Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/3138372e3130332e31362e302f32322d3234203d3e20323730393931.roa
File:                     3138372e3130332e31362e302f32322d3234203d3e20323730393931.roa (raw, json)
Hash identifier:          h5xzEEt7/4oex1TVkFkwzGKA64NfP7bS9Vvhv8WuZg4=
Subject key identifier:   60:54:F9:8E:21:4B:C4:10:07:4F:19:89:7E:43:F0:E2:0D:9D:AE:A9
Certificate issuer:       /CN=2A0183D32B891D785CDF1CC86CFD0AE9460250B1
Certificate serial:       28FB4BB4FB6D6BF104202A0E6765A582B7FDD216
Authority key identifier: 2A:01:83:D3:2B:89:1D:78:5C:DF:1C:C8:6C:FD:0A:E9:46:02:50:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/3138372e3130332e31362e302f32322d3234203d3e20323730393931.roa
Signing time:             Thu 04 Apr 2024 08:02:51 +0000
ROA not before:           Thu 04 Apr 2024 07:57:51 +0000
ROA not after:            Thu 03 Apr 2025 08:02:51 +0000
asID:                     270991
IP address blocks:        187.103.16.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.crl
                          rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:fb:4b:b4:fb:6d:6b:f1:04:20:2a:0e:67:65:a5:82:b7:fd:d2:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A0183D32B891D785CDF1CC86CFD0AE9460250B1
        Validity
            Not Before: Apr  4 07:57:51 2024 GMT
            Not After : Apr  3 08:02:51 2025 GMT
        Subject: CN=6054F98E214BC410074F19897E43F0E20D9DAEA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:59:22:2e:ce:3c:2b:f0:8f:cb:45:b4:db:9d:
                    f5:e7:6c:1f:46:7f:87:df:6d:e1:9a:5f:15:31:04:
                    76:4a:97:89:fa:ae:57:65:a9:b4:55:28:e7:ce:4a:
                    50:43:e4:7a:45:d6:25:15:15:3b:dc:01:e4:44:6a:
                    a7:b1:27:2f:68:35:09:e5:75:0b:8a:e5:f8:bc:21:
                    b5:6c:a7:80:a7:0a:21:e9:43:82:7e:24:19:82:80:
                    8e:02:b1:73:80:db:55:1f:15:ea:e8:51:a0:5e:f5:
                    99:4c:f6:3f:28:07:63:a8:d7:75:e1:ac:03:b8:b3:
                    0a:7f:4a:13:69:d2:c5:aa:d6:0d:a6:7b:aa:82:a8:
                    ea:41:b3:cb:60:2c:34:4f:81:3a:3e:2e:82:0b:95:
                    81:eb:d8:28:42:cf:99:da:a5:a2:b7:55:e9:6f:6b:
                    b9:5b:5c:0c:80:27:8d:bd:98:68:bd:b6:db:61:9d:
                    2d:15:af:dd:d8:01:ca:20:39:dd:e1:6b:77:b0:3e:
                    f6:e5:5a:82:31:7f:ea:69:26:c2:ca:a7:35:fa:1f:
                    c4:46:24:1d:92:2a:fb:83:92:90:60:ce:89:91:14:
                    23:72:84:b0:73:63:e0:b8:f4:c1:0f:76:24:67:fd:
                    e9:46:b7:4f:b7:85:2d:ce:53:f9:51:29:09:dc:b6:
                    f6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:54:F9:8E:21:4B:C4:10:07:4F:19:89:7E:43:F0:E2:0D:9D:AE:A9
            X509v3 Authority Key Identifier:
                keyid:2A:01:83:D3:2B:89:1D:78:5C:DF:1C:C8:6C:FD:0A:E9:46:02:50:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0183D32B891D785CDF1CC86CFD0AE9460250B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ksKbkauXqNfNhcB3M4i9sotSXXKFEDgkXkRLMg2XvNR/1/3138372e3130332e31362e302f32322d3234203d3e20323730393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:b0:f6:8a:4b:a9:59:aa:1c:35:14:f6:f3:12:3e:20:6c:75:
         1d:39:c2:0b:43:d1:4e:01:c2:8b:db:93:0f:d8:af:3d:07:8e:
         1f:ec:46:0a:a4:af:de:c0:1d:fa:c0:96:72:ae:9a:62:10:3e:
         2b:6f:7e:6c:ed:6f:da:5f:53:93:22:8b:30:64:9f:cf:76:ea:
         74:2d:62:a6:e5:54:c0:16:b6:f7:a8:90:17:11:c1:e2:74:0a:
         d2:4f:85:6a:89:34:03:05:c9:83:09:ae:e7:26:79:70:5a:ef:
         46:a6:78:e2:9f:c4:47:2f:37:aa:51:fe:32:19:1f:6e:26:3d:
         5a:ac:e0:0f:06:35:53:2e:39:cc:42:40:d7:32:c5:48:cb:d3:
         d5:73:f9:2b:e3:16:8a:27:c9:d9:c9:7f:f3:44:3c:cd:94:6c:
         66:ad:cb:5f:ca:aa:a8:cd:d5:0c:b5:f9:c7:d2:43:a5:8b:b7:
         16:97:3f:fb:ce:17:fd:a5:56:cf:7f:66:15:61:da:b8:23:5e:
         cc:36:6a:eb:e0:fc:bf:b1:a9:42:ee:29:97:29:ae:6d:f0:bd:
         90:2e:43:2e:a3:e6:1c:5e:56:c3:ff:5d:5d:12:3a:3d:08:31:
         03:e9:75:8e:10:79:61:4f:5e:b7:01:89:e6:37:c4:78:85:e9:
         0f:b0:15:5e
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUKPtLtPtta/EEICoOZ2Wlgrf90hYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEwMTgzRDMyQjg5MUQ3ODVDREYxQ0M4NkNGRDBBRTk0
NjAyNTBCMTAeFw0yNDA0MDQwNzU3NTFaFw0yNTA0MDMwODAyNTFaMDMxMTAvBgNV
BAMTKDYwNTRGOThFMjE0QkM0MTAwNzRGMTk4OTdFNDNGMEUyMEQ5REFFQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIWSIuzjwr8I/LRbTbnfXnbB9G
f4ffbeGaXxUxBHZKl4n6rldlqbRVKOfOSlBD5HpF1iUVFTvcAeREaqexJy9oNQnl
dQuK5fi8IbVsp4CnCiHpQ4J+JBmCgI4CsXOA21UfFeroUaBe9ZlM9j8oB2Oo13Xh
rAO4swp/ShNp0sWq1g2me6qCqOpBs8tgLDRPgTo+LoILlYHr2ChCz5napaK3Velv
a7lbXAyAJ429mGi9ttthnS0Vr93YAcogOd3ha3ewPvblWoIxf+ppJsLKpzX6H8RG
JB2SKvuDkpBgzomRFCNyhLBzY+C49MEPdiRn/elGt0+3hS3OU/lRKQnctvY3AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUYFT5jiFLxBAHTxmJfkPw4g2drqkwHwYDVR0j
BBgwFoAUKgGD0yuJHXhc3xzIbP0K6UYCULEwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9rc0tia2F1WHFOZk5oY0IzTTRpOXNvdFNYWEtGRURna1hrUkxNZzJYdk5S
LzEvMkEwMTgzRDMyQjg5MUQ3ODVDREYxQ0M4NkNGRDBBRTk0NjAyNTBCMS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yQTAxODNEMzJCODkxRDc4NUNE
RjFDQzg2Q0ZEMEFFOTQ2MDI1MEIxLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9r
c0tia2F1WHFOZk5oY0IzTTRpOXNvdFNYWEtGRURna1hrUkxNZzJYdk5SLzEvMzEz
ODM3MmUzMTMwMzMyZTMxMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3MzAz
OTM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAK7ZxAwDQYJKoZIhvcNAQELBQADggEBAGyw9opLqVmq
HDUU9vMSPiBsdR05wgtD0U4Bwovbkw/Yrz0Hjh/sRgqkr97AHfrAlnKummIQPitv
fmztb9pfU5MiizBkn8926nQtYqblVMAWtveokBcRweJ0CtJPhWqJNAMFyYMJrucm
eXBa70ameOKfxEcvN6pR/jIZH24mPVqs4A8GNVMuOcxCQNcyxUjL09Vz+SvjFoon
ydnJf/NEPM2UbGaty1/KqqjN1Qy1+cfSQ6WLtxaXP/vOF/2lVs9/ZhVh2rgjXsw2
auvg/L+xqULuKZcprm3wvZAuQy6j5hxeVsP/XV0SOj0IMQPpdY4QeWFPXrcBieY3
xHiF6Q+wFV4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:33 2024 by rpki-client on console-ams.rpki-client.org