Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3134332e302f32342d3234203d3e203532393330.roa
File:                     3139302e3138302e3134332e302f32342d3234203d3e203532393330.roa (raw, json)
Hash identifier:          gWC3RIf4/LzkKN5lDRJ9lZ3z0PzDNuxcJKiANNf8U1w=
Subject key identifier:   3E:8C:B2:C4:37:EB:1F:04:EB:E7:8B:16:93:EF:29:EA:2F:1A:F0:7D
Certificate issuer:       /CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
Certificate serial:       229546DF5B09DCB45BCBA14DC20961EE0F617161
Authority key identifier: B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3134332e302f32342d3234203d3e203532393330.roa
Signing time:             Fri 17 Jan 2025 16:16:49 +0000
ROA not before:           Fri 17 Jan 2025 16:11:49 +0000
ROA not after:            Fri 16 Jan 2026 16:16:49 +0000
asID:                     52930
IP address blocks:        190.180.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl
                          rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:95:46:df:5b:09:dc:b4:5b:cb:a1:4d:c2:09:61:ee:0f:61:71:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD
        Validity
            Not Before: Jan 17 16:11:49 2025 GMT
            Not After : Jan 16 16:16:49 2026 GMT
        Subject: CN=3E8CB2C437EB1F04EBE78B1693EF29EA2F1AF07D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:7b:77:34:51:74:51:91:0f:f1:f1:f3:b1:d6:
                    a0:48:cf:7f:b5:45:ff:1d:83:c9:31:44:c8:51:d0:
                    12:52:bf:39:90:bb:91:d5:4d:fe:d6:77:7b:3c:64:
                    01:f9:b7:38:89:e0:8e:e4:61:63:c7:1f:d1:a2:32:
                    86:a2:88:7b:4f:b6:47:f5:6a:86:69:50:c7:e1:e6:
                    b6:b0:6b:4f:ba:c2:cb:5d:d7:b9:e8:42:67:bb:e4:
                    5a:9e:3b:1d:3b:f7:ae:89:75:47:2f:fa:ad:15:f6:
                    b6:e2:3a:15:0f:f3:f1:98:ca:e3:67:fd:dc:fa:3d:
                    2d:66:98:d5:ad:25:be:f8:7f:fb:d9:ed:e0:dd:e5:
                    ef:80:c6:a3:24:10:45:5a:81:2e:cb:d4:75:64:68:
                    93:f5:41:3a:fc:23:96:ea:28:3a:ad:52:80:f7:27:
                    1b:88:1c:13:d7:4b:39:10:8d:c0:e0:f9:30:a0:1e:
                    e2:b7:f6:34:28:77:a8:7c:e9:c4:bf:01:b8:0a:59:
                    48:62:24:2b:b7:4d:2d:fe:6e:86:37:eb:98:91:ef:
                    d1:3f:a2:d3:f9:91:3a:b5:56:f5:56:76:39:f2:06:
                    5f:c3:3a:6e:4e:9f:e2:41:98:b3:fc:bb:33:be:ae:
                    d2:7e:63:91:19:10:49:29:03:d9:30:63:23:45:8f:
                    2a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:8C:B2:C4:37:EB:1F:04:EB:E7:8B:16:93:EF:29:EA:2F:1A:F0:7D
            X509v3 Authority Key Identifier:
                keyid:B0:F9:F7:5E:2F:F2:19:B2:BD:D6:25:EB:BC:29:4A:98:9B:AB:0E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0F9F75E2FF219B2BDD625EBBC294A989BAB0EBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/3139302e3138302e3134332e302f32342d3234203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.180.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:13:ab:f8:8d:74:3d:fa:0a:9e:d8:cd:45:77:f8:4d:ea:bd:
         7c:36:62:a9:b0:bd:e3:27:6d:93:d3:39:c7:29:15:2d:14:90:
         f1:15:46:c8:d1:84:a1:fb:cd:5d:c5:66:d6:54:fc:83:ac:72:
         ca:2b:b1:f6:f3:27:64:94:dd:f8:4b:44:43:7f:41:a4:f4:5d:
         e8:48:e0:ca:7b:83:c1:9d:8b:96:a3:80:a2:f4:1d:86:a6:1e:
         86:3d:e2:eb:7e:da:90:8d:88:d4:d5:c1:df:0f:ce:1e:63:fe:
         f1:33:6e:fa:06:11:41:18:5a:fc:72:e9:dc:26:6f:fa:5a:54:
         8b:62:95:38:86:b0:13:fd:c9:84:15:d3:f3:4a:be:41:a8:df:
         e2:71:b3:6c:f2:3c:1e:a9:e2:11:a4:c3:52:44:f7:0b:83:c3:
         86:ba:19:47:4a:07:1f:31:9f:af:6f:1b:a0:58:64:89:ed:a7:
         84:25:eb:07:ba:a8:14:b4:71:0b:84:08:5c:90:aa:93:7c:e0:
         33:18:33:f4:ac:37:f0:0a:bd:d6:84:0c:d9:1b:a7:1a:33:8f:
         1f:18:2f:a3:2d:fe:29:5e:c1:7f:46:af:68:5b:4e:5f:00:74:
         06:54:0b:98:5d:8b:e8:55:4d:50:8b:8c:5c:64:4f:6e:88:3c:
         a4:82:14:c1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIpVG31sJ3LRby6FNwglh7g9hcWEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBGOUY3NUUyRkYyMTlCMkJERDYyNUVCQkMyOTRBOTg5
QkFCMEVCRDAeFw0yNTAxMTcxNjExNDlaFw0yNjAxMTYxNjE2NDlaMDMxMTAvBgNV
BAMTKDNFOENCMkM0MzdFQjFGMDRFQkU3OEIxNjkzRUYyOUVBMkYxQUYwN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDre3c0UXRRkQ/x8fOx1qBIz3+1
Rf8dg8kxRMhR0BJSvzmQu5HVTf7Wd3s8ZAH5tziJ4I7kYWPHH9GiMoaiiHtPtkf1
aoZpUMfh5rawa0+6wstd17noQme75FqeOx07966JdUcv+q0V9rbiOhUP8/GYyuNn
/dz6PS1mmNWtJb74f/vZ7eDd5e+AxqMkEEVagS7L1HVkaJP1QTr8I5bqKDqtUoD3
JxuIHBPXSzkQjcDg+TCgHuK39jQod6h86cS/AbgKWUhiJCu3TS3+boY365iR79E/
otP5kTq1VvVWdjnyBl/DOm5On+JBmLP8uzO+rtJ+Y5EZEEkpA9kwYyNFjyr1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPoyyxDfrHwTr54sWk+8p6i8a8H0wHwYDVR0j
BBgwFoAUsPn3Xi/yGbK91iXrvClKmJurDr0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjdEYkU5OGRQWjlDVmkyVEhDMW9FVUVzck11NWpGNU1lZm5HMTluV1R6
anIvMC9CMEY5Rjc1RTJGRjIxOUIyQkRENjI1RUJCQzI5NEE5ODlCQUIwRUJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IwRjlGNzVFMkZGMjE5QjJC
REQ2MjVFQkJDMjk0QTk4OUJBQjBFQkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o3RGJFOThkUFo5Q1ZpMlRIQzFvRVVFc3JNdTVqRjVNZWZuRzE5bldUempyLzAv
MzEzOTMwMmUzMTM4MzAyZTMxMzQzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzIzOTMzMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC+tI8wDQYJKoZIhvcNAQELBQADggEBAEkTq/iN
dD36Cp7YzUV3+E3qvXw2YqmwveMnbZPTOccpFS0UkPEVRsjRhKH7zV3FZtZU/IOs
csorsfbzJ2SU3fhLREN/QaT0XehI4Mp7g8Gdi5ajgKL0HYamHoY94ut+2pCNiNTV
wd8Pzh5j/vEzbvoGEUEYWvxy6dwmb/paVItilTiGsBP9yYQV0/NKvkGo3+Jxs2zy
PB6p4hGkw1JE9wuDw4a6GUdKBx8xn69vG6BYZIntp4Ql6we6qBS0cQuECFyQqpN8
4DMYM/SsN/AKvdaEDNkbpxozjx8YL6Mt/ilewX9Gr2hbTl8AdAZUC5hdi+hVTVCL
jFxkT26IPKSCFME=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:46 2025 by rpki-client