Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/1/3138312e3139322e3131322e302f32322d3234203d3e20323730363935.roa
File:                     3138312e3139322e3131322e302f32322d3234203d3e20323730363935.roa (raw, json)
Hash identifier:          gx0gm4BivbhZipCF32sJSDj4lPWWnquhuNryfX0Yr0k=
Subject key identifier:   02:08:A9:31:0A:A1:FA:E7:DB:57:30:FC:90:13:53:54:F8:63:97:21
Certificate issuer:       /CN=5159897CEA8619B790B3E13424B82F316F2C8086
Certificate serial:       3AC53166ADAE5FF5E0FA5DE62B930C2E4304ABBF
Authority key identifier: 51:59:89:7C:EA:86:19:B7:90:B3:E1:34:24:B8:2F:31:6F:2C:80:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5159897CEA8619B790B3E13424B82F316F2C8086.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/1/3138312e3139322e3131322e302f32322d3234203d3e20323730363935.roa
Signing time:             Thu 04 Apr 2024 02:19:56 +0000
ROA not before:           Thu 04 Apr 2024 02:14:56 +0000
ROA not after:            Thu 03 Apr 2025 02:19:56 +0000
asID:                     270695
IP address blocks:        181.192.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/1/5159897CEA8619B790B3E13424B82F316F2C8086.crl
                          rsync://rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/1/5159897CEA8619B790B3E13424B82F316F2C8086.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5159897CEA8619B790B3E13424B82F316F2C8086.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 21:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c5:31:66:ad:ae:5f:f5:e0:fa:5d:e6:2b:93:0c:2e:43:04:ab:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5159897CEA8619B790B3E13424B82F316F2C8086
        Validity
            Not Before: Apr  4 02:14:56 2024 GMT
            Not After : Apr  3 02:19:56 2025 GMT
        Subject: CN=0208A9310AA1FAE7DB5730FC90135354F8639721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b9:6c:61:10:c2:7d:7a:74:7c:ba:2f:48:7a:
                    ba:2f:05:1d:5c:20:5b:50:d1:d0:ae:db:95:91:e7:
                    3e:a1:0a:35:71:26:f0:e1:b9:78:79:a5:1e:a3:39:
                    28:58:90:eb:14:8e:c5:8f:25:75:09:c5:5b:1c:ec:
                    da:07:32:1e:c5:27:ac:7b:33:6d:c3:3b:f3:8f:a4:
                    0a:55:e3:d6:1c:c9:b4:7b:55:48:ca:b8:c9:b5:9a:
                    56:a8:84:50:5e:19:90:b9:93:6d:51:3c:ef:bd:30:
                    af:e3:82:9a:96:bd:8d:68:93:fe:33:81:9a:c8:36:
                    b8:3f:db:6f:0f:0b:f3:6f:96:40:cc:ab:f9:07:88:
                    3b:1f:c8:43:9d:cc:e9:ba:96:6e:07:de:00:be:07:
                    49:89:1a:b6:90:7f:9b:a1:5e:31:d6:37:48:9e:79:
                    fb:fc:4c:9f:ea:73:93:05:ef:3a:39:23:49:46:d6:
                    1a:43:f2:3d:b9:ff:e9:b5:bb:50:c6:e3:b9:08:c1:
                    e9:bf:4d:37:27:51:83:96:15:9d:ac:9f:1e:8b:91:
                    1a:e5:98:27:db:3b:9b:40:00:3a:14:ac:1f:67:ae:
                    a7:f2:45:c7:d3:79:2f:f6:02:52:de:e1:15:40:47:
                    4a:f4:0d:bc:51:4b:5d:05:5b:c1:d3:04:7f:74:14:
                    81:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:08:A9:31:0A:A1:FA:E7:DB:57:30:FC:90:13:53:54:F8:63:97:21
            X509v3 Authority Key Identifier:
                keyid:51:59:89:7C:EA:86:19:B7:90:B3:E1:34:24:B8:2F:31:6F:2C:80:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/1/5159897CEA8619B790B3E13424B82F316F2C8086.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5159897CEA8619B790B3E13424B82F316F2C8086.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/1/3138312e3139322e3131322e302f32322d3234203d3e20323730363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.192.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:71:53:ee:8d:5d:92:9a:4d:0e:15:0c:48:14:ff:0c:6a:97:
         6a:d9:89:f0:98:6f:92:fd:7f:7d:24:e0:b0:cb:18:49:3e:fc:
         57:51:36:16:6f:e0:6c:8d:99:4c:73:d2:b8:29:39:93:a4:f6:
         fc:a2:dc:3b:f6:57:22:ae:87:ab:0f:8d:c5:a4:9d:8a:1c:93:
         78:2d:3b:a3:c4:9f:13:e4:f9:30:e1:83:4c:b5:e8:c8:8f:60:
         24:c6:6b:75:72:e9:0b:c0:d5:7e:5a:1a:f6:8d:6d:5a:54:95:
         84:26:6d:ff:68:3f:10:15:41:96:41:8d:90:e0:3b:28:8b:1f:
         e1:d2:95:f3:ea:b7:9a:18:42:0f:d6:19:d6:f5:c1:ae:f5:03:
         26:c9:67:bc:a1:68:8a:6a:7f:8a:db:ab:8c:52:bc:65:e6:74:
         ff:25:6a:48:f2:a6:4d:1e:86:29:e7:64:06:88:1c:b4:b5:f3:
         63:6a:a2:c1:c3:34:2d:07:97:23:48:d8:04:7c:24:d7:87:32:
         7f:13:df:5a:26:f5:c0:00:3c:45:d5:42:d0:ac:81:cf:c5:e7:
         ad:d6:d1:62:b6:25:ab:2f:57:a6:4d:5d:7e:b4:ad:de:19:20:
         3e:0b:b1:e2:85:6b:d0:a7:9d:55:ed:09:68:a1:da:74:29:60:
         ab:35:8b:4c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUOsUxZq2uX/Xg+l3mK5MMLkMEq78wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTE1OTg5N0NFQTg2MTlCNzkwQjNFMTM0MjRCODJGMzE2
RjJDODA4NjAeFw0yNDA0MDQwMjE0NTZaFw0yNTA0MDMwMjE5NTZaMDMxMTAvBgNV
BAMTKDAyMDhBOTMxMEFBMUZBRTdEQjU3MzBGQzkwMTM1MzU0Rjg2Mzk3MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5uWxhEMJ9enR8ui9IerovBR1c
IFtQ0dCu25WR5z6hCjVxJvDhuXh5pR6jOShYkOsUjsWPJXUJxVsc7NoHMh7FJ6x7
M23DO/OPpApV49YcybR7VUjKuMm1mlaohFBeGZC5k21RPO+9MK/jgpqWvY1ok/4z
gZrINrg/228PC/NvlkDMq/kHiDsfyEOdzOm6lm4H3gC+B0mJGraQf5uhXjHWN0ie
efv8TJ/qc5MF7zo5I0lG1hpD8j25/+m1u1DG47kIwem/TTcnUYOWFZ2snx6LkRrl
mCfbO5tAADoUrB9nrqfyRcfTeS/2AlLe4RVAR0r0DbxRS10FW8HTBH90FIEFAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUAgipMQqh+ufbVzD8kBNTVPhjlyEwHwYDVR0j
BBgwFoAUUVmJfOqGGbeQs+E0JLgvMW8sgIYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUNEb0VLS0V3MmthTkptUHpIc0w0aEZIUEtWTXd1OXcyRzYyQ0tQOTNh
MlYvMS81MTU5ODk3Q0VBODYxOUI3OTBCM0UxMzQyNEI4MkYzMTZGMkM4MDg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUxNTk4OTdDRUE4NjE5Qjc5
MEIzRTEzNDI0QjgyRjMxNkYyQzgwODYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VDRG9FS0tFdzJrYU5KbVB6SHNMNGhGSFBLVk13dTl3Mkc2MkNLUDkzYTJWLzEv
MzEzODMxMmUzMTM5MzIyZTMxMzEzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzczMDM2MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArXAcDANBgkqhkiG9w0BAQsFAAOCAQEAMnFT
7o1dkppNDhUMSBT/DGqXatmJ8Jhvkv1/fSTgsMsYST78V1E2Fm/gbI2ZTHPSuCk5
k6T2/KLcO/ZXIq6Hqw+NxaSdihyTeC07o8SfE+T5MOGDTLXoyI9gJMZrdXLpC8DV
floa9o1tWlSVhCZt/2g/EBVBlkGNkOA7KIsf4dKV8+q3mhhCD9YZ1vXBrvUDJsln
vKFoimp/iturjFK8ZeZ0/yVqSPKmTR6GKedkBogctLXzY2qiwcM0LQeXI0jYBHwk
14cyfxPfWib1wAA8RdVC0KyBz8XnrdbRYrYlqy9Xpk1dfrSt3hkgPgux4oVr0Ked
Ve0JaKHadClgqzWLTA==
-----END CERTIFICATE-----
Generated at Sat Sep 28 20:53:10 2024 by rpki-client on console-ams.rpki-client.org