Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3139312e35322e3231362e302f32322d3234203d3e20323730383134.roa
File:                     3139312e35322e3231362e302f32322d3234203d3e20323730383134.roa (raw, json)
Hash identifier:          JrQrala9SBErOHujHRB4II497TAh4zDlKYIPhk/GNVU=
Subject key identifier:   A4:52:D5:0D:69:1C:AA:E6:B1:BA:05:5A:8D:B3:DE:D3:B4:91:12:9F
Certificate issuer:       /CN=BEEE75E0F9E4E6469710A8194600F973BF1E6105
Certificate serial:       5257E9D40E342776E326C1D86AB9CF69CAA9FA
Authority key identifier: BE:EE:75:E0:F9:E4:E6:46:97:10:A8:19:46:00:F9:73:BF:1E:61:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEEE75E0F9E4E6469710A8194600F973BF1E6105.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3139312e35322e3231362e302f32322d3234203d3e20323730383134.roa
Signing time:             Tue 30 Apr 2024 20:03:06 +0000
ROA not before:           Tue 30 Apr 2024 19:58:06 +0000
ROA not after:            Tue 29 Apr 2025 20:03:06 +0000
asID:                     270814
IP address blocks:        191.52.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/BEEE75E0F9E4E6469710A8194600F973BF1E6105.crl
                          rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/BEEE75E0F9E4E6469710A8194600F973BF1E6105.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEEE75E0F9E4E6469710A8194600F973BF1E6105.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:57:e9:d4:0e:34:27:76:e3:26:c1:d8:6a:b9:cf:69:ca:a9:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEEE75E0F9E4E6469710A8194600F973BF1E6105
        Validity
            Not Before: Apr 30 19:58:06 2024 GMT
            Not After : Apr 29 20:03:06 2025 GMT
        Subject: CN=A452D50D691CAAE6B1BA055A8DB3DED3B491129F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1c:65:16:55:89:5b:83:ae:ad:08:a7:ca:dc:
                    db:7e:52:11:64:aa:64:37:dd:e4:16:be:f3:ab:37:
                    80:b0:08:82:08:97:9c:22:a3:5d:03:62:b3:b5:1d:
                    27:54:72:db:5c:aa:8c:49:19:dc:6b:67:03:79:bd:
                    d1:b6:b9:0d:f6:58:4f:49:f5:4f:9f:be:66:23:52:
                    af:ab:6a:a7:85:e9:a5:88:c1:aa:ca:de:f5:e7:cf:
                    eb:93:bf:ef:e2:d4:ad:e1:2a:ae:01:1f:ff:63:40:
                    e3:0b:ea:6f:d3:2b:2c:53:3b:1e:c7:28:8d:2f:8e:
                    4a:d8:fc:0e:ad:b1:6d:29:19:92:ff:84:70:9b:7e:
                    d7:25:25:5a:16:01:db:61:04:5e:9a:51:b3:54:9e:
                    eb:f9:99:9f:8e:34:31:48:9b:a5:8d:17:5f:58:7f:
                    19:ea:10:9e:3e:5b:b6:f5:44:e7:37:4d:4a:31:db:
                    28:ef:c2:16:d8:6d:2c:ad:e6:4b:7a:d7:2d:f9:3a:
                    db:5b:77:d0:28:47:a2:4b:f4:61:75:c4:2e:fe:8c:
                    31:cc:da:23:af:a0:25:9d:e5:53:6f:1f:31:6d:95:
                    af:10:fa:67:96:ef:72:60:52:c9:d0:df:16:e2:b5:
                    5b:e5:68:19:6e:36:f7:78:33:98:cd:29:56:b4:04:
                    14:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:52:D5:0D:69:1C:AA:E6:B1:BA:05:5A:8D:B3:DE:D3:B4:91:12:9F
            X509v3 Authority Key Identifier:
                keyid:BE:EE:75:E0:F9:E4:E6:46:97:10:A8:19:46:00:F9:73:BF:1E:61:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/BEEE75E0F9E4E6469710A8194600F973BF1E6105.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEEE75E0F9E4E6469710A8194600F973BF1E6105.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3139312e35322e3231362e302f32322d3234203d3e20323730383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.52.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:16:09:3e:1f:c1:40:c4:d8:c4:35:49:ee:da:51:8f:b9:2d:
         4d:cb:4c:50:3c:26:dc:49:50:65:fc:44:44:9a:80:1b:c6:55:
         1e:e6:e0:5d:ea:b5:fe:17:4f:fc:b5:67:90:f7:6a:3d:80:52:
         2c:5b:c4:93:0b:be:f2:fb:52:cb:24:f1:6d:20:ea:7e:1e:89:
         93:ca:a1:5e:f6:76:f2:56:85:07:24:05:36:8f:7e:f4:3b:38:
         e9:e4:a5:ce:65:38:c1:5c:6f:e7:c9:07:39:85:eb:31:dc:25:
         31:c0:85:a9:13:35:63:c6:99:c0:c7:73:e7:5f:e7:6e:5b:7f:
         95:a7:e9:32:2a:b3:b7:cd:1a:4a:4f:91:c9:d4:06:dd:a3:33:
         4b:c5:b0:8b:98:5a:1b:f4:07:08:2c:4b:56:d8:f5:57:f8:02:
         63:b7:5a:8b:00:21:2e:3d:3b:da:be:20:f0:cf:db:c1:cf:19:
         71:35:f5:1d:e3:0e:7a:b7:e0:4b:6c:c3:c2:f0:80:ac:9f:a9:
         8a:cc:79:1b:e7:80:d9:a4:8a:47:c8:5d:86:6c:1e:8b:20:bc:
         13:d3:02:90:8a:96:0d:67:db:ce:f0:cb:48:f8:ca:7a:db:a6:
         f4:c4:57:3c:2c:97:46:ef:a9:d6:95:d7:0d:f3:bb:77:3d:fe:
         ac:02:f1:d2
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgITUlfp1A40J3bjJsHYarnPacqp+jANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhCRUVFNzVFMEY5RTRFNjQ2OTcxMEE4MTk0NjAwRjk3M0JG
MUU2MTA1MB4XDTI0MDQzMDE5NTgwNloXDTI1MDQyOTIwMDMwNlowMzExMC8GA1UE
AxMoQTQ1MkQ1MEQ2OTFDQUFFNkIxQkEwNTVBOERCM0RFRDNCNDkxMTI5RjCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJUcZRZViVuDrq0Ip8rc235SEWSq
ZDfd5Ba+86s3gLAIggiXnCKjXQNis7UdJ1Ry21yqjEkZ3GtnA3m90ba5DfZYT0n1
T5++ZiNSr6tqp4XppYjBqsre9efP65O/7+LUreEqrgEf/2NA4wvqb9MrLFM7Hsco
jS+OStj8Dq2xbSkZkv+EcJt+1yUlWhYB22EEXppRs1Se6/mZn440MUibpY0XX1h/
GeoQnj5btvVE5zdNSjHbKO/CFthtLK3mS3rXLfk621t30ChHokv0YXXELv6MMcza
I6+gJZ3lU28fMW2VrxD6Z5bvcmBSydDfFuK1W+VoGW4293gzmM0pVrQEFAkCAwEA
AaOCAlEwggJNMB0GA1UdDgQWBBSkUtUNaRyq5rG6BVqNs97TtJESnzAfBgNVHSME
GDAWgBS+7nXg+eTmRpcQqBlGAPlzvx5hBTAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9DNEZ0RG5wWUprQ0pzZHRTcWpZb2gzUkZ3b0NMOVBBV0NkSktTdW14eEpR
aS8wL0JFRUU3NUUwRjlFNEU2NDY5NzEwQTgxOTQ2MDBGOTczQkYxRTYxMDUuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvQkVFRTc1RTBGOUU0RTY0Njk3
MTBBODE5NDYwMEY5NzNCRjFFNjEwNS5jZXIwga4GCCsGAQUFBwELBIGhMIGeMIGb
BggrBgEFBQcwC4aBjnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QzRGdERucFlKa0NKc2R0U3FqWW9oM1JGd29DTDlQQVdDZEpLU3VteHhKUWkvMC8z
MTM5MzEyZTM1MzIyZTMyMzEzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzcz
MDM4MzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAr802DANBgkqhkiG9w0BAQsFAAOCAQEAWRYJPh/B
QMTYxDVJ7tpRj7ktTctMUDwm3ElQZfxERJqAG8ZVHubgXeq1/hdP/LVnkPdqPYBS
LFvEkwu+8vtSyyTxbSDqfh6Jk8qhXvZ28laFByQFNo9+9Ds46eSlzmU4wVxv58kH
OYXrMdwlMcCFqRM1Y8aZwMdz51/nblt/lafpMiqzt80aSk+RydQG3aMzS8Wwi5ha
G/QHCCxLVtj1V/gCY7daiwAhLj072r4g8M/bwc8ZcTX1HeMOerfgS2zDwvCArJ+p
isx5G+eA2aSKR8hdhmweiyC8E9MCkIqWDWfbzvDLSPjKetum9MRXPCyXRu+p1pXX
DfO7dz3+rALx0g==
-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:21 2024 by rpki-client on console-ams.rpki-client.org