Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/2/3133382e39392e31322e302f32322d3234203d3e20323634313530.roa
File:                     3133382e39392e31322e302f32322d3234203d3e20323634313530.roa (raw, json)
Hash identifier:          oNfFgqZHt0KtMPQJoXmvUQz3ZrzOPCZUMW3hY8BeWVw=
Subject key identifier:   B0:02:A0:64:A4:65:D5:F3:20:80:5B:C9:E3:6E:AA:DB:D7:63:EC:D4
Certificate issuer:       /CN=9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17
Certificate serial:       215C8897ED3FBA62DB9CB1C0CC637D67578CE739
Authority key identifier: 99:27:C1:4E:A3:5B:CE:9F:2B:73:6A:DD:CC:0D:E0:B1:A0:7C:9E:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/2/3133382e39392e31322e302f32322d3234203d3e20323634313530.roa
Signing time:             Thu 04 Apr 2024 12:54:29 +0000
ROA not before:           Thu 04 Apr 2024 12:49:29 +0000
ROA not after:            Thu 03 Apr 2025 12:54:29 +0000
asID:                     264150
IP address blocks:        138.99.12.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/2/9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17.crl
                          rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/2/9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:5c:88:97:ed:3f:ba:62:db:9c:b1:c0:cc:63:7d:67:57:8c:e7:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17
        Validity
            Not Before: Apr  4 12:49:29 2024 GMT
            Not After : Apr  3 12:54:29 2025 GMT
        Subject: CN=B002A064A465D5F320805BC9E36EAADBD763ECD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:45:2e:3d:8e:d8:e8:51:e2:d9:3e:28:83:5d:
                    3e:85:33:52:71:db:43:ee:ee:0c:c7:88:04:eb:77:
                    80:d3:fd:f4:a0:13:77:92:a1:19:04:7f:ef:29:0a:
                    9c:32:3c:3c:95:35:90:40:a5:09:30:2a:e5:43:55:
                    86:10:63:77:db:52:79:f1:1f:be:45:b8:4f:7e:3e:
                    68:8f:b9:24:c5:d2:e1:22:92:54:a7:a4:e4:b7:83:
                    be:11:a8:63:f7:8c:ab:96:19:80:48:92:09:41:9d:
                    dc:5a:0c:8b:59:fa:0a:2a:b2:37:84:08:cd:ee:b1:
                    f3:6a:80:d5:f1:09:28:db:b3:5d:88:a1:42:d3:22:
                    e5:47:40:4e:46:c2:75:60:38:6d:30:79:dc:f8:e3:
                    9f:e8:f3:25:11:af:7f:ee:75:f1:c3:bd:89:39:6a:
                    11:bc:34:38:73:c5:4b:64:bb:69:38:c6:8e:9f:25:
                    5c:2d:c1:03:fc:2c:18:4b:73:d6:d5:99:48:00:e9:
                    38:6a:c9:ad:14:01:08:f0:06:b0:8c:30:10:e4:a9:
                    d5:d5:d5:7c:89:1a:7a:aa:d4:6c:6f:c0:19:ba:d8:
                    83:35:05:2a:cc:c3:fd:8e:d7:93:a8:7c:b3:95:04:
                    60:87:45:5e:84:b7:cc:3f:53:50:37:f9:b6:3b:73:
                    9a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:02:A0:64:A4:65:D5:F3:20:80:5B:C9:E3:6E:AA:DB:D7:63:EC:D4
            X509v3 Authority Key Identifier:
