Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/3139322e3134312e33322e302f32322d3234203d3e20323637343538.roa
File:                     3139322e3134312e33322e302f32322d3234203d3e20323637343538.roa (raw, json)
Hash identifier:          4gUrhA1Ms89KgiW0Yin0yVQ9Zhy02RQV2sJ/SPYnCGQ=
Subject key identifier:   B7:60:C1:E0:0F:10:4D:A3:B0:03:96:B8:0F:1A:A7:08:1D:95:DF:66
Certificate issuer:       /CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
Certificate serial:       103234E09A575F5AAB07EE07227272B782F4B9D7
Authority key identifier: B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/3139322e3134312e33322e302f32322d3234203d3e20323637343538.roa
Signing time:             Thu 04 Apr 2024 02:07:15 +0000
ROA not before:           Thu 04 Apr 2024 02:02:15 +0000
ROA not after:            Thu 03 Apr 2025 02:07:15 +0000
asID:                     267458
IP address blocks:        192.141.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl
                          rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:32:34:e0:9a:57:5f:5a:ab:07:ee:07:22:72:72:b7:82:f4:b9:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
        Validity
            Not Before: Apr  4 02:02:15 2024 GMT
            Not After : Apr  3 02:07:15 2025 GMT
        Subject: CN=B760C1E00F104DA3B00396B80F1AA7081D95DF66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:69:6c:5f:af:25:97:38:56:5b:d3:9a:18:63:
                    55:6d:e1:87:c6:9c:66:0f:78:80:ad:b3:eb:b9:9a:
                    45:3c:0d:f8:ed:11:33:0d:da:d7:3f:2f:d1:01:92:
                    d2:87:d8:97:e3:0a:4e:3f:b9:74:0b:a7:41:3a:fe:
                    d4:b7:5a:aa:8a:c6:b3:69:77:a7:92:de:7b:fd:84:
                    86:e9:33:32:64:8a:0b:dd:54:b6:d6:0d:a3:db:68:
                    f2:63:b7:de:b8:d8:f6:ec:09:41:ff:0e:74:0a:cd:
                    c2:24:05:12:e4:ba:66:b6:27:fc:b4:8e:92:fb:14:
                    e7:07:a8:5b:cf:a9:23:d7:28:d6:34:a8:f3:9e:ec:
                    21:2e:43:d4:31:2d:f2:cd:ff:76:71:19:59:f2:25:
                    c1:06:17:e5:17:e1:48:9f:ca:94:fa:8b:f7:2d:7f:
                    1e:65:70:1f:c7:48:e7:37:e6:f1:26:96:04:ed:ba:
                    91:71:b9:3f:d1:de:b8:43:73:d4:f9:b5:06:4b:6f:
                    c9:5c:c7:67:da:99:bd:bd:4d:a1:57:87:5d:ea:10:
                    66:ff:09:51:e0:8e:98:99:0d:d7:60:37:d4:75:25:
                    6a:ea:fe:a3:e8:84:b5:71:34:b6:d0:73:61:0e:d7:
                    8e:88:9d:ba:9d:12:93:56:ec:95:5b:d6:46:2b:50:
                    89:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:60:C1:E0:0F:10:4D:A3:B0:03:96:B8:0F:1A:A7:08:1D:95:DF:66
            X509v3 Authority Key Identifier:
                keyid:B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/3139322e3134312e33322e302f32322d3234203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:26:cc:5a:94:97:0d:8c:ba:56:59:c1:95:fe:07:59:2c:35:
         4e:3f:4a:8b:ce:f8:8e:39:b0:a4:5e:b5:d5:be:bc:78:f4:36:
         0d:6e:be:0a:82:3d:2e:e3:83:3a:cd:b1:61:7c:ff:c0:da:58:
         70:b5:47:af:07:26:b2:d4:2e:18:b7:68:b6:11:ce:14:ae:f0:
         40:b4:47:fa:d1:43:68:a2:3e:dc:25:fb:1c:3b:fc:62:97:64:
         a6:cc:82:84:d5:18:c3:88:4d:00:70:79:f0:17:71:25:12:0c:
         9f:63:6c:ed:f6:e9:36:e6:fa:19:09:6c:a8:f4:64:c7:a7:54:
         3e:de:f1:9e:7d:1b:b0:d6:fc:d2:1a:88:69:1c:c9:3c:77:e6:
         57:18:29:32:37:7e:96:93:25:3a:74:cd:a5:5f:cc:bd:c1:0c:
         3a:2a:5f:ca:d6:c5:9d:e2:bf:46:22:fd:52:31:84:f1:99:f3:
         3c:e9:85:39:01:4b:bc:5d:ef:f7:05:e2:1f:74:3b:58:ca:89:
         04:a5:a8:27:d1:34:0f:c1:9f:e0:77:4b:0d:a8:5e:6c:d4:b4:
         e0:65:34:0e:e9:51:71:b9:3b:68:5b:1c:ed:30:15:9b:93:52:
         a2:0b:50:c1:a7:51:74:fc:1a:ed:ac:37:a7:c9:63:e5:2d:a2:
         d9:d8:27:ce
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEDI04JpXX1qrB+4HInJyt4L0udcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNDMzlGMjIzQkVDMjRCODZCNzdFNDlCNDYyMzYyRjYy
REIyNEJFNDAeFw0yNDA0MDQwMjAyMTVaFw0yNTA0MDMwMjA3MTVaMDMxMTAvBgNV
BAMTKEI3NjBDMUUwMEYxMDREQTNCMDAzOTZCODBGMUFBNzA4MUQ5NURGNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaaWxfryWXOFZb05oYY1Vt4YfG
nGYPeICts+u5mkU8DfjtETMN2tc/L9EBktKH2JfjCk4/uXQLp0E6/tS3WqqKxrNp
d6eS3nv9hIbpMzJkigvdVLbWDaPbaPJjt9642PbsCUH/DnQKzcIkBRLkuma2J/y0
jpL7FOcHqFvPqSPXKNY0qPOe7CEuQ9QxLfLN/3ZxGVnyJcEGF+UX4UifypT6i/ct
fx5lcB/HSOc35vEmlgTtupFxuT/R3rhDc9T5tQZLb8lcx2famb29TaFXh13qEGb/
CVHgjpiZDddgN9R1JWrq/qPohLVxNLbQc2EO146InbqdEpNW7JVb1kYrUIm/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUt2DB4A8QTaOwA5a4DxqnCB2V32YwHwYDVR0j
BBgwFoAUs8OfIjvsJLhrd+SbRiNi9i2yS+QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2FRZmEzdThCOEFkYUpkOGtBNVZBVU55OG9jUmFBY2tCeWNmckhVcUFh
WXYvMS9CM0MzOUYyMjNCRUMyNEI4NkI3N0U0OUI0NjIzNjJGNjJEQjI0QkU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzQzM5RjIyM0JFQzI0Qjg2
Qjc3RTQ5QjQ2MjM2MkY2MkRCMjRCRTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dhUWZhM3U4QjhBZGFKZDhrQTVWQVVOeThvY1JhQWNrQnljZnJIVXFBYVl2LzEv
MzEzOTMyMmUzMTM0MzEyZTMzMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzczNDM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALAjSAwDQYJKoZIhvcNAQELBQADggEBAKcmzFqU
lw2MulZZwZX+B1ksNU4/SovO+I45sKRetdW+vHj0Ng1uvgqCPS7jgzrNsWF8/8Da
WHC1R68HJrLULhi3aLYRzhSu8EC0R/rRQ2iiPtwl+xw7/GKXZKbMgoTVGMOITQBw
efAXcSUSDJ9jbO326Tbm+hkJbKj0ZMenVD7e8Z59G7DW/NIaiGkcyTx35lcYKTI3
fpaTJTp0zaVfzL3BDDoqX8rWxZ3iv0Yi/VIxhPGZ8zzphTkBS7xd7/cF4h90O1jK
iQSlqCfRNA/Bn+B3Sw2oXmzUtOBlNA7pUXG5O2hbHO0wFZuTUqILUMGnUXT8Gu2s
N6fJY+UtotnYJ84=
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:39 2024 by rpki-client on console-fra.rpki-client.org