Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/3139312e33372e3232342e302f32312d3234203d3e20323633333734.roa
File:                     3139312e33372e3232342e302f32312d3234203d3e20323633333734.roa (raw, json)
Hash identifier:          2R55eTqtR5zKWIOqurdSY/K1wN3cznGWZv2i9wPmfsM=
Subject key identifier:   E6:29:02:91:1E:62:51:C6:B0:33:DB:49:16:63:8D:B2:61:F0:75:F7
Certificate issuer:       /CN=AA29BAE54F39868638C50A1BB95E23A7763C38A4
Certificate serial:       6AA8E8454C05BFCE254D3F54D38FDC29715C4197
Authority key identifier: AA:29:BA:E5:4F:39:86:86:38:C5:0A:1B:B9:5E:23:A7:76:3C:38:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/3139312e33372e3232342e302f32312d3234203d3e20323633333734.roa
Signing time:             Thu 04 Apr 2024 14:34:13 +0000
ROA not before:           Thu 04 Apr 2024 14:29:13 +0000
ROA not after:            Thu 03 Apr 2025 14:34:13 +0000
asID:                     263374
IP address blocks:        191.37.224.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.crl
                          rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:a8:e8:45:4c:05:bf:ce:25:4d:3f:54:d3:8f:dc:29:71:5c:41:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA29BAE54F39868638C50A1BB95E23A7763C38A4
        Validity
            Not Before: Apr  4 14:29:13 2024 GMT
            Not After : Apr  3 14:34:13 2025 GMT
        Subject: CN=E62902911E6251C6B033DB4916638DB261F075F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c2:84:c5:af:e4:34:67:ff:16:91:6b:a9:37:
                    e9:db:84:29:de:d2:a7:69:6b:22:c4:b9:f1:c7:f7:
                    a8:8e:3b:c1:ec:6f:77:c6:03:c6:b4:52:f0:0d:d5:
                    ed:f7:c1:ec:b6:95:79:0b:fb:bf:5c:32:ac:a4:b3:
                    de:51:74:71:86:3e:ca:d1:5b:a9:db:66:cf:9c:a0:
                    ea:27:1a:a0:d6:02:6e:b2:7b:38:42:83:15:03:29:
                    05:dd:df:2b:ed:17:c5:48:22:ce:47:d8:76:4a:91:
                    82:0c:8d:cc:02:53:8f:22:0c:9b:a7:9e:3a:c6:60:
                    5c:89:94:4b:6e:eb:0c:6e:6b:63:43:f0:b4:13:ec:
                    2a:f9:a9:bd:59:ec:3d:ee:10:ca:44:1f:bc:28:82:
                    41:1a:15:99:65:55:9c:62:7c:a8:d9:a7:a1:96:a3:
                    31:54:d6:1a:7a:00:96:7a:8a:5d:45:4e:ff:0f:78:
                    67:36:42:17:c7:58:6e:26:21:7e:34:b5:c8:32:29:
                    9e:5c:94:17:f1:45:d0:a4:73:29:55:64:b5:f2:07:
                    76:0c:fd:7c:85:8a:32:cc:1a:80:0a:30:9d:32:1d:
                    87:08:59:c7:a6:63:df:f3:38:b7:8e:76:45:0e:cd:
                    ac:3b:27:14:c0:ee:2b:d0:05:7e:3d:b9:30:34:62:
                    df:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:29:02:91:1E:62:51:C6:B0:33:DB:49:16:63:8D:B2:61:F0:75:F7
            X509v3 Authority Key Identifier:
                keyid:AA:29:BA:E5:4F:39:86:86:38:C5:0A:1B:B9:5E:23:A7:76:3C:38:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA29BAE54F39868638C50A1BB95E23A7763C38A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/1/3139312e33372e3232342e302f32312d3234203d3e20323633333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         63:db:d1:2b:1c:cc:c1:c8:53:a8:82:46:72:f8:39:21:50:2c:
         d7:36:3f:0f:d5:97:63:be:89:80:6b:23:5e:06:87:4b:c3:9f:
         bb:c4:25:16:6e:2c:00:82:e6:70:50:25:91:27:53:3e:3c:db:
         0f:8d:99:72:85:69:2a:76:57:b4:39:8b:08:5e:17:da:26:bd:
         7e:30:31:8c:d2:e2:b1:3e:fa:bc:67:83:98:d9:98:bd:75:39:
         f1:02:d4:03:01:de:82:ef:58:5a:f1:6b:b0:7c:ec:6b:08:94:
         bd:22:56:26:a5:76:cb:de:cf:47:bb:01:60:9e:31:e9:19:7c:
         c2:99:c5:8a:a7:57:e7:65:fb:15:2c:a6:e4:e4:fb:a7:a8:ff:
         36:16:0b:8e:84:aa:e0:83:cf:ad:b9:05:d6:f9:42:e1:27:2b:
         a6:0d:c8:8a:68:6a:88:1a:db:16:e5:66:62:dd:2a:ec:8a:ca:
         87:6b:d6:97:2f:ac:1f:7d:59:cf:06:43:3a:23:63:14:6e:a2:
         37:1c:4e:f4:4e:55:bf:e5:82:34:3f:92:3b:7a:7b:49:67:fe:
         10:c6:96:71:74:b7:37:dd:0e:b9:73:d9:07:bb:ff:dc:20:a3:
         f6:b0:2d:98:84:d0:b2:68:83:06:f9:d7:94:4c:00:8e:f1:ce:
         a4:2f:9c:0d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaqjoRUwFv84lTT9U04/cKXFcQZcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUEyOUJBRTU0RjM5ODY4NjM4QzUwQTFCQjk1RTIzQTc3
NjNDMzhBNDAeFw0yNDA0MDQxNDI5MTNaFw0yNTA0MDMxNDM0MTNaMDMxMTAvBgNV
BAMTKEU2MjkwMjkxMUU2MjUxQzZCMDMzREI0OTE2NjM4REIyNjFGMDc1RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+woTFr+Q0Z/8WkWupN+nbhCne
0qdpayLEufHH96iOO8Hsb3fGA8a0UvAN1e33wey2lXkL+79cMqyks95RdHGGPsrR
W6nbZs+coOonGqDWAm6yezhCgxUDKQXd3yvtF8VIIs5H2HZKkYIMjcwCU48iDJun
njrGYFyJlEtu6wxua2ND8LQT7Cr5qb1Z7D3uEMpEH7wogkEaFZllVZxifKjZp6GW
ozFU1hp6AJZ6il1FTv8PeGc2QhfHWG4mIX40tcgyKZ5clBfxRdCkcylVZLXyB3YM
/XyFijLMGoAKMJ0yHYcIWcemY9/zOLeOdkUOzaw7JxTA7ivQBX49uTA0Yt9jAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5ikCkR5iUcawM9tJFmONsmHwdfcwHwYDVR0j
BBgwFoAUqim65U85hoY4xQobuV4jp3Y8OKQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0FUZVBDQjJTVkhwTXZlUnRSeFAyUVJrdzNXdnUxc1g0d29HNUJ2ekVM
S1MvMS9BQTI5QkFFNTRGMzk4Njg2MzhDNTBBMUJCOTVFMjNBNzc2M0MzOEE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FBMjlCQUU1NEYzOTg2ODYz
OEM1MEExQkI5NUUyM0E3NzYzQzM4QTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dBVGVQQ0IyU1ZIcE12ZVJ0UnhQMlFSa3czV3Z1MXNYNHdvRzVCdnpFTEtTLzEv
MzEzOTMxMmUzMzM3MmUzMjMyMzQyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2
MzMzMzM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO/JeAwDQYJKoZIhvcNAQELBQADggEBAGPb0Ssc
zMHIU6iCRnL4OSFQLNc2Pw/Vl2O+iYBrI14Gh0vDn7vEJRZuLACC5nBQJZEnUz48
2w+NmXKFaSp2V7Q5iwheF9omvX4wMYzS4rE++rxng5jZmL11OfEC1AMB3oLvWFrx
a7B87GsIlL0iVialdsvez0e7AWCeMekZfMKZxYqnV+dl+xUspuTk+6eo/zYWC46E
quCDz625Bdb5QuEnK6YNyIpoaoga2xblZmLdKuyKyodr1pcvrB99Wc8GQzojYxRu
ojccTvROVb/lgjQ/kjt6e0ln/hDGlnF0tzfdDrlz2Qe7/9wgo/awLZiE0LJogwb5
15RMAI7xzqQvnA0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:23 2024 by rpki-client on console-fra.rpki-client.org