Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/1/3230312e3138322e3130302e302f32332d3234203d3e20323637353131.roa
File:                     3230312e3138322e3130302e302f32332d3234203d3e20323637353131.roa (raw, json)
Hash identifier:          vkiSEPnKF9J6iaP7OOsYNj4sgXovOiyIPG0MaUGUebM=
Subject key identifier:   5E:74:E8:1A:47:EA:F3:18:DE:AF:BA:E6:F8:B5:52:E4:57:60:A9:9C
Certificate issuer:       /CN=51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB
Certificate serial:       731A88B3751EF5CA9A5F7E9D8BEA78F32DD5BD32
Authority key identifier: 51:D6:DB:A5:73:9A:66:5B:6F:DC:BD:4D:32:66:D3:E7:4D:8D:D8:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/1/3230312e3138322e3130302e302f32332d3234203d3e20323637353131.roa
Signing time:             Thu 04 Apr 2024 22:11:19 +0000
ROA not before:           Thu 04 Apr 2024 22:06:19 +0000
ROA not after:            Thu 03 Apr 2025 22:11:19 +0000
asID:                     267511
IP address blocks:        201.182.100.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/1/51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.crl
                          rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/1/51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:54:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:1a:88:b3:75:1e:f5:ca:9a:5f:7e:9d:8b:ea:78:f3:2d:d5:bd:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB
        Validity
            Not Before: Apr  4 22:06:19 2024 GMT
            Not After : Apr  3 22:11:19 2025 GMT
        Subject: CN=5E74E81A47EAF318DEAFBAE6F8B552E45760A99C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3a:78:9a:cf:54:4b:f1:d0:90:27:50:cc:46:
                    22:3e:d4:73:a2:4d:c9:29:a5:17:54:cc:41:60:27:
                    58:4f:37:22:c9:b5:01:0d:71:61:2e:32:16:f4:d4:
                    01:63:3a:ec:a6:e0:4d:e6:8d:02:e4:42:3f:f1:d2:
                    1f:d0:86:56:b1:ea:5c:a3:06:05:2b:d1:b0:7f:9c:
                    3e:a4:40:0f:87:74:b3:d6:49:b7:e9:06:93:1a:28:
                    68:30:97:4b:b4:b3:77:35:db:57:a1:23:39:dd:71:
                    63:7b:60:87:4b:8b:4f:c1:ef:dd:46:f2:dd:15:03:
                    43:c2:62:ca:eb:f3:6c:92:90:27:11:b3:10:e6:42:
                    1a:f8:f7:73:cb:39:72:8b:57:88:e4:d9:55:e9:9e:
                    22:53:aa:22:16:b6:b6:8b:4b:63:fc:7b:f5:2f:2a:
                    de:23:e1:c3:36:6e:95:ac:28:42:3b:9f:2d:ec:b9:
                    7b:b1:0a:3d:3f:82:eb:5a:c0:b4:c0:d1:ca:b8:3e:
                    cd:79:d5:67:87:9d:9e:87:64:3e:93:ce:58:e2:bc:
                    55:f7:1d:1b:bd:45:e6:17:f0:ed:e7:2b:a2:2b:ea:
                    f2:ae:68:d3:75:1f:ce:72:bb:d3:0a:6a:74:f0:88:
                    e0:fa:f7:0b:82:54:8e:f4:63:d6:b7:ee:ac:a0:72:
                    b8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:74:E8:1A:47:EA:F3:18:DE:AF:BA:E6:F8:B5:52:E4:57:60:A9:9C
            X509v3 Authority Key Identifier:
                keyid:51:D6:DB:A5:73:9A:66:5B:6F:DC:BD:4D:32:66:D3:E7:4D:8D:D8:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/1/51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/1/3230312e3138322e3130302e302f32332d3234203d3e20323637353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:59:87:bd:47:8e:5d:75:3b:80:05:8f:93:0c:42:3a:e5:42:
         10:99:5e:c4:02:cd:5d:b6:86:aa:8b:2c:50:75:83:6a:4d:39:
         c0:69:9d:cb:aa:a3:bf:b2:3e:d1:65:8e:ee:2e:57:cd:e7:4c:
         15:4f:f6:04:7c:e0:08:18:06:27:ae:07:ba:23:db:c5:ee:f1:
         a9:10:c7:0f:05:00:45:5d:45:85:f6:67:77:ce:d4:eb:27:55:
         93:f8:30:4d:82:38:91:e6:10:7a:9c:a0:20:69:c3:71:06:c9:
         58:c8:be:df:7d:67:80:67:fb:f3:b8:02:7e:db:23:5e:5f:ad:
         45:57:67:89:4a:2f:ad:8e:58:e0:b4:1d:ff:e6:11:9d:09:87:
         90:26:58:b6:9b:21:19:75:83:7a:ce:cc:0c:a6:76:a3:78:2d:
         ce:e7:60:5f:53:0d:1d:2e:fc:63:73:b3:d1:55:12:3b:dd:5f:
         69:ed:04:17:64:69:38:b5:fa:70:1c:d9:be:80:a2:ee:18:7a:
         8d:b8:5c:54:51:fc:f9:0c:19:1d:f1:ac:0a:6a:de:3f:4b:48:
         79:6b:27:7e:a8:56:43:0d:11:7f:18:f7:f2:2a:31:38:fa:0a:
         fa:47:7f:47:92:88:bf:5f:3d:de:0c:a1:d2:a1:82:e3:2d:10:
         cd:41:23:aa
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUcxqIs3Ue9cqaX36di+p48y3VvTIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTFENkRCQTU3MzlBNjY1QjZGRENCRDREMzI2NkQzRTc0
RDhERDhBQjAeFw0yNDA0MDQyMjA2MTlaFw0yNTA0MDMyMjExMTlaMDMxMTAvBgNV
BAMTKDVFNzRFODFBNDdFQUYzMThERUFGQkFFNkY4QjU1MkU0NTc2MEE5OUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgOniaz1RL8dCQJ1DMRiI+1HOi
TckppRdUzEFgJ1hPNyLJtQENcWEuMhb01AFjOuym4E3mjQLkQj/x0h/Qhlax6lyj
BgUr0bB/nD6kQA+HdLPWSbfpBpMaKGgwl0u0s3c121ehIzndcWN7YIdLi0/B791G
8t0VA0PCYsrr82ySkCcRsxDmQhr493PLOXKLV4jk2VXpniJTqiIWtraLS2P8e/Uv
Kt4j4cM2bpWsKEI7ny3suXuxCj0/gutawLTA0cq4Ps151WeHnZ6HZD6TzljivFX3
HRu9ReYX8O3nK6Ir6vKuaNN1H85yu9MKanTwiOD69wuCVI70Y9a37qygcrh7AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUXnToGkfq8xjer7rm+LVS5FdgqZwwHwYDVR0j
BBgwFoAUUdbbpXOaZltv3L1NMmbT502N2KswDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9rZFBMMUF1dkZKeEo4WG9Uelh1ekhZcG5mR1djOGdMbTVHTGZ4YUxFNkRH
LzEvNTFENkRCQTU3MzlBNjY1QjZGRENCRDREMzI2NkQzRTc0RDhERDhBQi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS81MUQ2REJBNTczOUE2NjVCNkZE
Q0JENEQzMjY2RDNFNzREOEREOEFCLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9r
ZFBMMUF1dkZKeEo4WG9Uelh1ekhZcG5mR1djOGdMbTVHTGZ4YUxFNkRHLzEvMzIz
MDMxMmUzMTM4MzIyZTMxMzAzMDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzYz
NzM1MzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAcm2ZDANBgkqhkiG9w0BAQsFAAOCAQEAAVmHvUeO
XXU7gAWPkwxCOuVCEJlexALNXbaGqossUHWDak05wGmdy6qjv7I+0WWO7i5XzedM
FU/2BHzgCBgGJ64HuiPbxe7xqRDHDwUARV1FhfZnd87U6ydVk/gwTYI4keYQepyg
IGnDcQbJWMi+331ngGf787gCftsjXl+tRVdniUovrY5Y4LQd/+YRnQmHkCZYtpsh
GXWDes7MDKZ2o3gtzudgX1MNHS78Y3Oz0VUSO91fae0EF2RpOLX6cBzZvoCi7hh6
jbhcVFH8+QwZHfGsCmreP0tIeWsnfqhWQw0Rfxj38ioxOPoK+kd/R5KIv1893gyh
0qGC4y0QzUEjqg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:26 2024 by rpki-client on console-fra.rpki-client.org