Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/3132382e3230312e3234372e302f32342d3234203d3e20323635383835.roa
File:                     3132382e3230312e3234372e302f32342d3234203d3e20323635383835.roa (raw, json)
Hash identifier:          eP8j48psgMS8b5xU7nDWPdtWgKwDnM6edx2tqhMx4Ko=
Subject key identifier:   91:B1:D5:5B:F9:3C:A8:73:A9:5F:11:A4:CA:0F:7E:32:70:56:87:54
Certificate issuer:       /CN=94C381CC9333C07A86D3A11282068476C5196FE6
Certificate serial:       69D15B941FF4CE946CB587A40305580E7C91EB8A
Authority key identifier: 94:C3:81:CC:93:33:C0:7A:86:D3:A1:12:82:06:84:76:C5:19:6F:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/3132382e3230312e3234372e302f32342d3234203d3e20323635383835.roa
Signing time:             Thu 04 Apr 2024 18:29:11 +0000
ROA not before:           Thu 04 Apr 2024 18:24:11 +0000
ROA not after:            Thu 03 Apr 2025 18:29:11 +0000
asID:                     265885
IP address blocks:        128.201.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.crl
                          rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d1:5b:94:1f:f4:ce:94:6c:b5:87:a4:03:05:58:0e:7c:91:eb:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C381CC9333C07A86D3A11282068476C5196FE6
        Validity
            Not Before: Apr  4 18:24:11 2024 GMT
            Not After : Apr  3 18:29:11 2025 GMT
        Subject: CN=91B1D55BF93CA873A95F11A4CA0F7E3270568754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:fa:33:3c:a0:7e:86:d3:32:71:9a:0e:ee:f9:
                    62:d5:21:a9:f8:75:77:6b:dc:6d:71:18:8d:6c:50:
                    7a:20:0e:07:e4:54:bb:f2:1a:f4:ab:8f:b4:06:aa:
                    ce:29:51:d6:0a:a8:36:ae:a6:21:4a:be:30:46:96:
                    6c:ba:7b:5f:9c:39:a3:64:4c:59:d6:35:90:02:af:
                    6b:0d:52:8c:81:cb:8b:57:85:5b:9f:39:6e:7b:fa:
                    35:62:5d:16:f0:d3:68:b2:13:59:65:dc:0b:d8:56:
                    46:dc:3c:ec:96:e8:b6:55:0a:20:34:05:f5:98:84:
                    32:9c:f2:d3:80:76:99:dc:58:77:b9:83:c6:5f:15:
                    e5:ad:7c:c2:1d:25:e8:17:24:02:9b:da:fc:8a:79:
                    0b:1f:4b:ad:a6:29:46:3b:2a:2d:24:1b:05:07:71:
                    c5:ab:b0:4d:76:1f:81:d9:97:02:c3:0c:8c:e4:90:
                    c5:dc:79:1e:cf:59:4c:73:95:df:eb:a8:1a:01:f1:
                    fa:a7:03:91:8c:33:26:1d:40:fe:d9:70:4e:2d:81:
                    da:48:37:2a:fd:96:41:5e:d5:a5:be:1d:a8:1c:6a:
                    1e:b2:ba:b4:d8:ed:3a:31:27:cf:d0:66:0d:fd:19:
                    14:21:0c:6a:57:8a:da:69:72:33:a3:82:c8:59:c5:
                    73:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B1:D5:5B:F9:3C:A8:73:A9:5F:11:A4:CA:0F:7E:32:70:56:87:54
            X509v3 Authority Key Identifier:
