Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/3230302e3136302e3139322e302f32302d3234203d3e203232333536.roa
File:                     3230302e3136302e3139322e302f32302d3234203d3e203232333536.roa (raw, json)
Hash identifier:          3TsKJXzw+Lo1FzgWFUPZsc0aIm6daoVgFsX7/Aq5Cto=
Subject key identifier:   15:B3:77:F2:27:75:76:92:39:7B:70:46:4D:D7:A7:61:5C:4C:D9:64
Certificate issuer:       /CN=968400C9DFC16D643EF5C94C34F993F17C7568AA
Certificate serial:       716DCCC5218CC3CE939B0CEC9DF4CB94D08257E7
Authority key identifier: 96:84:00:C9:DF:C1:6D:64:3E:F5:C9:4C:34:F9:93:F1:7C:75:68:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/3230302e3136302e3139322e302f32302d3234203d3e203232333536.roa
Signing time:             Fri 17 May 2024 13:50:45 +0000
ROA not before:           Fri 17 May 2024 13:45:45 +0000
ROA not after:            Fri 16 May 2025 13:50:45 +0000
asID:                     22356
IP address blocks:        200.160.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.crl
                          rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:6d:cc:c5:21:8c:c3:ce:93:9b:0c:ec:9d:f4:cb:94:d0:82:57:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=968400C9DFC16D643EF5C94C34F993F17C7568AA
        Validity
            Not Before: May 17 13:45:45 2024 GMT
            Not After : May 16 13:50:45 2025 GMT
        Subject: CN=15B377F227757692397B70464DD7A7615C4CD964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cd:f1:1f:2f:4f:9c:d4:06:f4:25:32:06:38:
                    71:d1:4c:18:a1:9a:ca:fa:39:3f:1b:64:ae:cb:9e:
                    1b:67:de:f8:1b:32:b6:15:a7:21:d4:21:c8:29:6a:
                    13:90:b9:e9:7e:52:84:45:0e:24:6a:8d:ae:c1:9b:
                    ac:72:a8:7b:91:3d:fb:4a:04:30:77:77:0f:49:e9:
                    29:f5:99:3f:b0:21:05:47:17:7d:b0:bd:4d:2e:88:
                    8e:32:e9:76:4d:d0:d0:03:f8:bb:cd:90:78:1a:34:
                    bc:07:fe:a6:78:74:af:c2:1b:8b:49:37:28:89:3d:
                    ff:4e:12:c1:c5:aa:31:03:83:c3:4d:23:16:b8:db:
                    d1:c4:01:e3:b9:39:45:05:cd:f7:29:4e:80:62:6a:
                    d5:2b:69:0e:b7:7d:f4:96:d2:94:d6:65:17:c4:0b:
                    26:d9:3f:48:d9:c2:a6:bc:1a:2d:3d:d1:14:cb:49:
                    a6:be:9b:58:59:fb:b8:0a:e1:97:94:a8:df:a0:03:
                    42:66:7d:d2:8e:eb:52:f3:e5:84:37:5d:6d:94:74:
                    9d:09:10:0b:c4:c9:66:50:f8:06:c3:3f:6c:51:77:
                    57:62:6b:1c:3a:4b:d6:4c:af:79:ce:2d:f3:8f:a8:
                    05:26:67:e8:6d:a2:0a:79:0e:6a:e0:f9:52:c8:d5:
                    8b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B3:77:F2:27:75:76:92:39:7B:70:46:4D:D7:A7:61:5C:4C:D9:64
            X509v3 Authority Key Identifier:
