Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dj4xP4JG7S5qTtXG5gGeSJG4Xx56qZjrmuM9SoATxjAP/1/3139312e372e3138382e302f32322d3234203d3e20323633333239.roa
File:                     3139312e372e3138382e302f32322d3234203d3e20323633333239.roa (raw, json)
Hash identifier:          s/9q/If2L/tTxGRosqxqu1vTmNU98i5EMIEsaXwfB7Y=
Subject key identifier:   50:18:90:4A:89:3F:FE:54:F5:D8:FD:6C:24:59:0F:D0:69:79:27:76
Certificate issuer:       /CN=26B7D5260C62C15C63A0B39E27C08F865C46DA6B
Certificate serial:       6F54BF63E3DB31E28E3F3A19CD9C8435DBEC96FD
Authority key identifier: 26:B7:D5:26:0C:62:C1:5C:63:A0:B3:9E:27:C0:8F:86:5C:46:DA:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26B7D5260C62C15C63A0B39E27C08F865C46DA6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dj4xP4JG7S5qTtXG5gGeSJG4Xx56qZjrmuM9SoATxjAP/1/3139312e372e3138382e302f32322d3234203d3e20323633333239.roa
Signing time:             Wed 03 Apr 2024 19:47:41 +0000
ROA not before:           Wed 03 Apr 2024 19:42:41 +0000
ROA not after:            Wed 02 Apr 2025 19:47:41 +0000
asID:                     263329
IP address blocks:        191.7.188.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dj4xP4JG7S5qTtXG5gGeSJG4Xx56qZjrmuM9SoATxjAP/1/26B7D5260C62C15C63A0B39E27C08F865C46DA6B.crl
                          rsync://rpki-repo.registro.br/repo/Dj4xP4JG7S5qTtXG5gGeSJG4Xx56qZjrmuM9SoATxjAP/1/26B7D5260C62C15C63A0B39E27C08F865C46DA6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26B7D5260C62C15C63A0B39E27C08F865C46DA6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 21:38:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:54:bf:63:e3:db:31:e2:8e:3f:3a:19:cd:9c:84:35:db:ec:96:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26B7D5260C62C15C63A0B39E27C08F865C46DA6B
        Validity
            Not Before: Apr  3 19:42:41 2024 GMT
            Not After : Apr  2 19:47:41 2025 GMT
        Subject: CN=5018904A893FFE54F5D8FD6C24590FD069792776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:50:30:4f:20:8b:27:d0:4f:09:f0:6b:30:5e:
                    48:86:5f:64:43:aa:ab:45:ea:3c:92:ea:62:bc:6e:
                    34:df:ee:e8:a6:98:2f:0f:7f:9e:cc:b8:bc:68:e5:
                    36:a1:83:8b:97:41:63:d7:81:0b:6e:0f:ac:70:a4:
                    2c:02:b2:8a:8e:7a:81:95:48:30:a8:83:98:db:7a:
                    68:71:55:c8:3d:83:49:c5:4f:a7:5b:34:d2:07:13:
                    94:3d:ad:b9:43:ea:9e:23:7a:16:7e:26:72:b7:b0:
                    ae:bc:6f:62:c4:a0:7a:8e:48:aa:68:95:f5:e4:09:
                    53:95:de:1f:cc:89:e6:1e:32:92:d4:05:f8:ef:92:
                    d3:fc:8d:51:c2:9d:04:04:ca:2b:d8:63:19:aa:61:
                    9c:1f:71:4b:73:e9:5b:34:8a:3b:47:e2:0b:f5:93:
                    1c:90:fe:ed:f7:99:bc:6b:95:04:95:56:d3:35:d2:
                    e9:a3:50:5a:bd:a6:1c:f5:f6:49:a5:52:94:dd:61:
                    59:dc:64:41:90:16:93:73:f3:1c:db:f4:19:04:c1:
                    80:f4:51:dc:78:11:86:ef:c6:20:48:2b:c8:b6:c8:
                    99:09:04:80:22:8f:96:bc:dd:14:ab:70:77:1f:0e:
                    75:20:3e:5c:81:af:3f:43:7d:f0:0f:01:4a:3d:dd:
                    2b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:18:90:4A:89:3F:FE:54:F5:D8:FD:6C:24:59:0F:D0:69:79:27:76
            X509v3 Authority Key Identifier:
