Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/1/3139302e392e3130342e302f32332d3233203d3e20323731363037.roa
File:                     3139302e392e3130342e302f32332d3233203d3e20323731363037.roa (raw, json)
Hash identifier:          9gs2HpFB08QifH9DthSpAEvbwuNeAumaHMOI/4k5qXc=
Subject key identifier:   93:18:71:1C:25:B8:C9:A7:E3:56:D4:43:27:B0:DF:64:F4:8E:BE:AF
Certificate issuer:       /CN=893D95ADA38B2A288C03DAA99290D5110510F8E7
Certificate serial:       1E74BD5279B4AD052129594CE6E7B8BF01611D15
Authority key identifier: 89:3D:95:AD:A3:8B:2A:28:8C:03:DA:A9:92:90:D5:11:05:10:F8:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/893D95ADA38B2A288C03DAA99290D5110510F8E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/1/3139302e392e3130342e302f32332d3233203d3e20323731363037.roa
Signing time:             Wed 03 Apr 2024 20:23:10 +0000
ROA not before:           Wed 03 Apr 2024 20:18:10 +0000
ROA not after:            Wed 02 Apr 2025 20:23:10 +0000
asID:                     271607
IP address blocks:        190.9.104.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/1/893D95ADA38B2A288C03DAA99290D5110510F8E7.crl
                          rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/1/893D95ADA38B2A288C03DAA99290D5110510F8E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/893D95ADA38B2A288C03DAA99290D5110510F8E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:74:bd:52:79:b4:ad:05:21:29:59:4c:e6:e7:b8:bf:01:61:1d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=893D95ADA38B2A288C03DAA99290D5110510F8E7
        Validity
            Not Before: Apr  3 20:18:10 2024 GMT
            Not After : Apr  2 20:23:10 2025 GMT
        Subject: CN=9318711C25B8C9A7E356D44327B0DF64F48EBEAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d2:8e:48:e5:59:5e:3d:1f:be:ec:c3:db:ca:
                    e9:3d:ac:15:eb:bf:3c:ed:25:31:0b:10:5b:aa:bb:
                    86:c7:4a:10:d1:b3:6c:1c:e8:0d:8c:ad:55:8f:d8:
                    11:c0:d8:56:bd:68:7a:81:11:f4:91:85:81:e1:0a:
                    8f:fc:bb:ec:c8:10:6a:5a:d6:e7:28:e5:15:71:b9:
                    30:57:cf:8b:ad:b3:19:07:80:cd:90:a1:aa:f7:e6:
                    73:6a:6b:94:0a:d2:be:b1:42:c0:81:26:b3:76:a2:
                    2c:3b:d2:0b:3a:7c:28:ce:4f:2d:15:ad:e4:d7:bd:
                    50:f3:a5:ac:fb:80:00:80:93:8b:06:ac:98:71:20:
                    d7:5c:97:9c:c9:43:10:a7:ce:1e:0a:d7:75:60:7e:
                    c7:fa:b0:92:2b:91:0b:28:58:af:5a:f0:fa:c6:f5:
                    c9:49:90:49:e6:68:f9:91:be:a9:1b:38:36:1a:f9:
                    96:dc:59:7b:1c:4d:f0:df:3e:e9:07:44:b8:8e:4c:
                    9f:ff:70:da:79:c4:11:4b:c4:8e:11:b1:83:2b:86:
                    b2:65:8c:52:ea:ff:5d:42:7d:0f:37:93:b8:26:28:
                    f4:1c:b0:b0:8d:82:e2:3f:45:a1:01:5a:6b:fd:fe:
                    1f:3f:67:be:bf:88:c8:c3:a4:e4:4d:38:26:ef:3a:
                    29:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:18:71:1C:25:B8:C9:A7:E3:56:D4:43:27:B0:DF:64:F4:8E:BE:AF
            X509v3 Authority Key Identifier:
