Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/3230312e37362e3139322e302f32302d3234203d3e203232333536.roa
File:                     3230312e37362e3139322e302f32302d3234203d3e203232333536.roa (raw, json)
Hash identifier:          Mmf0wY+e+8w3dCxqRke4ElAH1fJC6TQyPDFd2Pf/eVg=
Subject key identifier:   DE:23:4C:84:20:C5:7A:E4:4E:48:B3:AD:ED:64:BC:7C:44:0B:A2:F8
Certificate issuer:       /CN=968400C9DFC16D643EF5C94C34F993F17C7568AA
Certificate serial:       6991BC6B6CF7005DC8ABCE38464A5BA1F75C1F21
Authority key identifier: 96:84:00:C9:DF:C1:6D:64:3E:F5:C9:4C:34:F9:93:F1:7C:75:68:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/3230312e37362e3139322e302f32302d3234203d3e203232333536.roa
Signing time:             Fri 17 May 2024 13:50:56 +0000
ROA not before:           Fri 17 May 2024 13:45:56 +0000
ROA not after:            Fri 16 May 2025 13:50:56 +0000
asID:                     22356
IP address blocks:        201.76.192.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.crl
                          rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:91:bc:6b:6c:f7:00:5d:c8:ab:ce:38:46:4a:5b:a1:f7:5c:1f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=968400C9DFC16D643EF5C94C34F993F17C7568AA
        Validity
            Not Before: May 17 13:45:56 2024 GMT
            Not After : May 16 13:50:56 2025 GMT
        Subject: CN=DE234C8420C57AE44E48B3ADED64BC7C440BA2F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a6:1e:c4:6e:b5:79:50:3e:5c:aa:dc:73:08:
                    71:bf:27:1e:05:61:e3:f1:d8:77:23:cb:b1:69:3d:
                    04:6e:5e:c1:e3:6a:50:8a:5b:44:82:1f:ca:37:74:
                    65:a5:6e:fc:f5:6d:0c:32:a3:23:db:af:87:8a:ad:
                    09:63:d0:ed:44:62:34:54:13:94:14:34:69:1b:f3:
                    4a:cd:0e:53:be:ca:4f:5a:32:b3:dc:44:14:65:bf:
                    11:9d:9d:04:da:b1:e4:4e:81:cb:09:51:13:b4:5a:
                    cf:9f:d4:e9:42:12:57:8c:e6:df:b1:47:26:27:9d:
                    a3:21:9c:a3:1d:3d:15:52:97:24:f6:19:33:4d:dc:
                    9b:63:ce:9f:d3:13:66:a0:0c:b8:cc:9f:55:51:d0:
                    10:b9:3a:15:88:a0:fc:be:18:25:a6:be:a9:f5:f1:
                    f6:04:a6:c3:d8:9b:fb:67:03:15:00:1b:3a:9d:ef:
                    e1:5f:9b:d9:73:50:c8:2a:aa:e8:5f:26:2b:3e:29:
                    7b:90:c1:69:41:a6:42:7f:b6:56:00:d6:40:03:14:
                    84:a2:b8:c9:2c:a6:a0:53:fc:1b:39:13:ad:d3:4d:
                    02:a0:1e:fc:f4:04:38:fb:1e:8b:c6:ac:d9:35:c4:
                    36:34:a3:9e:12:40:87:5f:76:49:50:01:90:b2:26:
                    ca:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:23:4C:84:20:C5:7A:E4:4E:48:B3:AD:ED:64:BC:7C:44:0B:A2:F8
            X509v3 Authority Key Identifier:
