Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/3139302e3130392e38382e302f32332d3233203d3e20323634323330.roa
File:                     3139302e3130392e38382e302f32332d3233203d3e20323634323330.roa (raw, json)
Hash identifier:          ZLKb4AG+g5DzCdFkezlkywyGRCABGYW2GreR29i0eTc=
Subject key identifier:   36:E1:AE:98:63:72:E6:89:D4:A1:A9:35:CE:FE:E4:70:91:FA:75:CB
Certificate issuer:       /CN=D59C2B03CF0FCD4B0D3005B321204334D08669AF
Certificate serial:       1DBFBF8C37ADB03CBB141938703885E237155818
Authority key identifier: D5:9C:2B:03:CF:0F:CD:4B:0D:30:05:B3:21:20:43:34:D0:86:69:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D59C2B03CF0FCD4B0D3005B321204334D08669AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/3139302e3130392e38382e302f32332d3233203d3e20323634323330.roa
Signing time:             Mon 28 Oct 2024 21:20:40 +0000
ROA not before:           Mon 28 Oct 2024 21:15:40 +0000
ROA not after:            Mon 27 Oct 2025 21:20:40 +0000
asID:                     264230
IP address blocks:        190.109.88.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/D59C2B03CF0FCD4B0D3005B321204334D08669AF.crl
                          rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/D59C2B03CF0FCD4B0D3005B321204334D08669AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D59C2B03CF0FCD4B0D3005B321204334D08669AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 23:34:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:bf:bf:8c:37:ad:b0:3c:bb:14:19:38:70:38:85:e2:37:15:58:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D59C2B03CF0FCD4B0D3005B321204334D08669AF
        Validity
            Not Before: Oct 28 21:15:40 2024 GMT
            Not After : Oct 27 21:20:40 2025 GMT
        Subject: CN=36E1AE986372E689D4A1A935CEFEE47091FA75CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cb:e6:a2:fd:a0:14:53:1e:c5:75:be:c4:7f:
                    14:f8:49:45:1b:06:6c:ef:c9:c5:52:ce:38:37:8d:
                    85:ce:2b:4a:b4:10:a8:33:64:ad:1d:18:15:0c:2f:
                    f6:5f:9d:2a:ad:32:de:53:9f:ae:e4:ba:f9:3f:50:
                    34:e5:2a:5a:9d:2d:37:43:ef:db:42:25:e7:be:4b:
                    ef:78:e1:df:60:ae:83:82:89:ad:5e:a7:7b:27:6b:
                    3f:49:e2:15:0d:4d:56:a9:bd:cf:82:73:df:1f:47:
                    c5:6d:10:e8:fa:96:b1:2a:df:4f:97:07:f1:0b:ce:
                    4b:97:55:62:84:bb:8e:08:37:0d:38:69:8c:1f:30:
                    4d:35:2f:10:c8:2e:ed:c5:8b:ee:b3:e8:5d:26:7c:
                    ae:da:1e:05:62:c1:2d:4d:8f:34:02:a1:14:6b:4a:
                    8f:85:2e:ae:d8:32:a8:43:cc:63:cc:75:a9:d4:e2:
                    cd:cd:1c:9c:fa:0c:71:5f:33:9c:d7:bd:ce:13:6d:
                    cd:62:5a:be:4d:a5:64:7b:4e:ed:b1:29:44:f2:44:
                    9c:96:ef:a3:4f:c1:2b:79:98:a8:88:88:b3:ee:a0:
                    db:5c:4a:e0:6e:3e:da:88:be:48:2d:4b:25:1b:25:
                    f1:1d:09:b1:30:d4:54:bb:2e:e0:48:c9:b9:1e:19:
                    de:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E1:AE:98:63:72:E6:89:D4:A1:A9:35:CE:FE:E4:70:91:FA:75:CB
            X509v3 Authority Key Identifier:
                keyid:D5:9C:2B:03:CF:0F:CD:4B:0D:30:05:B3:21:20:43:34:D0:86:69:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/D59C2B03CF0FCD4B0D3005B321204334D08669AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D59C2B03CF0FCD4B0D3005B321204334D08669AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/SvtopekQUR7gGrxACyVQ5ZuUFr6Y7sHJBro8zZYe5Ud/0/3139302e3130392e38382e302f32332d3233203d3e20323634323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:ab:84:a6:8c:53:f4:45:2d:89:48:3a:12:3c:e2:1f:5e:dd:
         bb:27:cf:b9:94:7e:a5:a9:d3:6e:21:9f:4c:68:95:3a:2a:d1:
         40:28:1c:bb:78:be:97:ea:fb:4c:58:3c:75:76:95:37:25:e9:
         c4:04:64:c9:87:c2:b1:bc:72:ec:29:10:26:25:42:6d:39:e5:
         2e:fb:95:5a:a0:9c:14:4e:41:d1:8e:52:d1:c3:cd:de:7a:75:
         4d:c9:b2:02:57:c0:8e:d5:63:c3:d7:ee:3c:cf:ff:5e:db:99:
         23:e8:50:b7:8e:02:6c:0f:98:a3:b5:47:a3:7e:4e:a4:b0:22:
         b1:d7:eb:57:e4:21:b3:50:33:f8:7e:59:6f:9d:59:d2:d1:01:
         1b:72:60:ea:a4:6a:28:62:2f:a4:6a:4d:dd:45:d9:96:85:69:
         62:e7:e9:0c:90:ba:ec:99:bc:9b:eb:2e:be:38:34:af:cd:5c:
         8d:91:00:9f:53:85:7e:f5:79:2b:9e:78:82:71:10:e9:03:12:
         c4:8a:c4:35:00:0d:cf:6f:7a:68:88:ed:2f:89:ae:ff:0c:73:
         b0:72:31:f9:0c:9e:33:85:22:9b:90:0e:df:48:b9:14:e4:e3:
         e0:82:e4:73:b2:ad:54:bc:11:fb:e5:8a:9a:51:6a:a9:60:b2:
         fc:3d:2e:e1
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUHb+/jDetsDy7FBk4cDiF4jcVWBgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU5QzJCMDNDRjBGQ0Q0QjBEMzAwNUIzMjEyMDQzMzRE
MDg2NjlBRjAeFw0yNDEwMjgyMTE1NDBaFw0yNTEwMjcyMTIwNDBaMDMxMTAvBgNV
BAMTKDM2RTFBRTk4NjM3MkU2ODlENEExQTkzNUNFRkVFNDcwOTFGQTc1Q0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUy+ai/aAUUx7Fdb7EfxT4SUUb
BmzvycVSzjg3jYXOK0q0EKgzZK0dGBUML/ZfnSqtMt5Tn67kuvk/UDTlKlqdLTdD
79tCJee+S+944d9groOCia1ep3snaz9J4hUNTVapvc+Cc98fR8VtEOj6lrEq30+X
B/ELzkuXVWKEu44INw04aYwfME01LxDILu3Fi+6z6F0mfK7aHgViwS1NjzQCoRRr
So+FLq7YMqhDzGPMdanU4s3NHJz6DHFfM5zXvc4Tbc1iWr5NpWR7Tu2xKUTyRJyW
76NPwSt5mKiIiLPuoNtcSuBuPtqIvkgtSyUbJfEdCbEw1FS7LuBIybkeGd6XAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUNuGumGNy5onUoak1zv7kcJH6dcswHwYDVR0j
BBgwFoAU1ZwrA88PzUsNMAWzISBDNNCGaa8wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9TdnRvcGVrUVVSN2dHcnhBQ3lWUTVadVVGcjZZN3NISkJybzh6WlllNVVk
LzAvRDU5QzJCMDNDRjBGQ0Q0QjBEMzAwNUIzMjEyMDQzMzREMDg2NjlBRi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9ENTlDMkIwM0NGMEZDRDRCMEQz
MDA1QjMyMTIwNDMzNEQwODY2OUFGLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9T
dnRvcGVrUVVSN2dHcnhBQ3lWUTVadVVGcjZZN3NISkJybzh6WlllNVVkLzAvMzEz
OTMwMmUzMTMwMzkyZTM4MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzQz
MjMzMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAG+bVgwDQYJKoZIhvcNAQELBQADggEBAF+rhKaMU/RF
LYlIOhI84h9e3bsnz7mUfqWp024hn0xolToq0UAoHLt4vpfq+0xYPHV2lTcl6cQE
ZMmHwrG8cuwpECYlQm055S77lVqgnBROQdGOUtHDzd56dU3JsgJXwI7VY8PX7jzP
/17bmSPoULeOAmwPmKO1R6N+TqSwIrHX61fkIbNQM/h+WW+dWdLRARtyYOqkaihi
L6RqTd1F2ZaFaWLn6QyQuuyZvJvrLr44NK/NXI2RAJ9ThX71eSueeIJxEOkDEsSK
xDUADc9vemiI7S+Jrv8Mc7ByMfkMnjOFIpuQDt9IuRTk4+CC5HOyrVS8EfvlippR
aqlgsvw9LuE=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:18 2024 by rpki-client on console-fra.rpki-client.org