Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/3133312e3130382e3232362e302f32342d3234203d3e20323633353232.roa
File:                     3133312e3130382e3232362e302f32342d3234203d3e20323633353232.roa (raw, json)
Hash identifier:          9iN0AVll6SEvHM7V2c5v5urgVoUUGTH7jA/uOJxKEbE=
Subject key identifier:   B1:2B:B4:84:D0:69:33:FC:B7:5A:1B:6E:47:55:13:50:36:64:EC:8F
Certificate issuer:       /CN=ADE62729B7C2F675CBB616815CBA292A798BEB4B
Certificate serial:       0CDB92562B4C05295E42B93E487F29A6A6E61E21
Authority key identifier: AD:E6:27:29:B7:C2:F6:75:CB:B6:16:81:5C:BA:29:2A:79:8B:EB:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/3133312e3130382e3232362e302f32342d3234203d3e20323633353232.roa
Signing time:             Thu 04 Apr 2024 16:11:26 +0000
ROA not before:           Thu 04 Apr 2024 16:06:26 +0000
ROA not after:            Thu 03 Apr 2025 16:11:26 +0000
asID:                     263522
IP address blocks:        131.108.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.crl
                          rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:17:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:db:92:56:2b:4c:05:29:5e:42:b9:3e:48:7f:29:a6:a6:e6:1e:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADE62729B7C2F675CBB616815CBA292A798BEB4B
        Validity
            Not Before: Apr  4 16:06:26 2024 GMT
            Not After : Apr  3 16:11:26 2025 GMT
        Subject: CN=B12BB484D06933FCB75A1B6E475513503664EC8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ca:19:aa:2d:bf:0e:72:27:05:95:e3:73:9e:
                    11:f4:08:51:ea:c1:95:5b:5a:ca:5c:81:c5:d9:e2:
                    14:78:8e:e5:62:88:8f:b5:c0:7a:c3:cd:09:e5:56:
                    f8:ae:c5:e2:61:d6:4d:6d:97:6d:00:b1:3a:b8:bb:
                    f5:04:13:ae:df:10:3b:27:60:5e:14:06:e6:d7:66:
                    0e:53:e0:7c:b6:6a:b3:7d:d0:4c:92:e7:09:2a:27:
                    68:6b:2b:fc:69:1d:b7:04:fb:6f:3e:9d:b1:b6:65:
                    9d:42:2d:d5:66:4d:c3:28:18:7f:ed:35:3d:fe:4b:
                    42:db:df:bd:bc:80:8f:b3:7b:ba:43:ae:b7:22:83:
                    30:87:10:a0:b1:6a:14:31:c0:85:f6:a0:d3:ce:d3:
                    ce:e4:31:0f:d4:3a:e1:1e:b9:de:96:4e:fd:48:6b:
                    be:6b:a8:ab:62:fa:67:80:bd:73:4d:a8:46:f8:99:
                    5c:5d:63:bf:c6:37:76:c8:18:63:af:39:7e:ef:03:
                    be:f3:31:35:fb:7a:e6:d1:59:29:03:95:dc:d2:db:
                    f1:89:d9:e7:21:8b:e9:3f:81:d9:c6:32:e6:2f:c6:
                    5a:12:9e:c3:78:56:3b:2b:8b:29:52:d4:9a:f1:28:
                    5a:c9:ea:f9:4f:da:70:14:cf:f5:97:3e:c5:31:93:
                    fe:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2B:B4:84:D0:69:33:FC:B7:5A:1B:6E:47:55:13:50:36:64:EC:8F
            X509v3 Authority Key Identifier:
