Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFuHaS36pr8zzUPAbRAdGNJcR7KWbKQ2vkXfwja4umkW/0/3139302e3131352e37322e302f32322d3332203d3e20323730353536.roa
File:                     3139302e3131352e37322e302f32322d3332203d3e20323730353536.roa (raw, json)
Hash identifier:          gp6P3t7tfPaO7DERvPOAT7ncc7x7/bPFOMCrzqFfyCk=
Subject key identifier:   20:92:91:A7:18:70:FD:EA:FA:EB:25:13:9A:EA:60:9D:54:2C:C3:2B
Certificate issuer:       /CN=A768E8071BA41175FFBF0F813FD385B6FA5B1681
Certificate serial:       411BCA185ADC3C1E1839B78C1E4529017BC3A991
Authority key identifier: A7:68:E8:07:1B:A4:11:75:FF:BF:0F:81:3F:D3:85:B6:FA:5B:16:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A768E8071BA41175FFBF0F813FD385B6FA5B1681.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFuHaS36pr8zzUPAbRAdGNJcR7KWbKQ2vkXfwja4umkW/0/3139302e3131352e37322e302f32322d3332203d3e20323730353536.roa
Signing time:             Wed 14 Aug 2024 15:58:01 +0000
ROA not before:           Wed 14 Aug 2024 15:53:01 +0000
ROA not after:            Wed 13 Aug 2025 15:58:01 +0000
asID:                     270556
IP address blocks:        190.115.72.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFuHaS36pr8zzUPAbRAdGNJcR7KWbKQ2vkXfwja4umkW/0/A768E8071BA41175FFBF0F813FD385B6FA5B1681.crl
                          rsync://rpki-repo.registro.br/repo/DFuHaS36pr8zzUPAbRAdGNJcR7KWbKQ2vkXfwja4umkW/0/A768E8071BA41175FFBF0F813FD385B6FA5B1681.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A768E8071BA41175FFBF0F813FD385B6FA5B1681.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:1b:ca:18:5a:dc:3c:1e:18:39:b7:8c:1e:45:29:01:7b:c3:a9:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A768E8071BA41175FFBF0F813FD385B6FA5B1681
        Validity
            Not Before: Aug 14 15:53:01 2024 GMT
            Not After : Aug 13 15:58:01 2025 GMT
        Subject: CN=209291A71870FDEAFAEB25139AEA609D542CC32B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d9:74:9a:a8:15:b0:a4:39:7d:87:d3:5b:73:
                    5e:28:82:4e:0b:52:ff:3f:19:96:2d:93:d7:d4:aa:
                    08:c0:e2:fe:02:03:26:ad:01:53:ed:e4:2f:8f:6e:
                    77:7a:9e:92:31:bd:fe:a5:a4:cc:32:a3:9b:15:5e:
                    bd:22:44:11:63:ee:9d:ee:0e:61:fe:a1:69:60:51:
                    63:f1:07:88:82:96:bb:f7:9a:7b:fb:b0:5e:22:58:
                    5c:b4:d6:5b:5f:6b:f4:75:d7:85:8e:8e:0a:2d:55:
                    77:a0:46:de:fb:8e:5b:7e:17:0b:42:74:aa:8d:08:
                    fc:f6:ae:65:43:88:a7:28:d8:8e:b3:43:03:fe:32:
                    c3:01:16:d3:88:ad:bf:d8:68:3b:c2:19:49:9e:25:
                    80:b4:77:b1:94:ef:7b:3a:d3:9b:43:e5:1c:93:66:
                    46:56:91:a6:f0:cc:a1:b8:fc:66:04:db:f4:93:b5:
                    b2:20:2b:c4:1c:6e:e7:18:a4:61:bd:11:f5:f2:b9:
                    de:a3:cb:b6:ea:b1:2b:c6:19:95:55:cf:14:ac:4b:
                    cf:3e:7f:79:e2:19:8f:c3:a4:14:b2:44:09:b0:26:
                    45:e9:c7:22:94:b9:e3:36:b3:81:e3:23:31:eb:bd:
                    21:85:25:23:fa:df:c3:b5:74:56:58:3c:8b:3e:7f:
                    a3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:92:91:A7:18:70:FD:EA:FA:EB:25:13:9A:EA:60:9D:54:2C:C3:2B
            X509v3 Authority Key Identifier:
                keyid:A7:68:E8:07:1B:A4:11:75:FF:BF:0F:81:3F:D3:85:B6:FA:5B:16:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFuHaS36pr8zzUPAbRAdGNJcR7KWbKQ2vkXfwja4umkW/0/A768E8071BA41175FFBF0F813FD385B6FA5B1681.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A768E8071BA41175FFBF0F813FD385B6FA5B1681.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFuHaS36pr8zzUPAbRAdGNJcR7KWbKQ2vkXfwja4umkW/0/3139302e3131352e37322e302f32322d3332203d3e20323730353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:11:73:5b:f6:72:29:77:57:15:c8:57:e9:88:72:9d:38:d0:
         5c:8a:0b:2c:7e:e7:5e:c8:ed:12:a7:39:e3:36:65:e6:90:67:
         d6:63:b5:5f:1f:a1:2f:c3:88:ed:fb:53:12:96:31:6a:dc:9e:
         ae:90:c1:b0:ae:01:e7:84:d8:b2:9d:0a:1d:ff:16:fe:a8:27:
         53:0d:ed:c5:1d:2b:2d:81:5a:04:38:48:56:16:8f:90:56:14:
         90:04:06:e0:c5:c8:1f:8f:e3:00:44:83:d5:ef:ac:b7:bb:7a:
         6b:4a:49:07:21:bd:17:53:0f:1a:9b:2b:fe:0f:96:02:1a:3a:
         f5:d8:91:1d:04:e4:d4:2d:f3:3a:c8:b5:3e:73:39:9b:db:a0:
         25:2c:8c:af:a6:8c:fa:27:bb:6a:c3:43:25:75:dd:87:98:0b:
         65:07:7a:b8:e9:ff:81:b3:d1:68:3f:e5:4d:0e:54:ab:d1:49:
         7d:02:91:91:44:d7:54:dd:9d:b3:08:3a:e8:66:a0:11:09:3a:
         c3:b5:2a:71:b9:93:b1:ce:c8:db:2d:3f:4b:8d:e9:4b:23:03:
         b7:c6:3a:93:fe:72:4b:15:a0:35:60:3d:13:9d:28:ad:15:27:
         01:60:2e:a6:63:bb:02:04:f6:ee:24:7b:6c:16:5f:20:51:f4:
         fa:f4:50:4b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQRvKGFrcPB4YObeMHkUpAXvDqZEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTc2OEU4MDcxQkE0MTE3NUZGQkYwRjgxM0ZEMzg1QjZG
QTVCMTY4MTAeFw0yNDA4MTQxNTUzMDFaFw0yNTA4MTMxNTU4MDFaMDMxMTAvBgNV
BAMTKDIwOTI5MUE3MTg3MEZERUFGQUVCMjUxMzlBRUE2MDlENTQyQ0MzMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr2XSaqBWwpDl9h9Nbc14ogk4L
Uv8/GZYtk9fUqgjA4v4CAyatAVPt5C+Pbnd6npIxvf6lpMwyo5sVXr0iRBFj7p3u
DmH+oWlgUWPxB4iClrv3mnv7sF4iWFy01ltfa/R114WOjgotVXegRt77jlt+FwtC
dKqNCPz2rmVDiKco2I6zQwP+MsMBFtOIrb/YaDvCGUmeJYC0d7GU73s605tD5RyT
ZkZWkabwzKG4/GYE2/STtbIgK8QcbucYpGG9EfXyud6jy7bqsSvGGZVVzxSsS88+
f3niGY/DpBSyRAmwJkXpxyKUueM2s4HjIzHrvSGFJSP638O1dFZYPIs+f6M3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUIJKRpxhw/er66yUTmupgnVQswyswHwYDVR0j
BBgwFoAUp2joBxukEXX/vw+BP9OFtvpbFoEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREZ1SGFTMzZwcjh6elVQQWJSQWRHTkpjUjdLV2JLUTJ2a1hmd2phNHVt
a1cvMC9BNzY4RTgwNzFCQTQxMTc1RkZCRjBGODEzRkQzODVCNkZBNUIxNjgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E3NjhFODA3MUJBNDExNzVG
RkJGMEY4MTNGRDM4NUI2RkE1QjE2ODEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RGdUhhUzM2cHI4enpVUEFiUkFkR05KY1I3S1diS1EydmtYZndqYTR1bWtXLzAv
MzEzOTMwMmUzMTMxMzUyZTM3MzIyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM3
MzAzNTM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK+c0gwDQYJKoZIhvcNAQELBQADggEBADQRc1v2
cil3VxXIV+mIcp040FyKCyx+517I7RKnOeM2ZeaQZ9ZjtV8foS/DiO37UxKWMWrc
nq6QwbCuAeeE2LKdCh3/Fv6oJ1MN7cUdKy2BWgQ4SFYWj5BWFJAEBuDFyB+P4wBE
g9XvrLe7emtKSQchvRdTDxqbK/4PlgIaOvXYkR0E5NQt8zrItT5zOZvboCUsjK+m
jPonu2rDQyV13YeYC2UHerjp/4Gz0Wg/5U0OVKvRSX0CkZFE11TdnbMIOuhmoBEJ
OsO1KnG5k7HOyNstP0uN6UsjA7fGOpP+cksVoDVgPROdKK0VJwFgLqZjuwIE9u4k
e2wWXyBR9Pr0UEs=
-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:38 2024 by rpki-client on console-fra.rpki-client.org