Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3134332e3230382e3139322e302f32332d3233203d3e20323632373239.roa
File:                     3134332e3230382e3139322e302f32332d3233203d3e20323632373239.roa (raw, json)
Hash identifier:          SHCtEmqnkbiywaEyoQTbvpwVDxxTo0yzUUGWfnmxGqE=
Subject key identifier:   5A:9A:30:02:64:1E:1E:68:70:CC:E7:28:0A:C2:64:A6:EB:E3:04:68
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       788578819893A0FD29173CB7464220F758B2A831
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3134332e3230382e3139322e302f32332d3233203d3e20323632373239.roa
Signing time:             Mon 15 Jul 2024 13:42:26 +0000
ROA not before:           Mon 15 Jul 2024 13:37:26 +0000
ROA not after:            Mon 14 Jul 2025 13:42:26 +0000
asID:                     262729
IP address blocks:        143.208.192.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:25:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:85:78:81:98:93:a0:fd:29:17:3c:b7:46:42:20:f7:58:b2:a8:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jul 15 13:37:26 2024 GMT
            Not After : Jul 14 13:42:26 2025 GMT
        Subject: CN=5A9A3002641E1E6870CCE7280AC264A6EBE30468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dc:6b:c2:28:49:91:0c:17:aa:6e:92:cf:13:
                    ea:8d:b1:4e:58:fa:4e:14:98:31:10:6b:f0:c7:7d:
                    3a:7d:73:46:dd:3f:ef:70:f7:07:72:9a:f3:49:80:
                    90:96:37:d2:cd:b0:16:72:00:f7:5f:cc:9c:d1:9c:
                    ac:c3:23:83:1d:47:bf:d5:4e:81:ab:f7:90:2a:a3:
                    42:62:03:60:03:44:4b:aa:4f:34:f2:2a:6e:c1:a1:
                    2a:ad:49:11:1a:23:51:8a:c2:f4:e3:78:81:6d:aa:
                    28:31:91:e9:15:0e:cc:a1:05:1b:13:f8:24:7d:f7:
                    e3:a0:7e:31:91:93:92:10:74:07:c3:79:1e:90:86:
                    20:4e:89:d5:ae:12:74:90:21:ee:c9:f2:f8:04:7e:
                    d1:de:8d:f9:7b:5a:10:85:4d:44:6a:bc:41:b6:00:
                    60:19:aa:e5:23:2d:d6:08:7e:c7:22:93:c7:cf:65:
                    bf:02:bc:1d:2c:1d:02:d3:cd:0f:49:af:00:19:21:
                    b3:26:f3:75:af:1e:1e:93:ee:73:a5:43:aa:1e:ed:
                    d9:bc:af:a3:c4:47:f0:fe:93:2f:da:09:75:47:cc:
                    d7:44:8d:f9:37:63:f9:10:f1:b7:6f:9c:5a:cf:d4:
                    8b:36:3c:0a:33:24:76:ff:35:d0:8f:ad:95:e3:d3:
                    ea:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:9A:30:02:64:1E:1E:68:70:CC:E7:28:0A:C2:64:A6:EB:E3:04:68
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3134332e3230382e3139322e302f32332d3233203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:e8:f9:63:c9:33:df:d9:0a:ff:16:05:a6:13:85:c6:b6:67:
         fb:f9:1a:f9:aa:a7:ef:f3:d4:5d:b6:4b:5a:27:5e:54:b6:62:
         fa:35:cc:4b:c0:4e:b9:55:20:77:12:9e:54:35:74:7e:34:b4:
         ba:9c:74:ed:a5:d6:20:81:4b:4d:d1:59:82:9d:c8:42:22:c7:
         c3:22:3e:d8:41:86:61:2b:36:f5:72:74:a9:7d:a8:a0:21:72:
         a6:43:65:2d:a0:22:e7:38:4c:f2:32:3a:f8:47:79:2f:dc:f7:
         20:02:6d:da:9b:fb:7f:89:3e:c6:8d:08:43:4a:2c:4e:6d:49:
         26:46:74:f5:94:0d:a0:1b:5e:8b:87:33:86:62:fb:e8:23:1c:
         3f:52:1d:23:f9:64:49:57:2c:44:80:79:c8:1f:97:7d:78:41:
         d3:40:22:09:23:38:5c:0b:78:28:ab:c3:e1:06:92:09:e2:3b:
         0a:2b:d1:b2:b2:ef:66:09:3c:6e:80:7d:9d:e5:ac:e1:1c:5f:
         36:50:1d:e3:9b:8b:33:77:d8:39:91:9b:95:a5:ca:12:47:37:
         c8:e3:01:83:40:67:b5:d5:99:fa:e5:d6:77:d3:74:02:bb:51:
         4d:69:de:fb:2e:0d:3e:df:f8:6f:8a:b2:67:5a:27:8b:23:d0:
         db:02:42:79
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUeIV4gZiToP0pFzy3RkIg91iyqDEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlEQjFCNThEQ0Q0NkMyRTc0NkQ4RERFQUE3RjQ5ODMz
MUREQjAxNzAeFw0yNDA3MTUxMzM3MjZaFw0yNTA3MTQxMzQyMjZaMDMxMTAvBgNV
BAMTKDVBOUEzMDAyNjQxRTFFNjg3MENDRTcyODBBQzI2NEE2RUJFMzA0NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC13GvCKEmRDBeqbpLPE+qNsU5Y
+k4UmDEQa/DHfTp9c0bdP+9w9wdymvNJgJCWN9LNsBZyAPdfzJzRnKzDI4MdR7/V
ToGr95Aqo0JiA2ADREuqTzTyKm7BoSqtSREaI1GKwvTjeIFtqigxkekVDsyhBRsT
+CR99+OgfjGRk5IQdAfDeR6QhiBOidWuEnSQIe7J8vgEftHejfl7WhCFTURqvEG2
AGAZquUjLdYIfscik8fPZb8CvB0sHQLTzQ9JrwAZIbMm83WvHh6T7nOlQ6oe7dm8
r6PER/D+ky/aCXVHzNdEjfk3Y/kQ8bdvnFrP1Is2PAozJHb/NdCPrZXj0+r7AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUWpowAmQeHmhwzOcoCsJkpuvjBGgwHwYDVR0j
BBgwFoAUudsbWNzUbC50bY3eqn9JgzHdsBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDVmUEVVcmNhM21RVW9hNVVMS3pGNVB6WTdZZExVSkdXbTRiRzF0ZUZn
OWsvMC9COURCMUI1OERDRDQ2QzJFNzQ2RDhEREVBQTdGNDk4MzMxRERCMDE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5REIxQjU4RENENDZDMkU3
NDZEOERERUFBN0Y0OTgzMzFEREIwMTcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q1ZlBFVXJjYTNtUVVvYTVVTEt6RjVQelk3WWRMVUpHV200YkcxdGVGZzlrLzAv
MzEzNDMzMmUzMjMwMzgyZTMxMzkzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM3MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAY/QwDANBgkqhkiG9w0BAQsFAAOCAQEARej5
Y8kz39kK/xYFphOFxrZn+/ka+aqn7/PUXbZLWideVLZi+jXMS8BOuVUgdxKeVDV0
fjS0upx07aXWIIFLTdFZgp3IQiLHwyI+2EGGYSs29XJ0qX2ooCFypkNlLaAi5zhM
8jI6+Ed5L9z3IAJt2pv7f4k+xo0IQ0osTm1JJkZ09ZQNoBtei4czhmL76CMcP1Id
I/lkSVcsRIB5yB+XfXhB00AiCSM4XAt4KKvD4QaSCeI7CivRsrLvZgk8boB9neWs
4RxfNlAd45uLM3fYOZGblaXKEkc3yOMBg0BntdWZ+uXWd9N0ArtRTWne+y4NPt/4
b4qyZ1oniyPQ2wJCeQ==
-----END CERTIFICATE-----
Generated at Mon Nov 25 07:18:39 2024 by rpki-client on console-ams.rpki-client.org