Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/3138312e3139312e35362e302f32322d3234203d3e20323634393837.roa
File:                     3138312e3139312e35362e302f32322d3234203d3e20323634393837.roa (raw, json)
Hash identifier:          TnKTRBjvuD2XHA4fj3qKt7W0DI3yPOm3BnH8tMB8vBM=
Subject key identifier:   11:38:E1:3D:A0:8C:FA:1A:E9:7A:8F:5B:1D:0E:E8:E7:04:93:5F:40
Certificate issuer:       /CN=2085C2E26105617BC4502F8911A5BE52CC061122
Certificate serial:       13B72B3BF198405501DEEE8BCDA08BE69A51347C
Authority key identifier: 20:85:C2:E2:61:05:61:7B:C4:50:2F:89:11:A5:BE:52:CC:06:11:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2085C2E26105617BC4502F8911A5BE52CC061122.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/3138312e3139312e35362e302f32322d3234203d3e20323634393837.roa
Signing time:             Mon 15 Jul 2024 19:20:53 +0000
ROA not before:           Mon 15 Jul 2024 19:15:53 +0000
ROA not after:            Mon 14 Jul 2025 19:20:53 +0000
asID:                     264987
IP address blocks:        181.191.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/2085C2E26105617BC4502F8911A5BE52CC061122.crl
                          rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/2085C2E26105617BC4502F8911A5BE52CC061122.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2085C2E26105617BC4502F8911A5BE52CC061122.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b7:2b:3b:f1:98:40:55:01:de:ee:8b:cd:a0:8b:e6:9a:51:34:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2085C2E26105617BC4502F8911A5BE52CC061122
        Validity
            Not Before: Jul 15 19:15:53 2024 GMT
            Not After : Jul 14 19:20:53 2025 GMT
        Subject: CN=1138E13DA08CFA1AE97A8F5B1D0EE8E704935F40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:aa:e2:f7:98:f3:c6:f4:5e:0c:22:65:a3:bd:
                    fc:60:4f:6c:81:b2:6c:a1:5c:d4:e8:a3:10:d0:ad:
                    9f:75:eb:7e:34:80:2b:48:29:dc:67:74:bd:dd:f9:
                    50:8a:d6:fa:a9:6c:ef:6d:64:b6:c3:9b:6e:66:7a:
                    78:e6:25:51:cf:c0:77:39:bc:04:94:3d:02:12:90:
                    5b:2e:d6:49:85:24:81:c7:aa:43:b3:05:24:3b:5f:
                    29:34:44:3b:4a:a4:84:83:97:75:04:a8:15:11:e2:
                    79:14:2b:e3:a6:16:97:a5:86:0d:8a:1a:24:23:a3:
                    f8:82:b1:c1:fe:2a:15:31:26:5f:43:9a:38:fc:d3:
                    78:11:34:87:e2:07:07:73:de:ed:6c:20:76:74:4e:
                    e7:5d:16:bf:10:81:79:95:82:cd:25:93:d4:89:b1:
                    e8:1e:a2:84:fb:85:35:97:02:54:d2:77:9b:20:23:
                    94:73:4b:e0:7a:df:2f:b3:d3:2f:19:6b:3e:20:bc:
                    95:34:a1:f9:3a:6d:5a:d0:ae:39:f2:35:c4:a4:1e:
                    70:ab:22:43:df:bb:73:1e:fb:8b:b8:55:96:ca:f1:
                    b8:78:4c:2a:c8:76:d0:07:b6:1c:5b:14:67:64:42:
                    8f:78:45:ea:32:e7:92:89:1b:4d:34:ad:51:59:0a:
                    a4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:38:E1:3D:A0:8C:FA:1A:E9:7A:8F:5B:1D:0E:E8:E7:04:93:5F:40
            X509v3 Authority Key Identifier:
