Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiVN8nFCh6A6KFmGesXfBNSYcBKVbrnS1jqDXzWsdBK3/0/3139302e3130372e39352e302f32342d3332203d3e20323731313831.roa
File:                     3139302e3130372e39352e302f32342d3332203d3e20323731313831.roa (raw, json)
Hash identifier:          ALcsWc7aZQeV+DWmmuUIFFOwwHR9ZE/qtOewXFVlxIg=
Subject key identifier:   D4:6F:78:F6:0B:2C:9F:2D:1B:CC:FF:7F:A9:84:07:8D:75:4A:47:CD
Certificate issuer:       /CN=9430DFF1B79FC21B14A464F65842625F4DB2BED2
Certificate serial:       093891C20E83825B6BDC1C7D58D3CB03AD978281
Authority key identifier: 94:30:DF:F1:B7:9F:C2:1B:14:A4:64:F6:58:42:62:5F:4D:B2:BE:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9430DFF1B79FC21B14A464F65842625F4DB2BED2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiVN8nFCh6A6KFmGesXfBNSYcBKVbrnS1jqDXzWsdBK3/0/3139302e3130372e39352e302f32342d3332203d3e20323731313831.roa
Signing time:             Wed 09 Oct 2024 17:04:41 +0000
ROA not before:           Wed 09 Oct 2024 16:59:41 +0000
ROA not after:            Wed 08 Oct 2025 17:04:41 +0000
asID:                     271181
IP address blocks:        190.107.95.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiVN8nFCh6A6KFmGesXfBNSYcBKVbrnS1jqDXzWsdBK3/0/9430DFF1B79FC21B14A464F65842625F4DB2BED2.crl
                          rsync://rpki-repo.registro.br/repo/GiVN8nFCh6A6KFmGesXfBNSYcBKVbrnS1jqDXzWsdBK3/0/9430DFF1B79FC21B14A464F65842625F4DB2BED2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9430DFF1B79FC21B14A464F65842625F4DB2BED2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:38:91:c2:0e:83:82:5b:6b:dc:1c:7d:58:d3:cb:03:ad:97:82:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9430DFF1B79FC21B14A464F65842625F4DB2BED2
        Validity
            Not Before: Oct  9 16:59:41 2024 GMT
            Not After : Oct  8 17:04:41 2025 GMT
        Subject: CN=D46F78F60B2C9F2D1BCCFF7FA984078D754A47CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:14:3d:4f:28:89:32:85:ba:13:1c:f8:52:d0:
                    8d:27:1b:11:9d:fc:be:48:92:97:2a:46:4f:b0:73:
                    c5:6f:63:33:c6:f3:8d:cb:b7:61:b5:88:26:79:b7:
                    23:02:ae:56:e5:d1:75:fe:30:83:04:c2:70:fb:be:
                    ba:8b:58:60:17:8a:92:10:7f:c9:0f:4a:a7:f7:af:
                    1b:d9:84:b3:52:e0:77:f3:e4:8a:70:88:e0:f8:71:
                    82:72:77:03:88:22:6e:10:44:40:b1:94:76:3e:b7:
                    63:ec:a8:d8:c7:9f:2a:94:b1:ba:70:b0:13:f8:e5:
                    f1:7c:f8:d6:79:c5:1f:49:33:29:4b:a9:f4:d8:de:
                    20:56:19:74:1f:74:d9:23:67:8e:52:ac:46:ad:fd:
                    9d:16:62:e0:f2:b2:21:ef:b4:f8:a2:63:4b:3b:c1:
                    27:01:d8:a0:73:ea:43:81:8f:de:c0:7a:43:bd:6e:
                    00:af:63:d1:46:77:4a:17:86:f2:38:08:85:f1:32:
                    c4:35:fe:92:7f:69:2d:3b:d0:1b:f6:8f:45:8a:11:
                    c6:0e:1d:d0:2c:a1:d8:1a:74:a2:3a:25:d6:4a:5c:
                    b3:b9:00:ed:16:6e:6d:a3:a8:74:37:fb:79:e1:2b:
                    8c:9b:18:a9:e7:17:c6:28:00:f4:e5:e5:bd:80:c3:
                    0d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6F:78:F6:0B:2C:9F:2D:1B:CC:FF:7F:A9:84:07:8D:75:4A:47:CD
            X509v3 Authority Key Identifier:
