Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/3139322e3134302e3130302e302f32332d3233203d3e20323636323536.roa
File:                     3139322e3134302e3130302e302f32332d3233203d3e20323636323536.roa (raw, json)
Hash identifier:          Keu21QSPUrdeBnZz9Rz7Jj/hlGeegLFb85oQXqRYCt8=
Subject key identifier:   16:19:6E:EA:99:89:F9:2B:50:C4:2E:DF:D1:37:45:1F:DB:BD:6E:E0
Certificate issuer:       /CN=98A11CF45A997CA909604F2E4619398BBAA2D923
Certificate serial:       088DD9B475E336F4F00FFED2BA3D2B7C527FC955
Authority key identifier: 98:A1:1C:F4:5A:99:7C:A9:09:60:4F:2E:46:19:39:8B:BA:A2:D9:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98A11CF45A997CA909604F2E4619398BBAA2D923.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/3139322e3134302e3130302e302f32332d3233203d3e20323636323536.roa
Signing time:             Thu 04 Apr 2024 02:15:58 +0000
ROA not before:           Thu 04 Apr 2024 02:10:58 +0000
ROA not after:            Thu 03 Apr 2025 02:15:58 +0000
asID:                     266256
IP address blocks:        192.140.100.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/98A11CF45A997CA909604F2E4619398BBAA2D923.crl
                          rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/98A11CF45A997CA909604F2E4619398BBAA2D923.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98A11CF45A997CA909604F2E4619398BBAA2D923.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:21:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:8d:d9:b4:75:e3:36:f4:f0:0f:fe:d2:ba:3d:2b:7c:52:7f:c9:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98A11CF45A997CA909604F2E4619398BBAA2D923
        Validity
            Not Before: Apr  4 02:10:58 2024 GMT
            Not After : Apr  3 02:15:58 2025 GMT
        Subject: CN=16196EEA9989F92B50C42EDFD137451FDBBD6EE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dc:c9:88:d6:9c:58:4b:d6:bf:1e:da:b8:ad:
                    73:9c:aa:a9:14:28:a9:49:d6:f8:c2:89:73:4c:26:
                    05:45:ae:cf:d9:43:24:7c:93:0a:0a:f2:9a:f4:b9:
                    40:98:0a:f4:f7:77:06:c9:2b:73:c1:56:6c:05:0b:
                    d9:02:73:6f:89:55:ea:0b:af:00:33:54:69:7b:b4:
                    86:f3:bc:0f:5e:44:c6:51:8c:3f:80:25:bb:e2:0f:
                    f0:33:3e:71:51:8a:8b:b3:bb:8b:db:b3:87:2a:b8:
                    3a:9f:f9:41:b7:3d:61:62:59:1c:01:63:8e:d2:2a:
                    21:b0:74:0b:dd:10:af:89:52:f9:4b:e4:c0:36:54:
                    f1:07:63:12:64:14:3f:55:29:ca:fc:fb:c1:2b:4f:
                    52:0b:31:dd:4c:dd:2b:30:da:6c:79:d1:6e:26:88:
                    0c:71:0f:7e:8b:da:fd:5f:03:c6:bb:31:f8:4e:08:
                    20:38:5c:f1:4a:42:f9:92:be:f8:86:9e:d5:6d:ea:
                    70:fb:f5:84:4a:42:c2:69:8b:34:6e:2e:59:d7:3e:
                    b6:8c:1b:b2:b2:eb:bb:8e:ea:5e:5f:33:ef:24:0c:
                    01:27:ca:f0:42:0d:b3:d4:26:6f:70:2d:61:e0:33:
                    bb:dc:11:ed:4e:ef:69:06:55:96:f0:31:c1:54:44:
                    37:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:19:6E:EA:99:89:F9:2B:50:C4:2E:DF:D1:37:45:1F:DB:BD:6E:E0
            X509v3 Authority Key Identifier:
                keyid:98:A1:1C:F4:5A:99:7C:A9:09:60:4F:2E:46:19:39:8B:BA:A2:D9:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/98A11CF45A997CA909604F2E4619398BBAA2D923.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98A11CF45A997CA909604F2E4619398BBAA2D923.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WSxxAn3UtmrYsXRXmUnPj6ZjioavzKUqkWzvnNrBGyw/1/3139322e3134302e3130302e302f32332d3233203d3e20323636323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:a1:75:66:ac:b7:37:98:fd:db:82:e8:96:4b:03:f9:c1:2b:
         ef:a2:d5:4a:9f:10:a0:22:56:95:47:94:8f:0c:4c:41:31:73:
         dc:8a:85:dc:fc:fd:81:83:d8:aa:89:0f:3d:b7:b1:27:96:bd:
         61:29:ed:d1:0b:b8:d0:d1:52:89:77:2a:84:97:ea:98:fa:d4:
         c1:c5:bb:6b:ac:05:d4:6b:f8:8f:91:fb:86:20:6d:47:f2:6d:
         7e:d4:1e:3a:58:89:b6:07:f0:ad:2c:2e:71:9d:fb:36:74:9d:
         6b:8c:b1:d3:7c:be:0e:88:cb:c2:7a:ca:46:07:be:fe:56:cc:
         3f:a7:51:f2:36:4b:d7:6f:aa:ff:bc:aa:a2:dd:6e:c3:45:c8:
         0f:80:e3:eb:40:87:f7:94:48:2b:0a:aa:ac:35:eb:dd:6e:2e:
         06:9a:a8:c3:56:f9:99:f3:23:38:aa:b6:e7:91:29:6d:94:c8:
         0d:10:33:8b:ee:cb:03:79:a3:a5:65:9e:0c:44:d6:27:a7:33:
         33:33:e0:df:ab:fe:a2:fd:a6:8e:24:64:e4:ed:12:0f:a4:02:
         dd:41:69:ec:9f:c9:52:41:9e:d8:d0:c4:bf:a4:95:28:80:4c:
         40:fd:a9:57:0f:10:b8:14:ef:99:0b:de:cc:d8:b0:36:e5:29:
         a7:f2:d6:f1
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUCI3ZtHXjNvTwD/7Suj0rfFJ/yVUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThBMTFDRjQ1QTk5N0NBOTA5NjA0RjJFNDYxOTM5OEJC
QUEyRDkyMzAeFw0yNDA0MDQwMjEwNThaFw0yNTA0MDMwMjE1NThaMDMxMTAvBgNV
BAMTKDE2MTk2RUVBOTk4OUY5MkI1MEM0MkVERkQxMzc0NTFGREJCRDZFRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC43MmI1pxYS9a/Htq4rXOcqqkU
KKlJ1vjCiXNMJgVFrs/ZQyR8kwoK8pr0uUCYCvT3dwbJK3PBVmwFC9kCc2+JVeoL
rwAzVGl7tIbzvA9eRMZRjD+AJbviD/AzPnFRiouzu4vbs4cquDqf+UG3PWFiWRwB
Y47SKiGwdAvdEK+JUvlL5MA2VPEHYxJkFD9VKcr8+8ErT1ILMd1M3Ssw2mx50W4m
iAxxD36L2v1fA8a7MfhOCCA4XPFKQvmSvviGntVt6nD79YRKQsJpizRuLlnXPraM
G7Ky67uO6l5fM+8kDAEnyvBCDbPUJm9wLWHgM7vcEe1O72kGVZbwMcFURDe7AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUFhlu6pmJ+StQxC7f0TdFH9u9buAwHwYDVR0j
BBgwFoAUmKEc9FqZfKkJYE8uRhk5i7qi2SMwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9XU3h4QW4zVXRtcllzWFJYbVVuUGo2Wmppb2F2ektVcWtXenZuTnJCR3l3
LzEvOThBMTFDRjQ1QTk5N0NBOTA5NjA0RjJFNDYxOTM5OEJCQUEyRDkyMy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS85OEExMUNGNDVBOTk3Q0E5MDk2
MDRGMkU0NjE5Mzk4QkJBQTJEOTIzLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9X
U3h4QW4zVXRtcllzWFJYbVVuUGo2Wmppb2F2ektVcWtXenZuTnJCR3l3LzEvMzEz
OTMyMmUzMTM0MzAyZTMxMzAzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYz
NjMyMzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAcCMZDANBgkqhkiG9w0BAQsFAAOCAQEAeaF1Zqy3
N5j924LolksD+cEr76LVSp8QoCJWlUeUjwxMQTFz3IqF3Pz9gYPYqokPPbexJ5a9
YSnt0Qu40NFSiXcqhJfqmPrUwcW7a6wF1Gv4j5H7hiBtR/JtftQeOliJtgfwrSwu
cZ37NnSda4yx03y+DojLwnrKRge+/lbMP6dR8jZL12+q/7yqot1uw0XID4Dj60CH
95RIKwqqrDXr3W4uBpqow1b5mfMjOKq255EpbZTIDRAzi+7LA3mjpWWeDETWJ6cz
MzPg36v+ov2mjiRk5O0SD6QC3UFp7J/JUkGe2NDEv6SVKIBMQP2pVw8QuBTvmQve
zNiwNuUpp/LW8Q==
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:14 2024 by rpki-client on console-fra.rpki-client.org