                keyid:96:84:00:C9:DF:C1:6D:64:3E:F5:C9:4C:34:F9:93:F1:7C:75:68:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/968400C9DFC16D643EF5C94C34F993F17C7568AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/968400C9DFC16D643EF5C94C34F993F17C7568AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ge459Jp9EqoMrWNNkVhgM78x1kD4MKdjfDr92w3uhQor/0/3230312e37362e3139322e302f32302d3234203d3e203232333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2e:78:33:3c:73:77:8b:8b:5a:19:c5:48:97:c6:a0:80:b9:1c:
         76:5b:6b:40:2f:13:c9:a5:70:d2:63:b6:ba:af:ee:4b:43:7c:
         75:ae:07:f7:3e:bf:f5:68:4e:da:88:2e:17:77:e1:3d:0d:5a:
         5b:84:70:66:ae:20:02:1f:6f:f0:49:b6:56:39:5d:15:82:6b:
         df:82:be:92:27:01:f0:f0:8f:aa:de:6d:1e:d1:95:69:cf:32:
         48:2d:3f:13:74:8e:fc:75:c4:90:1f:02:f6:69:21:f8:4d:c7:
         cb:94:34:40:11:fb:ff:60:96:fb:86:ba:dc:e8:92:30:b2:29:
         db:94:b9:b6:eb:6f:d6:16:fd:84:f6:06:dd:8b:e0:f1:9b:d4:
         37:b6:fe:c8:38:99:6c:ca:f4:82:33:92:42:ae:42:49:8f:f1:
         07:bd:93:63:91:93:e4:39:93:8c:2b:1c:0e:43:a5:08:be:c1:
         ed:78:d3:0a:e5:02:e4:40:77:e2:0f:56:28:85:96:17:ca:f2:
         f5:bc:f4:a0:22:c9:6a:57:f0:24:7d:55:97:d1:0d:72:8e:d6:
         54:b8:5f:e8:61:a7:23:78:40:f0:e1:15:36:91:4e:5e:6d:b3:
         2e:d3:2d:70:b8:8e:f7:02:ce:6a:b6:6b:17:57:16:a7:b7:f5:
         29:40:f2:84
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUaZG8a2z3AF3Iq844RkpbofdcHyEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTY4NDAwQzlERkMxNkQ2NDNFRjVDOTRDMzRGOTkzRjE3
Qzc1NjhBQTAeFw0yNDA1MTcxMzQ1NTZaFw0yNTA1MTYxMzUwNTZaMDMxMTAvBgNV
BAMTKERFMjM0Qzg0MjBDNTdBRTQ0RTQ4QjNBREVENjRCQzdDNDQwQkEyRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpph7EbrV5UD5cqtxzCHG/Jx4F
YePx2Hcjy7FpPQRuXsHjalCKW0SCH8o3dGWlbvz1bQwyoyPbr4eKrQlj0O1EYjRU
E5QUNGkb80rNDlO+yk9aMrPcRBRlvxGdnQTaseROgcsJURO0Ws+f1OlCEleM5t+x
RyYnnaMhnKMdPRVSlyT2GTNN3Jtjzp/TE2agDLjMn1VR0BC5OhWIoPy+GCWmvqn1
8fYEpsPYm/tnAxUAGzqd7+Ffm9lzUMgqquhfJis+KXuQwWlBpkJ/tlYA1kADFISi
uMkspqBT/Bs5E63TTQKgHvz0BDj7HovGrNk1xDY0o54SQIdfdklQAZCyJsqnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU3iNMhCDFeuROSLOt7WS8fEQLovgwHwYDVR0j
BBgwFoAUloQAyd/BbWQ+9clMNPmT8Xx1aKowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2U0NTlKcDlFcW9NcldOTmtWaGdNNzh4MWtENE1LZGpmRHI5MnczdWhR
b3IvMC85Njg0MDBDOURGQzE2RDY0M0VGNUM5NEMzNEY5OTNGMTdDNzU2OEFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2ODQwMEM5REZDMTZENjQz
RUY1Qzk0QzM0Rjk5M0YxN0M3NTY4QUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dlNDU5SnA5RXFvTXJXTk5rVmhnTTc4eDFrRDRNS2RqZkRyOTJ3M3VoUW9yLzAv
MzIzMDMxMmUzNzM2MmUzMTM5MzIyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjMy
MzMzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEyUzAMA0GCSqGSIb3DQEBCwUAA4IBAQAueDM8c3eL
i1oZxUiXxqCAuRx2W2tALxPJpXDSY7a6r+5LQ3x1rgf3Pr/1aE7aiC4Xd+E9DVpb
hHBmriACH2/wSbZWOV0Vgmvfgr6SJwHw8I+q3m0e0ZVpzzJILT8TdI78dcSQHwL2
aSH4TcfLlDRAEfv/YJb7hrrc6JIwsinblLm262/WFv2E9gbdi+Dxm9Q3tv7IOJls
yvSCM5JCrkJJj/EHvZNjkZPkOZOMKxwOQ6UIvsHteNMK5QLkQHfiD1YohZYXyvL1
vPSgIslqV/AkfVWX0Q1yjtZUuF/oYacjeEDw4RU2kU5ebbMu0y1wuI73As5qtmsX
Vxant/UpQPKE
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:52 2024 by rpki-client on console-ams.rpki-client.org