Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/3139312e3234322e3232302e302f32332d3233203d3e20323633313434.roa
File:                     3139312e3234322e3232302e302f32332d3233203d3e20323633313434.roa (raw, json)
Hash identifier:          t1eznJsvxkGrP+aDegfR1j+/l4DbocCHK8ow9x3xzyI=
Subject key identifier:   0B:F0:5C:82:14:ED:5C:48:19:B3:7C:A1:10:45:20:2F:BC:11:11:6B
Certificate issuer:       /CN=41F9151ED2649F5878D0A6F01EEF968AB545A303
Certificate serial:       2FE18B6E4DDD0CB5962EAB39CBF770B7BA7C7CB7
Authority key identifier: 41:F9:15:1E:D2:64:9F:58:78:D0:A6:F0:1E:EF:96:8A:B5:45:A3:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41F9151ED2649F5878D0A6F01EEF968AB545A303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/3139312e3234322e3232302e302f32332d3233203d3e20323633313434.roa
Signing time:             Thu 04 Apr 2024 00:03:00 +0000
ROA not before:           Wed 03 Apr 2024 23:58:00 +0000
ROA not after:            Thu 03 Apr 2025 00:03:00 +0000
asID:                     263144
IP address blocks:        191.242.220.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/41F9151ED2649F5878D0A6F01EEF968AB545A303.crl
                          rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/41F9151ED2649F5878D0A6F01EEF968AB545A303.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41F9151ED2649F5878D0A6F01EEF968AB545A303.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 11:39:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e1:8b:6e:4d:dd:0c:b5:96:2e:ab:39:cb:f7:70:b7:ba:7c:7c:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F9151ED2649F5878D0A6F01EEF968AB545A303
        Validity
            Not Before: Apr  3 23:58:00 2024 GMT
            Not After : Apr  3 00:03:00 2025 GMT
        Subject: CN=0BF05C8214ED5C4819B37CA11045202FBC11116B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a5:10:19:41:66:3b:b4:f0:c1:82:37:87:dc:
                    45:26:ca:fa:81:8b:eb:70:12:84:d3:40:53:98:ce:
                    3d:d4:6c:aa:a2:1d:fd:3d:6b:48:d4:cd:da:51:c8:
                    10:64:af:a2:62:cd:e1:97:d8:9c:b5:7f:e8:5f:f0:
                    51:b9:86:46:88:21:93:8d:ea:1a:79:87:18:39:5d:
                    b0:f3:3b:f5:12:70:34:14:c4:df:70:59:46:07:06:
                    5a:a9:20:13:b8:a4:84:4f:78:c7:26:93:b1:b4:a6:
                    3c:da:5e:dd:a3:3a:01:91:35:16:00:64:18:fe:6c:
                    57:4b:06:81:ff:b9:7b:d1:dc:1d:51:aa:a8:5b:42:
                    27:b3:4e:c0:1e:cd:57:37:c3:e3:4a:2c:81:49:1b:
                    5e:20:7c:32:9c:44:7d:63:94:c0:10:6b:ef:5b:95:
                    c7:02:9e:54:67:af:d7:7d:77:55:aa:8d:ef:da:c3:
                    a7:35:e2:29:a0:69:45:68:9a:06:3b:e6:19:4e:47:
                    ea:df:3b:ee:ab:f0:58:34:51:de:d2:1c:80:23:03:
                    c6:fa:4b:7c:a6:4b:7c:d7:50:34:a1:65:65:25:1a:
                    f9:55:82:b5:22:76:7d:43:bc:90:81:2e:e7:44:e2:
                    e1:b7:70:e2:1a:da:d8:21:21:a4:73:e4:3d:84:11:
                    87:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F0:5C:82:14:ED:5C:48:19:B3:7C:A1:10:45:20:2F:BC:11:11:6B
            X509v3 Authority Key Identifier:
                keyid:41:F9:15:1E:D2:64:9F:58:78:D0:A6:F0:1E:EF:96:8A:B5:45:A3:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/41F9151ED2649F5878D0A6F01EEF968AB545A303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41F9151ED2649F5878D0A6F01EEF968AB545A303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/3139312e3234322e3232302e302f32332d3233203d3e20323633313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:90:1a:b5:2d:28:28:4a:46:38:ee:f6:a2:7a:cc:fb:8d:91:
         ff:5a:94:84:6e:1a:a0:bd:0a:95:e1:63:3a:d9:37:4c:62:f6:
         ba:82:50:6b:27:be:95:33:8e:43:c9:72:b5:82:da:04:32:18:
         ee:c9:9e:ba:d1:88:2d:eb:27:bb:f9:6b:d7:41:5f:7e:33:a0:
         9b:b4:74:cb:a1:1b:4b:d1:99:5d:8c:14:ad:78:c0:85:fd:3d:
         ab:74:f1:b6:bb:03:9e:08:a8:e8:f6:71:d8:c9:c3:3a:ac:63:
         b7:95:ac:0f:4e:98:fc:cd:fc:d9:e2:df:36:e4:8e:ac:e1:0a:
         d1:df:08:0a:b7:46:31:61:06:11:5a:93:98:71:e3:09:b2:3d:
         00:76:8f:36:af:5c:81:45:5e:c6:c3:1c:7c:d0:c1:44:e9:ce:
         51:c2:b7:3d:7c:bd:72:ce:4a:a2:94:bb:4d:f5:4b:0e:78:91:
         64:58:e4:8d:92:43:55:ad:00:3b:fb:6d:33:b0:06:c4:18:3b:
         e1:b3:c3:ac:6f:45:be:b7:41:95:1a:20:d2:76:6a:8c:2f:cb:
         a7:44:0c:fd:28:23:dd:b7:0e:12:09:16:a9:62:a9:73:73:eb:
         ac:68:d9:93:08:92:e9:21:42:d0:07:d4:8f:4c:d1:87:3d:8d:
         3e:f0:3e:45
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUL+GLbk3dDLWWLqs5y/dwt7p8fLcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDFGOTE1MUVEMjY0OUY1ODc4RDBBNkYwMUVFRjk2OEFC
NTQ1QTMwMzAeFw0yNDA0MDMyMzU4MDBaFw0yNTA0MDMwMDAzMDBaMDMxMTAvBgNV
BAMTKDBCRjA1QzgyMTRFRDVDNDgxOUIzN0NBMTEwNDUyMDJGQkMxMTExNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqpRAZQWY7tPDBgjeH3EUmyvqB
i+twEoTTQFOYzj3UbKqiHf09a0jUzdpRyBBkr6JizeGX2Jy1f+hf8FG5hkaIIZON
6hp5hxg5XbDzO/UScDQUxN9wWUYHBlqpIBO4pIRPeMcmk7G0pjzaXt2jOgGRNRYA
ZBj+bFdLBoH/uXvR3B1RqqhbQiezTsAezVc3w+NKLIFJG14gfDKcRH1jlMAQa+9b
lccCnlRnr9d9d1Wqje/aw6c14imgaUVomgY75hlOR+rfO+6r8Fg0Ud7SHIAjA8b6
S3ymS3zXUDShZWUlGvlVgrUidn1DvJCBLudE4uG3cOIa2tghIaRz5D2EEYdxAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUC/BcghTtXEgZs3yhEEUgL7wREWswHwYDVR0j
BBgwFoAUQfkVHtJkn1h40KbwHu+WirVFowMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXJSMVNCZ01YMUN2ekVYMWlpUXMzM3lTZG5kQjIzVUd1b29VRHJDNndO
UWIvMS80MUY5MTUxRUQyNjQ5RjU4NzhEMEE2RjAxRUVGOTY4QUI1NDVBMzAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxRjkxNTFFRDI2NDlGNTg3
OEQwQTZGMDFFRUY5NjhBQjU0NUEzMDMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VyUjFTQmdNWDFDdnpFWDFpaVFzMzN5U2RuZEIyM1VHdW9vVURyQzZ3TlFiLzEv
MzEzOTMxMmUzMjM0MzIyZTMyMzIzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzMxMzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAb/y3DANBgkqhkiG9w0BAQsFAAOCAQEAOpAa
tS0oKEpGOO72onrM+42R/1qUhG4aoL0KleFjOtk3TGL2uoJQaye+lTOOQ8lytYLa
BDIY7smeutGILesnu/lr10FffjOgm7R0y6EbS9GZXYwUrXjAhf09q3TxtrsDngio
6PZx2MnDOqxjt5WsD06Y/M382eLfNuSOrOEK0d8ICrdGMWEGEVqTmHHjCbI9AHaP
Nq9cgUVexsMcfNDBROnOUcK3PXy9cs5KopS7TfVLDniRZFjkjZJDVa0AO/ttM7AG
xBg74bPDrG9FvrdBlRog0nZqjC/Lp0QM/Sgj3bcOEgkWqWKpc3PrrGjZkwiS6SFC
0AfUj0zRhz2NPvA+RQ==
-----END CERTIFICATE-----
Generated at Fri Jun 28 12:21:56 2024 by rpki-client on console-fra.rpki-client.org