Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3133382e39372e382e302f32322d3234203d3e203238313538.roa
File:                     3133382e39372e382e302f32322d3234203d3e203238313538.roa (raw, json)
Hash identifier:          XHV0lcc3XaaLarWe9+Lr8FOgGivqVivsTkRZkqfKPmA=
Subject key identifier:   4A:14:A8:72:F0:B3:47:27:75:8E:14:8C:58:E0:8C:50:5D:46:39:B4
Certificate issuer:       /CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
Certificate serial:       76A9B2622B33447024C27A11D7B123DA6256508C
Authority key identifier: B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3133382e39372e382e302f32322d3234203d3e203238313538.roa
Signing time:             Thu 19 Sep 2024 14:37:52 +0000
ROA not before:           Thu 19 Sep 2024 14:32:52 +0000
ROA not after:            Thu 18 Sep 2025 14:37:52 +0000
asID:                     28158
IP address blocks:        138.97.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl
                          rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a9:b2:62:2b:33:44:70:24:c2:7a:11:d7:b1:23:da:62:56:50:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
        Validity
            Not Before: Sep 19 14:32:52 2024 GMT
            Not After : Sep 18 14:37:52 2025 GMT
        Subject: CN=4A14A872F0B34727758E148C58E08C505D4639B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:98:eb:b8:88:90:38:d8:ed:5f:6f:1f:d5:95:
                    79:01:e6:71:dc:8f:95:c6:0e:c6:97:0c:35:00:7e:
                    09:ac:b3:79:62:74:b1:89:4e:1e:f7:d6:78:9a:47:
                    e5:37:ea:6a:9e:43:d6:e2:37:3e:15:8d:71:33:55:
                    30:45:2b:c7:63:fd:8d:dd:b0:13:28:6a:29:83:ad:
                    15:e3:df:13:05:b5:95:4c:b1:c9:43:bb:f6:cd:2c:
                    bc:f7:cd:a7:60:90:d9:55:a9:ac:73:2e:f8:1c:61:
                    b4:28:1e:0a:c7:4a:eb:22:c8:f3:92:ea:ad:30:b0:
                    74:04:18:ab:d4:ed:77:b0:72:73:3b:0e:bd:ae:3e:
                    35:9f:de:bc:64:b0:89:9a:b2:06:60:d4:93:4a:89:
                    25:30:d4:d5:74:b7:8e:b7:8f:b3:c3:f4:70:31:53:
                    f8:b6:8d:93:53:78:c6:c4:67:df:07:8f:83:35:a4:
                    98:e9:eb:c1:30:36:f3:d5:77:6f:6c:b8:59:c0:b3:
                    43:9b:b1:ce:bd:89:9b:ce:42:92:8c:b5:e3:69:9d:
                    87:47:d6:e1:c2:cd:1f:5a:6b:8f:9c:0e:7a:10:d7:
                    a1:59:4e:fd:39:a5:bd:7b:a9:d9:91:75:6b:be:33:
                    2d:1f:97:2d:c4:77:4f:48:69:07:7d:b7:a1:a7:9c:
                    90:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:14:A8:72:F0:B3:47:27:75:8E:14:8C:58:E0:8C:50:5D:46:39:B4
            X509v3 Authority Key Identifier:
                keyid:B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3133382e39372e382e302f32322d3234203d3e203238313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:bc:73:6f:d6:3e:30:53:ad:e8:df:68:42:45:4d:49:76:75:
         bd:70:16:41:fd:17:ef:89:eb:e0:7d:af:ab:f0:5b:33:50:bc:
         8c:ee:f0:5b:8d:ee:1a:bf:b2:52:c8:98:ba:a1:50:47:cf:3c:
         29:cb:74:db:f3:fa:32:8c:9f:14:53:20:21:94:35:fc:e8:14:
         ef:b0:43:0f:77:da:c6:21:02:ca:f7:48:06:3b:50:ef:eb:b8:
         ee:fc:0e:96:3d:c1:37:ec:77:aa:b2:bc:ea:a2:5e:36:00:7b:
         54:75:61:8c:fa:b6:4a:a8:52:ed:28:35:1b:5d:34:79:68:21:
         46:92:a2:af:5c:76:5a:ce:96:fa:f2:d5:48:a3:03:6e:45:5b:
         6e:f2:bf:02:bb:64:c7:db:a8:af:78:94:14:c4:4e:c8:4d:70:
         73:f4:6f:e9:e7:48:d0:72:37:2c:87:bf:ef:f1:57:22:e7:2d:
         0c:0c:09:9e:b6:30:38:11:af:9b:87:cf:47:53:75:02:b3:1d:
         d1:8e:26:1b:24:7a:67:5f:17:d7:e8:53:e7:1a:f2:6c:4a:32:
         d2:9f:cd:6c:bf:8e:cf:38:ad:f8:65:ec:75:94:73:43:03:03:
         7a:09:28:14:72:40:b9:aa:d3:3f:c5:3b:8c:eb:83:76:80:bd:
         e4:e6:2a:21
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUdqmyYiszRHAkwnoR17Ej2mJWUIwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ1RDFBOEFGNzREOTRCMEUwQjEzNTY3MzZDOEJDOUFG
QjAxODVGRTAeFw0yNDA5MTkxNDMyNTJaFw0yNTA5MTgxNDM3NTJaMDMxMTAvBgNV
BAMTKDRBMTRBODcyRjBCMzQ3Mjc3NThFMTQ4QzU4RTA4QzUwNUQ0NjM5QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4mOu4iJA42O1fbx/VlXkB5nHc
j5XGDsaXDDUAfgmss3lidLGJTh731niaR+U36mqeQ9biNz4VjXEzVTBFK8dj/Y3d
sBMoaimDrRXj3xMFtZVMsclDu/bNLLz3zadgkNlVqaxzLvgcYbQoHgrHSusiyPOS
6q0wsHQEGKvU7XewcnM7Dr2uPjWf3rxksImasgZg1JNKiSUw1NV0t463j7PD9HAx
U/i2jZNTeMbEZ98Hj4M1pJjp68EwNvPVd29suFnAs0Obsc69iZvOQpKMteNpnYdH
1uHCzR9aa4+cDnoQ16FZTv05pb17qdmRdWu+My0fly3Ed09IaQd9t6GnnJALAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUShSocvCzRyd1jhSMWOCMUF1GObQwHwYDVR0j
BBgwFoAUtF0aivdNlLDgsTVnNsi8mvsBhf4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzd6d3hiQzJBaHJjWHZvQ2U2TUVvTURKQ2dGZVJnZ2diTFo4NFVoUENt
dGsvMC9CNDVEMUE4QUY3NEQ5NEIwRTBCMTM1NjczNkM4QkM5QUZCMDE4NUZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0NUQxQThBRjc0RDk0QjBF
MEIxMzU2NzM2QzhCQzlBRkIwMTg1RkUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M3end4YkMyQWhyY1h2b0NlNk1Fb01ESkNnRmVSZ2dnYkxaODRVaFBDbXRrLzAv
MzEzMzM4MmUzOTM3MmUzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzgzMTM1
Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAKKYQgwDQYJKoZIhvcNAQELBQADggEBAHy8c2/WPjBTrejf
aEJFTUl2db1wFkH9F++J6+B9r6vwWzNQvIzu8FuN7hq/slLImLqhUEfPPCnLdNvz
+jKMnxRTICGUNfzoFO+wQw932sYhAsr3SAY7UO/ruO78DpY9wTfsd6qyvOqiXjYA
e1R1YYz6tkqoUu0oNRtdNHloIUaSoq9cdlrOlvry1UijA25FW27yvwK7ZMfbqK94
lBTETshNcHP0b+nnSNByNyyHv+/xVyLnLQwMCZ62MDgRr5uHz0dTdQKzHdGOJhsk
emdfF9foU+ca8mxKMtKfzWy/js84rfhl7HWUc0MDA3oJKBRyQLmq0z/FO4zrg3aA
veTmKiE=
-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:55 2024 by rpki-client on console-fra.rpki-client.org