a:eb:6a:5d:97:be:e5:6f:8d:
         47:60:4b:c9:f6:3a:58:11:0b:ae:93:6f:06:ed:de:1e:44:a8:
         1f:9d:36:9b:53:20:08:4d:15:00:73:10:c4:02:4c:b2:25:a5:
         62:7c:56:10:99:91:bc:93:96:0e:15:ff:89:43:55:9f:6d:f0:
         4a:99:d3:c6:3e:92:c7:72:d0:75:65:8e:fd:fa:af:cb:72:b5:
         a8:bb:7b:fa:03:df:bd:f1:24:b1:34:5e:1b:76:9a:01:c0:af:
         07:50:c8:50:90:27:82:47:ba:b5:e2:c8:d4:95:08:7a:4c:35:
         bf:6a:b3:bc:bd:8e:67:58:03:41:7e:5f:14:47:d4:34:4c:f8:
         40:33:60:8f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUZ/SKzPnxXV4quzLvs8+IKpra/QwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTc0NEU5NDVDRjU1MzJDMEJERDdDNEVDNDZBNzQ0QUEy
MkExM0M3MDAeFw0yNDEwMDkxODM3MjRaFw0yNTEwMDgxODQyMjRaMDMxMTAvBgNV
BAMTKENFOTgwRUFFQjM4MzExRjI1MzRCQkIzQjU4RDJFM0QzNjYyQzc1MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3q1CzoEzCYs579nHUYIdYvvDz
UcsLi4EuYBheX0dqoKgqUiLUZCTH4DuE/S6yZ+2gmYV27PC3z1IKzsNMX3OZaZ42
k5unQixEqd+Q0z9CTO1vKJRLcFEdhSdOHVB6TPihYywnWQljcqc52i+NlYuC8JnJ
BhleWZTE5zd0mW6PzI0wYf8awtpfURkB/SSpjLCD0GrSeRCpdDQS67/0Amu9Xd+1
PEJcm74L49ageuh4mjsSPZARJNWudq+p7crj0oBbqn51tZi3vmG8tgygw9tU0qNx
LDRUET91WKNz7D5jiPtFllyIyyEJqjrEiJqdtD0JH9fAWKdGp+0Nfgx4fCcJAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUzpgOrrODEfJTS7s7WNLj02YsdQ4wHwYDVR0j
BBgwFoAUV0TpRc9VMsC918TsRqdEqiKhPHAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnpyb3Y0dHg1V2ppQUI2cUZ5a1BaVEZqb1o5VXp4djZyVWlpVWhKVVdU
YkUvMC81NzQ0RTk0NUNGNTUzMkMwQkREN0M0RUM0NkE3NDRBQTIyQTEzQzcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3NDRFOTQ1Q0Y1NTMyQzBC
REQ3QzRFQzQ2QTc0NEFBMjJBMTNDNzAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J6cm92NHR4NVdqaUFCNnFGeWtQWlRGam9aOVV6eHY2clVpaVVoSlVXVGJFLzAv
MzEzOTMyMmUzMTM0MzQyZTMxMzIzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzNjMyMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAsCQeDANBgkqhkiG9w0BAQsFAAOCAQEAKrOS
FM1w+QTgTWVBpyOV8DIWC6SnNBNJYDQMoY8/JBPCkxQs1j6kQ+vysKe+KT/NAP9m
dR/NgoAdjW+xkXly+u0te8q9BZKaVGMqfH34qPlb3lhnpfMIUPYRtXtVrxuhsNoW
H1x1yJE+PgsstXgrRn13JXZ8GutqXZe+5W+NR2BLyfY6WBELrpNvBu3eHkSoH502
m1MgCE0VAHMQxAJMsiWlYnxWEJmRvJOWDhX/iUNVn23wSpnTxj6Sx3LQdWWO/fqv
y3K1qLt7+gPfvfEksTReG3aaAcCvB1DIUJAngke6teLI1JUIekw1v2qzvL2OZ1gD
QX5fFEfUNEz4QDNgjw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:20 2024 by rpki-client on console-fra.rpki-client.org