Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3139302e3130392e3130302e302f32322d3232203d3e20323732373130.roa
File:                     3139302e3130392e3130302e302f32322d3232203d3e20323732373130.roa (raw, json)
Hash identifier:          Ek50h4Y0OKzhVkRaRTnr2203qrntVJiNsqxHGtOYdR0=
Subject key identifier:   50:5C:87:96:64:2C:00:3E:D6:2E:EC:A4:F9:D6:46:34:8D:2C:BB:48
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       772F84B17C280D26430A77C51B7169CAFA70533D
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3139302e3130392e3130302e302f32322d3232203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 14:16:06 +0000
ROA not before:           Fri 30 Aug 2024 14:11:06 +0000
ROA not after:            Fri 29 Aug 2025 14:16:06 +0000
asID:                     272710
IP address blocks:        190.109.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 03:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:2f:84:b1:7c:28:0d:26:43:0a:77:c5:1b:71:69:ca:fa:70:53:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 14:11:06 2024 GMT
            Not After : Aug 29 14:16:06 2025 GMT
        Subject: CN=505C8796642C003ED62EECA4F9D646348D2CBB48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5a:25:71:d9:24:ec:6f:75:41:b7:a6:ba:11:
                    16:84:7a:81:e9:b1:51:01:b6:95:a3:1a:eb:ef:57:
                    36:05:da:97:41:3a:00:e1:87:e7:93:cd:03:f6:20:
                    7d:41:cc:fe:d1:b6:03:5f:88:e8:77:2d:c2:0d:f8:
                    b0:a1:e5:bc:80:33:d9:54:84:c7:16:d2:ad:ad:03:
                    f1:e9:76:8b:ab:ef:59:07:fd:95:a2:56:63:08:e7:
                    84:bd:8e:3a:06:ef:4c:01:5e:d4:48:99:a6:6f:dd:
                    5a:87:02:07:5e:59:ac:a3:b4:ce:09:4f:1f:63:69:
                    65:b7:7f:a8:56:e7:9a:ec:0e:9f:95:c4:59:54:cb:
                    55:8d:1f:85:81:d5:38:e0:02:93:d8:f6:b1:b8:a3:
                    52:6f:ac:22:3e:46:b0:9d:0e:bd:be:f3:9c:42:f3:
                    91:03:38:ca:a5:51:b9:b8:dd:1d:d2:7c:ac:c2:60:
                    fe:97:81:5d:40:47:69:61:09:6b:c1:98:48:b8:cf:
                    b1:d4:91:bf:1c:e6:48:47:20:83:82:32:c2:91:de:
                    4e:87:ea:c5:45:7f:92:a2:80:0a:7e:b2:f4:9e:4b:
                    eb:4c:56:68:e2:0a:f9:00:ec:88:1b:de:e0:b6:a5:
                    42:7e:ff:9d:89:49:17:1b:62:65:ad:b0:52:63:21:
                    3f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5C:87:96:64:2C:00:3E:D6:2E:EC:A4:F9:D6:46:34:8D:2C:BB:48
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3139302e3130392e3130302e302f32322d3232203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:81:b4:44:1c:25:b9:f2:dd:05:a6:3f:ef:c2:2e:d4:ae:eb:
         11:60:0d:7a:95:53:b1:ab:f4:f5:ee:d3:06:72:44:71:e6:4a:
         73:15:0b:5b:0f:57:c3:a8:1d:33:01:3e:a5:8b:6f:79:a1:ab:
         22:ad:67:41:49:6f:0b:da:eb:5d:25:9a:55:40:97:70:47:b8:
         62:f4:f9:05:09:df:1f:e0:f6:e2:b3:bd:5b:bc:e0:f7:49:3a:
         f6:be:03:83:23:f6:86:e0:33:51:1f:8d:33:31:fb:38:cc:7c:
         ac:98:a1:fe:ac:76:56:7a:e2:bd:3d:ab:cb:a9:80:17:97:f2:
         e3:a5:a7:fc:74:37:c2:e1:28:1e:8c:67:6d:ba:48:d9:58:bb:
         72:56:4e:d4:4e:9d:77:36:b0:2e:dc:9a:7e:88:6e:e4:a8:94:
         13:7c:13:01:45:65:e6:d5:fc:9b:b5:d2:0e:d3:63:20:66:f3:
         55:46:b4:21:fe:cd:75:3f:6e:f7:7e:d6:51:ba:64:61:2a:0e:
         4e:91:88:ea:06:04:55:8c:2a:e8:db:eb:ec:3f:07:2b:ef:48:
         a6:11:5d:df:10:ba:19:d5:7a:73:95:5a:3d:94:dd:1b:ba:d8:
         a0:bc:5d:22:c3:bf:33:6c:53:60:3c:d9:24:a5:de:00:4f:60:
         0c:ca:5c:a4
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUdy+EsXwoDSZDCnfFG3FpyvpwUz0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVEMzdFMjJFQjhFNTY2OEYwOTM1NDZFNjM0QjU1QjBB
NzgwRDI0RjAeFw0yNDA4MzAxNDExMDZaFw0yNTA4MjkxNDE2MDZaMDMxMTAvBgNV
BAMTKDUwNUM4Nzk2NjQyQzAwM0VENjJFRUNBNEY5RDY0NjM0OEQyQ0JCNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+WiVx2STsb3VBt6a6ERaEeoHp
sVEBtpWjGuvvVzYF2pdBOgDhh+eTzQP2IH1BzP7RtgNfiOh3LcIN+LCh5byAM9lU
hMcW0q2tA/Hpdour71kH/ZWiVmMI54S9jjoG70wBXtRImaZv3VqHAgdeWayjtM4J
Tx9jaWW3f6hW55rsDp+VxFlUy1WNH4WB1TjgApPY9rG4o1JvrCI+RrCdDr2+85xC
85EDOMqlUbm43R3SfKzCYP6XgV1AR2lhCWvBmEi4z7HUkb8c5khHIIOCMsKR3k6H
6sVFf5KigAp+svSeS+tMVmjiCvkA7Igb3uC2pUJ+/52JSRcbYmWtsFJjIT9zAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUUFyHlmQsAD7WLuyk+dZGNI0su0gwHwYDVR0j
BBgwFoAUtdN+IuuOVmjwk1RuY0tVsKeA0k8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkRGU3VTRU1YSnJkV0JHVnFFYmg0WlMxZHQ5bUFQRmRuUkJNVnEydUEz
ZFIvMC9CNUQzN0UyMkVCOEU1NjY4RjA5MzU0NkU2MzRCNTVCMEE3ODBEMjRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1RDM3RTIyRUI4RTU2NjhG
MDkzNTQ2RTYzNEI1NUIwQTc4MEQyNEYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZERlN1U0VNWEpyZFdCR1ZxRWJoNFpTMWR0OW1BUEZkblJCTVZxMnVBM2RSLzAv
MzEzOTMwMmUzMTMwMzkyZTMxMzAzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzczMjM3MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAr5tZDANBgkqhkiG9w0BAQsFAAOCAQEAGIG0
RBwlufLdBaY/78Iu1K7rEWANepVTsav09e7TBnJEceZKcxULWw9Xw6gdMwE+pYtv
eaGrIq1nQUlvC9rrXSWaVUCXcEe4YvT5BQnfH+D24rO9W7zg90k69r4DgyP2huAz
UR+NMzH7OMx8rJih/qx2VnrivT2ry6mAF5fy46Wn/HQ3wuEoHoxnbbpI2Vi7clZO
1E6ddzawLtyafohu5KiUE3wTAUVl5tX8m7XSDtNjIGbzVUa0If7NdT9u937WUbpk
YSoOTpGI6gYEVYwq6Nvr7D8HK+9IphFd3xC6GdV6c5VaPZTdG7rYoLxdIsO/M2xT
YDzZJKXeAE9gDMpcpA==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:32:48 2025 by rpki-client