Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e392e302f32342d3234203d3e20323633323536.roa
File:                     3139382e35382e392e302f32342d3234203d3e20323633323536.roa (raw, json)
Hash identifier:          l5bt2hrfMIXCa9WhqgkRN3B2/eITVS/yEda/GMZSjBs=
Subject key identifier:   32:2B:0F:23:C8:BA:B1:F4:AE:CC:6E:9A:9B:D4:C7:CF:11:6E:AB:E2
Certificate issuer:       /CN=05263BF4891CB378D051DAE2EA2AF3072FC5FAEE
Certificate serial:       1391101FB48951B9677847A26A5B597AEF828063
Authority key identifier: 05:26:3B:F4:89:1C:B3:78:D0:51:DA:E2:EA:2A:F3:07:2F:C5:FA:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05263BF4891CB378D051DAE2EA2AF3072FC5FAEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e392e302f32342d3234203d3e20323633323536.roa
Signing time:             Thu 21 Nov 2024 18:14:14 +0000
ROA not before:           Thu 21 Nov 2024 18:09:14 +0000
ROA not after:            Thu 20 Nov 2025 18:14:14 +0000
asID:                     263256
IP address blocks:        198.58.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/05263BF4891CB378D051DAE2EA2AF3072FC5FAEE.crl
                          rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/05263BF4891CB378D051DAE2EA2AF3072FC5FAEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05263BF4891CB378D051DAE2EA2AF3072FC5FAEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:91:10:1f:b4:89:51:b9:67:78:47:a2:6a:5b:59:7a:ef:82:80:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05263BF4891CB378D051DAE2EA2AF3072FC5FAEE
        Validity
            Not Before: Nov 21 18:09:14 2024 GMT
            Not After : Nov 20 18:14:14 2025 GMT
        Subject: CN=322B0F23C8BAB1F4AECC6E9A9BD4C7CF116EABE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:1f:30:43:e7:af:68:f7:df:cd:89:d0:af:b3:
                    60:ca:57:12:7f:6c:26:ab:a2:7e:93:fd:a3:3b:ca:
                    82:d5:73:30:52:30:8f:f4:41:b5:58:8e:6c:d2:d0:
                    9f:77:e7:ac:97:44:96:eb:fb:5f:24:6b:4a:e3:e3:
                    94:02:c5:b3:5b:d5:44:c7:8c:89:0d:28:76:ba:89:
                    2e:e0:45:4e:70:50:80:0d:f4:1d:5c:fa:ef:f1:67:
                    3d:c0:8d:86:b0:72:42:08:a6:62:5f:0d:ac:51:d9:
                    28:29:f8:27:1f:37:61:e0:37:25:35:ae:e9:ec:59:
                    60:a3:fc:c0:23:4b:82:6a:30:52:3b:95:ab:47:77:
                    da:c8:ad:fd:06:c0:85:6e:8d:26:3d:72:87:12:88:
                    37:3a:86:2a:00:03:e2:d5:8a:79:8b:17:ad:d3:57:
                    ac:36:4d:59:e4:81:cb:6f:7d:52:54:0c:b1:5f:7a:
                    d9:c5:e8:b9:2b:09:f4:7d:08:70:a7:d5:82:f8:c2:
                    f8:f1:b5:37:ec:25:04:7f:b0:61:68:c8:f2:18:23:
                    84:8d:76:97:51:f7:27:ae:c5:63:9c:d7:9f:52:8a:
                    e6:9b:41:20:39:c2:50:d5:2c:20:cd:19:78:28:7e:
                    c7:b8:d7:01:68:63:91:6c:8c:23:44:ec:7d:b4:3d:
                    42:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2B:0F:23:C8:BA:B1:F4:AE:CC:6E:9A:9B:D4:C7:CF:11:6E:AB:E2
            X509v3 Authority Key Identifier:
                keyid:05:26:3B:F4:89:1C:B3:78:D0:51:DA:E2:EA:2A:F3:07:2F:C5:FA:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/05263BF4891CB378D051DAE2EA2AF3072FC5FAEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05263BF4891CB378D051DAE2EA2AF3072FC5FAEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/3139382e35382e392e302f32342d3234203d3e20323633323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.58.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:cf:a6:25:64:7e:8a:e3:b2:df:87:b2:7b:ed:60:ab:ab:55:
         6a:dc:18:0a:04:72:45:6b:a4:c5:7b:bb:38:f0:7a:51:47:e1:
         01:72:45:d3:ff:c3:e8:c9:25:2a:9d:eb:b1:46:eb:94:98:e7:
         b8:37:39:03:14:32:0f:e9:cf:74:1e:86:2c:f5:44:de:ca:fd:
         b6:e2:61:9a:a9:8a:de:d5:2a:22:17:ef:66:6d:cd:fb:a3:ca:
         c4:1e:de:5b:27:93:8a:72:73:5d:f5:b4:97:3a:bf:e3:5f:35:
         1c:23:81:c0:52:ae:3f:c7:b9:71:5d:c2:73:cd:ab:3d:b9:b8:
         c3:45:23:47:49:26:db:bc:c9:8a:1d:11:61:3f:be:6c:43:ef:
         2c:33:08:88:c7:7e:90:ac:49:c1:11:7a:b8:71:db:aa:9c:f7:
         d7:64:b7:17:74:3f:b2:96:a7:be:59:e1:fb:2c:37:04:2f:82:
         77:07:bd:98:08:34:28:e6:75:58:c4:05:0d:91:dd:c2:68:c9:
         cb:20:37:d2:21:23:7c:39:e1:22:11:88:31:49:f4:46:bb:9f:
         fa:4b:7a:35:00:0b:24:76:cf:fd:16:c6:29:0d:8f:d3:3a:29:
         32:77:a2:26:10:bc:dd:01:3c:a3:1a:dd:28:62:a5:8b:87:cf:
         e2:95:2e:5e
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUE5EQH7SJUblneEeialtZeu+CgGMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDUyNjNCRjQ4OTFDQjM3OEQwNTFEQUUyRUEyQUYzMDcy
RkM1RkFFRTAeFw0yNDExMjExODA5MTRaFw0yNTExMjAxODE0MTRaMDMxMTAvBgNV
BAMTKDMyMkIwRjIzQzhCQUIxRjRBRUNDNkU5QTlCRDRDN0NGMTE2RUFCRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2HzBD569o99/NidCvs2DKVxJ/
bCaron6T/aM7yoLVczBSMI/0QbVYjmzS0J9356yXRJbr+18ka0rj45QCxbNb1UTH
jIkNKHa6iS7gRU5wUIAN9B1c+u/xZz3AjYawckIIpmJfDaxR2Sgp+CcfN2HgNyU1
runsWWCj/MAjS4JqMFI7latHd9rIrf0GwIVujSY9cocSiDc6hioAA+LVinmLF63T
V6w2TVnkgctvfVJUDLFfetnF6LkrCfR9CHCn1YL4wvjxtTfsJQR/sGFoyPIYI4SN
dpdR9yeuxWOc159SiuabQSA5wlDVLCDNGXgofse41wFoY5FsjCNE7H20PUKDAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUMisPI8i6sfSuzG6am9THzxFuq+IwHwYDVR0j
BBgwFoAUBSY79Ikcs3jQUdri6irzBy/F+u4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXB3UGZzd1c5TmdMZVZKdXFHQ2RZTlRLRWluMXpWQlQ2b0d6ZXM5YXJk
U2QvMC8wNTI2M0JGNDg5MUNCMzc4RDA1MURBRTJFQTJBRjMwNzJGQzVGQUVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA1MjYzQkY0ODkxQ0IzNzhE
MDUxREFFMkVBMkFGMzA3MkZDNUZBRUUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Vwd1Bmc3dXOU5nTGVWSnVxR0NkWU5US0VpbjF6VkJUNm9HemVzOWFyZFNkLzAv
MzEzOTM4MmUzNTM4MmUzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMzMy
MzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAMY6CTANBgkqhkiG9w0BAQsFAAOCAQEAas+mJWR+iuOy
34eye+1gq6tVatwYCgRyRWukxXu7OPB6UUfhAXJF0//D6MklKp3rsUbrlJjnuDc5
AxQyD+nPdB6GLPVE3sr9tuJhmqmK3tUqIhfvZm3N+6PKxB7eWyeTinJzXfW0lzq/
4181HCOBwFKuP8e5cV3Cc82rPbm4w0UjR0km27zJih0RYT++bEPvLDMIiMd+kKxJ
wRF6uHHbqpz312S3F3Q/spanvlnh+yw3BC+Cdwe9mAg0KOZ1WMQFDZHdwmjJyyA3
0iEjfDnhIhGIMUn0Rruf+kt6NQALJHbP/RbGKQ2P0zopMneiJhC83QE8oxrdKGKl
i4fP4pUuXg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:37 2024 by rpki-client on console-ams.rpki-client.org