Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/2/3139312e3234312e36342e302f32302d3234203d3e203533313831.roa
File:                     3139312e3234312e36342e302f32302d3234203d3e203533313831.roa (raw, json)
Hash identifier:          qRvcN3F7dW1cnJ8r4tGg6X8grJM7R9j7Ry7dx3CdPXg=
Subject key identifier:   C7:D7:33:88:B9:58:10:68:6C:77:07:5C:9D:47:86:0A:CD:82:DB:BE
Certificate issuer:       /CN=E3875F4F494171D8D4FFE794B42A8B5CED1A6DDB
Certificate serial:       24981009A5649312618133ACFA9256ED4F3FB227
Authority key identifier: E3:87:5F:4F:49:41:71:D8:D4:FF:E7:94:B4:2A:8B:5C:ED:1A:6D:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3875F4F494171D8D4FFE794B42A8B5CED1A6DDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/2/3139312e3234312e36342e302f32302d3234203d3e203533313831.roa
Signing time:             Thu 04 Apr 2024 09:58:19 +0000
ROA not before:           Thu 04 Apr 2024 09:53:19 +0000
ROA not after:            Thu 03 Apr 2025 09:58:19 +0000
asID:                     53181
IP address blocks:        191.241.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/2/E3875F4F494171D8D4FFE794B42A8B5CED1A6DDB.crl
                          rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/2/E3875F4F494171D8D4FFE794B42A8B5CED1A6DDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3875F4F494171D8D4FFE794B42A8B5CED1A6DDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:98:10:09:a5:64:93:12:61:81:33:ac:fa:92:56:ed:4f:3f:b2:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3875F4F494171D8D4FFE794B42A8B5CED1A6DDB
        Validity
            Not Before: Apr  4 09:53:19 2024 GMT
            Not After : Apr  3 09:58:19 2025 GMT
        Subject: CN=C7D73388B95810686C77075C9D47860ACD82DBBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:35:3b:f9:f6:12:7e:43:91:98:d6:01:4a:18:
                    66:34:a4:71:09:fc:98:74:f2:a4:0c:77:c0:e8:b3:
                    9b:70:19:84:b3:ba:c0:77:29:cb:95:83:1b:58:71:
                    7d:a0:e0:77:69:e5:27:fa:c7:42:cb:71:e4:7d:1f:
                    0b:9d:d8:53:79:8d:3c:74:d0:8d:b0:7d:ea:d0:8d:
                    bd:ae:38:14:3a:53:22:70:41:f5:f0:84:03:ef:53:
                    83:41:39:13:72:4f:3a:e4:e3:1a:e4:15:d4:b5:e2:
                    a9:e5:7a:73:a9:b8:0f:ff:7a:f6:1a:c7:31:16:92:
                    b5:fd:b6:6b:aa:32:3e:39:33:46:2d:54:9c:8f:28:
                    84:b6:52:81:07:30:d2:89:e4:2c:9b:b9:0d:af:70:
                    17:7d:8a:cf:c4:38:dc:86:77:38:ec:32:c1:f2:27:
                    ff:fa:30:97:1d:28:39:6c:5e:c6:13:3c:fb:14:5f:
                    46:48:84:2b:e2:88:d1:a3:9d:75:83:6e:6e:a1:d2:
                    23:52:7b:68:2c:93:e8:56:35:3b:1a:ec:37:37:52:
                    89:3d:99:60:07:f5:81:94:fd:43:2e:32:b1:5e:52:
                    6c:9a:3c:64:54:1b:3d:64:53:aa:69:c1:a5:02:29:
                    1b:54:63:4d:e7:0c:d1:57:53:78:5b:40:51:29:a6:
                    e3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D7:33:88:B9:58:10:68:6C:77:07:5C:9D:47:86:0A:CD:82:DB:BE
            X509v3 Authority Key Identifier:
                keyid:E3:87:5F:4F:49:41:71:D8:D4:FF:E7:94:B4:2A:8B:5C:ED:1A:6D:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/2/E3875F4F494171D8D4FFE794B42A8B5CED1A6DDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3875F4F494171D8D4FFE794B42A8B5CED1A6DDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/2/3139312e3234312e36342e302f32302d3234203d3e203533313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         88:46:61:4b:ee:f7:5c:7a:a3:9d:84:f1:af:24:1a:5b:7f:8f:
         60:6e:84:74:da:d8:4d:df:b6:32:ae:e3:c9:2c:71:55:7a:25:
         8b:3f:c0:cd:ca:73:56:04:43:82:30:db:9b:cd:96:a7:50:6a:
         9b:b4:ec:57:bb:55:7d:36:d7:56:dd:2c:1b:d1:09:27:ae:5e:
         63:32:48:6d:c9:b9:e9:a9:32:4e:24:78:f7:ef:b5:7a:37:c8:
         df:d5:0a:1e:c8:a9:f7:49:27:07:fd:4b:4f:84:9a:e8:a2:11:
         dc:cc:45:c9:30:7d:47:34:58:ed:00:2f:3b:5b:48:07:bc:bc:
         4a:6b:0a:26:99:5a:6e:80:d7:eb:5d:c9:47:c6:18:dd:ef:b8:
         bc:d6:ac:16:f7:83:59:7d:eb:d7:19:57:8f:6e:80:da:e2:75:
         c1:b5:73:49:94:4a:75:43:d6:4e:21:87:63:f9:a8:ae:f2:34:
         93:41:a0:61:30:a9:35:88:6e:c3:96:c5:42:d1:2d:47:d3:ea:
         42:a0:81:17:40:fc:1c:9f:e2:ff:78:fb:16:54:db:58:ea:f9:
         c6:88:1e:46:05:70:b9:4b:f4:1c:ca:2f:44:5f:3d:2c:6d:64:
         6c:78:1e:ee:bc:fb:57:88:43:12:b0:e0:d0:fb:b6:15:5b:e5:
         55:a2:71:c7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJJgQCaVkkxJhgTOs+pJW7U8/sicwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM4NzVGNEY0OTQxNzFEOEQ0RkZFNzk0QjQyQThCNUNF
RDFBNkREQjAeFw0yNDA0MDQwOTUzMTlaFw0yNTA0MDMwOTU4MTlaMDMxMTAvBgNV
BAMTKEM3RDczMzg4Qjk1ODEwNjg2Qzc3MDc1QzlENDc4NjBBQ0Q4MkRCQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaNTv59hJ+Q5GY1gFKGGY0pHEJ
/Jh08qQMd8Dos5twGYSzusB3KcuVgxtYcX2g4Hdp5Sf6x0LLceR9Hwud2FN5jTx0
0I2wferQjb2uOBQ6UyJwQfXwhAPvU4NBORNyTzrk4xrkFdS14qnlenOpuA//evYa
xzEWkrX9tmuqMj45M0YtVJyPKIS2UoEHMNKJ5CybuQ2vcBd9is/EONyGdzjsMsHy
J//6MJcdKDlsXsYTPPsUX0ZIhCviiNGjnXWDbm6h0iNSe2gsk+hWNTsa7Dc3Uok9
mWAH9YGU/UMuMrFeUmyaPGRUGz1kU6ppwaUCKRtUY03nDNFXU3hbQFEppuObAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUx9cziLlYEGhsdwdcnUeGCs2C274wHwYDVR0j
BBgwFoAU44dfT0lBcdjU/+eUtCqLXO0abdswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVV5NGF3Q202QUhBUk1kYllFMVo3aHNTaXlRNnF6UU5OQ2lLczZ4RHBO
ZDgvMi9FMzg3NUY0RjQ5NDE3MUQ4RDRGRkU3OTRCNDJBOEI1Q0VEMUE2RERCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzODc1RjRGNDk0MTcxRDhE
NEZGRTc5NEI0MkE4QjVDRUQxQTZEREIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VVeTRhd0NtNkFIQVJNZGJZRTFaN2hzU2l5UTZxelFOTkNpS3M2eERwTmQ4LzIv
MzEzOTMxMmUzMjM0MzEyZTM2MzQyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNTMz
MzEzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEv/FAMA0GCSqGSIb3DQEBCwUAA4IBAQCIRmFL7vdc
eqOdhPGvJBpbf49gboR02thN37YyruPJLHFVeiWLP8DNynNWBEOCMNubzZanUGqb
tOxXu1V9NtdW3Swb0Qknrl5jMkhtybnpqTJOJHj377V6N8jf1QoeyKn3SScH/UtP
hJroohHczEXJMH1HNFjtAC87W0gHvLxKawommVpugNfrXclHxhjd77i81qwW94NZ
fevXGVePboDa4nXBtXNJlEp1Q9ZOIYdj+aiu8jSTQaBhMKk1iG7DlsVC0S1H0+pC
oIEXQPwcn+L/ePsWVNtY6vnGiB5GBXC5S/Qcyi9EXz0sbWRseB7uvPtXiEMSsODQ
+7YVW+VVonHH
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:37 2024 by rpki-client on console-fra.rpki-client.org