                keyid:94:30:DF:F1:B7:9F:C2:1B:14:A4:64:F6:58:42:62:5F:4D:B2:BE:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiVN8nFCh6A6KFmGesXfBNSYcBKVbrnS1jqDXzWsdBK3/0/9430DFF1B79FC21B14A464F65842625F4DB2BED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9430DFF1B79FC21B14A464F65842625F4DB2BED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiVN8nFCh6A6KFmGesXfBNSYcBKVbrnS1jqDXzWsdBK3/0/3139302e3130372e39352e302f32342d3332203d3e20323731313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:da:e9:da:f7:75:a9:36:bd:d1:25:e1:91:57:b8:be:96:ba:
         e7:38:61:9a:d7:b5:f6:15:c1:96:6e:5e:af:34:7b:45:b8:d6:
         5d:33:ad:9b:6a:eb:87:ef:7b:a5:84:97:3d:ad:df:cd:6a:4b:
         3f:8d:22:1c:3f:59:7f:2a:bf:f2:b8:74:e4:98:fd:21:cf:5a:
         41:cb:2d:9d:bb:90:42:97:68:0f:f4:d2:1e:7f:5f:3a:f1:f5:
         14:9b:b9:65:af:94:7b:60:29:51:ea:3d:ac:21:4e:a1:3d:ac:
         31:f8:09:e3:8a:25:83:a3:73:63:7e:1c:a6:b8:00:63:12:46:
         64:d2:0d:46:42:2c:d1:60:db:a8:e5:16:26:6c:9b:39:85:1c:
         65:0a:ee:64:f8:1d:3a:e8:a9:ff:06:3f:ef:39:77:a3:b3:55:
         4d:8e:d0:0b:30:98:20:c6:46:54:75:26:c3:39:52:12:01:cb:
         1c:fc:41:ae:9f:01:f3:1f:b3:8d:12:89:c9:45:e1:75:a0:57:
         a0:c7:70:08:0c:e6:86:b6:bd:50:9b:e6:f4:a7:52:59:ca:b0:
         de:21:32:8b:ac:63:e1:33:58:c9:14:33:6f:16:1c:54:43:11:
         5a:29:85:4b:a6:64:ce:90:e5:f6:ac:0f:6b:59:e0:e2:0a:bb:
         45:b0:cd:4b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCTiRwg6Dgltr3Bx9WNPLA62XgoEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQzMERGRjFCNzlGQzIxQjE0QTQ2NEY2NTg0MjYyNUY0
REIyQkVEMjAeFw0yNDEwMDkxNjU5NDFaFw0yNTEwMDgxNzA0NDFaMDMxMTAvBgNV
BAMTKEQ0NkY3OEY2MEIyQzlGMkQxQkNDRkY3RkE5ODQwNzhENzU0QTQ3Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjFD1PKIkyhboTHPhS0I0nGxGd
/L5IkpcqRk+wc8VvYzPG843Lt2G1iCZ5tyMCrlbl0XX+MIMEwnD7vrqLWGAXipIQ
f8kPSqf3rxvZhLNS4Hfz5IpwiOD4cYJydwOIIm4QRECxlHY+t2PsqNjHnyqUsbpw
sBP45fF8+NZ5xR9JMylLqfTY3iBWGXQfdNkjZ45SrEat/Z0WYuDysiHvtPiiY0s7
wScB2KBz6kOBj97AekO9bgCvY9FGd0oXhvI4CIXxMsQ1/pJ/aS070Bv2j0WKEcYO
HdAsodgadKI6JdZKXLO5AO0Wbm2jqHQ3+3nhK4ybGKnnF8YoAPTl5b2Aww0fAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU1G949gssny0bzP9/qYQHjXVKR80wHwYDVR0j
BBgwFoAUlDDf8befwhsUpGT2WEJiX02yvtIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2lWTjhuRkNoNkE2S0ZtR2VzWGZCTlNZY0JLVmJyblMxanFEWHpXc2RC
SzMvMC85NDMwREZGMUI3OUZDMjFCMTRBNDY0RjY1ODQyNjI1RjREQjJCRUQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk0MzBERkYxQjc5RkMyMUIx
NEE0NjRGNjU4NDI2MjVGNERCMkJFRDIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dpVk44bkZDaDZBNktGbUdlc1hmQk5TWWNCS1Zicm5TMWpxRFh6V3NkQkszLzAv
MzEzOTMwMmUzMTMwMzcyZTM5MzUyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMjM3
MzEzMTM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC+a18wDQYJKoZIhvcNAQELBQADggEBAAXa6dr3
dak2vdEl4ZFXuL6Wuuc4YZrXtfYVwZZuXq80e0W41l0zrZtq64fve6WElz2t381q
Sz+NIhw/WX8qv/K4dOSY/SHPWkHLLZ27kEKXaA/00h5/Xzrx9RSbuWWvlHtgKVHq
PawhTqE9rDH4CeOKJYOjc2N+HKa4AGMSRmTSDUZCLNFg26jlFiZsmzmFHGUK7mT4
HTroqf8GP+85d6OzVU2O0AswmCDGRlR1JsM5UhIByxz8Qa6fAfMfs40SiclF4XWg
V6DHcAgM5oa2vVCb5vSnUlnKsN4hMousY+EzWMkUM28WHFRDEVophUumZM6Q5fas
D2tZ4OIKu0WwzUs=
-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:45 2024 by rpki-client on console-fra.rpki-client.org