Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/3133312e3235352e38302e302f32322d3234203d3e20323634343730.roa
File:                     3133312e3235352e38302e302f32322d3234203d3e20323634343730.roa (raw, json)
Hash identifier:          EG9jp7bfX4cKoQGjOQft907cHph9KgvxlmkTjkhJJ3s=
Subject key identifier:   98:D4:8C:12:36:0A:39:8B:52:BB:83:26:F3:0A:2E:60:A9:B4:60:FD
Certificate issuer:       /CN=6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4
Certificate serial:       76D35088C180EC53C4555498CD63FD6671EA461C
Authority key identifier: 6F:F2:A4:03:3B:E3:4E:02:3E:9C:C8:CA:78:CA:78:5B:05:DE:7D:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/3133312e3235352e38302e302f32322d3234203d3e20323634343730.roa
Signing time:             Thu 04 Apr 2024 04:00:59 +0000
ROA not before:           Thu 04 Apr 2024 03:55:59 +0000
ROA not after:            Thu 03 Apr 2025 04:00:59 +0000
asID:                     264470
IP address blocks:        131.255.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.crl
                          rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d3:50:88:c1:80:ec:53:c4:55:54:98:cd:63:fd:66:71:ea:46:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4
        Validity
            Not Before: Apr  4 03:55:59 2024 GMT
            Not After : Apr  3 04:00:59 2025 GMT
        Subject: CN=98D48C12360A398B52BB8326F30A2E60A9B460FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:33:75:c4:79:e8:f7:3b:95:49:c7:87:8e:72:
                    e4:bf:48:42:07:a0:21:c1:51:57:43:a3:07:77:52:
                    43:b2:51:14:0f:04:6e:92:a3:81:35:c3:15:85:0a:
                    ca:7a:34:fc:4f:d2:07:60:d7:1f:09:b6:78:0c:9a:
                    ed:b9:8f:90:b4:60:4d:c3:4f:43:17:75:66:c1:c1:
                    b6:a2:83:86:c9:3a:0f:49:60:49:3b:94:61:68:93:
                    3f:78:dd:21:49:e3:f1:28:e0:6d:2a:6f:8d:b8:bd:
                    67:9b:75:ff:5e:a6:fe:54:c8:88:57:2d:79:43:d0:
                    33:ce:a1:7e:93:a7:46:ff:67:8d:f4:cf:67:88:b8:
                    ce:c2:58:66:0b:bc:6b:f7:50:7b:c6:dd:74:c4:e5:
                    d2:b9:e7:c9:d5:da:b5:76:68:a7:cd:8f:3f:19:80:
                    3a:b6:44:25:4d:1d:6d:af:38:f9:de:4e:28:d8:0f:
                    6a:cb:5c:37:e7:83:c0:e9:3c:83:d5:10:f4:56:51:
                    0f:73:9c:03:9b:ff:b2:cd:be:e5:c3:c8:00:5a:fb:
                    77:d3:70:0d:8f:0f:92:28:0e:05:12:4a:4f:b0:c0:
                    e2:4e:f1:b8:18:9d:fa:ff:f7:73:cd:04:ee:4c:c9:
                    55:75:a7:9a:62:0c:45:8f:d8:49:81:c3:30:36:74:
                    83:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D4:8C:12:36:0A:39:8B:52:BB:83:26:F3:0A:2E:60:A9:B4:60:FD
            X509v3 Authority Key Identifier:
                keyid:6F:F2:A4:03:3B:E3:4E:02:3E:9C:C8:CA:78:CA:78:5B:05:DE:7D:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FF2A4033BE34E023E9CC8CA78CA785B05DE7DA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNu3hUztgjeoyGjGJRhAsMvRHaeRncqn1Emv9MTYq9xa/1/3133312e3235352e38302e302f32322d3234203d3e20323634343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:ab:1f:42:08:14:c9:aa:7f:e5:68:31:52:f1:dd:a4:1a:8a:
         cd:34:37:91:8f:d5:c6:11:92:f0:1b:9e:64:e6:db:c6:86:a7:
         7a:1c:87:a3:47:60:03:e9:cf:dd:e5:40:18:fd:7e:5b:b4:01:
         a0:73:d2:12:66:63:51:91:90:c4:56:a2:51:a3:7a:f2:86:bb:
         ff:94:1d:c3:e2:b7:03:73:4c:b8:31:44:fc:ae:65:44:9e:72:
         03:01:77:a1:6b:e5:21:65:2d:fc:17:25:e0:41:15:b1:1c:96:
         cc:79:45:56:ad:c9:37:d8:20:03:1d:49:18:6c:27:80:b9:94:
         ed:52:10:78:03:13:9a:4d:4f:9b:05:52:aa:7b:c9:0f:bb:5f:
         3b:5d:e0:ff:cc:af:12:69:f5:2a:07:6b:47:66:a0:b6:62:27:
         6b:ad:fa:ad:ec:aa:47:4a:a8:df:1c:73:f4:4d:ee:31:88:31:
         97:d5:c7:5b:73:37:69:cb:da:d4:46:64:af:63:fc:69:03:df:
         e1:11:a6:57:89:1b:58:15:d4:24:61:cf:08:59:4b:bf:f9:a8:
         e5:79:78:1a:b6:bb:f6:31:d4:40:ab:1a:42:e1:38:89:c6:22:
         af:ce:a1:d0:a2:bd:e0:b9:3a:74:3b:69:1b:f1:d6:17:51:64:
         4f:ed:7a:eb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdtNQiMGA7FPEVVSYzWP9ZnHqRhwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkZGMkE0MDMzQkUzNEUwMjNFOUNDOENBNzhDQTc4NUIw
NURFN0RBNDAeFw0yNDA0MDQwMzU1NTlaFw0yNTA0MDMwNDAwNTlaMDMxMTAvBgNV
BAMTKDk4RDQ4QzEyMzYwQTM5OEI1MkJCODMyNkYzMEEyRTYwQTlCNDYwRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyM3XEeej3O5VJx4eOcuS/SEIH
oCHBUVdDowd3UkOyURQPBG6So4E1wxWFCsp6NPxP0gdg1x8JtngMmu25j5C0YE3D
T0MXdWbBwbaig4bJOg9JYEk7lGFokz943SFJ4/Eo4G0qb424vWebdf9epv5UyIhX
LXlD0DPOoX6Tp0b/Z430z2eIuM7CWGYLvGv3UHvG3XTE5dK558nV2rV2aKfNjz8Z
gDq2RCVNHW2vOPneTijYD2rLXDfng8DpPIPVEPRWUQ9znAOb/7LNvuXDyABa+3fT
cA2PD5IoDgUSSk+wwOJO8bgYnfr/93PNBO5MyVV1p5piDEWP2EmBwzA2dIPLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmNSMEjYKOYtSu4Mm8wouYKm0YP0wHwYDVR0j
BBgwFoAUb/KkAzvjTgI+nMjKeMp4WwXefaQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRk51M2hVenRnamVveUdqR0pSaEFzTXZSSGFlUm5jcW4xRW12OU1UWXE5
eGEvMS82RkYyQTQwMzNCRTM0RTAyM0U5Q0M4Q0E3OENBNzg1QjA1REU3REE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGRjJBNDAzM0JFMzRFMDIz
RTlDQzhDQTc4Q0E3ODVCMDVERTdEQTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZOdTNoVXp0Z2plb3lHakdKUmhBc012UkhhZVJuY3FuMUVtdjlNVFlxOXhhLzEv
MzEzMzMxMmUzMjM1MzUyZTM4MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzQzNDM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKD/1AwDQYJKoZIhvcNAQELBQADggEBAFqrH0II
FMmqf+VoMVLx3aQais00N5GP1cYRkvAbnmTm28aGp3och6NHYAPpz93lQBj9flu0
AaBz0hJmY1GRkMRWolGjevKGu/+UHcPitwNzTLgxRPyuZUSecgMBd6Fr5SFlLfwX
JeBBFbEclsx5RVatyTfYIAMdSRhsJ4C5lO1SEHgDE5pNT5sFUqp7yQ+7Xztd4P/M
rxJp9SoHa0dmoLZiJ2ut+q3sqkdKqN8cc/RN7jGIMZfVx1tzN2nL2tRGZK9j/GkD
3+ERpleJG1gV1CRhzwhZS7/5qOV5eBq2u/Yx1ECrGkLhOInGIq/OodCiveC5OnQ7
aRvx1hdRZE/teus=
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:36 2024 by rpki-client on console-fra.rpki-client.org