Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/3138312e3137342e3235302e302f32332d3233203d3e20323731353239.roa
File:                     3138312e3137342e3235302e302f32332d3233203d3e20323731353239.roa (raw, json)
Hash identifier:          q5oUTF7LuFfH8E4Dc1lGpGqH/+eNxa4lYm9Lgp2V/mM=
Subject key identifier:   16:7B:32:E0:F0:AB:D5:6A:FA:6A:51:B6:0C:2B:0A:B9:22:5F:4D:25
Certificate issuer:       /CN=D6E6294D1D9502F3C7F5F894B597837779B8D3E0
Certificate serial:       5815CA362B2C0F4C6D702C3FB7B40ED202DA6BA2
Authority key identifier: D6:E6:29:4D:1D:95:02:F3:C7:F5:F8:94:B5:97:83:77:79:B8:D3:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E6294D1D9502F3C7F5F894B597837779B8D3E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/3138312e3137342e3235302e302f32332d3233203d3e20323731353239.roa
Signing time:             Thu 15 Aug 2024 20:01:32 +0000
ROA not before:           Thu 15 Aug 2024 19:56:32 +0000
ROA not after:            Thu 14 Aug 2025 20:01:32 +0000
asID:                     271529
IP address blocks:        181.174.250.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/D6E6294D1D9502F3C7F5F894B597837779B8D3E0.crl
                          rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/D6E6294D1D9502F3C7F5F894B597837779B8D3E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E6294D1D9502F3C7F5F894B597837779B8D3E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:15:ca:36:2b:2c:0f:4c:6d:70:2c:3f:b7:b4:0e:d2:02:da:6b:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6E6294D1D9502F3C7F5F894B597837779B8D3E0
        Validity
            Not Before: Aug 15 19:56:32 2024 GMT
            Not After : Aug 14 20:01:32 2025 GMT
        Subject: CN=167B32E0F0ABD56AFA6A51B60C2B0AB9225F4D25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9b:ff:82:d1:55:e8:f4:9f:64:8f:79:a3:30:
                    7f:d0:f7:4c:56:9f:c5:14:34:2b:8e:62:e6:3c:7f:
                    93:0e:31:4f:60:b6:4e:85:b0:18:07:fb:bc:66:32:
                    94:23:68:d9:77:3d:d9:0f:cd:97:5d:ae:35:ef:e9:
                    a9:a7:e8:dc:6b:90:43:9f:e9:4a:d7:ca:9c:d8:e3:
                    3f:2b:3c:2e:b1:03:2a:50:ca:09:7e:f8:10:8c:1b:
                    48:a0:69:e8:50:8c:09:17:30:9e:43:b2:65:17:fa:
                    9c:bb:c2:2b:42:42:d6:23:a0:e6:79:e0:69:5d:f6:
                    e1:8d:b7:a2:81:31:6e:95:7a:33:92:dd:1e:e0:7a:
                    0b:6e:55:9b:03:91:04:d9:33:3e:2c:b7:54:78:af:
                    53:e1:73:cb:37:2d:e9:16:49:f5:e1:53:6f:c5:fc:
                    fd:ad:14:ac:52:a8:d1:cf:13:4f:08:ed:3b:dc:b2:
                    13:41:2c:c5:cd:fd:ab:e6:25:0b:1c:b7:4e:5c:4d:
                    10:da:5c:11:51:1a:12:ef:29:c8:e8:b4:e9:f5:0e:
                    db:2c:ef:fa:85:86:e5:a4:52:60:eb:dd:43:51:8d:
                    40:4a:aa:fa:e6:da:0f:a6:21:79:a5:39:dc:91:4f:
                    08:20:8e:0d:b5:b2:a5:12:78:f0:61:37:fc:62:27:
                    61:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:7B:32:E0:F0:AB:D5:6A:FA:6A:51:B6:0C:2B:0A:B9:22:5F:4D:25
            X509v3 Authority Key Identifier:
                keyid:D6:E6:29:4D:1D:95:02:F3:C7:F5:F8:94:B5:97:83:77:79:B8:D3:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/D6E6294D1D9502F3C7F5F894B597837779B8D3E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E6294D1D9502F3C7F5F894B597837779B8D3E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fiyp5F5QszMYofbxZz9KwZvnBVqSNEdWt4gMqUDKi8uR/0/3138312e3137342e3235302e302f32332d3233203d3e20323731353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:44:ba:d4:8f:1b:bd:cb:ed:7e:cb:f2:8a:86:2b:cb:a3:6d:
         f9:fe:4e:a0:01:28:14:d9:6f:5c:53:98:5a:32:6c:a9:57:01:
         ee:3e:15:ac:ac:d9:63:6a:1f:68:34:1f:ac:68:70:36:91:8d:
         2d:49:c7:00:e5:d7:bc:f8:a7:c4:9b:c4:d1:f5:24:2d:d2:e7:
         92:43:e0:18:db:cd:38:fb:23:71:06:78:65:30:60:d8:14:fe:
         6b:ae:ce:03:38:f0:0c:5e:17:e1:ce:67:09:7b:58:49:fe:81:
         62:0c:00:82:bb:55:57:d2:d7:bf:86:2d:5f:93:c9:2a:f9:5e:
         fa:bd:b1:8e:be:1c:06:ce:f9:5e:97:f4:af:2d:38:7c:b6:60:
         d0:47:d9:6a:23:01:9a:f5:17:31:de:bb:83:ab:0b:85:03:cc:
         e9:1d:3b:a6:4b:52:9d:cf:b1:bb:17:6c:fc:cc:12:00:b2:8d:
         9f:04:56:a1:12:e1:aa:85:5c:4f:c1:87:5d:7c:c9:e9:5e:3e:
         29:07:15:01:b2:7d:e8:08:2f:61:33:d2:e6:c6:f0:f4:7b:42:
         c7:0e:75:56:b2:f3:52:d3:0d:f7:f0:bb:42:64:e9:f5:61:f5:
         1b:a6:02:c3:ad:b2:cf:63:04:bd:93:e6:a7:3c:21:cd:0f:c0:
         7b:87:e1:68
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUWBXKNissD0xtcCw/t7QO0gLaa6IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDZFNjI5NEQxRDk1MDJGM0M3RjVGODk0QjU5NzgzNzc3
OUI4RDNFMDAeFw0yNDA4MTUxOTU2MzJaFw0yNTA4MTQyMDAxMzJaMDMxMTAvBgNV
BAMTKDE2N0IzMkUwRjBBQkQ1NkFGQTZBNTFCNjBDMkIwQUI5MjI1RjREMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjm/+C0VXo9J9kj3mjMH/Q90xW
n8UUNCuOYuY8f5MOMU9gtk6FsBgH+7xmMpQjaNl3PdkPzZddrjXv6amn6NxrkEOf
6UrXypzY4z8rPC6xAypQygl++BCMG0igaehQjAkXMJ5DsmUX+py7witCQtYjoOZ5
4Gld9uGNt6KBMW6VejOS3R7gegtuVZsDkQTZMz4st1R4r1Phc8s3LekWSfXhU2/F
/P2tFKxSqNHPE08I7TvcshNBLMXN/avmJQsct05cTRDaXBFRGhLvKcjotOn1Dtss
7/qFhuWkUmDr3UNRjUBKqvrm2g+mIXmlOdyRTwggjg21sqUSePBhN/xiJ2H5AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUFnsy4PCr1Wr6alG2DCsKuSJfTSUwHwYDVR0j
BBgwFoAU1uYpTR2VAvPH9fiUtZeDd3m40+AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRml5cDVGNVFzek1Zb2ZieFp6OUt3WnZuQlZxU05FZFd0NGdNcVVES2k4
dVIvMC9ENkU2Mjk0RDFEOTUwMkYzQzdGNUY4OTRCNTk3ODM3Nzc5QjhEM0UwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2RTYyOTREMUQ5NTAyRjND
N0Y1Rjg5NEI1OTc4Mzc3NzlCOEQzRTAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZpeXA1RjVRc3pNWW9mYnhaejlLd1p2bkJWcVNORWRXdDRnTXFVREtpOHVSLzAv
MzEzODMxMmUzMTM3MzQyZTMyMzUzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzczMTM1MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbWu+jANBgkqhkiG9w0BAQsFAAOCAQEAPES6
1I8bvcvtfsvyioYry6Nt+f5OoAEoFNlvXFOYWjJsqVcB7j4VrKzZY2ofaDQfrGhw
NpGNLUnHAOXXvPinxJvE0fUkLdLnkkPgGNvNOPsjcQZ4ZTBg2BT+a67OAzjwDF4X
4c5nCXtYSf6BYgwAgrtVV9LXv4YtX5PJKvle+r2xjr4cBs75Xpf0ry04fLZg0EfZ
aiMBmvUXMd67g6sLhQPM6R07pktSnc+xuxds/MwSALKNnwRWoRLhqoVcT8GHXXzJ
6V4+KQcVAbJ96AgvYTPS5sbw9HtCxw51VrLzUtMN9/C7QmTp9WH1G6YCw62yz2ME
vZPmpzwhzQ/Ae4fhaA==
-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:52 2024 by rpki-client on console-fra.rpki-client.org