                keyid:20:85:C2:E2:61:05:61:7B:C4:50:2F:89:11:A5:BE:52:CC:06:11:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/2085C2E26105617BC4502F8911A5BE52CC061122.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2085C2E26105617BC4502F8911A5BE52CC061122.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/3138312e3139312e35362e302f32322d3234203d3e20323634393837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:5d:a9:c3:2d:ba:c5:14:85:b0:04:f2:0c:ca:08:43:9c:22:
         aa:97:bb:30:bc:c2:52:52:fe:a9:79:4f:a4:de:12:2b:78:05:
         07:c8:7c:75:18:4a:4f:1d:dc:1f:09:d3:54:63:a2:62:2e:b7:
         fb:91:26:ed:63:8e:35:0c:85:a4:04:47:ab:1b:a6:46:d7:08:
         08:92:4f:0b:94:1d:15:10:3d:0a:39:d1:2e:37:f4:68:63:f1:
         aa:4e:fa:71:4b:ca:52:c1:c1:1e:a1:85:3f:7a:6a:09:e7:0c:
         65:35:b9:06:a6:1a:c9:b3:8e:fc:7e:a2:ae:30:23:41:f5:e6:
         d6:65:3b:3d:c4:2f:16:b6:e8:0a:8a:2d:64:2a:87:c9:a4:38:
         12:97:76:dc:60:0c:75:e5:b9:f7:53:92:f3:e5:ba:54:4d:c5:
         fc:35:0a:95:d1:04:e0:05:da:39:41:e9:03:06:3e:7c:59:e3:
         ae:79:a4:b8:06:b7:5c:0e:65:de:33:b9:28:56:9a:4d:72:e9:
         95:c2:0d:37:75:ba:13:09:6b:b2:20:8e:fa:ef:8a:c8:2c:85:
         0e:de:bf:e2:8e:88:f6:fd:02:1b:fc:00:89:ec:fa:70:96:53:
         00:ea:ec:ee:15:eb:57:08:db:56:1d:3c:4e:6a:1c:00:24:ac:
         31:20:45:2c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUE7crO/GYQFUB3u6LzaCL5ppRNHwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjA4NUMyRTI2MTA1NjE3QkM0NTAyRjg5MTFBNUJFNTJD
QzA2MTEyMjAeFw0yNDA3MTUxOTE1NTNaFw0yNTA3MTQxOTIwNTNaMDMxMTAvBgNV
BAMTKDExMzhFMTNEQTA4Q0ZBMUFFOTdBOEY1QjFEMEVFOEU3MDQ5MzVGNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3quL3mPPG9F4MImWjvfxgT2yB
smyhXNTooxDQrZ916340gCtIKdxndL3d+VCK1vqpbO9tZLbDm25menjmJVHPwHc5
vASUPQISkFsu1kmFJIHHqkOzBSQ7Xyk0RDtKpISDl3UEqBUR4nkUK+OmFpelhg2K
GiQjo/iCscH+KhUxJl9Dmjj803gRNIfiBwdz3u1sIHZ0TuddFr8QgXmVgs0lk9SJ
segeooT7hTWXAlTSd5sgI5RzS+B63y+z0y8Zaz4gvJU0ofk6bVrQrjnyNcSkHnCr
IkPfu3Me+4u4VZbK8bh4TCrIdtAHthxbFGdkQo94Reoy55KJG000rVFZCqTRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUETjhPaCM+hrpeo9bHQ7o5wSTX0AwHwYDVR0j
BBgwFoAUIIXC4mEFYXvEUC+JEaW+UswGESIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0dpRlpYSmFiVzY0dGZmWm1QcXFQSnpvVXR3RXd6TWVyTFo4WnNIdWJL
THQvMC8yMDg1QzJFMjYxMDU2MTdCQzQ1MDJGODkxMUE1QkU1MkNDMDYxMTIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwODVDMkUyNjEwNTYxN0JD
NDUwMkY4OTExQTVCRTUyQ0MwNjExMjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dHaUZaWEphYlc2NHRmZlptUHFxUEp6b1V0d0V3ek1lckxaOFpzSHViS0x0LzAv
MzEzODMxMmUzMTM5MzEyZTM1MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzQzOTM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK1vzgwDQYJKoZIhvcNAQELBQADggEBADldqcMt
usUUhbAE8gzKCEOcIqqXuzC8wlJS/ql5T6TeEit4BQfIfHUYSk8d3B8J01RjomIu
t/uRJu1jjjUMhaQER6sbpkbXCAiSTwuUHRUQPQo50S439Ghj8apO+nFLylLBwR6h
hT96agnnDGU1uQamGsmzjvx+oq4wI0H15tZlOz3ELxa26AqKLWQqh8mkOBKXdtxg
DHXlufdTkvPlulRNxfw1CpXRBOAF2jlB6QMGPnxZ4655pLgGt1wOZd4zuShWmk1y
6ZXCDTd1uhMJa7IgjvrvisgshQ7ev+KOiPb9Ahv8AIns+nCWUwDq7O4V61cI21Yd
PE5qHAAkrDEgRSw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:00:35 2024 by rpki-client on console-ams.rpki-client.org