Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/3132382e3230312e3234342e302f32342d3234203d3e20323635383835.roa
File:                     3132382e3230312e3234342e302f32342d3234203d3e20323635383835.roa (raw, json)
Hash identifier:          IHf8wuYOtsc0k5/yBHhrIYmglc0xXMRW2rc1dzLmwns=
Subject key identifier:   E2:16:5B:9C:FB:49:E2:A6:02:55:54:18:F5:7B:73:9F:BE:3D:6A:7C
Certificate issuer:       /CN=94C381CC9333C07A86D3A11282068476C5196FE6
Certificate serial:       4A917EF347EB73ADD9504C938725339E8441B306
Authority key identifier: 94:C3:81:CC:93:33:C0:7A:86:D3:A1:12:82:06:84:76:C5:19:6F:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/3132382e3230312e3234342e302f32342d3234203d3e20323635383835.roa
Signing time:             Thu 04 Apr 2024 18:29:10 +0000
ROA not before:           Thu 04 Apr 2024 18:24:10 +0000
ROA not after:            Thu 03 Apr 2025 18:29:10 +0000
asID:                     265885
IP address blocks:        128.201.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.crl
                          rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:91:7e:f3:47:eb:73:ad:d9:50:4c:93:87:25:33:9e:84:41:b3:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C381CC9333C07A86D3A11282068476C5196FE6
        Validity
            Not Before: Apr  4 18:24:10 2024 GMT
            Not After : Apr  3 18:29:10 2025 GMT
        Subject: CN=E2165B9CFB49E2A602555418F57B739FBE3D6A7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:43:35:f4:62:48:c2:cb:8b:ba:e0:ca:4a:93:
                    f0:f7:9c:50:19:68:be:14:24:4f:9c:24:9c:5d:97:
                    0f:d4:30:86:7a:0f:a2:34:62:7d:29:50:e5:a6:94:
                    e4:da:ba:52:a0:c4:5b:65:77:7c:1e:52:eb:a6:2f:
                    be:1b:51:d7:e8:32:d4:9e:ba:67:1a:1d:87:97:f0:
                    aa:cd:85:17:8a:34:3f:d7:9e:88:15:06:7b:59:ef:
                    b4:9a:54:d9:41:85:b5:ea:1f:5c:bf:77:44:35:f8:
                    17:3e:11:f9:5a:a8:e2:b6:f3:e2:79:11:08:b7:0b:
                    37:4e:1d:7f:ea:e6:36:42:91:64:83:94:23:12:ea:
                    39:1c:54:6e:27:b1:3e:1c:01:98:1b:ea:b3:d1:03:
                    bd:41:de:1f:76:63:70:08:d3:b5:a7:c1:3e:a2:1f:
                    a6:ab:ab:a2:db:3f:35:4e:af:42:a3:20:33:c4:9c:
                    8b:62:fd:2c:40:f4:79:36:18:7d:b6:63:b4:35:d6:
                    a0:55:b4:87:12:a5:a3:4d:97:8a:89:9c:2a:5f:60:
                    c3:9f:1f:ae:e9:93:fc:55:ce:a2:61:a9:f0:71:2b:
                    ff:0f:a0:7b:bd:75:41:cd:02:d9:c3:2e:f6:d8:58:
                    3d:be:c4:8b:fa:64:4a:19:ed:14:0d:ba:b5:bb:65:
                    b3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:16:5B:9C:FB:49:E2:A6:02:55:54:18:F5:7B:73:9F:BE:3D:6A:7C
            X509v3 Authority Key Identifier:
                keyid:94:C3:81:CC:93:33:C0:7A:86:D3:A1:12:82:06:84:76:C5:19:6F:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/3132382e3230312e3234342e302f32342d3234203d3e20323635383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:18:c5:68:8a:05:2a:f0:0e:1e:1f:31:85:20:73:a8:b9:56:
         41:95:5e:3c:80:67:9a:d7:1f:cd:c2:55:8d:ea:08:05:e3:0d:
         52:61:d9:36:1b:79:74:5c:7f:9d:6d:8d:4b:1b:9c:d4:9e:41:
         93:bf:22:ce:aa:f3:c4:d8:b2:e8:df:fc:19:38:4a:91:85:2e:
         b8:f2:ea:74:84:b2:23:45:28:54:de:7d:5c:e6:73:b3:b4:2b:
         c9:81:31:40:c8:4e:05:bb:95:71:e5:29:58:0b:1c:d0:38:a5:
         5f:6a:90:bb:46:ca:f2:8a:fd:03:ac:14:88:b5:1e:06:01:b8:
         a6:28:bc:ce:dc:55:d9:dd:19:72:ed:fc:55:0b:19:7c:69:e3:
         f0:a8:05:58:f6:9a:ba:6c:e9:94:7e:79:85:cf:e6:38:28:89:
         90:0b:28:94:09:50:4b:0a:0b:9b:a6:b4:dc:e8:04:79:60:6e:
         b9:8a:d0:bb:a8:47:ef:d2:9e:6c:b4:53:c2:60:b2:75:45:57:
         15:90:74:09:a2:b0:ed:ac:71:01:81:f5:cd:0f:d0:91:53:02:
         2b:90:6a:94:65:a1:14:bc:4f:20:72:6b:72:d7:12:3d:f9:e2:
         84:08:77:b5:c6:66:6a:d3:bb:3f:32:cc:48:81:df:14:e4:18:
         32:d0:02:ce
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUSpF+80frc63ZUEyThyUznoRBswYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTRDMzgxQ0M5MzMzQzA3QTg2RDNBMTEyODIwNjg0NzZD
NTE5NkZFNjAeFw0yNDA0MDQxODI0MTBaFw0yNTA0MDMxODI5MTBaMDMxMTAvBgNV
BAMTKEUyMTY1QjlDRkI0OUUyQTYwMjU1NTQxOEY1N0I3MzlGQkUzRDZBN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGQzX0YkjCy4u64MpKk/D3nFAZ
aL4UJE+cJJxdlw/UMIZ6D6I0Yn0pUOWmlOTaulKgxFtld3weUuumL74bUdfoMtSe
umcaHYeX8KrNhReKND/XnogVBntZ77SaVNlBhbXqH1y/d0Q1+Bc+EflaqOK28+J5
EQi3CzdOHX/q5jZCkWSDlCMS6jkcVG4nsT4cAZgb6rPRA71B3h92Y3AI07WnwT6i
H6arq6LbPzVOr0KjIDPEnIti/SxA9Hk2GH22Y7Q11qBVtIcSpaNNl4qJnCpfYMOf
H67pk/xVzqJhqfBxK/8PoHu9dUHNAtnDLvbYWD2+xIv6ZEoZ7RQNurW7ZbNLAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU4hZbnPtJ4qYCVVQY9Xtzn749anwwHwYDVR0j
BBgwFoAUlMOBzJMzwHqG06ESggaEdsUZb+YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlB0Smd1Q1ByZHJ3ZFUyMVdUV0wyOTFyVnpOaWdrYk0yODVINGZXVVBV
M0gvMS85NEMzODFDQzkzMzNDMDdBODZEM0ExMTI4MjA2ODQ3NkM1MTk2RkU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk0QzM4MUNDOTMzM0MwN0E4
NkQzQTExMjgyMDY4NDc2QzUxOTZGRTYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZQdEpndUNQcmRyd2RVMjFXVFdMMjkxclZ6Tmlna2JNMjg1SDRmV1VQVTNILzEv
MzEzMjM4MmUzMjMwMzEyZTMyMzQzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTM4MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIDJ9DANBgkqhkiG9w0BAQsFAAOCAQEAGRjF
aIoFKvAOHh8xhSBzqLlWQZVePIBnmtcfzcJVjeoIBeMNUmHZNht5dFx/nW2NSxuc
1J5Bk78izqrzxNiy6N/8GThKkYUuuPLqdISyI0UoVN59XOZzs7QryYExQMhOBbuV
ceUpWAsc0DilX2qQu0bK8or9A6wUiLUeBgG4pii8ztxV2d0Zcu38VQsZfGnj8KgF
WPaaumzplH55hc/mOCiJkAsolAlQSwoLm6a03OgEeWBuuYrQu6hH79KebLRTwmCy
dUVXFZB0CaKw7axxAYH1zQ/QkVMCK5BqlGWhFLxPIHJrctcSPfnihAh3tcZmatO7
PzLMSIHfFOQYMtACzg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:32 2024 by rpki-client on console-fra.rpki-client.org