                keyid:96:84:00:C9:DF:C1:6D:64:3E:F5:C9:4C:34:F9:93:F1:7C:75:68:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/3230302e3136302e3139322e302f32302d3234203d3e203232333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.160.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         97:d2:aa:39:0c:0b:1c:ac:58:f6:71:d8:76:53:31:45:25:88:
         ca:e2:cc:24:b8:cf:c6:38:f7:68:88:5a:01:c5:9d:ea:99:7a:
         93:c9:17:d4:f1:c1:57:be:e4:50:97:c5:5e:9c:ac:b1:a9:1d:
         74:ad:93:a6:5b:12:b0:7a:6e:ff:bd:ad:e5:64:af:00:94:02:
         91:fc:42:36:21:e2:18:ad:75:21:5b:4e:2c:50:e9:bc:e2:c8:
         ff:22:9f:5d:8a:17:0a:e4:38:77:dc:3f:66:77:25:80:68:ce:
         65:5e:ec:b2:c0:84:f1:7c:31:da:58:5c:09:a6:5a:98:63:29:
         33:e2:e4:30:a2:05:f3:9b:9b:1b:ee:50:f2:92:26:61:23:1a:
         51:39:cf:4d:6c:f6:af:40:9e:1f:d0:e4:6b:0b:bc:e7:31:22:
         f5:dd:1c:7c:3f:83:a4:ae:ef:32:cb:45:05:3d:44:25:1d:a4:
         d0:65:15:22:7f:79:5f:a3:21:d8:4e:50:23:1f:20:26:cc:a9:
         07:c0:b3:a2:b3:cb:60:da:31:e2:f8:a5:f7:b0:5c:5d:b5:e7:
         71:9c:71:0b:64:3b:ab:d5:15:05:99:b3:db:f4:24:55:f8:c0:
         46:c6:dc:ad:32:7f:be:c8:35:c8:39:5b:0d:4f:84:c4:68:19:
         50:36:c2:bd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcW3MxSGMw86TmwzsnfTLlNCCV+cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTY4NDAwQzlERkMxNkQ2NDNFRjVDOTRDMzRGOTkzRjE3
Qzc1NjhBQTAeFw0yNDA1MTcxMzQ1NDVaFw0yNTA1MTYxMzUwNDVaMDMxMTAvBgNV
BAMTKDE1QjM3N0YyMjc3NTc2OTIzOTdCNzA0NjRERDdBNzYxNUM0Q0Q5NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVzfEfL0+c1Ab0JTIGOHHRTBih
msr6OT8bZK7Lnhtn3vgbMrYVpyHUIcgpahOQuel+UoRFDiRqja7Bm6xyqHuRPftK
BDB3dw9J6Sn1mT+wIQVHF32wvU0uiI4y6XZN0NAD+LvNkHgaNLwH/qZ4dK/CG4tJ
NyiJPf9OEsHFqjEDg8NNIxa429HEAeO5OUUFzfcpToBiatUraQ63ffSW0pTWZRfE
CybZP0jZwqa8Gi090RTLSaa+m1hZ+7gK4ZeUqN+gA0JmfdKO61Lz5YQ3XW2UdJ0J
EAvEyWZQ+AbDP2xRd1diaxw6S9ZMr3nOLfOPqAUmZ+htogp5Dmrg+VLI1YtPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUFbN38id1dpI5e3BGTdenYVxM2WQwHwYDVR0j
BBgwFoAUloQAyd/BbWQ+9clMNPmT8Xx1aKowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2U0NTlKcDlFcW9NcldOTmtWaGdNNzh4MWtENE1LZGpmRHI5MnczdWhR
b3IvMC85Njg0MDBDOURGQzE2RDY0M0VGNUM5NEMzNEY5OTNGMTdDNzU2OEFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2ODQwMEM5REZDMTZENjQz
RUY1Qzk0QzM0Rjk5M0YxN0M3NTY4QUEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dlNDU5SnA5RXFvTXJXTk5rVmhnTTc4eDFrRDRNS2RqZkRyOTJ3M3VoUW9yLzAv
MzIzMDMwMmUzMTM2MzAyZTMxMzkzMjJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMy
MzIzMzM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBATIoMAwDQYJKoZIhvcNAQELBQADggEBAJfSqjkM
CxysWPZx2HZTMUUliMrizCS4z8Y492iIWgHFneqZepPJF9TxwVe+5FCXxV6crLGp
HXStk6ZbErB6bv+9reVkrwCUApH8QjYh4hitdSFbTixQ6bziyP8in12KFwrkOHfc
P2Z3JYBozmVe7LLAhPF8MdpYXAmmWphjKTPi5DCiBfObmxvuUPKSJmEjGlE5z01s
9q9Anh/Q5GsLvOcxIvXdHHw/g6Su7zLLRQU9RCUdpNBlFSJ/eV+jIdhOUCMfICbM
qQfAs6Kzy2DaMeL4pfewXF2153GccQtkO6vVFQWZs9v0JFX4wEbG3K0yf77INcg5
Ww1PhMRoGVA2wr0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:52 2024 by rpki-client on console-ams.rpki-client.org