Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3134332e3133372e36302e302f32322d3332203d3e20323632373733.roa
File:                     3134332e3133372e36302e302f32322d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          PJ5Qq0YiWkimV6xIfUHIS8NbKronVP0uKuTqDG79rC0=
Subject key identifier:   3F:AF:2E:09:F3:C0:A9:52:CC:C4:F3:67:12:1B:54:D8:7A:6F:88:2F
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       2C1DD180270582C4AC08A0C5B145E3FA324588FC
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3134332e3133372e36302e302f32322d3332203d3e20323632373733.roa
Signing time:             Sun 17 Nov 2024 16:30:18 +0000
ROA not before:           Sun 17 Nov 2024 16:25:18 +0000
ROA not after:            Sun 16 Nov 2025 16:30:18 +0000
asID:                     262773
IP address blocks:        143.137.60.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:1d:d1:80:27:05:82:c4:ac:08:a0:c5:b1:45:e3:fa:32:45:88:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Nov 17 16:25:18 2024 GMT
            Not After : Nov 16 16:30:18 2025 GMT
        Subject: CN=3FAF2E09F3C0A952CCC4F367121B54D87A6F882F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5b:05:ca:15:c6:b1:5c:1f:b1:4a:87:6a:1f:
                    bd:9b:78:f8:76:f6:81:d9:bc:f8:10:22:be:55:28:
                    54:a6:1b:26:7f:09:c6:c9:a1:b8:51:f2:02:c1:91:
                    92:16:22:e2:b7:88:99:db:a4:7f:90:ab:9b:ae:81:
                    dc:18:e2:ed:4e:3b:d3:19:37:1d:6c:fc:20:32:ec:
                    33:39:33:b8:55:35:06:c3:54:36:60:dc:4c:ce:9a:
                    08:04:54:c4:82:66:b5:9e:42:82:44:62:93:4b:15:
                    b9:4f:91:54:1c:c3:0b:94:f5:4e:0e:2d:52:b6:11:
                    d0:a3:c6:26:65:3c:f6:25:ee:a7:f7:c7:78:cb:d1:
                    93:e9:49:92:2b:06:e2:b2:b2:ff:6b:b9:1e:a7:46:
                    16:59:84:32:68:f6:a9:c5:76:c8:b4:5f:8a:1c:f5:
                    bf:60:2f:eb:62:82:bd:46:51:38:21:3a:83:46:5d:
                    13:1a:00:ce:d0:74:83:db:7e:89:4c:c0:93:9e:cd:
                    99:5e:ea:0b:bc:b5:43:e3:d9:40:6b:74:58:a3:1d:
                    3e:48:49:9b:ba:ab:17:b3:87:b1:46:34:e2:d0:49:
                    c0:17:cc:e2:8b:bd:c8:94:04:36:ac:66:ad:8f:48:
                    bb:44:12:05:b2:1a:51:3b:90:c3:8f:9b:66:fa:a2:
                    ae:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:AF:2E:09:F3:C0:A9:52:CC:C4:F3:67:12:1B:54:D8:7A:6F:88:2F
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3134332e3133372e36302e302f32322d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:40:e5:75:3f:e2:b1:4d:97:72:d2:10:0c:b0:61:86:bf:78:
         4a:ee:98:1f:32:0b:d1:8d:91:9b:ef:57:53:f9:16:6f:71:02:
         44:fb:c7:c2:5f:fe:77:fa:8e:1f:95:11:41:67:42:eb:35:38:
         f1:42:2b:de:f2:ca:10:0f:51:d3:87:47:dd:a1:43:b5:56:94:
         a3:6b:ed:00:90:ac:d6:ce:5d:47:ca:c8:c9:e6:56:93:37:21:
         9b:f1:c9:22:ab:89:55:cf:44:70:a9:e0:1e:09:9c:9e:b8:f0:
         89:29:9d:4f:e6:2b:15:ec:10:a1:2f:6e:be:ed:a0:d3:f0:54:
         c6:6a:60:f2:9c:51:b7:0f:f7:29:58:5a:a6:71:6e:c1:31:76:
         56:34:a1:bc:ec:7e:9b:2d:35:0f:a9:10:80:19:cc:85:0e:7d:
         f1:46:22:63:7e:a5:b2:72:ab:7c:05:40:a6:5c:6e:16:c9:db:
         10:71:4f:72:44:97:87:a1:03:25:9f:5f:72:27:d2:c5:56:fe:
         71:fb:e3:ad:0d:28:9e:e7:f3:b3:9d:62:4e:ee:2e:41:0b:e9:
         bc:cb:fa:6e:cd:9e:5e:88:34:1e:11:e3:fa:95:72:40:78:95:
         a6:b4:b0:7d:3b:1f:76:39:13:99:39:7e:3e:be:1d:22:f3:cf:
         b0:eb:7c:6c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULB3RgCcFgsSsCKDFsUXj+jJFiPwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJGOUFDNTAwQzU4OTk3MEI5RThBNkM2RTZGODgyREM2
RjI0NDg4NTAeFw0yNDExMTcxNjI1MThaFw0yNTExMTYxNjMwMThaMDMxMTAvBgNV
BAMTKDNGQUYyRTA5RjNDMEE5NTJDQ0M0RjM2NzEyMUI1NEQ4N0E2Rjg4MkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChWwXKFcaxXB+xSodqH72bePh2
9oHZvPgQIr5VKFSmGyZ/CcbJobhR8gLBkZIWIuK3iJnbpH+Qq5uugdwY4u1OO9MZ
Nx1s/CAy7DM5M7hVNQbDVDZg3EzOmggEVMSCZrWeQoJEYpNLFblPkVQcwwuU9U4O
LVK2EdCjxiZlPPYl7qf3x3jL0ZPpSZIrBuKysv9ruR6nRhZZhDJo9qnFdsi0X4oc
9b9gL+tigr1GUTghOoNGXRMaAM7QdIPbfolMwJOezZle6gu8tUPj2UBrdFijHT5I
SZu6qxezh7FGNOLQScAXzOKLvciUBDasZq2PSLtEEgWyGlE7kMOPm2b6oq7zAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUP68uCfPAqVLMxPNnEhtU2HpviC8wHwYDVR0j
BBgwFoAU+/msUAxYmXC56KbG5viC3G8kSIUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2
MzkvMS9GQkY5QUM1MDBDNTg5OTcwQjlFOEE2QzZFNkY4ODJEQzZGMjQ0ODg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCRjlBQzUwMEM1ODk5NzBC
OUU4QTZDNkU2Rjg4MkRDNkYyNDQ4ODUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzEv
MzEzNDMzMmUzMTMzMzcyZTM2MzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzIzNzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKPiTwwDQYJKoZIhvcNAQELBQADggEBAFBA5XU/
4rFNl3LSEAywYYa/eErumB8yC9GNkZvvV1P5Fm9xAkT7x8Jf/nf6jh+VEUFnQus1
OPFCK97yyhAPUdOHR92hQ7VWlKNr7QCQrNbOXUfKyMnmVpM3IZvxySKriVXPRHCp
4B4JnJ648IkpnU/mKxXsEKEvbr7toNPwVMZqYPKcUbcP9ylYWqZxbsExdlY0obzs
fpstNQ+pEIAZzIUOffFGImN+pbJyq3wFQKZcbhbJ2xBxT3JEl4ehAyWfX3In0sVW
/nH7460NKJ7n87OdYk7uLkEL6bzL+m7Nnl6INB4R4/qVckB4laa0sH07H3Y5E5k5
fj6+HSLzz7DrfGw=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:20 2024 by rpki-client on console-fra.rpki-client.org