                keyid:89:3D:95:AD:A3:8B:2A:28:8C:03:DA:A9:92:90:D5:11:05:10:F8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/1/893D95ADA38B2A288C03DAA99290D5110510F8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/893D95ADA38B2A288C03DAA99290D5110510F8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ci2asP92eqLcwrdLEBntbeFepcmJVTx7jUsZJdccZSG/1/3139302e392e3130342e302f32332d3233203d3e20323731363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:6e:db:74:e6:63:40:53:fc:26:2c:e1:4b:f1:bf:ce:cb:15:
         18:27:a1:0b:0b:77:25:ea:99:b3:9e:75:98:5b:0c:ab:59:f2:
         91:fd:5f:a8:ec:3d:54:b4:e2:57:40:b5:c4:3b:f4:0c:d8:9d:
         e0:d2:49:db:2b:8d:8b:67:b2:9b:c0:30:a8:fa:60:bf:31:82:
         90:ae:76:e2:a5:fe:95:e1:4a:6e:4f:b5:5a:ca:d2:4b:7d:0b:
         5b:87:a6:db:9e:cc:c8:fe:de:ca:e7:df:e3:f4:c0:8c:ac:35:
         de:cc:ee:af:0f:df:5e:2a:9e:72:f7:94:6e:95:29:d3:b7:f3:
         d6:49:07:ed:5d:f3:cd:f0:69:6d:21:be:c5:18:97:3c:23:98:
         74:4d:95:eb:82:9f:7c:66:d4:a2:b7:a6:d8:1c:81:67:9c:55:
         20:32:8c:6f:66:e2:84:e3:d6:c3:44:1c:70:a8:6a:09:97:64:
         c2:37:a6:5a:8b:2d:65:11:4e:6e:67:b6:8f:75:4f:aa:2b:f0:
         06:f2:e7:8c:c4:fd:4a:dc:91:81:22:27:c1:0e:11:12:a2:6d:
         64:86:b0:0b:02:ce:fb:66:82:0e:dd:47:a7:3e:10:d2:d1:d8:
         64:4e:12:19:d6:6e:7e:a4:fc:1b:7e:35:2b:93:32:3c:ba:46:
         13:b4:74:66
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUHnS9Unm0rQUhKVlM5ue4vwFhHRUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODkzRDk1QURBMzhCMkEyODhDMDNEQUE5OTI5MEQ1MTEw
NTEwRjhFNzAeFw0yNDA0MDMyMDE4MTBaFw0yNTA0MDIyMDIzMTBaMDMxMTAvBgNV
BAMTKDkzMTg3MTFDMjVCOEM5QTdFMzU2RDQ0MzI3QjBERjY0RjQ4RUJFQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs0o5I5VlePR++7MPbyuk9rBXr
vzztJTELEFuqu4bHShDRs2wc6A2MrVWP2BHA2Fa9aHqBEfSRhYHhCo/8u+zIEGpa
1uco5RVxuTBXz4utsxkHgM2Qoar35nNqa5QK0r6xQsCBJrN2oiw70gs6fCjOTy0V
reTXvVDzpaz7gACAk4sGrJhxINdcl5zJQxCnzh4K13Vgfsf6sJIrkQsoWK9a8PrG
9clJkEnmaPmRvqkbODYa+ZbcWXscTfDfPukHRLiOTJ//cNp5xBFLxI4RsYMrhrJl
jFLq/11CfQ83k7gmKPQcsLCNguI/RaEBWmv9/h8/Z76/iMjDpORNOCbvOik1AgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUkxhxHCW4yafjVtRDJ7DfZPSOvq8wHwYDVR0j
BBgwFoAUiT2VraOLKiiMA9qpkpDVEQUQ+OcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9DaTJhc1A5MmVxTGN3cmRMRUJudGJlRmVwY21KVlR4N2pVc1pKZGNjWlNH
LzEvODkzRDk1QURBMzhCMkEyODhDMDNEQUE5OTI5MEQ1MTEwNTEwRjhFNy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84OTNEOTVBREEzOEIyQTI4OEMw
M0RBQTk5MjkwRDUxMTA1MTBGOEU3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9D
aTJhc1A5MmVxTGN3cmRMRUJudGJlRmVwY21KVlR4N2pVc1pKZGNjWlNHLzEvMzEz
OTMwMmUzOTJlMzEzMDM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNzMxMzYz
MDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBvgloMA0GCSqGSIb3DQEBCwUAA4IBAQAgbtt05mNAU/wm
LOFL8b/OyxUYJ6ELC3cl6pmznnWYWwyrWfKR/V+o7D1UtOJXQLXEO/QM2J3g0knb
K42LZ7KbwDCo+mC/MYKQrnbipf6V4UpuT7VaytJLfQtbh6bbnszI/t7K59/j9MCM
rDXezO6vD99eKp5y95RulSnTt/PWSQftXfPN8GltIb7FGJc8I5h0TZXrgp98ZtSi
t6bYHIFnnFUgMoxvZuKE49bDRBxwqGoJl2TCN6Zaiy1lEU5uZ7aPdU+qK/AG8ueM
xP1K3JGBIifBDhESom1khrALAs77ZoIO3UenPhDS0dhkThIZ1m5+pPwbfjUrkzI8
ukYTtHRm
-----END CERTIFICATE-----
Generated at Fri Jun 28 09:51:02 2024 by rpki-client on console-ams.rpki-client.org