                keyid:99:27:C1:4E:A3:5B:CE:9F:2B:73:6A:DD:CC:0D:E0:B1:A0:7C:9E:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/2/9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9927C14EA35BCE9F2B736ADDCC0DE0B1A07C9E17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/2/3133382e39392e31322e302f32322d3234203d3e20323634313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:47:98:0b:4b:47:46:c0:c8:f1:2f:3d:d2:13:a8:f4:83:6a:
         4f:80:ea:5c:49:8a:a6:27:6e:f4:8c:c6:96:08:c7:7b:44:47:
         25:e0:cf:20:1a:44:56:e4:26:aa:ab:15:f2:b3:5d:fa:8b:ed:
         73:91:4a:08:cc:92:21:ab:d4:31:43:71:35:0d:2f:c1:39:87:
         c5:04:62:8e:24:9c:bc:50:93:d2:90:f3:f0:9d:54:cb:43:02:
         ca:b8:15:a4:d7:65:f8:9d:20:d9:96:72:98:69:ae:00:80:19:
         1b:b3:44:36:ab:46:0e:86:3e:c2:4d:1e:c7:11:3a:fb:ea:6c:
         43:6c:40:c6:d7:ec:4f:ec:67:82:51:ee:16:f3:13:b3:fb:6d:
         9e:97:da:09:5d:21:09:a1:ba:8c:91:67:22:50:3e:b8:20:41:
         46:38:29:80:17:b3:b8:28:64:95:f7:e4:89:c7:7b:3b:35:be:
         fa:82:79:e5:04:f8:61:2a:3e:80:31:d4:ce:c9:1d:9d:c8:ed:
         11:39:25:cc:55:f3:db:72:9e:e4:d3:64:78:32:d5:5a:0d:a7:
         bb:9e:f5:15:b1:b9:03:3c:57:7d:d3:d4:e5:5d:26:7e:fe:0e:
         c4:be:16:1d:0e:8c:5b:18:cc:0a:6d:39:81:ea:52:a2:3e:43:
         d5:73:e0:b7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIVyIl+0/umLbnLHAzGN9Z1eM5zkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTkyN0MxNEVBMzVCQ0U5RjJCNzM2QUREQ0MwREUwQjFB
MDdDOUUxNzAeFw0yNDA0MDQxMjQ5MjlaFw0yNTA0MDMxMjU0MjlaMDMxMTAvBgNV
BAMTKEIwMDJBMDY0QTQ2NUQ1RjMyMDgwNUJDOUUzNkVBQURCRDc2M0VDRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiRS49jtjoUeLZPiiDXT6FM1Jx
20Pu7gzHiATrd4DT/fSgE3eSoRkEf+8pCpwyPDyVNZBApQkwKuVDVYYQY3fbUnnx
H75FuE9+PmiPuSTF0uEiklSnpOS3g74RqGP3jKuWGYBIkglBndxaDItZ+goqsjeE
CM3usfNqgNXxCSjbs12IoULTIuVHQE5GwnVgOG0wedz445/o8yURr3/udfHDvYk5
ahG8NDhzxUtku2k4xo6fJVwtwQP8LBhLc9bVmUgA6Thqya0UAQjwBrCMMBDkqdXV
1XyJGnqq1GxvwBm62IM1BSrMw/2O15OofLOVBGCHRV6Et8w/U1A3+bY7c5qnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUsAKgZKRl1fMggFvJ426q29dj7NQwHwYDVR0j
BBgwFoAUmSfBTqNbzp8rc2rdzA3gsaB8nhcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTl2RlNlS1RQcTE3UFpRNEhtQlFSVUZzZ1h1TFAyNlRYeDUxNHduRnhH
czEvMi85OTI3QzE0RUEzNUJDRTlGMkI3MzZBRERDQzBERTBCMUEwN0M5RTE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5MjdDMTRFQTM1QkNFOUYy
QjczNkFERENDMERFMEIxQTA3QzlFMTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U5dkZTZUtUUHExN1BaUTRIbUJRUlVGc2dYdUxQMjZUWHg1MTR3bkZ4R3MxLzIv
MzEzMzM4MmUzOTM5MmUzMTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0
MzEzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCimMMMA0GCSqGSIb3DQEBCwUAA4IBAQDCR5gLS0dG
wMjxLz3SE6j0g2pPgOpcSYqmJ270jMaWCMd7REcl4M8gGkRW5CaqqxXys136i+1z
kUoIzJIhq9QxQ3E1DS/BOYfFBGKOJJy8UJPSkPPwnVTLQwLKuBWk12X4nSDZlnKY
aa4AgBkbs0Q2q0YOhj7CTR7HETr76mxDbEDG1+xP7GeCUe4W8xOz+22el9oJXSEJ
obqMkWciUD64IEFGOCmAF7O4KGSV9+SJx3s7Nb76gnnlBPhhKj6AMdTOyR2dyO0R
OSXMVfPbcp7k02R4MtVaDae7nvUVsbkDPFd909TlXSZ+/g7EvhYdDoxbGMwKbTmB
6lKiPkPVc+C3
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:21 2024 by rpki-client on console-fra.rpki-client.org