Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/3139322e3134302e3130302e302f32332d3233203d3e20323636323536.roa
File:                     3139322e3134302e3130302e302f32332d3233203d3e20323636323536.roa (raw, json)
Hash identifier:          sI62U93q6KnHOhfLnNJ2B0XXtC9Voah+yMoDoRctJgM=
Subject key identifier:   CA:FD:33:91:CE:25:14:C4:4A:0A:5D:99:5E:05:59:B0:30:04:4A:7F
Certificate issuer:       /CN=98A11CF45A997CA909604F2E4619398BBAA2D923
Certificate serial:       3052C36CF18AA10750BE1D8E406CF875909CD69F
Authority key identifier: 98:A1:1C:F4:5A:99:7C:A9:09:60:4F:2E:46:19:39:8B:BA:A2:D9:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98A11CF45A997CA909604F2E4619398BBAA2D923.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/3139322e3134302e3130302e302f32332d3233203d3e20323636323536.roa
Signing time:             Thu 06 Mar 2025 02:51:47 +0000
ROA not before:           Thu 06 Mar 2025 02:46:47 +0000
ROA not after:            Thu 05 Mar 2026 02:51:47 +0000
asID:                     266256
IP address blocks:        192.140.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/98A11CF45A997CA909604F2E4619398BBAA2D923.crl
                          rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/98A11CF45A997CA909604F2E4619398BBAA2D923.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98A11CF45A997CA909604F2E4619398BBAA2D923.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 23:55:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:52:c3:6c:f1:8a:a1:07:50:be:1d:8e:40:6c:f8:75:90:9c:d6:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98A11CF45A997CA909604F2E4619398BBAA2D923
        Validity
            Not Before: Mar  6 02:46:47 2025 GMT
            Not After : Mar  5 02:51:47 2026 GMT
        Subject: CN=CAFD3391CE2514C44A0A5D995E0559B030044A7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:2a:c6:88:d8:b9:32:97:4b:de:bf:e8:8c:93:
                    ac:e2:a2:63:95:3d:1d:5e:49:50:81:5d:7a:81:09:
                    92:27:3f:ab:24:2b:8f:2c:5a:0f:3a:8f:ef:54:a3:
                    77:98:a5:b7:d5:b5:4c:63:6b:65:fb:7e:41:94:10:
                    97:b8:ae:05:e1:a2:c2:33:5a:17:9b:88:76:dd:68:
                    b3:8b:95:f7:96:1b:68:c5:1b:30:a1:f6:e1:bf:ef:
                    78:35:6b:32:e9:c2:2b:b5:40:e0:e2:a4:87:1f:2d:
                    64:9a:97:90:73:0d:01:78:22:e5:43:13:c1:db:d4:
                    b8:0d:44:a2:44:e5:09:6c:ca:31:37:bb:f6:aa:af:
                    cb:59:c1:32:66:3a:e0:6f:b6:f9:6a:7b:45:b9:41:
                    c2:af:09:62:09:dd:bf:1c:e2:84:cf:e1:45:10:d0:
                    cf:a5:6f:cd:aa:a3:fc:0d:18:95:18:5b:cb:5f:56:
                    c7:54:b6:d0:8d:f5:1a:05:04:60:a4:39:07:77:f0:
                    f5:e7:5a:fb:ac:3b:4a:bd:bc:5b:6b:d0:ef:d5:20:
                    a2:92:3f:91:64:b4:3f:25:c2:6a:d1:5f:61:2a:4a:
                    ab:7b:b1:cc:5f:27:cd:a4:fb:f9:d4:4e:00:fb:79:
                    eb:76:8c:d8:0a:fc:a0:e9:1b:40:fa:75:cb:1b:bd:
                    a7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:FD:33:91:CE:25:14:C4:4A:0A:5D:99:5E:05:59:B0:30:04:4A:7F
            X509v3 Authority Key Identifier:
                keyid:98:A1:1C:F4:5A:99:7C:A9:09:60:4F:2E:46:19:39:8B:BA:A2:D9:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/98A11CF45A997CA909604F2E4619398BBAA2D923.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98A11CF45A997CA909604F2E4619398BBAA2D923.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/3139322e3134302e3130302e302f32332d3233203d3e20323636323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:11:5a:18:8a:31:be:24:cc:e9:72:5c:27:6a:f6:0b:cd:11:
         97:f8:1d:1f:a2:1a:ee:ec:31:a1:9f:14:6e:65:d4:c7:35:44:
         6f:b6:a4:59:9c:43:2c:84:cf:3d:51:99:2a:1f:99:7e:f6:7a:
         f5:94:2b:57:10:2f:28:27:9e:2a:0d:5c:3f:32:cc:bd:87:23:
         1e:a3:9b:03:33:ee:f1:06:31:86:e0:96:50:6d:b8:36:43:1f:
         0a:c6:34:6a:72:72:46:87:05:83:b7:6b:64:49:0f:c8:91:35:
         33:2e:9e:0c:c5:e8:d6:57:48:c6:ea:64:7b:83:d3:83:9a:1d:
         90:a2:44:2c:66:46:1b:56:da:5c:fa:3f:ef:e9:fc:6e:56:1a:
         be:3c:98:73:66:87:3e:40:a8:35:6c:5b:5b:3b:bd:69:08:44:
         ad:b6:35:aa:1a:2e:e3:bb:f1:d5:c2:98:31:d5:44:62:32:97:
         38:5d:66:fd:a2:4e:aa:5f:19:c6:e7:5b:d6:3e:b8:a8:41:dc:
         c2:30:8d:ab:84:9b:58:7c:d0:1c:fc:ea:3b:5c:dc:28:13:4f:
         4c:d4:92:39:64:81:96:3f:02:46:c3:09:10:ee:85:5d:b3:3b:
         7c:49:df:b7:17:89:92:a3:f8:7f:4b:60:f3:fc:50:00:59:60:
         f6:cc:28:5a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUMFLDbPGKoQdQvh2OQGz4dZCc1p8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThBMTFDRjQ1QTk5N0NBOTA5NjA0RjJFNDYxOTM5OEJC
QUEyRDkyMzAeFw0yNTAzMDYwMjQ2NDdaFw0yNjAzMDUwMjUxNDdaMDMxMTAvBgNV
BAMTKENBRkQzMzkxQ0UyNTE0QzQ0QTBBNUQ5OTVFMDU1OUIwMzAwNDRBN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqKsaI2Lkyl0vev+iMk6ziomOV
PR1eSVCBXXqBCZInP6skK48sWg86j+9Uo3eYpbfVtUxja2X7fkGUEJe4rgXhosIz
WhebiHbdaLOLlfeWG2jFGzCh9uG/73g1azLpwiu1QODipIcfLWSal5BzDQF4IuVD
E8Hb1LgNRKJE5QlsyjE3u/aqr8tZwTJmOuBvtvlqe0W5QcKvCWIJ3b8c4oTP4UUQ
0M+lb82qo/wNGJUYW8tfVsdUttCN9RoFBGCkOQd38PXnWvusO0q9vFtr0O/VIKKS
P5FktD8lwmrRX2EqSqt7scxfJ82k+/nUTgD7eet2jNgK/KDpG0D6dcsbvacLAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUyv0zkc4lFMRKCl2ZXgVZsDAESn8wHwYDVR0j
BBgwFoAUmKEc9FqZfKkJYE8uRhk5i7qi2SMwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9XU3h4QW4zVXRtcllzWFJYbVVuUGo2Wmppb2F2ektVcWtXenZuTnJCR3l3
LzEvOThBMTFDRjQ1QTk5N0NBOTA5NjA0RjJFNDYxOTM5OEJCQUEyRDkyMy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS85OEExMUNGNDVBOTk3Q0E5MDk2
MDRGMkU0NjE5Mzk4QkJBQTJEOTIzLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9X
U3h4QW4zVXRtcllzWFJYbVVuUGo2Wmppb2F2ektVcWtXenZuTnJCR3l3LzEvMzEz
OTMyMmUzMTM0MzAyZTMxMzAzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYz
NjMyMzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAcCMZDANBgkqhkiG9w0BAQsFAAOCAQEANRFaGIox
viTM6XJcJ2r2C80Rl/gdH6Ia7uwxoZ8UbmXUxzVEb7akWZxDLITPPVGZKh+ZfvZ6
9ZQrVxAvKCeeKg1cPzLMvYcjHqObAzPu8QYxhuCWUG24NkMfCsY0anJyRocFg7dr
ZEkPyJE1My6eDMXo1ldIxupke4PTg5odkKJELGZGG1baXPo/7+n8blYavjyYc2aH
PkCoNWxbWzu9aQhErbY1qhou47vx1cKYMdVEYjKXOF1m/aJOql8Zxudb1j64qEHc
wjCNq4SbWHzQHPzqO1zcKBNPTNSSOWSBlj8CRsMJEO6FXbM7fEnftxeJkqP4f0tg
8/xQAFlg9swoWg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 14:34:29 2025 by rpki-client