Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/3138312e3139312e39362e302f32322d3234203d3e20323636303033.roa
File:                     3138312e3139312e39362e302f32322d3234203d3e20323636303033.roa (raw, json)
Hash identifier:          i7egcmP2jT4uYDkXKxVqEH1jioOW9jr7XrnFoXBx5ro=
Subject key identifier:   91:E7:77:C5:A0:EE:FC:2D:E8:D1:A9:9A:8E:0B:D5:02:45:D8:B4:1C
Certificate issuer:       /CN=487FA03B43556370F59D61474B6B57E8783FCC68
Certificate serial:       533A868D2012021D923B784B3DE5FF3BA77C66F9
Authority key identifier: 48:7F:A0:3B:43:55:63:70:F5:9D:61:47:4B:6B:57:E8:78:3F:CC:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/487FA03B43556370F59D61474B6B57E8783FCC68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/3138312e3139312e39362e302f32322d3234203d3e20323636303033.roa
Signing time:             Mon 22 Apr 2024 18:17:16 +0000
ROA not before:           Mon 22 Apr 2024 18:12:16 +0000
ROA not after:            Mon 21 Apr 2025 18:17:16 +0000
asID:                     266003
IP address blocks:        181.191.96.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/487FA03B43556370F59D61474B6B57E8783FCC68.crl
                          rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/487FA03B43556370F59D61474B6B57E8783FCC68.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/487FA03B43556370F59D61474B6B57E8783FCC68.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:3a:86:8d:20:12:02:1d:92:3b:78:4b:3d:e5:ff:3b:a7:7c:66:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=487FA03B43556370F59D61474B6B57E8783FCC68
        Validity
            Not Before: Apr 22 18:12:16 2024 GMT
            Not After : Apr 21 18:17:16 2025 GMT
        Subject: CN=91E777C5A0EEFC2DE8D1A99A8E0BD50245D8B41C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0e:30:95:6c:71:1f:52:1c:7b:99:df:bd:4c:
                    60:ee:b3:31:92:21:45:9e:c0:3e:01:b9:54:9c:37:
                    8f:03:75:bd:e6:eb:ca:cd:25:a9:38:d7:00:fc:e6:
                    b8:b6:24:f0:05:90:8a:af:40:bb:69:ce:57:6f:7c:
                    f8:a6:61:f8:00:23:ee:69:6e:17:fd:34:a9:49:92:
                    62:a3:4d:d6:30:90:69:f3:76:2a:6d:df:65:0c:31:
                    9e:ee:12:ef:1d:19:0a:03:c2:98:a9:48:b0:bc:17:
                    1c:e4:48:43:1d:d4:fb:be:74:89:47:2a:56:d0:24:
                    fd:bf:a7:c0:f6:ed:a8:84:d1:70:f1:33:ec:60:48:
                    58:6c:f6:c3:63:df:d4:16:de:da:ba:7f:ac:60:af:
                    36:aa:77:3d:7a:49:ba:5d:aa:7d:f2:96:99:17:f7:
                    1a:e5:45:57:4d:10:37:30:b3:24:2e:c7:cc:6c:3c:
                    d9:44:0e:1b:81:ae:a5:c5:90:f7:2d:a2:79:47:e6:
                    18:2b:ce:68:85:78:db:ab:86:54:98:fc:eb:d5:2e:
                    39:f1:51:56:ab:e2:cc:85:31:74:6a:de:79:96:02:
                    73:44:2d:77:92:82:8f:1f:35:8c:38:42:11:0d:26:
                    e0:4c:f6:8f:7e:1f:28:9a:78:ef:b4:5d:a4:c4:f6:
                    b0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E7:77:C5:A0:EE:FC:2D:E8:D1:A9:9A:8E:0B:D5:02:45:D8:B4:1C
            X509v3 Authority Key Identifier:
                keyid:48:7F:A0:3B:43:55:63:70:F5:9D:61:47:4B:6B:57:E8:78:3F:CC:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/487FA03B43556370F59D61474B6B57E8783FCC68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/487FA03B43556370F59D61474B6B57E8783FCC68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/3138312e3139312e39362e302f32322d3234203d3e20323636303033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:85:4a:55:d2:6e:22:05:59:68:2f:52:58:67:9c:e7:5d:8c:
         f1:04:a4:a3:d6:70:5b:a7:68:70:56:cd:71:dc:a1:5f:17:77:
         a5:35:44:6c:2b:67:7a:c4:af:e8:09:24:64:88:87:e1:7c:88:
         6e:c5:a0:17:7d:19:f2:ae:ce:6c:d1:0d:6d:dd:1b:e7:ef:14:
         88:10:94:0b:ae:50:55:51:fe:15:e5:5d:dc:5f:b5:67:eb:bd:
         9e:e3:52:e0:db:39:74:57:1a:8b:4d:05:10:23:74:6a:b9:26:
         c1:46:be:54:e6:6c:a7:7e:63:97:b4:2a:71:8d:cd:b3:57:cd:
         e0:6b:6d:b6:de:25:3b:67:fb:94:fa:6c:d9:74:eb:99:18:a9:
         ef:30:5c:27:d1:af:dc:dc:e7:cc:4d:3b:12:62:55:3c:d9:94:
         7d:ed:e5:55:b8:01:17:24:29:08:77:08:4a:28:45:5f:da:c5:
         24:3b:89:31:23:cc:fb:b4:22:67:e5:89:9d:3c:97:cd:fa:5d:
         97:4d:e8:0f:e1:66:11:de:f9:25:f4:4a:84:66:93:a3:a6:60:
         40:50:78:d6:cf:9b:53:95:73:5f:6c:c7:08:ee:b1:db:65:05:
         3c:28:e8:be:45:c4:22:d7:5a:a6:83:f9:55:cf:04:78:2b:50:
         15:91:84:69
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUzqGjSASAh2SO3hLPeX/O6d8ZvkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDg3RkEwM0I0MzU1NjM3MEY1OUQ2MTQ3NEI2QjU3RTg3
ODNGQ0M2ODAeFw0yNDA0MjIxODEyMTZaFw0yNTA0MjExODE3MTZaMDMxMTAvBgNV
BAMTKDkxRTc3N0M1QTBFRUZDMkRFOEQxQTk5QThFMEJENTAyNDVEOEI0MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWDjCVbHEfUhx7md+9TGDuszGS
IUWewD4BuVScN48Ddb3m68rNJak41wD85ri2JPAFkIqvQLtpzldvfPimYfgAI+5p
bhf9NKlJkmKjTdYwkGnzdipt32UMMZ7uEu8dGQoDwpipSLC8FxzkSEMd1Pu+dIlH
KlbQJP2/p8D27aiE0XDxM+xgSFhs9sNj39QW3tq6f6xgrzaqdz16Sbpdqn3ylpkX
9xrlRVdNEDcwsyQux8xsPNlEDhuBrqXFkPctonlH5hgrzmiFeNurhlSY/OvVLjnx
UVar4syFMXRq3nmWAnNELXeSgo8fNYw4QhENJuBM9o9+HyiaeO+0XaTE9rAxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUked3xaDu/C3o0amajgvVAkXYtBwwHwYDVR0j
BBgwFoAUSH+gO0NVY3D1nWFHS2tX6Hg/zGgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDFkdUV1RjhlTEJ0aVdxZUI2ekZudkdqSnM3TnZ0Qm51Mzdib3JLVnpq
ZEgvMC80ODdGQTAzQjQzNTU2MzcwRjU5RDYxNDc0QjZCNTdFODc4M0ZDQzY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ4N0ZBMDNCNDM1NTYzNzBG
NTlENjE0NzRCNkI1N0U4NzgzRkNDNjguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QxZHVFdUY4ZUxCdGlXcWVCNnpGbnZHakpzN052dEJudTM3Ym9yS1Z6amRILzAv
MzEzODMxMmUzMTM5MzEyZTM5MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzYzMDMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK1v2AwDQYJKoZIhvcNAQELBQADggEBAKCFSlXS
biIFWWgvUlhnnOddjPEEpKPWcFunaHBWzXHcoV8Xd6U1RGwrZ3rEr+gJJGSIh+F8
iG7FoBd9GfKuzmzRDW3dG+fvFIgQlAuuUFVR/hXlXdxftWfrvZ7jUuDbOXRXGotN
BRAjdGq5JsFGvlTmbKd+Y5e0KnGNzbNXzeBrbbbeJTtn+5T6bNl065kYqe8wXCfR
r9zc58xNOxJiVTzZlH3t5VW4ARckKQh3CEooRV/axSQ7iTEjzPu0ImfliZ08l836
XZdN6A/hZhHe+SX0SoRmk6OmYEBQeNbPm1OVc19sxwjusdtlBTwo6L5FxCLXWqaD
+VXPBHgrUBWRhGk=
-----END CERTIFICATE-----
Generated at Sun Jun 16 19:10:04 2024 by rpki-client on console-ams.rpki-client.org