Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/3136302e3233382e32342e302f32322d3234203d3e20323637323633.roa
File:                     3136302e3233382e32342e302f32322d3234203d3e20323637323633.roa (raw, json)
Hash identifier:          PFf7r8NesetTZTWlwVJGodcacjgKx2YPuW6mqFlVgBA=
Subject key identifier:   E4:E6:6A:AE:A5:A7:08:9C:20:33:9E:9B:BF:68:C9:28:FD:BC:C6:4C
Certificate issuer:       /CN=9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9
Certificate serial:       6FC08F42FE8773976141A461AC0C5CB2D2D4FD58
Authority key identifier: 9E:8E:1D:B5:C3:3D:3F:C8:F8:E7:C9:93:01:15:80:AA:28:F3:0B:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/3136302e3233382e32342e302f32322d3234203d3e20323637323633.roa
Signing time:             Mon 14 Oct 2024 19:55:52 +0000
ROA not before:           Mon 14 Oct 2024 19:50:52 +0000
ROA not after:            Mon 13 Oct 2025 19:55:52 +0000
asID:                     267263
IP address blocks:        160.238.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.crl
                          rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c0:8f:42:fe:87:73:97:61:41:a4:61:ac:0c:5c:b2:d2:d4:fd:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9
        Validity
            Not Before: Oct 14 19:50:52 2024 GMT
            Not After : Oct 13 19:55:52 2025 GMT
        Subject: CN=E4E66AAEA5A7089C20339E9BBF68C928FDBCC64C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5d:a4:37:70:83:01:cc:52:0c:67:1e:84:d3:
                    0d:0f:86:a1:75:2e:da:c1:0a:d3:f3:77:57:09:f1:
                    36:fe:8f:38:c1:90:3c:9f:2a:63:88:93:c1:03:80:
                    ae:22:c4:fb:32:d8:7d:ed:2d:d2:29:b3:08:c8:67:
                    45:60:b4:29:7f:41:5e:dd:e2:2b:3d:71:4b:0b:b9:
                    8d:5f:c4:c2:9b:e9:b3:af:d3:7d:07:1c:2c:01:fb:
                    d6:87:9b:15:a7:b5:6c:f5:6d:af:87:29:a7:7e:db:
                    ce:01:aa:88:79:5f:53:d3:c4:34:af:c8:bb:34:de:
                    54:35:79:79:b7:45:0e:91:95:54:d8:39:7d:38:75:
                    d3:9e:04:27:33:86:36:b1:f7:f7:71:cb:d0:09:6e:
                    21:6d:63:1c:26:8b:e1:d6:7f:6f:76:e1:97:e7:6c:
                    c5:44:68:88:fb:57:fb:b5:46:7b:de:9f:ee:9d:4d:
                    42:9a:c8:5f:c4:fc:c1:bf:72:58:b3:26:c2:57:e0:
                    37:f8:d9:75:97:1c:52:90:66:b9:cd:d3:f8:2b:d7:
                    07:f6:a5:a2:d7:82:f0:75:f4:45:d0:06:e7:ac:fa:
                    09:a8:82:03:98:12:4d:5c:83:93:db:86:35:fb:41:
                    55:a2:67:20:c5:7a:07:27:4f:df:11:ed:56:9e:e9:
                    a5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E6:6A:AE:A5:A7:08:9C:20:33:9E:9B:BF:68:C9:28:FD:BC:C6:4C
            X509v3 Authority Key Identifier:
                keyid:9E:8E:1D:B5:C3:3D:3F:C8:F8:E7:C9:93:01:15:80:AA:28:F3:0B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/3136302e3233382e32342e302f32322d3234203d3e20323637323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:01:e7:83:da:d8:6b:70:7c:64:9b:77:a4:30:55:f2:ff:95:
         57:8b:1a:fc:44:51:22:8f:f5:5e:bb:87:a1:57:6f:2e:f9:fe:
         bf:f8:17:84:1c:6a:91:61:35:24:5b:7b:58:63:5e:42:10:1a:
         6b:3b:e9:b4:aa:b7:57:fb:89:a0:15:51:c9:de:e3:a1:d1:af:
         54:d5:8b:78:5a:96:fe:54:2b:82:b4:78:02:ed:c3:71:a3:d3:
         91:36:93:4d:76:14:9d:9e:28:86:be:58:e8:a7:87:11:d2:f5:
         88:8d:7d:80:09:61:9d:59:55:95:d5:4b:8f:af:dc:d3:0a:36:
         3a:e8:b5:5e:b8:35:1c:e6:0e:7b:0b:75:a2:e9:a9:53:ba:7e:
         38:cb:76:fc:ff:8e:5c:0f:7d:47:7d:43:d9:e2:72:0f:4b:99:
         18:2b:cd:ad:b6:db:8f:30:6b:9d:c6:a7:37:a8:c3:5f:a2:16:
         11:3b:81:d0:2d:65:9b:e4:63:65:50:7a:b4:97:a6:04:a0:18:
         c1:5d:1c:39:3a:19:48:5b:a8:86:3e:ee:8e:1c:ba:13:67:72:
         62:9d:b8:6f:50:89:72:d5:54:18:8e:5f:85:f1:80:11:96:e5:
         d0:be:74:d8:41:08:f3:28:71:f0:61:e8:f6:e1:dd:2f:a3:fb:
         c6:83:90:ad
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUb8CPQv6Hc5dhQaRhrAxcstLU/VgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUU4RTFEQjVDMzNEM0ZDOEY4RTdDOTkzMDExNTgwQUEy
OEYzMEJDOTAeFw0yNDEwMTQxOTUwNTJaFw0yNTEwMTMxOTU1NTJaMDMxMTAvBgNV
BAMTKEU0RTY2QUFFQTVBNzA4OUMyMDMzOUU5QkJGNjhDOTI4RkRCQ0M2NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJXaQ3cIMBzFIMZx6E0w0PhqF1
LtrBCtPzd1cJ8Tb+jzjBkDyfKmOIk8EDgK4ixPsy2H3tLdIpswjIZ0VgtCl/QV7d
4is9cUsLuY1fxMKb6bOv030HHCwB+9aHmxWntWz1ba+HKad+284Bqoh5X1PTxDSv
yLs03lQ1eXm3RQ6RlVTYOX04ddOeBCczhjax9/dxy9AJbiFtYxwmi+HWf2924Zfn
bMVEaIj7V/u1Rnven+6dTUKayF/E/MG/clizJsJX4Df42XWXHFKQZrnN0/gr1wf2
paLXgvB19EXQBues+gmoggOYEk1cg5PbhjX7QVWiZyDFegcnT98R7Vae6aX/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5OZqrqWnCJwgM56bv2jJKP28xkwwHwYDVR0j
BBgwFoAUno4dtcM9P8j458mTARWAqijzC8kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEpqZ0hEN2tIaFAxVWFnZlYxQ25MWWJKalVSQWlVY2lwcjk1UXpobm5F
eWsvMC85RThFMURCNUMzM0QzRkM4RjhFN0M5OTMwMTE1ODBBQTI4RjMwQkM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlFOEUxREI1QzMzRDNGQzhG
OEU3Qzk5MzAxMTU4MEFBMjhGMzBCQzkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hKamdIRDdrSGhQMVVhZ2ZWMUNuTFliSmpVUkFpVWNpcHI5NVF6aG5uRXlrLzAv
MzEzNjMwMmUzMjMzMzgyZTMyMzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzczMjM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKg7hgwDQYJKoZIhvcNAQELBQADggEBAIEB54Pa
2GtwfGSbd6QwVfL/lVeLGvxEUSKP9V67h6FXby75/r/4F4QcapFhNSRbe1hjXkIQ
Gms76bSqt1f7iaAVUcne46HRr1TVi3halv5UK4K0eALtw3Gj05E2k012FJ2eKIa+
WOinhxHS9YiNfYAJYZ1ZVZXVS4+v3NMKNjrotV64NRzmDnsLdaLpqVO6fjjLdvz/
jlwPfUd9Q9nicg9LmRgrza22248wa53Gpzeow1+iFhE7gdAtZZvkY2VQerSXpgSg
GMFdHDk6GUhbqIY+7o4cuhNncmKduG9QiXLVVBiOX4XxgBGW5dC+dNhBCPMocfBh
6Pbh3S+j+8aDkK0=
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:46 2024 by rpki-client on console-ams.rpki-client.org