Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3138392e39322e302e302f31342d3134203d3e203232303835.roa
File:                     3138392e39322e302e302f31342d3134203d3e203232303835.roa (raw, json)
Hash identifier:          DX+Zy723RFNgeXjeMNbTYMHrBAJRHlQRbnj6UQcL9j8=
Subject key identifier:   47:F5:8C:6A:BC:CB:8A:9D:0A:54:04:44:70:00:36:85:34:6B:C5:02
Certificate issuer:       /CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Certificate serial:       46C0C136054F0C6FEA4F8AD001981EE7BB7AA7A1
Authority key identifier: D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3138392e39322e302e302f31342d3134203d3e203232303835.roa
Signing time:             Wed 03 Apr 2024 18:31:55 +0000
ROA not before:           Wed 03 Apr 2024 18:26:55 +0000
ROA not after:            Wed 02 Apr 2025 18:31:55 +0000
asID:                     22085
IP address blocks:        189.92.0.0/14 maxlen: 14

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl
                          rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c0:c1:36:05:4f:0c:6f:ea:4f:8a:d0:01:98:1e:e7:bb:7a:a7:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
        Validity
            Not Before: Apr  3 18:26:55 2024 GMT
            Not After : Apr  2 18:31:55 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ac:a8:25:83:c2:18:83:c3:51:b5:3a:ba:fd:
                    45:ff:64:65:a6:0e:a7:a0:e0:8a:8b:36:3c:f3:fd:
                    ee:0d:ec:08:ad:bc:40:c3:66:81:85:66:77:36:ca:
                    14:3a:69:fa:a5:ac:9a:93:dc:fe:27:9f:24:64:14:
                    87:46:df:4f:53:22:b8:aa:da:bd:94:f5:bf:e2:ae:
                    e4:0c:4a:e9:4b:44:01:5d:44:62:24:55:94:50:ba:
                    18:54:c3:a0:fd:1d:da:a9:71:44:1e:97:41:02:75:
                    3f:b3:fd:30:23:ee:ef:95:26:62:0a:41:0d:46:3d:
                    41:bd:b2:b8:e3:99:5f:01:47:da:d4:ce:ef:cb:66:
                    f7:a2:99:63:45:44:34:33:02:b6:30:8a:02:58:b9:
                    86:8c:97:e5:16:37:57:99:4a:8c:80:38:ac:9d:56:
                    7a:0c:f8:0a:6d:55:8f:ed:9d:d1:0e:f3:8e:0c:fc:
                    d6:ba:16:cc:2d:cf:8a:62:32:dd:5d:d0:a5:93:22:
                    00:b0:f6:c1:df:6b:01:d8:56:51:be:28:e7:87:be:
                    d8:33:0b:08:18:28:c7:37:06:f8:65:f1:6d:51:a0:
                    0a:50:e5:55:0c:8f:5b:2c:5b:c3:6b:50:7e:da:0a:
                    b3:52:a4:62:89:16:8c:81:bc:8e:1b:00:a7:4e:9d:
                    88:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F5:8C:6A:BC:CB:8A:9D:0A:54:04:44:70:00:36:85:34:6B:C5:02
            X509v3 Authority Key Identifier:
                keyid:D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/3138392e39322e302e302f31342d3134203d3e203232303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.92.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         2b:57:7e:0a:ab:24:5f:fc:19:01:88:71:7d:2b:42:c8:c9:76:
         ae:d3:8e:81:0b:7e:32:52:d1:cc:d6:99:0b:73:70:a7:dd:fb:
         88:77:9d:37:af:ce:24:f6:42:84:d1:ef:24:c7:86:c7:5d:18:
         64:0f:05:5b:56:51:7f:95:62:6a:40:41:80:ba:8e:1f:dc:87:
         26:37:dc:18:53:71:23:71:57:00:28:f5:df:85:33:e3:57:35:
         ee:f1:70:60:21:c1:ea:04:ee:1e:c2:83:a3:f5:f0:01:17:f2:
         91:6a:7d:b0:bb:0b:08:df:09:73:72:e0:95:da:b4:fd:20:ce:
         65:54:98:1e:93:11:11:2e:f4:4e:05:0e:94:4d:4f:57:82:8f:
         66:7a:15:f1:42:25:31:3d:47:87:0e:2e:b2:5f:aa:5a:39:b3:
         b8:b2:8b:a1:7e:01:51:82:38:8c:19:3e:5f:a8:85:2d:43:27:
         a4:2b:99:9a:41:18:f9:a2:e8:05:ab:6d:16:ee:54:85:b7:bf:
         56:0a:49:58:0f:19:cc:ef:cb:ee:c7:4d:bc:00:38:16:ad:fe:
         3b:63:95:57:99:df:9c:bc:9e:a8:5c:eb:76:86:c1:bd:11:0c:
         a1:c4:b8:05:a2:29:76:fb:1a:24:98:82:8d:3f:3e:56:ba:2f:
         7f:20:d2:7b
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIURsDBNgVPDG/qT4rQAZge57t6p6EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDVFQkVFRkQ0NUEwRDkwQjVFNjBDRDhENEI0Mzg0MDk4
MzUzRTgyODAeFw0yNDA0MDMxODI2NTVaFw0yNTA0MDIxODMxNTVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjZBQ0E4MjU4M0MyMTg4M0Mz
NTFCNTNBQkFGRDQ1RkY2NDY1QTYwRUE3QTBFMDhBOEIzNjNDRjNGREVFMERFQzA4
QURCQzQwQzM2NjgxODU2Njc3MzZDQTE0M0E2OUZBQTVBQzlBOTNEQ0ZFMjc5RjI0
NjQxNDg3NDZERjRGNTMyMkI4QUFEQUJEOTRGNUJGRTJBRUU0MEM0QUU5NEI0NDAx
NUQ0NDYyMjQ1NTk0NTBCQTE4NTRDM0EwRkQxRERBQTk3MTQ0MUU5NzQxMDI3NTNG
QjNGRDMwMjNFRUVGOTUyNjYyMEE0MTBENDYzRDQxQkRCMkI4RTM5OTVGMDE0N0RB
RDRDRUVGQ0I2NkY3QTI5OTYzNDU0NDM0MzMwMkI2MzA4QTAyNThCOTg2OEM5N0U1
MTYzNzU3OTk0QThDODAzOEFDOUQ1NjdBMENGODBBNkQ1NThGRUQ5REQxMEVGMzhF
MENGQ0Q2QkExNkNDMkRDRjhBNjIzMkRENUREMEE1OTMyMjAwQjBGNkMxREY2QjAx
RDg1NjUxQkUyOEU3ODdCRUQ4MzMwQjA4MTgyOEM3MzcwNkY4NjVGMTZENTFBMDBB
NTBFNTU1MEM4RjVCMkM1QkMzNkI1MDdFREEwQUIzNTJBNDYyODkxNjhDODFCQzhF
MUIwMEE3NEU5RDg4RjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtqyoJYPCGIPDUbU6uv1F/2Rlpg6noOCKizY88/3uDewIrbxAw2aB
hWZ3NsoUOmn6payak9z+J58kZBSHRt9PUyK4qtq9lPW/4q7kDErpS0QBXURiJFWU
ULoYVMOg/R3aqXFEHpdBAnU/s/0wI+7vlSZiCkENRj1BvbK445lfAUfa1M7vy2b3
opljRUQ0MwK2MIoCWLmGjJflFjdXmUqMgDisnVZ6DPgKbVWP7Z3RDvOODPzWuhbM
Lc+KYjLdXdClkyIAsPbB32sB2FZRvijnh77YMwsIGCjHNwb4ZfFtUaAKUOVVDI9b
LFvDa1B+2gqzUqRiiRaMgbyOGwCnTp2I+QIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FEf1jGq8y4qdClQERHAANoU0a8UCMB8GA1UdIwQYMBaAFNXr7v1FoNkLXmDNjUtD
hAmDU+goMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hGWXFjckxWdjFKSld6
dlVGZ1I4cVp6cGlkTFFUdGtCa1haczZnZVFkdWllLzEvRDVFQkVFRkQ0NUEwRDkw
QjVFNjBDRDhENEI0Mzg0MDk4MzUzRTgyOC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9ENUVCRUVGRDQ1QTBEOTBCNUU2MENEOEQ0QjQzODQwOTgzNTNF
ODI4LmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9IRllxY3JMVnYxSkpXenZVRmdS
OHFaenBpZExRVHRrQmtYWnM2Z2VRZHVpZS8xLzMxMzgzOTJlMzkzMjJlMzAyZTMw
MmYzMTM0MmQzMTM0MjAzZDNlMjAzMjMyMzAzODM1LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCvVwwDQYJ
KoZIhvcNAQELBQADggEBACtXfgqrJF/8GQGIcX0rQsjJdq7TjoELfjJS0czWmQtz
cKfd+4h3nTevziT2QoTR7yTHhsddGGQPBVtWUX+VYmpAQYC6jh/chyY33BhTcSNx
VwAo9d+FM+NXNe7xcGAhweoE7h7Cg6P18AEX8pFqfbC7CwjfCXNy4JXatP0gzmVU
mB6TEREu9E4FDpRNT1eCj2Z6FfFCJTE9R4cOLrJfqlo5s7iyi6F+AVGCOIwZPl+o
hS1DJ6QrmZpBGPmi6AWrbRbuVIW3v1YKSVgPGczvy+7HTbwAOBat/jtjlVeZ35y8
nqhc63aGwb0RDKHEuAWiKXb7GiSYgo0/Pla6L38g0ns=
-----END CERTIFICATE-----
Generated at Fri Jun 28 09:51:07 2024 by rpki-client on console-ams.rpki-client.org