Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e382e302f32342d3234203d3e20323633323536.roa
File:                     3139382e35382e382e302f32342d3234203d3e20323633323536.roa (raw, json)
Hash identifier:          qbxrxc651hjrHtTFFq5MAH/DqsNan+W8TFjurOAex1U=
Subject key identifier:   31:B5:2E:B8:D4:3B:63:B6:43:C6:BE:FB:CA:C5:4B:DF:4E:B4:69:84
Certificate issuer:       /CN=60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011
Certificate serial:       1384087410C544B79DFDC2B8CD4E04379C38D421
Authority key identifier: 60:F5:CE:DC:60:B1:C9:2A:5A:74:DC:B3:CF:E6:F0:44:F9:46:20:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e382e302f32342d3234203d3e20323633323536.roa
Signing time:             Fri 10 Jan 2025 16:41:54 +0000
ROA not before:           Fri 10 Jan 2025 16:36:54 +0000
ROA not after:            Fri 09 Jan 2026 16:41:54 +0000
asID:                     263256
IP address blocks:        198.58.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.crl
                          rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 13:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:84:08:74:10:c5:44:b7:9d:fd:c2:b8:cd:4e:04:37:9c:38:d4:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011
        Validity
            Not Before: Jan 10 16:36:54 2025 GMT
            Not After : Jan  9 16:41:54 2026 GMT
        Subject: CN=31B52EB8D43B63B643C6BEFBCAC54BDF4EB46984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dd:6e:ae:9c:05:16:a7:ac:3c:4e:64:53:1a:
                    0f:16:30:64:ec:72:e1:46:10:69:5b:67:23:39:7f:
                    17:09:83:b3:d3:73:87:88:ba:2c:7c:cc:58:29:84:
                    53:21:41:2f:34:53:59:11:65:ab:e1:2c:95:b6:cd:
                    d6:26:fb:ec:9c:37:40:45:44:6a:d4:12:9f:8b:2b:
                    7a:ef:38:6b:93:98:f7:43:2e:35:f7:4f:48:3f:4b:
                    0b:50:75:f6:0a:f0:72:00:aa:ee:ad:ca:7c:56:c4:
                    8f:76:67:10:28:d1:2a:c8:15:7c:51:75:c9:50:c9:
                    ff:4f:90:4f:d0:a2:58:d1:ef:75:c9:dc:cb:c9:e0:
                    44:25:d8:96:93:8c:62:cd:cc:9c:80:17:2d:13:4d:
                    3a:77:20:8b:da:5b:30:5f:58:1c:14:31:42:e2:4a:
                    b4:db:1a:f2:c3:b1:0f:96:99:c3:67:35:77:72:a1:
                    77:44:6d:51:3d:d1:e0:6d:34:0b:ce:c5:42:40:41:
                    28:b4:ce:3e:a4:aa:42:a1:f5:81:fa:4b:ae:72:ec:
                    44:20:bd:49:a2:70:3e:b7:cd:7d:60:97:11:e5:b0:
                    1e:bd:fe:6b:c6:31:3b:9d:13:c8:f9:1d:78:7e:be:
                    55:9f:93:fe:28:db:dd:62:2f:c5:30:ae:19:f0:8a:
                    f3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B5:2E:B8:D4:3B:63:B6:43:C6:BE:FB:CA:C5:4B:DF:4E:B4:69:84
            X509v3 Authority Key Identifier:
                keyid:60:F5:CE:DC:60:B1:C9:2A:5A:74:DC:B3:CF:E6:F0:44:F9:46:20:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e382e302f32342d3234203d3e20323633323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.58.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:98:8a:42:3a:2d:25:41:72:bb:5a:83:b2:03:ee:27:6e:11:
         c5:3a:f3:5a:68:c5:a3:cb:e7:ad:92:74:f9:b8:90:3a:89:36:
         16:18:14:0f:4c:e6:a3:24:3b:7a:c0:4c:56:37:6b:45:d6:7b:
         67:d8:89:1f:c4:36:f8:b4:00:08:c7:cb:26:28:c2:76:f1:ed:
         47:3e:f7:bc:a8:2e:2f:83:20:cf:15:52:ed:12:8a:1c:31:b9:
         f0:75:6b:4c:c8:63:62:9a:35:c4:aa:62:43:43:91:7b:54:0f:
         1d:08:d1:13:ed:78:d6:a3:68:7a:0f:93:45:de:93:48:87:dd:
         4e:a4:48:e6:c8:9c:1a:59:5f:6c:77:77:02:54:cf:77:e1:1c:
         49:63:94:c0:ae:54:79:cb:aa:2a:eb:4f:dd:25:52:22:c5:13:
         06:bd:0b:91:94:00:03:78:3e:ef:a2:d4:ea:18:da:22:77:0a:
         33:30:c7:cd:71:6b:ad:86:79:86:d9:7d:8b:2a:0b:4c:cb:cb:
         3d:02:f7:7c:3b:55:44:86:3d:b7:0c:9a:fe:07:08:b6:6e:95:
         d3:44:2e:e3:82:d6:e2:be:e1:33:49:63:a1:6e:7d:6a:2b:6b:
         3c:8c:36:1a:9f:ff:09:e4:10:33:77:f9:0b:76:05:b4:5e:f6:
         e7:54:92:66
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUE4QIdBDFRLed/cK4zU4EN5w41CEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjBGNUNFREM2MEIxQzkyQTVBNzREQ0IzQ0ZFNkYwNDRG
OTQ2MjAxMTAeFw0yNTAxMTAxNjM2NTRaFw0yNjAxMDkxNjQxNTRaMDMxMTAvBgNV
BAMTKDMxQjUyRUI4RDQzQjYzQjY0M0M2QkVGQkNBQzU0QkRGNEVCNDY5ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+3W6unAUWp6w8TmRTGg8WMGTs
cuFGEGlbZyM5fxcJg7PTc4eIuix8zFgphFMhQS80U1kRZavhLJW2zdYm++ycN0BF
RGrUEp+LK3rvOGuTmPdDLjX3T0g/SwtQdfYK8HIAqu6tynxWxI92ZxAo0SrIFXxR
dclQyf9PkE/QoljR73XJ3MvJ4EQl2JaTjGLNzJyAFy0TTTp3IIvaWzBfWBwUMULi
SrTbGvLDsQ+WmcNnNXdyoXdEbVE90eBtNAvOxUJAQSi0zj6kqkKh9YH6S65y7EQg
vUmicD63zX1glxHlsB69/mvGMTudE8j5HXh+vlWfk/4o291iL8UwrhnwivOLAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUMbUuuNQ7Y7ZDxr77ysVL3060aYQwHwYDVR0j
BBgwFoAUYPXO3GCxySpadNyzz+bwRPlGIBEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXB3UGZzd1c5TmdMZVZKdXFHQ2RZTlRLRWluMXpWQlQ2b0d6ZXM5YXJk
U2QvMC82MEY1Q0VEQzYwQjFDOTJBNUE3NERDQjNDRkU2RjA0NEY5NDYyMDExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwRjVDRURDNjBCMUM5MkE1
QTc0RENCM0NGRTZGMDQ0Rjk0NjIwMTEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Vwd1Bmc3dXOU5nTGVWSnVxR0NkWU5US0VpbjF6VkJUNm9HemVzOWFyZFNkLzAv
MzEzOTM4MmUzNTM4MmUzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMzMy
MzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAMY6CDANBgkqhkiG9w0BAQsFAAOCAQEAJJiKQjotJUFy
u1qDsgPuJ24RxTrzWmjFo8vnrZJ0+biQOok2FhgUD0zmoyQ7esBMVjdrRdZ7Z9iJ
H8Q2+LQACMfLJijCdvHtRz73vKguL4MgzxVS7RKKHDG58HVrTMhjYpo1xKpiQ0OR
e1QPHQjRE+141qNoeg+TRd6TSIfdTqRI5sicGllfbHd3AlTPd+EcSWOUwK5Uecuq
KutP3SVSIsUTBr0LkZQAA3g+76LU6hjaIncKMzDHzXFrrYZ5htl9iyoLTMvLPQL3
fDtVRIY9twya/gcItm6V00Qu44LW4r7hM0ljoW59aitrPIw2Gp//CeQQM3f5C3YF
tF7251SSZg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 16:48:21 2025 by rpki-client