                keyid:AD:E6:27:29:B7:C2:F6:75:CB:B6:16:81:5C:BA:29:2A:79:8B:EB:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/3133312e3130382e3232362e302f32342d3234203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:18:ca:06:d7:8b:65:f5:9e:f2:a2:75:b7:2f:d5:f1:5c:d6:
         56:f7:42:22:96:f7:b3:95:5e:0d:41:a5:99:04:0a:dd:cd:ed:
         cd:f7:87:8c:07:71:52:7c:25:29:be:7f:a3:3e:5a:76:27:27:
         bd:92:6a:aa:61:1d:ad:c9:43:70:bd:a1:fd:1a:7a:85:d6:1d:
         65:6d:29:cc:23:d8:58:1b:4c:24:16:28:53:57:1a:10:fd:53:
         7d:53:0c:fe:be:f0:ed:bb:91:eb:f4:00:fc:ce:c7:45:73:5d:
         1c:45:73:14:a9:e1:63:89:8f:6c:2c:04:9b:b6:a8:81:89:b1:
         eb:52:0a:25:7f:dd:68:6a:64:e0:d4:5e:f7:99:12:5f:d2:7a:
         47:95:cf:39:c1:9d:4e:41:36:2d:60:d8:a5:98:a7:60:7a:ef:
         58:a3:82:30:85:c0:56:db:cb:c4:59:b9:3a:49:cf:99:83:1b:
         fe:09:fc:9e:5b:26:2d:9c:d9:52:d8:6a:bb:96:bf:d5:8f:99:
         1f:69:04:1f:cc:79:99:ee:86:85:e5:d7:7f:e2:43:67:77:f4:
         57:8f:86:c7:4d:3c:51:3e:c8:7f:6f:fd:c1:18:4d:ec:b3:a7:
         15:7f:cb:5a:04:44:e0:6b:90:11:15:97:09:8f:c0:2c:9c:c3:
         51:0f:91:9d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUDNuSVitMBSleQrk+SH8ppqbmHiEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURFNjI3MjlCN0MyRjY3NUNCQjYxNjgxNUNCQTI5MkE3
OThCRUI0QjAeFw0yNDA0MDQxNjA2MjZaFw0yNTA0MDMxNjExMjZaMDMxMTAvBgNV
BAMTKEIxMkJCNDg0RDA2OTMzRkNCNzVBMUI2RTQ3NTUxMzUwMzY2NEVDOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlyhmqLb8OcicFleNznhH0CFHq
wZVbWspcgcXZ4hR4juViiI+1wHrDzQnlVviuxeJh1k1tl20AsTq4u/UEE67fEDsn
YF4UBubXZg5T4Hy2arN90EyS5wkqJ2hrK/xpHbcE+28+nbG2ZZ1CLdVmTcMoGH/t
NT3+S0Lb3728gI+ze7pDrrcigzCHEKCxahQxwIX2oNPO087kMQ/UOuEeud6WTv1I
a75rqKti+meAvXNNqEb4mVxdY7/GN3bIGGOvOX7vA77zMTX7eubRWSkDldzS2/GJ
2echi+k/gdnGMuYvxloSnsN4VjsriylS1JrxKFrJ6vlP2nAUz/WXPsUxk/5HAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUsSu0hNBpM/y3WhtuR1UTUDZk7I8wHwYDVR0j
BBgwFoAUreYnKbfC9nXLthaBXLopKnmL60swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR244Vk54aVlNUUpSOGZkcTZFVU1LWlJKdlFFdGJGWTRLV2lkdG5lZURR
SDYvMS9BREU2MjcyOUI3QzJGNjc1Q0JCNjE2ODE1Q0JBMjkyQTc5OEJFQjRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FERTYyNzI5QjdDMkY2NzVD
QkI2MTY4MTVDQkEyOTJBNzk4QkVCNEIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duOFZOeGlZTVFKUjhmZHE2RVVNS1pSSnZRRXRiRlk0S1dpZHRuZWVEUUg2LzEv
MzEzMzMxMmUzMTMwMzgyZTMyMzIzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM1MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAINs4jANBgkqhkiG9w0BAQsFAAOCAQEAxxjK
BteLZfWe8qJ1ty/V8VzWVvdCIpb3s5VeDUGlmQQK3c3tzfeHjAdxUnwlKb5/oz5a
dicnvZJqqmEdrclDcL2h/Rp6hdYdZW0pzCPYWBtMJBYoU1caEP1TfVMM/r7w7buR
6/QA/M7HRXNdHEVzFKnhY4mPbCwEm7aogYmx61IKJX/daGpk4NRe95kSX9J6R5XP
OcGdTkE2LWDYpZinYHrvWKOCMIXAVtvLxFm5OknPmYMb/gn8nlsmLZzZUthqu5a/
1Y+ZH2kEH8x5me6GheXXf+JDZ3f0V4+Gx008UT7If2/9wRhN7LOnFX/LWgRE4GuQ
ERWXCY/ALJzDUQ+RnQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:30 2024 by rpki-client on console-ams.rpki-client.org