Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3134332e3133372e3138382e302f32332d3234203d3e203533313037.roa
File:                     3134332e3133372e3138382e302f32332d3234203d3e203533313037.roa (raw, json)
Hash identifier:          UoerTS7Zy5cSB8xlwDFzuJhB+p6YIbZBp5HexxFKrXI=
Subject key identifier:   2E:1E:D5:B3:1C:65:E8:B9:5E:72:E3:70:C8:DA:50:D0:A8:04:55:97
Certificate issuer:       /CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
Certificate serial:       1F5C1D1C5AC832B2C576400A51C28F14488AAA9E
Authority key identifier: 1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3134332e3133372e3138382e302f32332d3234203d3e203533313037.roa
Signing time:             Tue 06 Aug 2024 00:19:58 +0000
ROA not before:           Tue 06 Aug 2024 00:14:58 +0000
ROA not after:            Tue 05 Aug 2025 00:19:58 +0000
asID:                     53107
IP address blocks:        143.137.188.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 15:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:5c:1d:1c:5a:c8:32:b2:c5:76:40:0a:51:c2:8f:14:48:8a:aa:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
        Validity
            Not Before: Aug  6 00:14:58 2024 GMT
            Not After : Aug  5 00:19:58 2025 GMT
        Subject: CN=2E1ED5B31C65E8B95E72E370C8DA50D0A8045597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8d:04:51:65:28:66:21:5f:44:80:f4:06:62:
                    af:8f:18:d4:cc:51:ad:32:ca:e5:e1:fa:d4:92:a3:
                    f1:17:d8:44:08:0a:ab:36:2e:73:f0:05:76:19:75:
                    30:ad:83:8e:99:83:46:86:fd:cf:a9:c8:78:8c:cf:
                    c4:13:8c:33:83:84:af:d4:bd:06:7b:e5:7a:83:8c:
                    db:69:88:37:28:e4:99:b7:f0:e9:dc:87:a4:88:14:
                    46:76:1d:cf:23:2e:7a:11:29:b9:89:c1:dc:dd:fe:
                    3c:4e:d0:8b:8a:cd:cb:57:ea:2e:2b:0a:df:48:cc:
                    e7:e6:2d:5d:c3:75:cd:ac:36:b4:cd:e7:88:6c:7b:
                    3c:f7:0a:72:5f:29:31:e7:4a:3b:fe:8e:f3:21:72:
                    88:c1:dc:33:6c:ad:71:c1:bf:62:30:0f:32:f2:0a:
                    e9:fd:99:c2:36:ea:27:b8:76:b5:63:d5:fb:85:e2:
                    4d:e1:b0:69:82:0f:11:39:12:99:be:34:0a:7c:75:
                    06:50:bc:1e:a6:c1:ac:2d:09:bc:7e:e4:c4:82:d2:
                    6f:07:12:7e:34:bb:14:5f:83:a1:69:3e:36:24:fc:
                    e7:58:b2:41:25:d0:92:0e:83:19:3c:88:92:41:96:
                    e9:b1:ad:b3:e1:5a:c7:c5:d4:63:2b:97:d8:3f:57:
                    81:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:1E:D5:B3:1C:65:E8:B9:5E:72:E3:70:C8:DA:50:D0:A8:04:55:97
            X509v3 Authority Key Identifier:
                keyid:1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3134332e3133372e3138382e302f32332d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:e5:d2:ce:ab:52:00:ec:f4:6d:80:2c:4d:f1:81:75:4f:75:
