Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HvRd3YQHzjuVVq8ktxp3QDexQFpiQwnVBhFZuxr9oALs/1/3139302e3132302e3233322e302f32322d3332203d3e20323730383232.roa
File:                     3139302e3132302e3233322e302f32322d3332203d3e20323730383232.roa (raw, json)
Hash identifier:          D46xs8nm97qYuE3j9I0FLPAGryFa3GFuRkIja6O+D7U=
Subject key identifier:   40:4B:0A:42:CA:0D:B2:5C:B8:EC:7B:AC:19:89:2B:D9:45:46:01:8F
Certificate issuer:       /CN=97987E59FF7A68A6D674B51B1420A36FEEB15532
Certificate serial:       6C8727DB05AE8AEC40BAE0F1F8AB4F17BB521E27
Authority key identifier: 97:98:7E:59:FF:7A:68:A6:D6:74:B5:1B:14:20:A3:6F:EE:B1:55:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97987E59FF7A68A6D674B51B1420A36FEEB15532.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HvRd3YQHzjuVVq8ktxp3QDexQFpiQwnVBhFZuxr9oALs/1/3139302e3132302e3233322e302f32322d3332203d3e20323730383232.roa
Signing time:             Thu 04 Apr 2024 22:05:35 +0000
ROA not before:           Thu 04 Apr 2024 22:00:35 +0000
ROA not after:            Thu 03 Apr 2025 22:05:35 +0000
asID:                     270822
IP address blocks:        190.120.232.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HvRd3YQHzjuVVq8ktxp3QDexQFpiQwnVBhFZuxr9oALs/1/97987E59FF7A68A6D674B51B1420A36FEEB15532.crl
                          rsync://rpki-repo.registro.br/repo/HvRd3YQHzjuVVq8ktxp3QDexQFpiQwnVBhFZuxr9oALs/1/97987E59FF7A68A6D674B51B1420A36FEEB15532.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97987E59FF7A68A6D674B51B1420A36FEEB15532.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:87:27:db:05:ae:8a:ec:40:ba:e0:f1:f8:ab:4f:17:bb:52:1e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97987E59FF7A68A6D674B51B1420A36FEEB15532
        Validity
            Not Before: Apr  4 22:00:35 2024 GMT
            Not After : Apr  3 22:05:35 2025 GMT
        Subject: CN=404B0A42CA0DB25CB8EC7BAC19892BD94546018F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:19:ee:75:a3:9a:51:19:d4:fa:b3:8b:64:95:
                    37:75:78:8b:6f:79:1b:97:32:96:8a:e9:65:9a:10:
                    fd:a9:79:ba:57:ca:ea:c7:b2:b4:23:65:b5:2a:70:
                    c5:d2:36:74:06:ee:fe:3b:7a:8c:14:f1:07:8d:61:
                    0d:25:ff:e7:ab:28:be:46:24:21:2b:73:ee:76:44:
                    ba:1c:d1:c7:03:15:d0:a7:d1:d4:d7:5a:8d:54:0c:
                    d6:07:65:00:c6:8c:87:57:47:07:59:7e:7f:41:92:
                    b6:9b:97:0f:f9:c3:9b:2d:21:ec:31:b9:8e:4f:cb:
                    86:ef:34:81:da:44:d8:c9:83:4a:4e:cf:34:7b:ce:
                    64:26:89:b0:30:33:c9:99:04:e6:63:da:e5:d5:0e:
                    a8:8e:bf:ca:55:59:b1:a7:4c:54:19:7c:bb:c7:19:
                    8d:eb:a9:ec:14:8e:82:5f:5c:c1:94:48:54:27:cb:
                    9f:e3:dc:73:96:4a:dc:1a:5e:af:ec:33:7a:b3:80:
                    e0:5f:b9:34:23:cb:4a:8f:69:7a:c1:33:76:f5:18:
                    0e:fe:96:13:ad:96:8b:60:26:b7:9d:06:28:c6:bb:
                    07:bb:37:30:03:71:8d:a7:9d:17:ce:70:78:14:80:
                    d5:10:bf:0a:d2:2f:bd:d8:e4:83:5c:12:14:a1:d3:
                    b9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4B:0A:42:CA:0D:B2:5C:B8:EC:7B:AC:19:89:2B:D9:45:46:01:8F
            X509v3 Authority Key Identifier:
                keyid:97:98:7E:59:FF:7A:68:A6:D6:74:B5:1B:14:20:A3:6F:EE:B1:55:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HvRd3YQHzjuVVq8ktxp3QDexQFpiQwnVBhFZuxr9oALs/1/97987E59FF7A68A6D674B51B1420A36FEEB15532.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97987E59FF7A68A6D674B51B1420A36FEEB15532.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HvRd3YQHzjuVVq8ktxp3QDexQFpiQwnVBhFZuxr9oALs/1/3139302e3132302e3233322e302f32322d3332203d3e20323730383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.120.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:38:4c:5f:1d:05:67:12:95:63:02:b2:a1:b7:9d:4f:cb:7c:
         73:7a:27:35:1f:47:f4:cd:b5:ce:c4:5d:f8:7a:a0:b2:52:f0:
         8d:0c:52:53:04:e7:71:15:98:62:6d:31:8e:a5:b2:b8:53:16:
         bd:37:16:22:65:63:e6:95:1a:dc:49:54:d2:5f:5f:6c:32:8c:
         74:ba:ba:a4:5d:d6:f9:3f:86:f6:b9:4b:d2:6a:0a:ab:f4:a5:
         d6:1f:0b:de:d2:96:38:df:47:41:45:55:61:fe:0c:13:e6:d0:
         41:21:3c:5a:38:d3:75:c6:42:b4:1f:2e:17:2e:a6:92:99:16:
         6a:6b:03:51:4e:a6:a3:ed:c1:eb:57:86:3b:c9:ba:c0:b1:a4:
         66:36:40:f7:5d:44:92:d1:e8:ce:b6:6e:68:1f:5e:cb:7d:b3:
         17:fd:88:2a:d3:ca:4e:3f:5d:ae:e4:ec:b6:c6:41:dc:24:fb:
         3d:16:be:d1:c2:4d:8f:a9:1c:4d:d0:16:17:07:ed:04:13:c9:
         06:e5:c2:02:67:67:6e:4b:0f:47:13:e7:d6:9b:b6:b4:b8:47:
         f2:af:ac:4b:2c:65:78:50:f2:1d:18:3f:13:17:65:2d:df:2d:
         c5:b8:b7:2a:d5:8a:88:c3:35:59:1e:2f:c3:06:c3:d2:40:39:
         e1:b9:76:3c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUbIcn2wWuiuxAuuDx+KtPF7tSHicwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc5ODdFNTlGRjdBNjhBNkQ2NzRCNTFCMTQyMEEzNkZF
RUIxNTUzMjAeFw0yNDA0MDQyMjAwMzVaFw0yNTA0MDMyMjA1MzVaMDMxMTAvBgNV
BAMTKDQwNEIwQTQyQ0EwREIyNUNCOEVDN0JBQzE5ODkyQkQ5NDU0NjAxOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgGe51o5pRGdT6s4tklTd1eItv
eRuXMpaK6WWaEP2pebpXyurHsrQjZbUqcMXSNnQG7v47eowU8QeNYQ0l/+erKL5G
JCErc+52RLoc0ccDFdCn0dTXWo1UDNYHZQDGjIdXRwdZfn9Bkrablw/5w5stIewx
uY5Py4bvNIHaRNjJg0pOzzR7zmQmibAwM8mZBOZj2uXVDqiOv8pVWbGnTFQZfLvH
GY3rqewUjoJfXMGUSFQny5/j3HOWStwaXq/sM3qzgOBfuTQjy0qPaXrBM3b1GA7+
lhOtlotgJredBijGuwe7NzADcY2nnRfOcHgUgNUQvwrSL73Y5INcEhSh07m5AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUQEsKQsoNsly47HusGYkr2UVGAY8wHwYDVR0j
BBgwFoAUl5h+Wf96aKbWdLUbFCCjb+6xVTIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHZSZDNZUUh6anVWVnE4a3R4cDNRRGV4UUZwaVF3blZCaEZadXhyOW9B
THMvMS85Nzk4N0U1OUZGN0E2OEE2RDY3NEI1MUIxNDIwQTM2RkVFQjE1NTMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk3OTg3RTU5RkY3QTY4QTZE
Njc0QjUxQjE0MjBBMzZGRUVCMTU1MzIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h2UmQzWVFIemp1VlZxOGt0eHAzUURleFFGcGlRd25WQmhGWnV4cjlvQUxzLzEv
MzEzOTMwMmUzMTMyMzAyZTMyMzMzMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzczMDM4MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAr546DANBgkqhkiG9w0BAQsFAAOCAQEAkDhM
Xx0FZxKVYwKyobedT8t8c3onNR9H9M21zsRd+HqgslLwjQxSUwTncRWYYm0xjqWy
uFMWvTcWImVj5pUa3ElU0l9fbDKMdLq6pF3W+T+G9rlL0moKq/Sl1h8L3tKWON9H
QUVVYf4ME+bQQSE8WjjTdcZCtB8uFy6mkpkWamsDUU6mo+3B61eGO8m6wLGkZjZA
911EktHozrZuaB9ey32zF/2IKtPKTj9druTstsZB3CT7PRa+0cJNj6kcTdAWFwft
BBPJBuXCAmdnbksPRxPn1pu2tLhH8q+sSyxleFDyHRg/ExdlLd8txbi3KtWKiMM1
WR4vwwbD0kA54bl2PA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:06 2024 by rpki-client on console-fra.rpki-client.org