Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/1/3139312e33362e3232342e302f32322d3234203d3e20323634393937.roa
File:                     3139312e33362e3232342e302f32322d3234203d3e20323634393937.roa (raw, json)
Hash identifier:          71vQ1QLXN5MfC6FS+jJDbswfranc6pIkuPoapFFNY38=
Subject key identifier:   74:23:AA:DF:B2:50:AC:8C:05:8C:CC:3D:AF:42:1B:5B:7E:6A:FE:98
Certificate issuer:       /CN=32F2FCAAECE39370BDEE4350C868E619ED31A5B3
Certificate serial:       68C00127131B65ED6EF539EB1E6969C9E770E6C1
Authority key identifier: 32:F2:FC:AA:EC:E3:93:70:BD:EE:43:50:C8:68:E6:19:ED:31:A5:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F2FCAAECE39370BDEE4350C868E619ED31A5B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/1/3139312e33362e3232342e302f32322d3234203d3e20323634393937.roa
Signing time:             Thu 04 Apr 2024 09:15:22 +0000
ROA not before:           Thu 04 Apr 2024 09:10:22 +0000
ROA not after:            Thu 03 Apr 2025 09:15:22 +0000
asID:                     264997
IP address blocks:        191.36.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/1/32F2FCAAECE39370BDEE4350C868E619ED31A5B3.crl
                          rsync://rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/1/32F2FCAAECE39370BDEE4350C868E619ED31A5B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F2FCAAECE39370BDEE4350C868E619ED31A5B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 03 Jul 2024 20:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c0:01:27:13:1b:65:ed:6e:f5:39:eb:1e:69:69:c9:e7:70:e6:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32F2FCAAECE39370BDEE4350C868E619ED31A5B3
        Validity
            Not Before: Apr  4 09:10:22 2024 GMT
            Not After : Apr  3 09:15:22 2025 GMT
        Subject: CN=7423AADFB250AC8C058CCC3DAF421B5B7E6AFE98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:14:d5:40:e5:43:b9:89:96:fd:f2:db:77:ea:
                    82:e1:94:c4:3c:0f:9c:46:f5:2e:df:dd:11:3d:c2:
                    78:43:d0:c3:b5:cd:f5:88:89:65:50:08:5e:97:1a:
                    8d:86:49:4a:da:94:61:b4:bc:68:54:88:bf:22:a5:
                    1f:c4:b8:2e:82:a8:e7:12:67:2b:da:32:aa:e3:71:
                    b2:98:d9:18:63:1f:01:49:9f:4c:c5:a0:b1:a0:81:
                    9b:93:11:ca:7f:09:d1:b0:1e:fa:7c:83:82:47:39:
                    6a:a5:b4:28:56:70:38:fc:0c:e6:ea:dc:40:e8:0d:
                    f4:40:ba:74:cc:03:58:0b:9b:d9:66:5f:cb:97:0f:
                    27:e8:93:0c:29:5d:2f:14:d6:54:75:83:ab:40:dd:
                    09:82:64:ff:26:3c:5f:20:55:97:45:75:b6:4f:79:
                    6c:e0:3e:e4:81:e9:50:9f:24:e7:6a:f7:f8:42:4b:
                    c5:67:47:65:38:ec:05:a7:20:94:51:c3:22:9a:7e:
                    7e:13:d4:72:ec:04:25:b1:27:b8:86:06:bc:27:92:
                    ee:f7:eb:6d:21:c0:f5:86:4f:25:06:a5:80:85:07:
                    b1:89:11:58:6c:39:86:7b:e8:37:f3:85:eb:12:4e:
                    e8:e0:3d:9e:d9:7c:77:97:7a:16:55:1b:8f:9f:41:
                    a6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:23:AA:DF:B2:50:AC:8C:05:8C:CC:3D:AF:42:1B:5B:7E:6A:FE:98
            X509v3 Authority Key Identifier:
                keyid:32:F2:FC:AA:EC:E3:93:70:BD:EE:43:50:C8:68:E6:19:ED:31:A5:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/1/32F2FCAAECE39370BDEE4350C868E619ED31A5B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32F2FCAAECE39370BDEE4350C868E619ED31A5B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DE8b6ZFp1tvBJBJm7S1u8ekiBnagEaXQ9ybcSwJYLSfU/1/3139312e33362e3232342e302f32322d3234203d3e20323634393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:78:fe:a0:eb:eb:ea:18:2f:8c:0a:cc:2c:70:25:b1:5e:e4:
         1f:76:3d:73:cb:b1:de:a5:f8:fe:15:59:52:94:9b:63:f6:d5:
         e9:b9:3e:fb:ed:c3:7d:b8:14:61:47:81:ce:97:10:2f:54:10:
         92:3a:8d:b0:54:9b:bb:3b:dd:fa:97:e4:a0:b6:b7:01:18:e6:
         ee:72:72:5a:f1:ed:92:32:84:4a:f0:63:2a:90:b4:2a:4b:51:
         59:07:d8:20:51:d0:a7:64:a2:a2:5b:1b:7f:5b:b3:82:c0:3d:
         b8:6d:86:21:43:f1:a0:1e:f5:9a:c7:8e:8c:35:ab:34:1b:ce:
         a7:d8:1c:c8:58:3a:e9:40:7e:40:5f:00:ef:05:90:87:8a:7c:
         ab:0e:a4:d0:78:2d:1e:dc:96:eb:83:cb:4e:1d:e4:e8:64:37:
         4e:23:8a:ac:a7:f6:fe:5c:7e:85:af:ca:5f:7e:f3:cf:a0:1f:
         b7:2c:3e:8b:a4:44:98:8a:cc:25:13:7b:4c:05:fb:55:9b:5b:
         80:22:50:d7:d4:0b:a5:90:57:f4:61:42:d2:22:15:95:ff:ff:
         84:68:b1:28:7a:69:4e:49:07:b5:b8:ec:2b:65:0b:c9:28:68:
         ba:60:3b:63:aa:ad:4d:b4:53:32:c8:93:17:b3:f8:a3:bd:5a:
         54:55:68:d8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaMABJxMbZe1u9TnrHmlpyedw5sEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJGMkZDQUFFQ0UzOTM3MEJERUU0MzUwQzg2OEU2MTlF
RDMxQTVCMzAeFw0yNDA0MDQwOTEwMjJaFw0yNTA0MDMwOTE1MjJaMDMxMTAvBgNV
BAMTKDc0MjNBQURGQjI1MEFDOEMwNThDQ0MzREFGNDIxQjVCN0U2QUZFOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtFNVA5UO5iZb98tt36oLhlMQ8
D5xG9S7f3RE9wnhD0MO1zfWIiWVQCF6XGo2GSUralGG0vGhUiL8ipR/EuC6CqOcS
ZyvaMqrjcbKY2RhjHwFJn0zFoLGggZuTEcp/CdGwHvp8g4JHOWqltChWcDj8DObq
3EDoDfRAunTMA1gLm9lmX8uXDyfokwwpXS8U1lR1g6tA3QmCZP8mPF8gVZdFdbZP
eWzgPuSB6VCfJOdq9/hCS8VnR2U47AWnIJRRwyKafn4T1HLsBCWxJ7iGBrwnku73
620hwPWGTyUGpYCFB7GJEVhsOYZ76DfzhesSTujgPZ7ZfHeXehZVG4+fQaZdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUdCOq37JQrIwFjMw9r0IbW35q/pgwHwYDVR0j
BBgwFoAUMvL8quzjk3C97kNQyGjmGe0xpbMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREU4YjZaRnAxdHZCSkJKbTdTMXU4ZWtpQm5hZ0VhWFE5eWJjU3dKWUxT
ZlUvMS8zMkYyRkNBQUVDRTM5MzcwQkRFRTQzNTBDODY4RTYxOUVEMzFBNUIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyRjJGQ0FBRUNFMzkzNzBC
REVFNDM1MEM4NjhFNjE5RUQzMUE1QjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RFOGI2WkZwMXR2QkpCSm03UzF1OGVraUJuYWdFYVhROXliY1N3SllMU2ZVLzEv
MzEzOTMxMmUzMzM2MmUzMjMyMzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzQzOTM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK/JOAwDQYJKoZIhvcNAQELBQADggEBAEJ4/qDr
6+oYL4wKzCxwJbFe5B92PXPLsd6l+P4VWVKUm2P21em5Pvvtw324FGFHgc6XEC9U
EJI6jbBUm7s73fqX5KC2twEY5u5yclrx7ZIyhErwYyqQtCpLUVkH2CBR0KdkoqJb
G39bs4LAPbhthiFD8aAe9ZrHjow1qzQbzqfYHMhYOulAfkBfAO8FkIeKfKsOpNB4
LR7cluuDy04d5OhkN04jiqyn9v5cfoWvyl9+88+gH7csPoukRJiKzCUTe0wF+1Wb
W4AiUNfUC6WQV/RhQtIiFZX//4RosSh6aU5JB7W47CtlC8koaLpgO2OqrU20UzLI
kxez+KO9WlRVaNg=
-----END CERTIFICATE-----
Generated at Tue Jul 2 23:51:23 2024 by rpki-client on console-ams.rpki-client.org