Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134302e302f32332d3233203d3e20323633333335.roa
File:                     3139312e33362e3134302e302f32332d3233203d3e20323633333335.roa (raw, json)
Hash identifier:          miK4HxsbfPl+t6eN1Ekfy5f6lcpZn6s1mADQ6iHCvKs=
Subject key identifier:   FB:5F:1D:63:67:AB:02:48:7A:0E:A7:A1:72:89:6A:76:D3:0C:57:0B
Certificate issuer:       /CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
Certificate serial:       7BCC31DCDB9D7AF443C26D3C2CAF7BAFA9FEE31F
Authority key identifier: CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134302e302f32332d3233203d3e20323633333335.roa
Signing time:             Tue 12 Nov 2024 21:44:34 +0000
ROA not before:           Tue 12 Nov 2024 21:39:34 +0000
ROA not after:            Tue 11 Nov 2025 21:44:34 +0000
asID:                     263335
IP address blocks:        191.36.140.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl
                          rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 23:25:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:cc:31:dc:db:9d:7a:f4:43:c2:6d:3c:2c:af:7b:af:a9:fe:e3:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE7543393C83D76FB6BDDC93859BE96B518CDEAC
        Validity
            Not Before: Nov 12 21:39:34 2024 GMT
            Not After : Nov 11 21:44:34 2025 GMT
        Subject: CN=FB5F1D6367AB02487A0EA7A172896A76D30C570B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:44:f0:69:4d:71:72:1a:3d:7f:42:64:74:74:
                    db:74:ac:a4:e9:d1:d7:78:de:1a:77:0d:42:7c:04:
                    d3:fe:5e:66:39:57:a7:b7:10:7f:7f:ec:02:2d:bf:
                    ce:3d:57:44:89:23:0d:d1:08:ed:d0:1f:89:7b:e9:
                    2b:8a:ba:61:23:f1:19:d0:a4:2e:3d:d3:48:49:ea:
                    a0:08:1c:8a:3d:fa:37:0b:a3:58:99:b7:3e:68:11:
                    ae:30:38:a2:39:dd:2c:b0:58:3f:17:1d:1f:c4:a6:
                    db:3b:09:bc:67:1e:2a:1a:fc:d3:64:37:ea:c4:8d:
                    8f:ba:55:6f:4d:f0:10:ae:5e:20:0d:3f:9a:7d:0d:
                    6c:4f:2a:cf:1b:8f:3b:be:2a:eb:e8:d2:a3:e3:ea:
                    5a:39:6f:4e:0f:95:4d:23:5e:de:4d:b4:16:e0:09:
                    8e:7a:ca:7a:7c:ae:f9:40:68:13:26:dd:a6:18:fc:
                    f7:94:3c:52:00:7e:e4:a8:d0:79:45:71:86:49:82:
                    23:23:30:e0:b4:1f:9b:fc:08:8e:f4:cf:37:8f:e7:
                    4c:87:1c:fa:a2:8f:bd:0d:1b:63:b7:81:94:46:08:
                    d1:3b:1b:f0:ec:da:72:10:80:a2:b7:a4:78:98:b2:
                    c7:98:0c:96:7b:7e:b1:b6:b8:84:14:37:4b:ea:d2:
                    73:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:5F:1D:63:67:AB:02:48:7A:0E:A7:A1:72:89:6A:76:D3:0C:57:0B
            X509v3 Authority Key Identifier:
                keyid:CE:75:43:39:3C:83:D7:6F:B6:BD:DC:93:85:9B:E9:6B:51:8C:DE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE7543393C83D76FB6BDDC93859BE96B518CDEAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/0/3139312e33362e3134302e302f32332d3233203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:47:ea:e8:90:47:71:d3:2d:ca:d8:b7:63:e2:fb:8b:86:6f:
         2a:85:d5:13:22:f6:f4:e7:14:ef:cb:ae:46:26:fc:de:5a:b1:
         5c:12:04:c0:4a:63:97:5e:ce:6a:ba:1c:dd:03:be:28:bc:03:
         9b:1e:25:a4:a0:2f:48:0a:2f:03:fb:3d:46:fa:a3:db:a3:b8:
         b2:44:bf:d5:c5:52:b9:0c:73:54:78:2d:8a:c5:24:0c:c5:b8:
         1b:24:7a:90:6d:72:5d:96:47:ec:dc:e7:21:57:aa:bd:e9:43:
         0a:97:a0:69:1c:4f:93:67:54:58:a0:b0:74:84:fb:3f:03:3d:
         e0:99:0a:b8:1e:9d:25:62:56:bd:b9:c7:74:f4:83:1b:71:f9:
         c6:08:a7:bb:bd:b5:d9:7f:7e:17:fe:58:2a:74:db:be:c1:32:
         fb:bb:0a:b3:ba:12:20:43:26:4b:32:f8:48:ad:3f:9f:a7:9a:
         89:40:f9:db:fd:15:da:f9:57:0f:7e:a9:81:ac:19:92:76:7f:
         39:af:bf:14:46:7c:4f:a9:c2:b7:f9:ca:b1:8c:a2:c0:d8:4e:
         d9:3f:e1:86:fb:a9:e2:bd:34:8c:cb:54:88:bb:dc:ca:ba:28:
         73:72:9d:a4:20:e9:2d:93:0d:6b:db:09:aa:fc:d8:be:9a:66:
         9e:4b:ef:cd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUe8wx3NudevRDwm08LK97r6n+4x8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0U3NTQzMzkzQzgzRDc2RkI2QkREQzkzODU5QkU5NkI1
MThDREVBQzAeFw0yNDExMTIyMTM5MzRaFw0yNTExMTEyMTQ0MzRaMDMxMTAvBgNV
BAMTKEZCNUYxRDYzNjdBQjAyNDg3QTBFQTdBMTcyODk2QTc2RDMwQzU3MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvRPBpTXFyGj1/QmR0dNt0rKTp
0dd43hp3DUJ8BNP+XmY5V6e3EH9/7AItv849V0SJIw3RCO3QH4l76SuKumEj8RnQ
pC4900hJ6qAIHIo9+jcLo1iZtz5oEa4wOKI53SywWD8XHR/Epts7CbxnHioa/NNk
N+rEjY+6VW9N8BCuXiANP5p9DWxPKs8bjzu+Kuvo0qPj6lo5b04PlU0jXt5NtBbg
CY56ynp8rvlAaBMm3aYY/PeUPFIAfuSo0HlFcYZJgiMjMOC0H5v8CI70zzeP50yH
HPqij70NG2O3gZRGCNE7G/Ds2nIQgKK3pHiYsseYDJZ7frG2uIQUN0vq0nNZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+18dY2erAkh6DqehcolqdtMMVwswHwYDVR0j
BBgwFoAUznVDOTyD12+2vdyThZvpa1GM3qwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUpxV1NEaE1lSHRuN3pMbWpROGFwM1NRdEhFR0dvZTVvUzc5QnpQelhE
QkcvMC9DRTc1NDMzOTNDODNENzZGQjZCRERDOTM4NTlCRTk2QjUxOENERUFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFNzU0MzM5M0M4M0Q3NkZC
NkJEREM5Mzg1OUJFOTZCNTE4Q0RFQUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VKcVdTRGhNZUh0bjd6TG1qUThhcDNTUXRIRUdHb2U1b1M3OUJ6UHpYREJHLzAv
MzEzOTMxMmUzMzM2MmUzMTM0MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzMzMzMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG/JIwwDQYJKoZIhvcNAQELBQADggEBAJVH6uiQ
R3HTLcrYt2Pi+4uGbyqF1RMi9vTnFO/LrkYm/N5asVwSBMBKY5dezmq6HN0Dvii8
A5seJaSgL0gKLwP7PUb6o9ujuLJEv9XFUrkMc1R4LYrFJAzFuBskepBtcl2WR+zc
5yFXqr3pQwqXoGkcT5NnVFigsHSE+z8DPeCZCrgenSViVr25x3T0gxtx+cYIp7u9
tdl/fhf+WCp0277BMvu7CrO6EiBDJksy+EitP5+nmolA+dv9Fdr5Vw9+qYGsGZJ2
fzmvvxRGfE+pwrf5yrGMosDYTtk/4Yb7qeK9NIzLVIi73Mq6KHNynaQg6S2TDWvb
Car82L6aZp5L780=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:13 2024 by rpki-client on console-ams.rpki-client.org