Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/3230302e3138392e34382e302f32312d3234203d3e203134323034.roa
File:                     3230302e3138392e34382e302f32312d3234203d3e203134323034.roa (raw, json)
Hash identifier:          5qyRvUQyzvctasH7tg5g+qrE7Fw1pG9fUz+EL2lvvUQ=
Subject key identifier:   E5:46:4B:F8:54:5F:FC:75:72:56:CB:AD:70:5A:BF:14:A2:0E:83:0C
Certificate issuer:       /CN=E3A05660BB6F81841BB49DE532F64F592B23928E
Certificate serial:       14CFED8926BEBECC0C51940B96632C969211110C
Authority key identifier: E3:A0:56:60:BB:6F:81:84:1B:B4:9D:E5:32:F6:4F:59:2B:23:92:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A05660BB6F81841BB49DE532F64F592B23928E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/3230302e3138392e34382e302f32312d3234203d3e203134323034.roa
Signing time:             Fri 17 May 2024 13:50:02 +0000
ROA not before:           Fri 17 May 2024 13:45:02 +0000
ROA not after:            Fri 16 May 2025 13:50:02 +0000
asID:                     14204
IP address blocks:        200.189.48.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/E3A05660BB6F81841BB49DE532F64F592B23928E.crl
                          rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/E3A05660BB6F81841BB49DE532F64F592B23928E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A05660BB6F81841BB49DE532F64F592B23928E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:cf:ed:89:26:be:be:cc:0c:51:94:0b:96:63:2c:96:92:11:11:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A05660BB6F81841BB49DE532F64F592B23928E
        Validity
            Not Before: May 17 13:45:02 2024 GMT
            Not After : May 16 13:50:02 2025 GMT
        Subject: CN=E5464BF8545FFC757256CBAD705ABF14A20E830C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b0:e7:64:d0:ea:57:d2:d1:79:cb:7d:8d:57:
                    22:58:ff:10:7e:d5:e3:ba:14:44:c7:2f:36:ab:90:
                    0b:5c:02:1b:3d:db:82:8b:07:4f:49:a8:5f:44:5e:
                    b9:f2:3e:9e:08:53:c7:b9:97:38:83:ca:cb:0d:88:
                    c8:92:d3:35:16:8a:67:26:5c:1e:81:7e:cb:1c:29:
                    0f:9d:ca:be:af:3f:76:94:28:f5:e0:65:4c:76:bf:
                    1a:ac:4d:04:95:1f:28:8b:a0:c3:3e:25:e3:fb:42:
                    91:c2:b4:37:e3:ef:0a:2a:67:ea:ff:68:ed:94:0b:
                    0a:92:3e:29:f1:45:d3:f5:b9:64:c2:fa:64:63:37:
                    71:98:11:86:20:6e:3a:ce:27:36:4a:f7:b5:99:15:
                    c6:c3:0e:e9:eb:a6:a9:22:4d:ef:d1:a4:d6:5e:8e:
                    ac:5d:17:0c:2d:00:71:d5:aa:3d:01:52:10:61:6f:
                    3d:38:cf:04:fd:c8:7f:b8:43:3d:b5:77:d7:19:f1:
                    22:20:bc:ed:27:3d:55:ee:a3:86:b7:b5:3b:39:16:
                    54:61:cd:9b:f8:73:ff:28:00:f0:92:85:db:ab:72:
                    ff:fe:f1:7b:1e:10:e4:46:5e:39:1d:75:b4:de:e3:
                    48:14:f2:50:27:3c:64:4d:6c:13:cd:d3:d5:63:99:
                    93:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:46:4B:F8:54:5F:FC:75:72:56:CB:AD:70:5A:BF:14:A2:0E:83:0C
            X509v3 Authority Key Identifier:
                keyid:E3:A0:56:60:BB:6F:81:84:1B:B4:9D:E5:32:F6:4F:59:2B:23:92:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/E3A05660BB6F81841BB49DE532F64F592B23928E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A05660BB6F81841BB49DE532F64F592B23928E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7XKZZAUvR9nPPEn8NgW15TbbYzVo96ywrxuaLt2u6df/0/3230302e3138392e34382e302f32312d3234203d3e203134323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.189.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9d:c5:5f:c2:26:9f:bb:be:5c:bc:c1:19:f8:fc:2c:e6:2b:b3:
         0f:f8:c8:27:00:e7:6e:1f:09:80:26:7e:07:6d:b5:05:a0:9a:
         4e:3a:2a:15:9d:c7:c7:c2:38:43:0f:6c:20:03:b4:9c:3d:21:
         17:c0:c2:8b:fc:78:eb:56:36:5a:17:fa:b1:89:02:d2:ce:1f:
         63:08:1e:69:89:b1:bf:45:8c:5c:f5:2d:8c:ac:1e:4c:2b:e9:
         fe:12:d4:7b:d1:fd:25:6f:60:29:f9:75:13:70:bf:48:b6:a3:
         65:88:11:a3:cf:83:d0:3d:db:67:6b:6d:91:0f:8a:93:86:cc:
         30:7a:f4:c2:ae:1f:8f:c3:df:6a:33:88:c3:77:14:98:e2:b4:
         76:69:53:b1:1d:ca:f2:b6:45:c7:a3:bc:bc:14:b0:29:c2:8d:
         81:9f:d5:f0:51:60:aa:41:d1:19:6c:93:8f:e2:8c:d8:81:f0:
         e8:47:b8:63:84:2c:69:8d:22:ed:ce:8f:5c:d7:c8:b4:e8:f0:
         f3:e8:9f:d9:08:3c:c8:df:f5:52:c0:a5:66:6b:3d:79:30:d8:
         70:28:da:ed:34:23:41:58:e9:15:f3:b3:5e:ef:2d:b4:1a:8c:
         a6:0d:e0:a1:c8:1a:d1:98:9e:2d:71:0b:91:b9:d5:65:d4:c5:
         c1:1b:2e:53
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFM/tiSa+vswMUZQLlmMslpIREQwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNBMDU2NjBCQjZGODE4NDFCQjQ5REU1MzJGNjRGNTky
QjIzOTI4RTAeFw0yNDA1MTcxMzQ1MDJaFw0yNTA1MTYxMzUwMDJaMDMxMTAvBgNV
BAMTKEU1NDY0QkY4NTQ1RkZDNzU3MjU2Q0JBRDcwNUFCRjE0QTIwRTgzMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZsOdk0OpX0tF5y32NVyJY/xB+
1eO6FETHLzarkAtcAhs924KLB09JqF9EXrnyPp4IU8e5lziDyssNiMiS0zUWimcm
XB6BfsscKQ+dyr6vP3aUKPXgZUx2vxqsTQSVHyiLoMM+JeP7QpHCtDfj7woqZ+r/
aO2UCwqSPinxRdP1uWTC+mRjN3GYEYYgbjrOJzZK97WZFcbDDunrpqkiTe/RpNZe
jqxdFwwtAHHVqj0BUhBhbz04zwT9yH+4Qz21d9cZ8SIgvO0nPVXuo4a3tTs5FlRh
zZv4c/8oAPCShdurcv/+8XseEORGXjkddbTe40gU8lAnPGRNbBPN09VjmZP7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU5UZL+FRf/HVyVsutcFq/FKIOgwwwHwYDVR0j
BBgwFoAU46BWYLtvgYQbtJ3lMvZPWSsjko4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjdYS1paQVV2UjluUFBFbjhOZ1cxNVRiYll6Vm85Nnl3cnh1YUx0MnU2
ZGYvMC9FM0EwNTY2MEJCNkY4MTg0MUJCNDlERTUzMkY2NEY1OTJCMjM5MjhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UzQTA1NjYwQkI2RjgxODQx
QkI0OURFNTMyRjY0RjU5MkIyMzkyOEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y3WEtaWkFVdlI5blBQRW44TmdXMTVUYmJZelZvOTZ5d3J4dWFMdDJ1NmRmLzAv
MzIzMDMwMmUzMTM4MzkyZTM0MzgyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMTM0
MzIzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDyL0wMA0GCSqGSIb3DQEBCwUAA4IBAQCdxV/CJp+7
vly8wRn4/CzmK7MP+MgnAOduHwmAJn4HbbUFoJpOOioVncfHwjhDD2wgA7ScPSEX
wMKL/HjrVjZaF/qxiQLSzh9jCB5pibG/RYxc9S2MrB5MK+n+EtR70f0lb2Ap+XUT
cL9ItqNliBGjz4PQPdtna22RD4qThswwevTCrh+Pw99qM4jDdxSY4rR2aVOxHcry
tkXHo7y8FLApwo2Bn9XwUWCqQdEZbJOP4ozYgfDoR7hjhCxpjSLtzo9c18i06PDz
6J/ZCDzI3/VSwKVmaz15MNhwKNrtNCNBWOkV87Ne7y20GoymDeChyBrRmJ4tcQuR
udVl1MXBGy5T
-----END CERTIFICATE-----
Generated at Sun Jun 16 02:45:01 2024 by rpki-client on console-fra.rpki-client.org