Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/3133382e39372e3134392e302f32342d3234203d3e20323634313937.roa
File:                     3133382e39372e3134392e302f32342d3234203d3e20323634313937.roa (raw, json)
Hash identifier:          5TC6zwwIfkLZdus1MpJ3LiGJNU+YydEgkUKYhCL3m30=
Subject key identifier:   3F:C6:C8:B6:35:44:B4:CC:AA:3A:FB:65:89:C3:13:B3:2D:3C:79:AC
Certificate issuer:       /CN=AEE1F2C62335FF3372773DE72545E8B38F0BFC21
Certificate serial:       0E94E4864325224B4D3DBFFD960950A817FF0917
Authority key identifier: AE:E1:F2:C6:23:35:FF:33:72:77:3D:E7:25:45:E8:B3:8F:0B:FC:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/3133382e39372e3134392e302f32342d3234203d3e20323634313937.roa
Signing time:             Thu 04 Apr 2024 18:08:17 +0000
ROA not before:           Thu 04 Apr 2024 18:03:17 +0000
ROA not after:            Thu 03 Apr 2025 18:08:17 +0000
asID:                     264197
IP address blocks:        138.97.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.crl
                          rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 12:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:94:e4:86:43:25:22:4b:4d:3d:bf:fd:96:09:50:a8:17:ff:09:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE1F2C62335FF3372773DE72545E8B38F0BFC21
        Validity
            Not Before: Apr  4 18:03:17 2024 GMT
            Not After : Apr  3 18:08:17 2025 GMT
        Subject: CN=3FC6C8B63544B4CCAA3AFB6589C313B32D3C79AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7a:e1:93:97:9e:4e:a3:d7:df:21:19:e2:ce:
                    01:83:f8:c3:eb:37:70:51:61:81:98:fc:3f:e3:20:
                    bd:71:b7:35:78:28:76:b6:cf:84:09:b9:c1:08:81:
                    8f:4c:77:2f:d0:a3:3f:79:bd:3f:5e:dc:11:aa:31:
                    0a:9b:bb:06:dd:6c:89:f5:8f:f2:f1:36:eb:c5:b2:
                    2a:2f:32:57:d1:f9:30:45:f4:0e:a2:e8:56:d6:5e:
                    71:5d:fd:ea:30:1d:ad:c0:f7:72:c4:bd:8e:21:74:
                    79:a8:fa:3d:d4:d6:16:59:c7:e1:fe:21:92:30:c1:
                    e4:b6:6b:45:6d:14:dd:ea:07:46:d2:8d:31:28:73:
                    6d:65:ea:78:9f:f3:46:a9:09:df:38:9f:5a:76:fb:
                    c2:90:0c:57:c2:66:13:0e:e9:1d:c7:26:e1:09:40:
                    49:c4:55:56:a6:00:f1:08:e1:33:51:0a:9c:fa:97:
                    f7:6f:92:20:f9:5d:eb:be:f1:44:6e:e2:00:8a:c5:
                    7c:16:ab:e2:09:bd:f4:df:d5:a7:15:dd:32:1e:9d:
                    68:f3:30:b4:62:fb:e4:96:38:4d:64:2f:a0:2b:a1:
                    66:ba:f1:f7:50:ec:db:ec:b1:62:8f:98:1a:aa:96:
                    16:61:99:70:65:c3:38:42:07:84:02:f5:dd:54:96:
                    17:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C6:C8:B6:35:44:B4:CC:AA:3A:FB:65:89:C3:13:B3:2D:3C:79:AC
            X509v3 Authority Key Identifier:
                keyid:AE:E1:F2:C6:23:35:FF:33:72:77:3D:E7:25:45:E8:B3:8F:0B:FC:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/3133382e39372e3134392e302f32342d3234203d3e20323634313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:7d:06:01:54:e3:04:81:10:18:3d:08:c3:c7:99:41:53:3d:
         cf:c3:75:1d:cb:bd:58:7b:de:01:2f:d6:47:6a:ab:6b:7a:7d:
         b7:3a:b8:45:76:3b:b5:b1:67:c0:61:c3:31:ee:42:62:67:3d:
         23:51:15:09:50:4f:6f:49:f4:79:9a:e4:7a:f8:59:b5:8d:13:
         2f:3a:52:60:19:7f:84:df:eb:96:d5:b5:c5:17:65:59:2d:e7:
         69:12:c9:24:f8:84:67:91:70:4a:1f:c3:2a:d4:3d:52:54:c1:
         f6:ce:73:19:7f:3d:9f:22:16:76:1f:cb:ac:ac:cf:83:cf:7f:
         71:dc:f5:3c:75:f1:17:9a:ca:41:a7:da:d1:42:d6:cc:d5:76:
         28:48:c8:2e:05:23:7b:e4:83:9f:c4:3e:b8:8c:53:d0:9e:df:
         49:ed:d9:3a:ed:d0:0f:e6:69:dc:f8:98:f1:12:16:dc:18:c3:
         d6:f1:88:43:e9:7d:22:c6:ae:a3:d2:4b:aa:95:8d:1b:b8:8c:
         83:9d:8e:5c:7f:64:15:c9:63:2e:9a:08:6b:24:a8:d2:d1:ad:
         95:ce:a5:ef:6f:44:10:df:af:ce:6f:dd:4b:ef:dc:76:f6:01:
         5b:dd:7c:51:2d:82:d5:21:06:ed:4b:21:89:d2:d8:47:ec:c0:
         88:d9:08:b4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDpTkhkMlIktNPb/9lglQqBf/CRcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVFMUYyQzYyMzM1RkYzMzcyNzczREU3MjU0NUU4QjM4
RjBCRkMyMTAeFw0yNDA0MDQxODAzMTdaFw0yNTA0MDMxODA4MTdaMDMxMTAvBgNV
BAMTKDNGQzZDOEI2MzU0NEI0Q0NBQTNBRkI2NTg5QzMxM0IzMkQzQzc5QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDleuGTl55Oo9ffIRnizgGD+MPr
N3BRYYGY/D/jIL1xtzV4KHa2z4QJucEIgY9Mdy/Qoz95vT9e3BGqMQqbuwbdbIn1
j/LxNuvFsiovMlfR+TBF9A6i6FbWXnFd/eowHa3A93LEvY4hdHmo+j3U1hZZx+H+
IZIwweS2a0VtFN3qB0bSjTEoc21l6nif80apCd84n1p2+8KQDFfCZhMO6R3HJuEJ
QEnEVVamAPEI4TNRCpz6l/dvkiD5Xeu+8URu4gCKxXwWq+IJvfTf1acV3TIenWjz
MLRi++SWOE1kL6AroWa68fdQ7NvssWKPmBqqlhZhmXBlwzhCB4QC9d1UlheJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUP8bItjVEtMyqOvtlicMTsy08eawwHwYDVR0j
BBgwFoAUruHyxiM1/zNydz3nJUXos48L/CEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGI1TWFqVTlmN3BMeXJTaWRWZFpXYnMzRTdEeW5wTlRmM29RZWZGcjlT
NVQvMS9BRUUxRjJDNjIzMzVGRjMzNzI3NzNERTcyNTQ1RThCMzhGMEJGQzIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFRTFGMkM2MjMzNUZGMzM3
Mjc3M0RFNzI1NDVFOEIzOEYwQkZDMjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RiNU1halU5ZjdwTHlyU2lkVmRaV2JzM0U3RHlucE5UZjNvUWVmRnI5UzVULzEv
MzEzMzM4MmUzOTM3MmUzMTM0MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzMTM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKYZUwDQYJKoZIhvcNAQELBQADggEBAEF9BgFU
4wSBEBg9CMPHmUFTPc/DdR3LvVh73gEv1kdqq2t6fbc6uEV2O7WxZ8BhwzHuQmJn
PSNRFQlQT29J9Hma5Hr4WbWNEy86UmAZf4Tf65bVtcUXZVkt52kSyST4hGeRcEof
wyrUPVJUwfbOcxl/PZ8iFnYfy6ysz4PPf3Hc9Tx18ReaykGn2tFC1szVdihIyC4F
I3vkg5/EPriMU9Ce30nt2Trt0A/madz4mPESFtwYw9bxiEPpfSLGrqPSS6qVjRu4
jIOdjlx/ZBXJYy6aCGskqNLRrZXOpe9vRBDfr85v3Uvv3Hb2AVvdfFEtgtUhBu1L
IYnS2EfswIjZCLQ=
-----END CERTIFICATE-----
Generated at Fri Jun 28 12:21:54 2024 by rpki-client on console-fra.rpki-client.org