                keyid:26:B7:D5:26:0C:62:C1:5C:63:A0:B3:9E:27:C0:8F:86:5C:46:DA:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dj4xP4JG7S5qTtXG5gGeSJG4Xx56qZjrmuM9SoATxjAP/1/26B7D5260C62C15C63A0B39E27C08F865C46DA6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26B7D5260C62C15C63A0B39E27C08F865C46DA6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dj4xP4JG7S5qTtXG5gGeSJG4Xx56qZjrmuM9SoATxjAP/1/3139312e372e3138382e302f32322d3234203d3e20323633333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:3d:e7:9f:c6:50:f1:6a:95:85:b8:18:a6:68:4c:a5:c7:58:
         14:7f:9e:e2:24:83:58:90:0c:91:97:00:6e:e1:1e:cf:8d:4c:
         f3:d3:c9:fb:03:6d:7f:1c:da:06:c9:50:3c:a4:f3:90:5b:39:
         51:b6:56:cb:76:c0:4a:58:b9:69:14:35:7e:a4:01:85:e8:6e:
         a9:ff:e0:63:7e:d9:13:61:0b:51:39:87:ae:5c:e5:08:d0:ac:
         85:45:5f:1b:f7:c8:09:69:66:06:da:c7:18:de:f9:98:06:a4:
         c4:09:53:ab:85:6d:e9:7e:a3:3e:54:a2:54:f3:36:70:17:b5:
         27:67:6f:a0:a8:a5:8d:c0:44:35:51:e9:21:58:03:e7:39:8d:
         d0:ae:65:88:ce:55:d8:fd:2c:fb:ac:7f:ef:c1:ff:9d:a6:68:
         e9:41:0b:a0:e8:65:5e:84:9e:da:64:eb:0f:4a:1f:56:12:82:
         cf:65:39:26:4e:bb:8c:72:7d:8f:b4:69:4a:d3:e7:0c:ee:06:
         52:1e:2d:21:d5:a0:1f:72:84:70:3f:fd:31:6f:a8:76:e4:20:
         cb:59:f2:94:a8:43:29:5f:27:f9:0c:97:66:c1:d1:04:03:2f:
         85:14:2f:3e:dc:3a:e9:20:70:63:e5:07:00:1d:bc:64:c8:7a:
         95:55:46:14
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUb1S/Y+PbMeKOPzoZzZyENdvslv0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjZCN0Q1MjYwQzYyQzE1QzYzQTBCMzlFMjdDMDhGODY1
QzQ2REE2QjAeFw0yNDA0MDMxOTQyNDFaFw0yNTA0MDIxOTQ3NDFaMDMxMTAvBgNV
BAMTKDUwMTg5MDRBODkzRkZFNTRGNUQ4RkQ2QzI0NTkwRkQwNjk3OTI3NzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaUDBPIIsn0E8J8GswXkiGX2RD
qqtF6jyS6mK8bjTf7uimmC8Pf57MuLxo5Tahg4uXQWPXgQtuD6xwpCwCsoqOeoGV
SDCog5jbemhxVcg9g0nFT6dbNNIHE5Q9rblD6p4jehZ+JnK3sK68b2LEoHqOSKpo
lfXkCVOV3h/MieYeMpLUBfjvktP8jVHCnQQEyivYYxmqYZwfcUtz6Vs0ijtH4gv1
kxyQ/u33mbxrlQSVVtM10umjUFq9phz19kmlUpTdYVncZEGQFpNz8xzb9BkEwYD0
Udx4EYbvxiBIK8i2yJkJBIAij5a83RSrcHcfDnUgPlyBrz9DffAPAUo93SuRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUUBiQSok//lT12P1sJFkP0Gl5J3YwHwYDVR0j
BBgwFoAUJrfVJgxiwVxjoLOeJ8CPhlxG2mswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGo0eFA0Skc3UzVxVHRYRzVnR2VTSkc0WHg1NnFaanJtdU05U29BVHhq
QVAvMS8yNkI3RDUyNjBDNjJDMTVDNjNBMEIzOUUyN0MwOEY4NjVDNDZEQTZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI2QjdENTI2MEM2MkMxNUM2
M0EwQjM5RTI3QzA4Rjg2NUM0NkRBNkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RqNHhQNEpHN1M1cVR0WEc1Z0dlU0pHNFh4NTZxWmpybXVNOVNvQVR4akFQLzEv
MzEzOTMxMmUzNzJlMzEzODM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMz
MzMzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCvwe8MA0GCSqGSIb3DQEBCwUAA4IBAQA1PeefxlDx
apWFuBimaEylx1gUf57iJINYkAyRlwBu4R7PjUzz08n7A21/HNoGyVA8pPOQWzlR
tlbLdsBKWLlpFDV+pAGF6G6p/+BjftkTYQtROYeuXOUI0KyFRV8b98gJaWYG2scY
3vmYBqTECVOrhW3pfqM+VKJU8zZwF7UnZ2+gqKWNwEQ1UekhWAPnOY3QrmWIzlXY
/Sz7rH/vwf+dpmjpQQug6GVehJ7aZOsPSh9WEoLPZTkmTruMcn2PtGlK0+cM7gZS
Hi0h1aAfcoRwP/0xb6h25CDLWfKUqEMpXyf5DJdmwdEEAy+FFC8+3DrpIHBj5QcA
HbxkyHqVVUYU
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:10 2024 by rpki-client on console-ams.rpki-client.org