                keyid:94:C3:81:CC:93:33:C0:7A:86:D3:A1:12:82:06:84:76:C5:19:6F:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/94C381CC9333C07A86D3A11282068476C5196FE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94C381CC9333C07A86D3A11282068476C5196FE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPtJguCPrdrwdU21WTWL291rVzNigkbM285H4fWUPU3H/1/3132382e3230312e3234372e302f32342d3234203d3e20323635383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:56:cc:a3:59:58:e7:67:ea:6c:3f:24:cf:41:57:dd:ce:62:
         72:da:00:90:db:38:d0:5e:c7:2e:94:43:b9:d9:37:41:7a:b5:
         58:e4:e1:39:9a:d0:fb:48:40:ca:01:d0:61:4f:d8:09:87:ce:
         75:a1:e7:4e:be:59:4e:c9:f4:ba:9a:15:17:29:6e:07:65:1e:
         d6:b0:aa:63:e0:aa:8a:9d:b2:b2:b4:4b:4d:86:63:0c:c2:0b:
         21:45:a8:5d:95:39:50:ac:4e:42:30:e1:42:04:74:bc:d5:56:
         f3:25:29:0c:f9:14:96:a3:eb:d3:2d:6e:11:9c:39:5e:e8:1d:
         94:4f:3f:c3:95:bc:fd:e9:d1:3c:6d:5f:bb:75:1d:11:28:72:
         2a:dc:e5:b8:2c:6d:6e:bc:ec:00:9b:18:d0:a0:3b:84:b2:2d:
         e5:00:6b:c8:95:72:1d:f8:87:e2:db:d6:8c:9c:cc:a4:62:4c:
         78:c8:b5:75:e0:f6:a6:76:9e:74:53:76:5a:48:ec:3a:1c:ce:
         e5:f7:ae:a1:61:62:a7:7e:64:5d:d4:04:c5:f7:1e:28:23:28:
         88:18:4b:18:13:cf:a9:0d:b3:ad:27:8c:37:ba:84:ca:d2:9f:
         98:cc:34:1a:f8:3d:a7:75:ef:14:68:a7:35:2f:0d:a5:d6:3c:
         8c:90:72:6f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUadFblB/0zpRstYekAwVYDnyR64owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTRDMzgxQ0M5MzMzQzA3QTg2RDNBMTEyODIwNjg0NzZD
NTE5NkZFNjAeFw0yNDA0MDQxODI0MTFaFw0yNTA0MDMxODI5MTFaMDMxMTAvBgNV
BAMTKDkxQjFENTVCRjkzQ0E4NzNBOTVGMTFBNENBMEY3RTMyNzA1Njg3NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo+jM8oH6G0zJxmg7u+WLVIan4
dXdr3G1xGI1sUHogDgfkVLvyGvSrj7QGqs4pUdYKqDaupiFKvjBGlmy6e1+cOaNk
TFnWNZACr2sNUoyBy4tXhVufOW57+jViXRbw02iyE1ll3AvYVkbcPOyW6LZVCiA0
BfWYhDKc8tOAdpncWHe5g8ZfFeWtfMIdJegXJAKb2vyKeQsfS62mKUY7Ki0kGwUH
ccWrsE12H4HZlwLDDIzkkMXceR7PWUxzld/rqBoB8fqnA5GMMyYdQP7ZcE4tgdpI
Nyr9lkFe1aW+Hagcah6yurTY7ToxJ8/QZg39GRQhDGpXitppcjOjgshZxXMjAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUkbHVW/k8qHOpXxGkyg9+MnBWh1QwHwYDVR0j
BBgwFoAUlMOBzJMzwHqG06ESggaEdsUZb+YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlB0Smd1Q1ByZHJ3ZFUyMVdUV0wyOTFyVnpOaWdrYk0yODVINGZXVVBV
M0gvMS85NEMzODFDQzkzMzNDMDdBODZEM0ExMTI4MjA2ODQ3NkM1MTk2RkU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk0QzM4MUNDOTMzM0MwN0E4
NkQzQTExMjgyMDY4NDc2QzUxOTZGRTYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZQdEpndUNQcmRyd2RVMjFXVFdMMjkxclZ6Tmlna2JNMjg1SDRmV1VQVTNILzEv
MzEzMjM4MmUzMjMwMzEyZTMyMzQzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTM4MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIDJ9zANBgkqhkiG9w0BAQsFAAOCAQEAFVbM
o1lY52fqbD8kz0FX3c5ictoAkNs40F7HLpRDudk3QXq1WOThOZrQ+0hAygHQYU/Y
CYfOdaHnTr5ZTsn0upoVFyluB2Ue1rCqY+Cqip2ysrRLTYZjDMILIUWoXZU5UKxO
QjDhQgR0vNVW8yUpDPkUlqPr0y1uEZw5XugdlE8/w5W8/enRPG1fu3UdEShyKtzl
uCxtbrzsAJsY0KA7hLIt5QBryJVyHfiH4tvWjJzMpGJMeMi1deD2pnaedFN2Wkjs
OhzO5feuoWFip35kXdQExfceKCMoiBhLGBPPqQ2zrSeMN7qEytKfmMw0Gvg9p3Xv
FGinNS8NpdY8jJBybw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:08 2024 by rpki-client on console-ams.rpki-client.org