Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133362e302f32312d3231203d3e20323633333335.roa
File:                     3139312e33362e3133362e302f32312d3231203d3e20323633333335.roa (raw, json)
Hash identifier:          1mE6Z7Ywvjcx97Z0fpgfbqwOWKEsWvy1XMWsc4MyFDM=
Subject key identifier:   B1:DD:74:7F:A3:12:34:1A:31:92:46:F5:F4:83:F6:A1:B9:73:C2:D6
Certificate issuer:       /CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
Certificate serial:       5F98FF85BCF2C31159F3D3D085E8B86CED86FE41
Authority key identifier: CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133362e302f32312d3231203d3e20323633333335.roa
Signing time:             Tue 12 Nov 2024 21:44:33 +0000
ROA not before:           Tue 12 Nov 2024 21:39:33 +0000
ROA not after:            Tue 11 Nov 2025 21:44:33 +0000
asID:                     263335
IP address blocks:        191.36.136.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl
                          rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 15:44:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:98:ff:85:bc:f2:c3:11:59:f3:d3:d0:85:e8:b8:6c:ed:86:fe:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
        Validity
            Not Before: Nov 12 21:39:33 2024 GMT
            Not After : Nov 11 21:44:33 2025 GMT
        Subject: CN=B1DD747FA312341A319246F5F483F6A1B973C2D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6b:1c:9a:81:6c:16:ee:d7:08:e4:95:11:ce:
                    64:f4:d8:df:b7:be:f6:eb:d0:4a:2b:2e:57:2a:f2:
                    42:42:d5:6c:9a:3f:ac:01:be:56:5a:ab:5d:86:3e:
                    b4:4e:76:72:40:e1:a2:f0:5f:59:40:d5:85:23:5f:
                    b0:eb:54:68:f1:04:58:fa:09:49:83:42:11:a1:ca:
                    05:4d:47:a5:11:f1:7b:10:0d:42:d7:7b:71:84:94:
                    f1:6b:7e:f6:6d:1f:10:83:32:2a:e7:c6:6f:1a:6a:
                    57:08:60:01:e8:92:44:8b:2e:d9:c3:db:26:3a:ad:
                    a3:ee:14:59:4e:d1:59:61:c8:80:e4:9f:ec:da:b9:
                    49:0c:3d:ba:7d:c2:07:2b:d1:66:dd:10:bf:28:fd:
                    23:89:2f:ec:d7:80:47:48:df:c3:24:d9:9b:d6:25:
                    e9:cd:b8:ec:35:20:44:56:2f:d7:cb:ba:59:89:9d:
                    c4:92:8c:b6:d8:a2:4d:5f:f9:2e:3b:97:20:7a:ef:
                    08:a2:94:2e:bf:4a:e8:6a:19:7d:65:07:c9:b0:2e:
                    00:b9:5d:5d:b1:5c:99:74:61:41:7f:43:8f:03:c0:
                    8a:0c:27:08:31:90:20:70:0c:61:bb:42:87:89:0d:
                    c6:e7:eb:b6:8c:f7:3b:ea:97:59:8d:eb:00:f8:5e:
                    6e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:DD:74:7F:A3:12:34:1A:31:92:46:F5:F4:83:F6:A1:B9:73:C2:D6
            X509v3 Authority Key Identifier:
                keyid:CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3133362e302f32312d3231203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         33:44:2f:a4:3f:ec:4b:7f:8d:09:b1:f6:43:ca:94:52:99:b6:
         f8:52:d2:8b:88:bd:40:53:5f:40:0e:bd:fe:b6:4e:8d:79:ae:
         ff:35:0c:b4:81:7a:2d:fb:04:1a:3e:da:c7:47:e6:c2:7c:cc:
         db:08:5f:72:4e:d8:c7:09:6a:76:23:f8:93:b2:b0:0a:69:c2:
         d8:14:28:68:dc:62:0a:32:e8:37:b7:bf:8c:bd:ac:12:9b:9b:
         c5:47:56:35:30:14:55:b5:20:eb:04:55:35:23:1f:02:27:d6:
         66:25:df:e8:8b:f1:f0:d7:02:0f:50:8f:51:ce:96:5c:ce:6a:
         1e:08:20:c0:6d:d6:a2:ed:6a:87:48:ff:50:6a:c1:0d:70:7d:
         2d:1c:ae:81:40:a2:a2:c3:19:98:2b:82:01:9f:1b:e1:de:cb:
         59:d9:27:0e:c0:70:e9:31:a5:11:92:cd:5d:79:46:0e:78:e8:
         22:56:66:8c:26:36:62:13:35:21:b0:5a:49:c2:95:5d:8a:1f:
         80:ec:f5:83:d2:b3:5d:08:ca:30:2b:3d:ef:5c:b3:90:ea:48:
         bb:99:9f:a2:46:7d:dc:0d:68:b5:16:98:7c:05:0d:1d:e0:f1:
         f4:b4:17:39:fe:2b:60:c0:e9:a4:84:78:95:f7:6f:9a:88:3e:
         4f:f0:dc:18
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUX5j/hbzywxFZ89PQhei4bO2G/kEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0U3NTQzMzkzQzgzRDc2RkI2QkREQzkzODU5QkU5NkI1
MThDREVBQzAeFw0yNDExMTIyMTM5MzNaFw0yNTExMTEyMTQ0MzNaMDMxMTAvBgNV
BAMTKEIxREQ3NDdGQTMxMjM0MUEzMTkyNDZGNUY0ODNGNkExQjk3M0MyRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcaxyagWwW7tcI5JURzmT02N+3
vvbr0EorLlcq8kJC1WyaP6wBvlZaq12GPrROdnJA4aLwX1lA1YUjX7DrVGjxBFj6
CUmDQhGhygVNR6UR8XsQDULXe3GElPFrfvZtHxCDMirnxm8aalcIYAHokkSLLtnD
2yY6raPuFFlO0VlhyIDkn+zauUkMPbp9wgcr0WbdEL8o/SOJL+zXgEdI38Mk2ZvW
JenNuOw1IERWL9fLulmJncSSjLbYok1f+S47lyB67wiilC6/SuhqGX1lB8mwLgC5
XV2xXJl0YUF/Q48DwIoMJwgxkCBwDGG7QoeJDcbn67aM9zvql1mN6wD4Xm7fAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUsd10f6MSNBoxkkb19IP2oblzwtYwHwYDVR0j
BBgwFoAUznVDOTyD12+2vdyThZvpa1GM3qwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUpxV1NEaE1lSHRuN3pMbWpROGFwM1NRdEhFR0dvZTVvUzc5QnpQelhE
QkcvMC9DRTc1NDMzOTNDODNENzZGQjZCRERDOTM4NTlCRTk2QjUxOENERUFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFNzU0MzM5M0M4M0Q3NkZC
NkJEREM5Mzg1OUJFOTZCNTE4Q0RFQUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VKcVdTRGhNZUh0bjd6TG1qUThhcDNTUXRIRUdHb2U1b1M3OUJ6UHpYREJHLzAv
MzEzOTMxMmUzMzM2MmUzMTMzMzYyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM2
MzMzMzMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO/JIgwDQYJKoZIhvcNAQELBQADggEBADNEL6Q/
7Et/jQmx9kPKlFKZtvhS0ouIvUBTX0AOvf62To15rv81DLSBei37BBo+2sdH5sJ8
zNsIX3JO2McJanYj+JOysAppwtgUKGjcYgoy6De3v4y9rBKbm8VHVjUwFFW1IOsE
VTUjHwIn1mYl3+iL8fDXAg9Qj1HOllzOah4IIMBt1qLtaodI/1BqwQ1wfS0croFA
oqLDGZgrggGfG+Hey1nZJw7AcOkxpRGSzV15Rg546CJWZowmNmITNSGwWknClV2K
H4Ds9YPSs10IyjArPe9cs5DqSLuZn6JGfdwNaLUWmHwFDR3g8fS0Fzn+K2DA6aSE
eJX3b5qIPk/w3Bg=
-----END CERTIFICATE-----
Generated at Mon Nov 25 15:27:10 2024 by rpki-client on console-fra.rpki-client.org