Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3138392e38342e3234302e302f32302d3234203d3e203238363538.roa
File:                     3138392e38342e3234302e302f32302d3234203d3e203238363538.roa (raw, json)
Hash identifier:          Rv9L1bZEzuMx9HQtQBC5w8SJXNM5Z8qiIJK3OyoIOio=
Subject key identifier:   79:8F:57:D2:D1:59:36:65:79:21:C0:49:C6:B1:BC:47:27:E2:C3:83
Certificate issuer:       /CN=59D97368930A28A43621D32020C3E70B26E79708
Certificate serial:       2BAEE053D0425EAF6AD5654F99A292430EB5EB2F
Authority key identifier: 59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3138392e38342e3234302e302f32302d3234203d3e203238363538.roa
Signing time:             Thu 04 Apr 2024 09:18:03 +0000
ROA not before:           Thu 04 Apr 2024 09:13:03 +0000
ROA not after:            Thu 03 Apr 2025 09:18:03 +0000
asID:                     28658
IP address blocks:        189.84.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl
                          rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:25:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ae:e0:53:d0:42:5e:af:6a:d5:65:4f:99:a2:92:43:0e:b5:eb:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59D97368930A28A43621D32020C3E70B26E79708
        Validity
            Not Before: Apr  4 09:13:03 2024 GMT
            Not After : Apr  3 09:18:03 2025 GMT
        Subject: CN=798F57D2D15936657921C049C6B1BC4727E2C383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d9:37:53:78:9e:88:2d:50:57:36:a8:a8:b2:
                    5a:0e:96:d4:d9:d1:aa:0b:aa:c7:0f:9d:3a:68:7c:
                    38:0b:0c:1c:7a:63:e0:af:91:b1:b2:26:e2:5e:36:
                    86:22:5b:92:12:34:23:56:9c:c5:29:da:f7:20:5c:
                    1f:a0:7c:db:e1:9e:0f:8d:86:2b:ba:2e:dc:5e:8f:
                    a7:63:86:03:6e:c2:6c:c0:00:49:9d:dd:51:c8:b8:
                    9e:c4:ff:b8:f1:3e:0a:92:7b:e8:05:ae:6b:5d:03:
                    51:da:29:5a:f2:72:36:5d:f3:b0:27:16:5d:94:fe:
                    4b:6c:87:95:d7:e0:dd:94:e7:d2:03:51:51:e4:81:
                    1a:a5:dc:10:cc:eb:50:4c:43:93:eb:a4:28:39:07:
                    23:20:3e:90:3b:fb:66:83:85:b5:68:9c:1d:b3:d8:
                    7a:c6:e9:0a:ae:36:08:fc:32:2c:a6:fb:5b:19:11:
                    25:a7:5e:de:75:fd:70:ab:4e:0d:8c:91:9b:15:d0:
                    95:a3:bf:45:ed:77:41:6f:c6:a0:41:ba:8e:01:d2:
                    63:d1:1b:4f:86:29:44:1b:70:73:1a:bb:bc:3c:8f:
                    c8:7d:d9:ff:19:57:fb:73:7c:bb:91:b3:56:62:67:
                    07:a5:39:bb:81:4c:dd:08:bc:05:ca:93:4d:73:84:
                    8f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8F:57:D2:D1:59:36:65:79:21:C0:49:C6:B1:BC:47:27:E2:C3:83
            X509v3 Authority Key Identifier:
                keyid:59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3138392e38342e3234302e302f32302d3234203d3e203238363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:e6:40:db:c5:da:61:16:cc:05:dd:c8:f6:60:12:93:33:ac:
         86:e0:ee:e0:5f:70:d6:56:d9:64:81:12:a3:5c:d5:74:d7:a2:
         6f:bc:a0:4b:76:8e:26:76:17:9a:e6:2c:65:d1:84:af:73:47:
         fe:fb:d0:6b:f5:c8:c1:8f:af:5d:d2:fd:83:9e:3c:c8:10:2c:
         5e:d9:4d:cb:3e:ad:82:6e:a6:30:79:78:46:c4:37:71:cd:10:
         de:8e:5f:9f:85:30:e7:ef:af:31:6c:bf:ca:e2:32:e5:04:02:
         c1:de:22:0e:63:f9:db:f5:53:4d:f6:47:2b:c4:65:c3:05:02:
         5c:ed:a9:19:1d:41:b4:23:c4:76:a6:95:f2:c6:f3:0d:7b:db:
         e4:cc:fa:32:f2:32:f8:a8:c5:7c:3f:16:9d:e1:bf:65:30:1b:
         1a:79:1b:bd:0f:8b:b2:9d:5e:2b:cc:4b:27:cb:e4:63:a3:66:
         63:4e:28:5a:cc:16:e8:15:61:d2:07:f3:e9:4f:8e:f5:24:bf:
         cb:e2:7f:22:55:55:1b:e6:be:0b:f9:f2:ee:78:4e:3f:37:b3:
         9e:57:2e:1d:bc:8d:39:44:66:99:77:94:44:8f:9f:57:84:f4:
         94:c8:72:a0:17:3d:02:41:a1:e8:3b:1b:a4:73:45:1a:e3:fe:
         08:20:96:86
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUK67gU9BCXq9q1WVPmaKSQw616y8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlEOTczNjg5MzBBMjhBNDM2MjFEMzIwMjBDM0U3MEIy
NkU3OTcwODAeFw0yNDA0MDQwOTEzMDNaFw0yNTA0MDMwOTE4MDNaMDMxMTAvBgNV
BAMTKDc5OEY1N0QyRDE1OTM2NjU3OTIxQzA0OUM2QjFCQzQ3MjdFMkMzODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm2TdTeJ6ILVBXNqiosloOltTZ
0aoLqscPnTpofDgLDBx6Y+CvkbGyJuJeNoYiW5ISNCNWnMUp2vcgXB+gfNvhng+N
hiu6Ltxej6djhgNuwmzAAEmd3VHIuJ7E/7jxPgqSe+gFrmtdA1HaKVrycjZd87An
Fl2U/ktsh5XX4N2U59IDUVHkgRql3BDM61BMQ5PrpCg5ByMgPpA7+2aDhbVonB2z
2HrG6QquNgj8Miym+1sZESWnXt51/XCrTg2MkZsV0JWjv0Xtd0FvxqBBuo4B0mPR
G0+GKUQbcHMau7w8j8h92f8ZV/tzfLuRs1ZiZwelObuBTN0IvAXKk01zhI8nAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUeY9X0tFZNmV5IcBJxrG8Ryfiw4MwHwYDVR0j
BBgwFoAUWdlzaJMKKKQ2IdMgIMPnCybnlwgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3hyeDk5bmFoZnA1aENvRms4OEM2cDR4Rk5admlycDdyYmpwM0tBUkdq
d1MvMS81OUQ5NzM2ODkzMEEyOEE0MzYyMUQzMjAyMEMzRTcwQjI2RTc5NzA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU5RDk3MzY4OTMwQTI4QTQz
NjIxRDMyMDIwQzNFNzBCMjZFNzk3MDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N4cng5OW5haGZwNWhDb0ZrODhDNnA0eEZOWnZpcnA3cmJqcDNLQVJHandTLzEv
MzEzODM5MmUzODM0MmUzMjM0MzAyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4
MzYzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEvVTwMA0GCSqGSIb3DQEBCwUAA4IBAQBl5kDbxdph
FswF3cj2YBKTM6yG4O7gX3DWVtlkgRKjXNV016JvvKBLdo4mdhea5ixl0YSvc0f+
+9Br9cjBj69d0v2DnjzIECxe2U3LPq2CbqYweXhGxDdxzRDejl+fhTDn768xbL/K
4jLlBALB3iIOY/nb9VNN9kcrxGXDBQJc7akZHUG0I8R2ppXyxvMNe9vkzPoy8jL4
qMV8Pxad4b9lMBsaeRu9D4uynV4rzEsny+Rjo2ZjTihazBboFWHSB/PpT471JL/L
4n8iVVUb5r4L+fLueE4/N7OeVy4dvI05RGaZd5REj59XhPSUyHKgFz0CQaHoOxuk
c0Ua4/4IIJaG
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:10 2024 by rpki-client on console-fra.rpki-client.org