Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/3133382e3131372e33322e302f32322d3233203d3e20323634343739.roa
File:                     3133382e3131372e33322e302f32322d3233203d3e20323634343739.roa (raw, json)
Hash identifier:          KXSJtA1lebUjVjHhCpcCPB/AOAvPHG33XKcqs3btIzo=
Subject key identifier:   E9:ED:E9:82:CB:4A:20:BC:97:F2:A3:AE:63:E1:6A:2A:5C:0D:D1:01
Certificate issuer:       /CN=16BC000CB0A478A70E4FBA552217F242CDF07AE9
Certificate serial:       58E883A39BA6D62B77D4A847308AB242542DE1C4
Authority key identifier: 16:BC:00:0C:B0:A4:78:A7:0E:4F:BA:55:22:17:F2:42:CD:F0:7A:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/3133382e3131372e33322e302f32322d3233203d3e20323634343739.roa
Signing time:             Thu 04 Apr 2024 18:26:01 +0000
ROA not before:           Thu 04 Apr 2024 18:21:01 +0000
ROA not after:            Thu 03 Apr 2025 18:26:01 +0000
asID:                     264479
IP address blocks:        138.117.32.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.crl
                          rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 08:47:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e8:83:a3:9b:a6:d6:2b:77:d4:a8:47:30:8a:b2:42:54:2d:e1:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16BC000CB0A478A70E4FBA552217F242CDF07AE9
        Validity
            Not Before: Apr  4 18:21:01 2024 GMT
            Not After : Apr  3 18:26:01 2025 GMT
        Subject: CN=E9EDE982CB4A20BC97F2A3AE63E16A2A5C0DD101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:38:98:c8:5f:e5:f8:9a:45:96:92:d7:7d:55:
                    5c:c4:21:a1:ce:9f:1c:01:35:23:68:05:48:cb:7a:
                    25:11:39:d6:52:12:a7:09:46:ef:ea:57:07:2c:7d:
                    98:09:ae:ab:bf:16:02:07:22:ee:01:c8:5f:1d:41:
                    29:d0:76:48:1e:58:23:7e:13:d3:6a:6f:29:8a:2c:
                    20:d7:8f:a1:fa:9a:5b:42:76:e7:d2:8a:b4:38:a3:
                    4b:d0:15:cc:a2:73:3a:9f:7f:e6:61:32:e8:45:79:
                    13:14:1c:e7:bb:57:2e:8d:26:0c:a2:dd:c4:cb:b1:
                    d7:89:24:2e:91:36:0d:26:ce:e6:86:94:04:42:a8:
                    20:0c:4b:47:95:a7:f5:78:c3:ef:74:ef:b3:87:9f:
                    b9:6e:b4:6d:c9:bb:13:36:4c:b8:80:fc:35:af:b7:
                    ba:28:01:61:45:3b:1d:fa:a4:f8:4d:7b:3f:2b:7d:
                    44:d6:ae:67:5d:cf:78:63:20:5b:17:57:da:94:5d:
                    77:70:0e:88:f7:e2:b7:89:9a:91:3b:52:03:10:0d:
                    9d:af:6b:f2:95:84:eb:cd:a9:8f:ed:56:b7:f1:73:
                    66:89:ec:41:29:6d:ac:3d:ea:37:97:3a:2e:13:00:
                    f1:4f:c2:c7:3b:fe:b0:d2:7d:79:c1:cc:70:ba:a1:
                    cc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:ED:E9:82:CB:4A:20:BC:97:F2:A3:AE:63:E1:6A:2A:5C:0D:D1:01
            X509v3 Authority Key Identifier:
                keyid:16:BC:00:0C:B0:A4:78:A7:0E:4F:BA:55:22:17:F2:42:CD:F0:7A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/3133382e3131372e33322e302f32322d3233203d3e20323634343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:ca:36:a8:2b:19:b6:de:78:2d:0d:ff:5e:d1:29:01:d6:66:
         fb:1b:8e:c8:0a:d4:40:75:03:4f:e2:0a:b4:30:0f:a8:81:b6:
         09:dd:58:47:9d:1e:33:9e:2e:0d:d2:cb:9c:fe:8b:7f:cb:33:
         12:54:14:42:80:44:fe:3b:90:52:a6:06:3d:e4:42:1f:28:c1:
         c0:bd:8a:70:b9:5f:fa:ad:53:66:bc:f3:70:f5:74:fa:37:56:
         5f:07:b2:98:9a:c3:aa:18:14:f3:91:ff:1e:23:5a:77:d0:ee:
         02:15:02:aa:b7:c3:ec:ac:0c:7a:49:85:25:f8:dc:ec:79:00:
         31:71:1a:17:7b:1c:02:81:55:5d:59:0d:d4:e3:ba:60:b1:52:
         80:7d:8c:58:a4:70:2b:2c:de:22:60:c3:e1:fe:01:3b:c6:05:
         01:07:29:4c:55:5a:c0:21:65:3e:84:71:13:95:f5:fb:09:be:
         88:84:b3:19:6a:1c:d9:91:46:7d:27:e6:1a:11:40:d8:9d:07:
         32:33:28:f8:d6:57:14:1e:48:fa:15:96:51:15:1d:2f:d9:12:
         f7:ba:6e:c5:44:ba:b4:06:9b:50:0f:23:d8:f7:e7:4d:b5:3a:
         54:50:d0:ff:1f:50:81:bc:16:8c:df:11:9d:bd:23:fc:1f:50:
         66:cd:a6:66
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWOiDo5um1it31KhHMIqyQlQt4cQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZCQzAwMENCMEE0NzhBNzBFNEZCQTU1MjIxN0YyNDJD
REYwN0FFOTAeFw0yNDA0MDQxODIxMDFaFw0yNTA0MDMxODI2MDFaMDMxMTAvBgNV
BAMTKEU5RURFOTgyQ0I0QTIwQkM5N0YyQTNBRTYzRTE2QTJBNUMwREQxMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNOJjIX+X4mkWWktd9VVzEIaHO
nxwBNSNoBUjLeiUROdZSEqcJRu/qVwcsfZgJrqu/FgIHIu4ByF8dQSnQdkgeWCN+
E9NqbymKLCDXj6H6mltCdufSirQ4o0vQFcyiczqff+ZhMuhFeRMUHOe7Vy6NJgyi
3cTLsdeJJC6RNg0mzuaGlARCqCAMS0eVp/V4w+9077OHn7lutG3JuxM2TLiA/DWv
t7ooAWFFOx36pPhNez8rfUTWrmddz3hjIFsXV9qUXXdwDoj34reJmpE7UgMQDZ2v
a/KVhOvNqY/tVrfxc2aJ7EEpbaw96jeXOi4TAPFPwsc7/rDSfXnBzHC6ocx5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6e3pgstKILyX8qOuY+FqKlwN0QEwHwYDVR0j
BBgwFoAUFrwADLCkeKcOT7pVIhfyQs3weukwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEVBall0ZHhKM29RdzZqNnZVRE1UWHg4WHhacVZNS1BucnludFhCaXFu
dmQvMS8xNkJDMDAwQ0IwQTQ3OEE3MEU0RkJBNTUyMjE3RjI0MkNERjA3QUU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2QkMwMDBDQjBBNDc4QTcw
RTRGQkE1NTIyMTdGMjQyQ0RGMDdBRTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hFQWpZdGR4SjNvUXc2ajZ2VURNVFh4OFh4WnFWTUtQbnJ5bnRYQmlxbnZkLzEv
MzEzMzM4MmUzMTMxMzcyZTMzMzIyZTMwMmYzMjMyMmQzMjMzMjAzZDNlMjAzMjM2
MzQzNDM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKdSAwDQYJKoZIhvcNAQELBQADggEBAIfKNqgr
GbbeeC0N/17RKQHWZvsbjsgK1EB1A0/iCrQwD6iBtgndWEedHjOeLg3Sy5z+i3/L
MxJUFEKARP47kFKmBj3kQh8owcC9inC5X/qtU2a883D1dPo3Vl8Hspiaw6oYFPOR
/x4jWnfQ7gIVAqq3w+ysDHpJhSX43Ox5ADFxGhd7HAKBVV1ZDdTjumCxUoB9jFik
cCss3iJgw+H+ATvGBQEHKUxVWsAhZT6EcROV9fsJvoiEsxlqHNmRRn0n5hoRQNid
BzIzKPjWVxQeSPoVllEVHS/ZEve6bsVEurQGm1API9j35021OlRQ0P8fUIG8Fozf
EZ29I/wfUGbNpmY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:26 2024 by rpki-client on console-ams.rpki-client.org