Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139362e302f32342d3234203d3e20323635393139.roa
File:                     3133312e3139362e3139362e302f32342d3234203d3e20323635393139.roa (raw, json)
Hash identifier:          ozyjD7cTyySedtK7Wf32AwRjeY51pizR3rYChLSC/Gk=
Subject key identifier:   C5:C5:37:9C:4A:20:AC:61:D9:51:6E:09:95:10:05:3B:F2:65:36:B4
Certificate issuer:       /CN=09CD2544A4D6A0551862A4D2797E42BCA1C19652
Certificate serial:       195727F5BC89DDFECA953623697EB88AA4542926
Authority key identifier: 09:CD:25:44:A4:D6:A0:55:18:62:A4:D2:79:7E:42:BC:A1:C1:96:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09CD2544A4D6A0551862A4D2797E42BCA1C19652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139362e302f32342d3234203d3e20323635393139.roa
Signing time:             Wed 13 Nov 2024 02:54:41 +0000
ROA not before:           Wed 13 Nov 2024 02:49:41 +0000
ROA not after:            Wed 12 Nov 2025 02:54:41 +0000
asID:                     265919
IP address blocks:        131.196.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/09CD2544A4D6A0551862A4D2797E42BCA1C19652.crl
                          rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/09CD2544A4D6A0551862A4D2797E42BCA1C19652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09CD2544A4D6A0551862A4D2797E42BCA1C19652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:57:27:f5:bc:89:dd:fe:ca:95:36:23:69:7e:b8:8a:a4:54:29:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09CD2544A4D6A0551862A4D2797E42BCA1C19652
        Validity
            Not Before: Nov 13 02:49:41 2024 GMT
            Not After : Nov 12 02:54:41 2025 GMT
        Subject: CN=C5C5379C4A20AC61D9516E099510053BF26536B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:42:a3:2a:8b:56:d8:e7:03:3d:6c:e3:d6:d6:
                    93:aa:c5:a3:0a:4d:13:11:11:ef:02:6b:84:ed:48:
                    a9:9b:b3:75:50:d7:9b:88:ab:36:43:e5:41:3f:9a:
                    b5:48:e8:f2:48:f6:98:5b:5c:69:c8:94:97:d2:ec:
                    c5:24:29:a7:bb:af:46:41:77:47:ae:e6:a7:a9:58:
                    0f:7f:15:06:c8:97:cf:e8:a9:db:32:3e:12:5c:fb:
                    65:41:36:03:5c:8e:96:cc:b0:a0:81:d3:8b:24:6f:
                    32:30:bf:02:bb:83:21:5d:16:69:8f:72:34:fa:c2:
                    d2:98:12:b5:60:06:67:ba:99:97:33:64:ad:ed:f0:
                    c1:96:85:2e:aa:14:5c:80:76:f3:d5:48:46:61:45:
                    66:fb:e7:84:09:a4:9d:6f:f7:8e:ed:09:c4:42:df:
                    1b:9b:03:61:c5:bc:6b:79:ac:5f:26:c1:6d:24:66:
                    0c:65:89:52:e6:19:d4:99:9e:76:57:17:d2:ac:32:
                    c5:34:e4:9e:48:a9:ce:d0:08:eb:1d:6a:a8:51:59:
                    80:05:51:74:b6:52:a0:77:81:6a:90:17:a7:24:c6:
                    99:cd:3a:c2:9e:94:31:10:f7:df:75:b4:57:76:10:
                    3f:67:ab:d0:73:a0:1a:bf:51:b5:11:f6:a2:f4:c7:
                    f7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C5:37:9C:4A:20:AC:61:D9:51:6E:09:95:10:05:3B:F2:65:36:B4
            X509v3 Authority Key Identifier:
                keyid:09:CD:25:44:A4:D6:A0:55:18:62:A4:D2:79:7E:42:BC:A1:C1:96:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/09CD2544A4D6A0551862A4D2797E42BCA1C19652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09CD2544A4D6A0551862A4D2797E42BCA1C19652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139362e302f32342d3234203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:10:68:98:d9:03:a3:90:52:ab:29:15:e3:1b:80:6e:1b:90:
         ea:20:aa:5d:e0:dc:1d:ac:8f:28:07:a7:7a:36:c6:ab:75:d8:
         88:7b:34:78:9b:f4:c3:8f:83:d9:1f:f2:0b:13:fd:42:a0:6a:
         46:e7:b1:1c:38:5d:86:05:03:6c:3a:53:33:8c:38:69:58:eb:
         c4:98:48:37:b3:b3:29:27:ff:99:3d:c8:15:45:c0:70:f0:b1:
         b1:f2:6f:af:39:05:78:62:51:89:f3:f0:56:13:b0:f3:4c:15:
         dc:e1:77:74:91:06:3d:63:3e:30:33:89:20:23:e5:b0:56:3b:
         58:2e:91:a5:16:9f:c5:b0:57:f9:42:23:eb:42:03:53:9f:44:
         0a:bc:a2:fc:13:79:7c:d8:6b:99:46:76:92:6e:c0:ca:60:96:
         60:34:a9:0d:d4:28:70:c4:46:d5:42:a5:d9:ee:c1:bd:aa:25:
         a2:0b:82:d4:7c:82:1d:33:6b:2e:b3:07:8d:a7:5a:ed:a8:e6:
         75:6a:4e:f6:c0:7a:da:ee:f8:76:66:90:c8:d7:e4:6a:b8:58:
         8f:89:1a:e7:f9:7e:5c:45:ec:31:0e:4d:10:8f:67:88:07:b2:
         72:04:6d:21:a6:13:29:4b:90:92:41:de:8b:64:ea:c5:72:41:
         5d:b7:2d:2c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUGVcn9byJ3f7KlTYjaX64iqRUKSYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlDRDI1NDRBNEQ2QTA1NTE4NjJBNEQyNzk3RTQyQkNB
MUMxOTY1MjAeFw0yNDExMTMwMjQ5NDFaFw0yNTExMTIwMjU0NDFaMDMxMTAvBgNV
BAMTKEM1QzUzNzlDNEEyMEFDNjFEOTUxNkUwOTk1MTAwNTNCRjI2NTM2QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiQqMqi1bY5wM9bOPW1pOqxaMK
TRMREe8Ca4TtSKmbs3VQ15uIqzZD5UE/mrVI6PJI9phbXGnIlJfS7MUkKae7r0ZB
d0eu5qepWA9/FQbIl8/oqdsyPhJc+2VBNgNcjpbMsKCB04skbzIwvwK7gyFdFmmP
cjT6wtKYErVgBme6mZczZK3t8MGWhS6qFFyAdvPVSEZhRWb754QJpJ1v947tCcRC
3xubA2HFvGt5rF8mwW0kZgxliVLmGdSZnnZXF9KsMsU05J5Iqc7QCOsdaqhRWYAF
UXS2UqB3gWqQF6ckxpnNOsKelDEQ9991tFd2ED9nq9BzoBq/UbUR9qL0x/fhAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUxcU3nEogrGHZUW4JlRAFO/JlNrQwHwYDVR0j
BBgwFoAUCc0lRKTWoFUYYqTSeX5CvKHBllIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREZBcFFkcjNldWQySGpwM0hXRk52NkV1M3lBaXk3WE5vTjVpRlduWXFh
bzQvMC8wOUNEMjU0NEE0RDZBMDU1MTg2MkE0RDI3OTdFNDJCQ0ExQzE5NjUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5Q0QyNTQ0QTRENkEwNTUx
ODYyQTREMjc5N0U0MkJDQTFDMTk2NTIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RGQXBRZHIzZXVkMkhqcDNIV0ZOdjZFdTN5QWl5N1hOb041aUZXbllxYW80LzAv
MzEzMzMxMmUzMTM5MzYyZTMxMzkzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTM5MzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIPExDANBgkqhkiG9w0BAQsFAAOCAQEAChBo
mNkDo5BSqykV4xuAbhuQ6iCqXeDcHayPKAenejbGq3XYiHs0eJv0w4+D2R/yCxP9
QqBqRuexHDhdhgUDbDpTM4w4aVjrxJhIN7OzKSf/mT3IFUXAcPCxsfJvrzkFeGJR
ifPwVhOw80wV3OF3dJEGPWM+MDOJICPlsFY7WC6RpRafxbBX+UIj60IDU59ECryi
/BN5fNhrmUZ2km7AymCWYDSpDdQocMRG1UKl2e7BvaologuC1HyCHTNrLrMHjada
7ajmdWpO9sB62u74dmaQyNfkarhYj4ka5/l+XEXsMQ5NEI9niAeycgRtIaYTKUuQ
kkHei2TqxXJBXbctLA==
-----END CERTIFICATE-----
Generated at Mon Nov 25 07:18:40 2024 by rpki-client on console-ams.rpki-client.org