Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3134332e3230382e3139342e302f32332d3233203d3e20323632373239.roa
File:                     3134332e3230382e3139342e302f32332d3233203d3e20323632373239.roa (raw, json)
Hash identifier:          qk5eZd2MyMQoP4OdMyN1UaTe7Z0OJD5msIprG2Bcsuk=
Subject key identifier:   3D:34:E4:BE:78:AA:A6:18:96:4A:BE:CE:FB:E0:53:A4:68:2F:6E:D8
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       679C6542D5EAB37BB8EBF4B6A31A576F0BAB3895
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3134332e3230382e3139342e302f32332d3233203d3e20323632373239.roa
Signing time:             Mon 15 Jul 2024 13:42:26 +0000
ROA not before:           Mon 15 Jul 2024 13:37:26 +0000
ROA not after:            Mon 14 Jul 2025 13:42:26 +0000
asID:                     262729
IP address blocks:        143.208.194.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:25:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:9c:65:42:d5:ea:b3:7b:b8:eb:f4:b6:a3:1a:57:6f:0b:ab:38:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jul 15 13:37:26 2024 GMT
            Not After : Jul 14 13:42:26 2025 GMT
        Subject: CN=3D34E4BE78AAA618964ABECEFBE053A4682F6ED8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1c:b6:60:df:22:05:64:d0:2d:3c:bf:c5:36:
                    8f:39:8e:db:dd:28:d9:d6:1c:e1:54:ad:17:10:ba:
                    6e:2c:0e:6e:4c:94:28:96:a4:4c:df:fa:cf:b2:fb:
                    e6:5f:68:15:c5:d3:57:f0:a5:df:56:49:24:9a:48:
                    4b:b7:c0:da:2d:ef:f8:b6:93:7b:9b:0a:e7:3f:f0:
                    b7:91:2c:ab:b5:3b:83:10:ff:d7:e6:1f:e7:34:56:
                    5c:31:d6:bb:8e:e9:f4:38:2a:17:f5:1d:7d:0c:56:
                    e1:7c:0f:af:da:9b:5f:e1:50:4f:e8:49:6a:c1:09:
                    ad:73:83:72:e6:15:27:82:40:30:9e:97:c0:4e:d7:
                    e2:99:d8:4b:27:5b:4b:5d:9e:a1:6b:8d:d0:12:dd:
                    27:0d:08:f7:88:09:51:59:93:02:7a:a5:75:c5:66:
                    fa:da:c9:cf:a1:86:ce:74:60:0e:6f:1e:ce:b0:83:
                    d5:d8:6a:97:24:0c:ee:f1:86:b9:73:e4:16:8c:06:
                    9f:3c:ea:75:64:6d:db:17:fe:28:6d:6c:e8:67:fb:
                    99:57:30:cb:97:d4:b6:e7:f7:48:c3:16:31:39:5d:
                    7e:77:bd:3d:b1:07:f3:ef:bb:62:a2:ab:2f:8d:cc:
                    20:a1:6a:7e:a5:8f:3b:a0:64:d2:fb:36:b8:8f:82:
                    bb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:34:E4:BE:78:AA:A6:18:96:4A:BE:CE:FB:E0:53:A4:68:2F:6E:D8
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3134332e3230382e3139342e302f32332d3233203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:80:62:80:d1:2c:f3:96:19:7b:46:d5:7e:f1:65:31:0b:c2:
         ff:d1:42:51:dd:11:79:fd:ab:92:b9:b8:32:d8:b6:de:bd:70:
         d4:a5:d4:c0:b1:ac:30:b8:17:23:40:6f:5b:37:a9:86:57:6b:
         7f:e4:84:e7:e5:1e:09:63:60:09:24:f8:ab:0e:2d:4b:5c:56:
         fb:3b:46:87:6a:c1:42:58:a6:a5:59:cf:e3:80:b5:55:98:b9:
         39:64:b4:0d:02:b5:c0:bc:c4:ba:87:88:69:7c:77:a5:75:49:
         f4:14:c3:97:14:a5:e6:6d:88:87:25:b0:78:6e:d7:48:e3:8f:
         2a:00:21:6f:fe:ff:8b:f6:c1:3e:49:e5:32:33:ca:49:0d:5d:
         67:89:01:1a:8c:eb:9e:6b:1d:40:ee:15:06:ac:5f:d9:83:39:
         1d:ec:6b:90:b8:21:c3:dc:5a:28:a0:26:13:39:c8:2a:c4:32:
         5e:04:a0:d4:7d:bf:39:ab:72:bc:8c:3d:1a:00:73:5e:6b:6d:
         8c:d3:2a:bf:6b:92:dc:6d:3b:c3:f8:8a:91:57:cc:77:86:90:
         06:be:73:ab:e6:e7:ff:4f:9f:36:5f:3a:80:cb:71:64:1e:db:
         72:2f:25:ee:69:78:a8:1f:b6:09:57:17:b2:83:9a:92:62:6b:
         f7:06:3d:56
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUZ5xlQtXqs3u46/S2oxpXbwurOJUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlEQjFCNThEQ0Q0NkMyRTc0NkQ4RERFQUE3RjQ5ODMz
MUREQjAxNzAeFw0yNDA3MTUxMzM3MjZaFw0yNTA3MTQxMzQyMjZaMDMxMTAvBgNV
BAMTKDNEMzRFNEJFNzhBQUE2MTg5NjRBQkVDRUZCRTA1M0E0NjgyRjZFRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9HLZg3yIFZNAtPL/FNo85jtvd
KNnWHOFUrRcQum4sDm5MlCiWpEzf+s+y++ZfaBXF01fwpd9WSSSaSEu3wNot7/i2
k3ubCuc/8LeRLKu1O4MQ/9fmH+c0Vlwx1ruO6fQ4Khf1HX0MVuF8D6/am1/hUE/o
SWrBCa1zg3LmFSeCQDCel8BO1+KZ2EsnW0tdnqFrjdAS3ScNCPeICVFZkwJ6pXXF
Zvrayc+hhs50YA5vHs6wg9XYapckDO7xhrlz5BaMBp886nVkbdsX/ihtbOhn+5lX
MMuX1Lbn90jDFjE5XX53vT2xB/Pvu2Kiqy+NzCChan6ljzugZNL7NriPgrtnAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUPTTkvniqphiWSr7O++BTpGgvbtgwHwYDVR0j
BBgwFoAUudsbWNzUbC50bY3eqn9JgzHdsBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDVmUEVVcmNhM21RVW9hNVVMS3pGNVB6WTdZZExVSkdXbTRiRzF0ZUZn
OWsvMC9COURCMUI1OERDRDQ2QzJFNzQ2RDhEREVBQTdGNDk4MzMxRERCMDE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5REIxQjU4RENENDZDMkU3
NDZEOERERUFBN0Y0OTgzMzFEREIwMTcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q1ZlBFVXJjYTNtUVVvYTVVTEt6RjVQelk3WWRMVUpHV200YkcxdGVGZzlrLzAv
MzEzNDMzMmUzMjMwMzgyZTMxMzkzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM3MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAY/QwjANBgkqhkiG9w0BAQsFAAOCAQEAWIBi
gNEs85YZe0bVfvFlMQvC/9FCUd0Ref2rkrm4Mti23r1w1KXUwLGsMLgXI0BvWzep
hldrf+SE5+UeCWNgCST4qw4tS1xW+ztGh2rBQlimpVnP44C1VZi5OWS0DQK1wLzE
uoeIaXx3pXVJ9BTDlxSl5m2IhyWweG7XSOOPKgAhb/7/i/bBPknlMjPKSQ1dZ4kB
GozrnmsdQO4VBqxf2YM5HexrkLghw9xaKKAmEznIKsQyXgSg1H2/OatyvIw9GgBz
XmttjNMqv2uS3G07w/iKkVfMd4aQBr5zq+bn/0+fNl86gMtxZB7bci8l7ml4qB+2
CVcXsoOakmJr9wY9Vg==
-----END CERTIFICATE-----
Generated at Mon Nov 25 07:13:39 2024 by rpki-client on console-fra.rpki-client.org