Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3138392e38342e35362e302f32332d3233203d3e20323731373030.roa
File:                     3138392e38342e35362e302f32332d3233203d3e20323731373030.roa (raw, json)
Hash identifier:          wtllPqMjcNbKGhnFoXy6qchwn6JvWaJroVv4mezir2U=
Subject key identifier:   76:65:31:F4:8C:54:B2:53:DC:09:2C:E0:7D:E7:A9:38:29:E2:66:74
Certificate issuer:       /CN=9C568178A69FB8D2703BAD28F49F9E940DE81AAC
Certificate serial:       25F545EB1AF3C6E79EEFEE4BD86DC01A233FB9D7
Authority key identifier: 9C:56:81:78:A6:9F:B8:D2:70:3B:AD:28:F4:9F:9E:94:0D:E8:1A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C568178A69FB8D2703BAD28F49F9E940DE81AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3138392e38342e35362e302f32332d3233203d3e20323731373030.roa
Signing time:             Wed 16 Oct 2024 18:14:32 +0000
ROA not before:           Wed 16 Oct 2024 18:09:32 +0000
ROA not after:            Wed 15 Oct 2025 18:14:32 +0000
asID:                     271700
IP address blocks:        189.84.56.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/9C568178A69FB8D2703BAD28F49F9E940DE81AAC.crl
                          rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/9C568178A69FB8D2703BAD28F49F9E940DE81AAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C568178A69FB8D2703BAD28F49F9E940DE81AAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:38:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f5:45:eb:1a:f3:c6:e7:9e:ef:ee:4b:d8:6d:c0:1a:23:3f:b9:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C568178A69FB8D2703BAD28F49F9E940DE81AAC
        Validity
            Not Before: Oct 16 18:09:32 2024 GMT
            Not After : Oct 15 18:14:32 2025 GMT
        Subject: CN=766531F48C54B253DC092CE07DE7A93829E26674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8d:f2:4a:9b:c4:61:3b:af:08:e6:06:ff:ef:
                    f7:e4:ee:ca:00:ce:b5:fa:75:dd:40:64:0e:c4:fe:
                    17:c0:e2:b7:fc:98:70:50:66:33:e5:7b:ad:fa:f1:
                    74:88:12:bd:c8:c8:91:d3:1f:68:a4:41:66:d4:9f:
                    86:83:95:f8:61:e7:51:a2:15:f0:ad:92:43:6b:7f:
                    3e:9c:7b:e6:5f:62:e2:dd:9a:5b:02:5b:52:d8:af:
                    eb:af:07:a5:df:03:d9:f8:0d:15:50:f6:6c:ba:d7:
                    53:f4:c0:83:b9:4f:1d:90:16:2c:4c:92:b0:4c:2b:
                    a9:2d:b8:cc:cf:fe:51:49:81:3a:2b:77:0e:80:c1:
                    87:33:7d:88:98:11:2f:e1:97:80:f7:18:50:01:20:
                    8d:56:b6:f9:6f:f3:62:31:ea:82:84:54:d5:88:9e:
                    2e:8f:ba:da:b5:3a:b3:ed:1f:b9:af:7b:74:dc:9c:
                    0b:c1:6e:6e:3a:75:b5:74:ed:e6:c9:eb:a4:eb:28:
                    44:7f:b9:c5:e4:de:1e:72:78:e9:cd:a2:5d:b1:1c:
                    4f:e3:56:90:dc:3f:d9:2f:e5:c3:93:54:f7:8e:88:
                    7b:4a:41:fa:3d:6f:a5:73:17:34:55:d8:7e:54:fc:
                    ae:4f:79:df:84:b3:f1:8e:68:33:ce:91:20:b3:23:
                    ed:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:65:31:F4:8C:54:B2:53:DC:09:2C:E0:7D:E7:A9:38:29:E2:66:74
            X509v3 Authority Key Identifier:
                keyid:9C:56:81:78:A6:9F:B8:D2:70:3B:AD:28:F4:9F:9E:94:0D:E8:1A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/9C568178A69FB8D2703BAD28F49F9E940DE81AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C568178A69FB8D2703BAD28F49F9E940DE81AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3138392e38342e35362e302f32332d3233203d3e20323731373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:9e:39:0b:fe:48:b6:c7:df:1e:32:55:fe:15:8d:79:2c:c1:
         04:4b:f3:41:04:0a:24:6a:a4:57:8d:42:86:79:2a:0c:be:84:
         9f:e9:7b:e1:bd:bb:cc:ff:af:1b:65:d8:8b:84:65:7e:5b:9f:
         35:b0:69:52:04:fa:4e:06:ce:ed:c4:ea:57:19:be:1c:f2:4f:
         3a:17:58:6b:9b:9e:54:c4:0d:51:0c:8e:49:00:8a:9d:ba:93:
         92:d7:81:9c:9c:10:f7:20:48:47:b0:6c:ad:f8:93:fe:7a:8b:
         ad:df:32:da:e4:a5:70:d4:d1:bc:d9:59:db:84:b9:d1:6b:31:
         72:cd:43:e7:dd:c8:45:c4:cb:01:3f:ef:c4:7e:de:cb:47:e5:
         88:fa:a5:77:e0:72:8b:ef:02:fb:c6:98:95:f0:54:02:fe:84:
         60:d0:58:01:80:74:63:86:a0:cb:97:54:35:69:75:5f:e0:46:
         20:bb:ed:01:6c:4e:0c:3c:7e:94:73:c9:d7:fe:79:5f:13:5f:
         bc:85:af:8b:bf:e4:b5:b7:de:96:df:7f:a9:0a:32:60:2f:e2:
         75:a9:f2:5e:cc:c4:df:45:1b:56:f2:72:f1:6b:59:ac:6f:27:
         ad:25:20:5c:d2:df:65:87:43:dc:e9:f6:6b:7c:02:9f:5c:c0:
         c3:15:09:a1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJfVF6xrzxuee7+5L2G3AGiM/udcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM1NjgxNzhBNjlGQjhEMjcwM0JBRDI4RjQ5RjlFOTQw
REU4MUFBQzAeFw0yNDEwMTYxODA5MzJaFw0yNTEwMTUxODE0MzJaMDMxMTAvBgNV
BAMTKDc2NjUzMUY0OEM1NEIyNTNEQzA5MkNFMDdERTdBOTM4MjlFMjY2NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyjfJKm8RhO68I5gb/7/fk7soA
zrX6dd1AZA7E/hfA4rf8mHBQZjPle6368XSIEr3IyJHTH2ikQWbUn4aDlfhh51Gi
FfCtkkNrfz6ce+ZfYuLdmlsCW1LYr+uvB6XfA9n4DRVQ9my611P0wIO5Tx2QFixM
krBMK6ktuMzP/lFJgTordw6AwYczfYiYES/hl4D3GFABII1Wtvlv82Ix6oKEVNWI
ni6Putq1OrPtH7mve3TcnAvBbm46dbV07ebJ66TrKER/ucXk3h5yeOnNol2xHE/j
VpDcP9kv5cOTVPeOiHtKQfo9b6VzFzRV2H5U/K5Ped+Es/GOaDPOkSCzI+3VAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUdmUx9IxUslPcCSzgfeepOCniZnQwHwYDVR0j
BBgwFoAUnFaBeKafuNJwO60o9J+elA3oGqwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjh6U2VpaU5MamE4YjM3dkJrR3dMMWJnWFoyRXFZWmdQcnRyTnFuNXVm
N2MvMC85QzU2ODE3OEE2OUZCOEQyNzAzQkFEMjhGNDlGOUU5NDBERTgxQUFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDNTY4MTc4QTY5RkI4RDI3
MDNCQUQyOEY0OUY5RTk0MERFODFBQUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y4elNlaWlOTGphOGIzN3ZCa0d3TDFiZ1haMkVxWVpnUHJ0ck5xbjV1ZjdjLzAv
MzEzODM5MmUzODM0MmUzNTM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNzMx
MzczMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBvVQ4MA0GCSqGSIb3DQEBCwUAA4IBAQCVnjkL/ki2
x98eMlX+FY15LMEES/NBBAokaqRXjUKGeSoMvoSf6XvhvbvM/68bZdiLhGV+W581
sGlSBPpOBs7txOpXGb4c8k86F1hrm55UxA1RDI5JAIqdupOS14GcnBD3IEhHsGyt
+JP+eout3zLa5KVw1NG82VnbhLnRazFyzUPn3chFxMsBP+/Eft7LR+WI+qV34HKL
7wL7xpiV8FQC/oRg0FgBgHRjhqDLl1Q1aXVf4EYgu+0BbE4MPH6Uc8nX/nlfE1+8
ha+Lv+S1t96W33+pCjJgL+J1qfJezMTfRRtW8nLxa1msbyetJSBc0t9lh0Pc6fZr
fAKfXMDDFQmh
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:43 2024 by rpki-client on console-fra.rpki-client.org