         c1:08:04:ac:5c:c9:b5:48:84:16:21:05:da:66:e1:49:df:bc:
         6e:3e:e8:de:ea:f2:a5:e1:b3:65:a7:76:05:72:04:14:86:07:
         37:cd:fc:5b:f2:0c:30:4c:ee:08:cb:52:4f:ad:f0:7e:d0:3d:
         f4:ef:c1:db:09:a9:a3:e9:7d:d4:90:64:b4:ac:8b:08:ab:23:
         7f:46:7d:7e:b1:9b:35:25:86:2c:39:8f:e8:10:10:b3:f8:46:
         d2:78:68:a2:78:35:d6:34:42:e5:e9:22:d1:79:80:34:ce:f2:
         a7:90:0d:c6:74:ef:f8:cd:ea:19:18:98:9a:c9:cb:bb:09:2b:
         54:f2:79:65:e8:e8:91:41:a0:d1:47:7a:89:69:d3:1b:9c:ce:
         ee:3d:19:57:37:09:59:7e:2d:47:a9:73:6b:dd:d9:eb:29:00:
         ab:94:15:2e:c7:11:eb:63:99:cb:9f:4e:3d:c4:9b:a5:17:fa:
         6e:bb:1a:dd:22:b2:1b:11:fc:ac:af:83:5c:ca:48:fc:a7:45:
         2c:59:01:a1:f1:02:41:5b:8f:39:50:54:2a:f8:85:cf:63:b7:
         56:76:64:4c:76:c5:a9:c4:58:c7:92:8f:61:d8:a6:36:47:1d:
         df:58:e1:7d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUH1wdHFrIMrLFdkAKUcKPFEiKqp4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUUzREI3Q0VCNzRDQjA0QzU5N0JCNTBCMDUwREUwRTc4
NUNGQTFBNTAeFw0yNDA4MDYwMDE0NThaFw0yNTA4MDUwMDE5NThaMDMxMTAvBgNV
BAMTKDJFMUVENUIzMUM2NUU4Qjk1RTcyRTM3MEM4REE1MEQwQTgwNDU1OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkjQRRZShmIV9EgPQGYq+PGNTM
Ua0yyuXh+tSSo/EX2EQICqs2LnPwBXYZdTCtg46Zg0aG/c+pyHiMz8QTjDODhK/U
vQZ75XqDjNtpiDco5Jm38Onch6SIFEZ2Hc8jLnoRKbmJwdzd/jxO0IuKzctX6i4r
Ct9IzOfmLV3Ddc2sNrTN54hsezz3CnJfKTHnSjv+jvMhcojB3DNsrXHBv2IwDzLy
Cun9mcI26ie4drVj1fuF4k3hsGmCDxE5Epm+NAp8dQZQvB6mwawtCbx+5MSC0m8H
En40uxRfg6FpPjYk/OdYskEl0JIOgxk8iJJBlumxrbPhWsfF1GMrl9g/V4HJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQULh7Vsxxl6LlecuNwyNpQ0KgEVZcwHwYDVR0j
BBgwFoAUHj23zrdMsExZe7ULBQ3g54XPoaUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDZTQ3VQNHNiNjR4c3JzQnU0d29BZXFWM21GNFhrdHdKUlBaRVQ2UDU0
TXUvMC8xRTNEQjdDRUI3NENCMDRDNTk3QkI1MEIwNTBERTBFNzg1Q0ZBMUE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFFM0RCN0NFQjc0Q0IwNEM1
OTdCQjUwQjA1MERFMEU3ODVDRkExQTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g2U0N1UDRzYjY0eHNyc0J1NHdvQWVxVjNtRjRYa3R3SlJQWkVUNlA1NE11LzAv
MzEzNDMzMmUzMTMzMzcyZTMxMzgzODJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM1
MzMzMTMwMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGPibwwDQYJKoZIhvcNAQELBQADggEBABbl0s6r
UgDs9G2ALE3xgXVPdcEIBKxcybVIhBYhBdpm4UnfvG4+6N7q8qXhs2WndgVyBBSG
BzfN/FvyDDBM7gjLUk+t8H7QPfTvwdsJqaPpfdSQZLSsiwirI39GfX6xmzUlhiw5
j+gQELP4RtJ4aKJ4NdY0QuXpItF5gDTO8qeQDcZ07/jN6hkYmJrJy7sJK1TyeWXo
6JFBoNFHeolp0xuczu49GVc3CVl+LUepc2vd2espAKuUFS7HEetjmcufTj3Em6UX
+m67Gt0ishsR/Kyvg1zKSPynRSxZAaHxAkFbjzlQVCr4hc9jt1Z2ZEx2xanEWMeS
j2HYpjZHHd9Y4X0=
-----END CERTIFICATE-----
Generated at Mon Nov 25 15:50:07 2024 by rpki-client on console-ams.rpki-client.org