Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3138392e38342e35382e302f32332d3233203d3e20323731373030.roa
File:                     3138392e38342e35382e302f32332d3233203d3e20323731373030.roa (raw, json)
Hash identifier:          rtriotqAFtt9E8+qfy6XNM+gupkkmSofXisjSwPQCm4=
Subject key identifier:   02:CE:66:72:D8:6F:BF:30:A5:AD:FD:60:B8:3D:21:0D:01:B8:BC:8A
Certificate issuer:       /CN=9C568178A69FB8D2703BAD28F49F9E940DE81AAC
Certificate serial:       48C4C5257C90C2E1707D0759EE573620EB762E1C
Authority key identifier: 9C:56:81:78:A6:9F:B8:D2:70:3B:AD:28:F4:9F:9E:94:0D:E8:1A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C568178A69FB8D2703BAD28F49F9E940DE81AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3138392e38342e35382e302f32332d3233203d3e20323731373030.roa
Signing time:             Wed 16 Oct 2024 18:14:35 +0000
ROA not before:           Wed 16 Oct 2024 18:09:35 +0000
ROA not after:            Wed 15 Oct 2025 18:14:35 +0000
asID:                     271700
IP address blocks:        189.84.58.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/9C568178A69FB8D2703BAD28F49F9E940DE81AAC.crl
                          rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/9C568178A69FB8D2703BAD28F49F9E940DE81AAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C568178A69FB8D2703BAD28F49F9E940DE81AAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c4:c5:25:7c:90:c2:e1:70:7d:07:59:ee:57:36:20:eb:76:2e:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C568178A69FB8D2703BAD28F49F9E940DE81AAC
        Validity
            Not Before: Oct 16 18:09:35 2024 GMT
            Not After : Oct 15 18:14:35 2025 GMT
        Subject: CN=02CE6672D86FBF30A5ADFD60B83D210D01B8BC8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7f:4d:71:48:f0:e5:43:1f:39:63:0f:c9:90:
                    ae:8b:a1:41:4e:8f:de:c1:d8:e0:71:7f:a5:86:d3:
                    ef:c7:e7:f1:ab:ec:64:e5:53:73:45:72:33:59:66:
                    7f:e5:bb:a0:f8:07:f3:c5:32:f1:da:5e:88:45:0a:
                    03:2c:f9:63:26:98:52:2a:53:f0:29:2c:1b:26:e7:
                    8c:3e:aa:95:d9:f0:00:63:1f:09:8d:67:be:cb:8a:
                    d4:2b:56:6f:86:f1:14:38:55:89:51:83:df:5f:49:
                    53:02:1c:f0:fd:bc:39:c3:4c:b2:c1:1d:47:46:ab:
                    50:c4:eb:3b:bd:ac:f2:ff:20:03:79:a6:c7:37:ad:
                    45:60:92:05:bf:d7:34:b7:9d:be:23:06:54:f7:0e:
                    5f:52:e9:c5:6e:8b:93:c2:a5:ac:41:92:3e:26:3b:
                    a8:46:4f:6a:f8:50:e3:23:70:91:7c:c6:af:43:e0:
                    44:d4:e0:55:21:77:34:02:e3:4b:c4:16:8e:d1:48:
                    07:41:90:8b:26:21:b6:d9:11:20:2c:0f:7b:20:8b:
                    7f:dd:ff:25:2d:28:60:cf:8c:e2:54:a1:37:1c:07:
                    e8:83:d8:b9:16:7f:80:19:56:54:b4:5a:fc:7d:34:
                    ed:19:87:12:56:54:8c:cd:b8:f4:35:80:54:d8:e1:
                    03:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:CE:66:72:D8:6F:BF:30:A5:AD:FD:60:B8:3D:21:0D:01:B8:BC:8A
            X509v3 Authority Key Identifier:
                keyid:9C:56:81:78:A6:9F:B8:D2:70:3B:AD:28:F4:9F:9E:94:0D:E8:1A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/9C568178A69FB8D2703BAD28F49F9E940DE81AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C568178A69FB8D2703BAD28F49F9E940DE81AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/0/3138392e38342e35382e302f32332d3233203d3e20323731373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:ff:3c:0e:e2:9c:a4:8a:94:56:79:61:69:23:d6:7b:d1:d5:
         f0:df:39:24:98:30:3e:58:00:4d:b9:d2:56:52:c9:ef:e9:fe:
         f1:d5:a3:cb:4e:d3:a5:42:37:9f:96:ab:7d:ee:cd:f8:4c:0b:
         95:41:f7:a7:77:0d:06:85:7e:97:b1:85:fd:36:19:c9:af:71:
         b6:78:b3:3d:9e:f7:f8:bc:04:73:a6:6b:ab:e7:c1:22:9b:d3:
         29:e8:c0:3d:d8:20:99:8d:3c:f0:c7:0e:62:09:b8:9b:dc:d4:
         68:16:02:35:6a:4a:3e:35:85:75:28:77:ad:d5:e1:77:39:b0:
         f6:1d:4b:05:23:db:93:69:46:98:b9:1b:90:64:3a:ab:d3:5d:
         21:bf:ba:73:05:20:34:b6:5e:d7:a0:72:86:61:69:b1:f5:70:
         25:05:7c:9a:d5:2f:83:af:c4:55:10:e4:12:17:f8:bd:1f:59:
         08:95:cc:84:e2:86:75:b2:44:f9:a6:73:de:b0:37:0f:cc:a5:
         f5:2a:53:43:f2:88:e8:c9:41:f0:c0:75:b6:ec:ec:0c:06:2c:
         d2:9c:c4:74:72:ae:0d:65:39:ee:96:ae:75:72:bc:7c:6c:26:
         9f:2f:54:23:8c:01:1d:a0:5d:43:42:db:02:ba:6e:36:42:ab:
         8d:d3:3a:d8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSMTFJXyQwuFwfQdZ7lc2IOt2LhwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM1NjgxNzhBNjlGQjhEMjcwM0JBRDI4RjQ5RjlFOTQw
REU4MUFBQzAeFw0yNDEwMTYxODA5MzVaFw0yNTEwMTUxODE0MzVaMDMxMTAvBgNV
BAMTKDAyQ0U2NjcyRDg2RkJGMzBBNUFERkQ2MEI4M0QyMTBEMDFCOEJDOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCef01xSPDlQx85Yw/JkK6LoUFO
j97B2OBxf6WG0+/H5/Gr7GTlU3NFcjNZZn/lu6D4B/PFMvHaXohFCgMs+WMmmFIq
U/ApLBsm54w+qpXZ8ABjHwmNZ77LitQrVm+G8RQ4VYlRg99fSVMCHPD9vDnDTLLB
HUdGq1DE6zu9rPL/IAN5psc3rUVgkgW/1zS3nb4jBlT3Dl9S6cVui5PCpaxBkj4m
O6hGT2r4UOMjcJF8xq9D4ETU4FUhdzQC40vEFo7RSAdBkIsmIbbZESAsD3sgi3/d
/yUtKGDPjOJUoTccB+iD2LkWf4AZVlS0Wvx9NO0ZhxJWVIzNuPQ1gFTY4QOpAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUAs5mcthvvzClrf1guD0hDQG4vIowHwYDVR0j
BBgwFoAUnFaBeKafuNJwO60o9J+elA3oGqwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjh6U2VpaU5MamE4YjM3dkJrR3dMMWJnWFoyRXFZWmdQcnRyTnFuNXVm
N2MvMC85QzU2ODE3OEE2OUZCOEQyNzAzQkFEMjhGNDlGOUU5NDBERTgxQUFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDNTY4MTc4QTY5RkI4RDI3
MDNCQUQyOEY0OUY5RTk0MERFODFBQUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y4elNlaWlOTGphOGIzN3ZCa0d3TDFiZ1haMkVxWVpnUHJ0ck5xbjV1ZjdjLzAv
MzEzODM5MmUzODM0MmUzNTM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNzMx
MzczMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBvVQ6MA0GCSqGSIb3DQEBCwUAA4IBAQCR/zwO4pyk
ipRWeWFpI9Z70dXw3zkkmDA+WABNudJWUsnv6f7x1aPLTtOlQjeflqt97s34TAuV
Qfendw0GhX6XsYX9NhnJr3G2eLM9nvf4vARzpmur58Eim9Mp6MA92CCZjTzwxw5i
Cbib3NRoFgI1ako+NYV1KHet1eF3ObD2HUsFI9uTaUaYuRuQZDqr010hv7pzBSA0
tl7XoHKGYWmx9XAlBXya1S+Dr8RVEOQSF/i9H1kIlcyE4oZ1skT5pnPesDcPzKX1
KlND8ojoyUHwwHW27OwMBizSnMR0cq4NZTnulq51crx8bCafL1QjjAEdoF1DQtsC
um42QquN0zrY
-----END CERTIFICATE-----
Generated at Mon Nov 25 10:49:50 2024 by rpki-client on console-fra.rpki-client.org