Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3134332e302e3230312e302f32342d3234203d3e20323634303031.roa
File:                     3134332e302e3230312e302f32342d3234203d3e20323634303031.roa (raw, json)
Hash identifier:          FZt19tq/jzph0RvZH7xNOSek8PYLYoOeFO7OPU56elc=
Subject key identifier:   9D:2D:8D:35:93:9D:80:1F:BF:F3:51:DD:7B:64:5F:0A:9F:3A:FE:43
Certificate issuer:       /CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
Certificate serial:       0C854C221E8BB1B9A319F9604D654485B1FE8A75
Authority key identifier: E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3134332e302e3230312e302f32342d3234203d3e20323634303031.roa
Signing time:             Thu 04 Apr 2024 11:10:23 +0000
ROA not before:           Thu 04 Apr 2024 11:05:23 +0000
ROA not after:            Thu 03 Apr 2025 11:10:23 +0000
asID:                     264001
IP address blocks:        143.0.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.crl
                          rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:09:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:85:4c:22:1e:8b:b1:b9:a3:19:f9:60:4d:65:44:85:b1:fe:8a:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
        Validity
            Not Before: Apr  4 11:05:23 2024 GMT
            Not After : Apr  3 11:10:23 2025 GMT
        Subject: CN=9D2D8D35939D801FBFF351DD7B645F0A9F3AFE43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:01:f2:7c:ff:f5:fa:7e:62:7f:de:62:5f:bb:
                    50:ab:40:6c:0b:6b:fb:4b:ad:f3:89:f9:0f:91:1c:
                    c6:74:ae:e5:ff:71:a2:6f:fd:43:50:3b:c5:c6:fe:
                    aa:e2:10:99:67:17:8a:c7:83:43:3a:00:32:e8:82:
                    c9:1a:a7:e5:ef:79:f9:65:72:16:4d:ee:96:12:41:
                    de:a1:07:98:27:78:12:8f:61:f4:32:dd:a7:3b:96:
                    c6:a3:2c:c5:ad:26:0a:2a:fe:7f:26:53:ce:06:8f:
                    c7:4a:01:b9:df:45:63:b1:d8:1b:63:94:fc:cb:1e:
                    da:8b:d7:f9:cc:10:b0:78:70:a0:74:fd:58:01:1c:
                    5e:9b:11:15:a5:f4:ea:22:8e:75:56:21:a6:a6:17:
                    70:40:26:fa:83:a9:c0:e6:0f:70:32:90:8a:77:c2:
                    05:a1:c3:db:7b:aa:73:45:78:09:3b:65:5d:f3:ae:
                    35:a0:a8:0f:28:71:8c:f4:33:3b:ed:d5:af:d4:34:
                    d0:db:5b:9e:f5:ee:af:83:cb:fb:b7:1c:39:96:c1:
                    0b:f8:75:ea:78:4f:8f:e3:c0:ff:8a:53:3e:51:de:
                    8d:61:ae:8d:2f:8f:4d:f6:f7:59:b8:0d:7d:8e:15:
                    e7:8a:76:03:f3:94:c2:f3:bd:eb:af:68:27:d3:e2:
                    4f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2D:8D:35:93:9D:80:1F:BF:F3:51:DD:7B:64:5F:0A:9F:3A:FE:43
            X509v3 Authority Key Identifier:
                keyid:E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/3134332e302e3230312e302f32342d3234203d3e20323634303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:de:9d:6f:98:2f:5f:b7:f2:6d:0b:03:d4:a9:ee:4a:51:81:
         e3:56:1a:14:5e:c5:4d:6f:25:da:67:21:a2:21:c5:4a:e3:b5:
         62:b9:10:2c:22:00:99:d6:5e:ea:5d:22:0e:fd:ca:01:47:58:
         6d:36:5c:bd:28:f9:61:7f:ae:b1:72:f6:d9:26:1f:f7:24:36:
         82:ef:05:ce:82:a0:04:49:e9:73:cb:e2:2e:68:78:6e:3a:d3:
         81:aa:89:aa:3b:66:20:a1:67:ad:4d:7b:5c:22:b5:80:7b:83:
         e1:16:ee:9f:21:cb:b2:d5:aa:d4:ad:9e:54:a7:9f:b3:07:e3:
         f5:ae:b1:1e:10:9e:03:3e:b9:33:24:d6:4a:b9:c7:6e:e4:a2:
         5f:78:fc:78:b1:6a:b8:f6:af:d7:04:35:5b:af:68:38:a0:90:
         5e:72:c1:d9:3b:0e:db:2e:45:4c:14:8e:5a:df:18:9e:65:8d:
         91:dc:19:f7:64:a8:4a:8f:2c:88:82:ad:5a:ab:51:16:82:ee:
         b2:6d:4e:93:78:e0:df:cd:ed:b5:72:f8:a7:e6:35:9b:f5:eb:
         10:12:59:45:0a:3f:c6:6d:91:08:15:ce:aa:73:c5:bf:b5:fe:
         35:88:fc:a9:e3:a5:09:48:c1:d6:de:bd:f0:6b:63:07:61:01:
         4f:26:cf:07
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUDIVMIh6LsbmjGflgTWVEhbH+inUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTRFNjc5RTExMERBMDExRjk1MkZCNDA5RTgxRThFQzgx
QkFFNDNFRjAeFw0yNDA0MDQxMTA1MjNaFw0yNTA0MDMxMTEwMjNaMDMxMTAvBgNV
BAMTKDlEMkQ4RDM1OTM5RDgwMUZCRkYzNTFERDdCNjQ1RjBBOUYzQUZFNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7AfJ8//X6fmJ/3mJfu1CrQGwL
a/tLrfOJ+Q+RHMZ0ruX/caJv/UNQO8XG/qriEJlnF4rHg0M6ADLogskap+Xvefll
chZN7pYSQd6hB5gneBKPYfQy3ac7lsajLMWtJgoq/n8mU84Gj8dKAbnfRWOx2Btj
lPzLHtqL1/nMELB4cKB0/VgBHF6bERWl9OoijnVWIaamF3BAJvqDqcDmD3AykIp3
wgWhw9t7qnNFeAk7ZV3zrjWgqA8ocYz0Mzvt1a/UNNDbW5717q+Dy/u3HDmWwQv4
dep4T4/jwP+KUz5R3o1hro0vj03291m4DX2OFeeKdgPzlMLzveuvaCfT4k+DAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUnS2NNZOdgB+/81Hde2RfCp86/kMwHwYDVR0j
BBgwFoAU5OZ54RDaAR+VL7QJ6B6OyBuuQ+8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREc5cURBZHZQbkJxMnJNeFQ4NEVOUG51WU5RRzZ5RDlyS1NYeDNrNmlC
OGovMS9FNEU2NzlFMTEwREEwMTFGOTUyRkI0MDlFODFFOEVDODFCQUU0M0VGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U0RTY3OUUxMTBEQTAxMUY5
NTJGQjQwOUU4MUU4RUM4MUJBRTQzRUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RHOXFEQWR2UG5CcTJyTXhUODRFTlBudVlOUUc2eUQ5cktTWHgzazZpQjhqLzEv
MzEzNDMzMmUzMDJlMzIzMDMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0
MzAzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAjwDJMA0GCSqGSIb3DQEBCwUAA4IBAQA13p1vmC9f
t/JtCwPUqe5KUYHjVhoUXsVNbyXaZyGiIcVK47ViuRAsIgCZ1l7qXSIO/coBR1ht
Nly9KPlhf66xcvbZJh/3JDaC7wXOgqAESelzy+IuaHhuOtOBqomqO2YgoWetTXtc
IrWAe4PhFu6fIcuy1arUrZ5Up5+zB+P1rrEeEJ4DPrkzJNZKucdu5KJfePx4sWq4
9q/XBDVbr2g4oJBecsHZOw7bLkVMFI5a3xieZY2R3Bn3ZKhKjyyIgq1aq1EWgu6y
bU6TeODfze21cvin5jWb9esQEllFCj/GbZEIFc6qc8W/tf41iPyp46UJSMHW3r3w
a2MHYQFPJs8H
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:25 2024 by rpki-client on console-ams.rpki-client.org