Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/3138312e3138392e31302e302f32332d3233203d3e20323731333830.roa
File:                     3138312e3138392e31302e302f32332d3233203d3e20323731333830.roa (raw, json)
Hash identifier:          uLRO58elpqJkZa1AosT1J9wnqv8IzcjxXQGoRiUYmdk=
Subject key identifier:   58:69:80:00:D3:59:7A:D5:77:5E:B6:AC:AE:FB:D6:75:B4:3D:C2:7D
Certificate issuer:       /CN=4AB61C2BEB228083B61C39B853C001DD574DE2FB
Certificate serial:       7651AB1EE73F3F72FAD1A2CEF29E19860586BC97
Authority key identifier: 4A:B6:1C:2B:EB:22:80:83:B6:1C:39:B8:53:C0:01:DD:57:4D:E2:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/3138312e3138392e31302e302f32332d3233203d3e20323731333830.roa
Signing time:             Thu 08 Aug 2024 12:54:22 +0000
ROA not before:           Thu 08 Aug 2024 12:49:22 +0000
ROA not after:            Thu 07 Aug 2025 12:54:22 +0000
asID:                     271380
IP address blocks:        181.189.10.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.crl
                          rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:51:ab:1e:e7:3f:3f:72:fa:d1:a2:ce:f2:9e:19:86:05:86:bc:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AB61C2BEB228083B61C39B853C001DD574DE2FB
        Validity
            Not Before: Aug  8 12:49:22 2024 GMT
            Not After : Aug  7 12:54:22 2025 GMT
        Subject: CN=58698000D3597AD5775EB6ACAEFBD675B43DC27D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dc:2d:44:9b:d8:90:2a:c0:51:87:ad:6b:60:
                    70:e1:46:d9:f6:ee:e6:d2:91:b7:0f:3b:04:0f:c0:
                    91:20:37:b4:17:14:0a:55:72:d7:c6:66:44:64:4a:
                    99:64:23:90:f3:ea:1d:85:e2:14:ca:6f:0d:5b:a4:
                    ea:15:6e:7b:2f:d2:7a:4f:b5:18:b5:05:5e:17:28:
                    da:bd:a7:54:c2:19:57:bd:e5:8e:74:81:5a:00:f0:
                    da:8a:9e:38:1a:a4:b5:79:dd:e6:e3:b8:96:f7:2e:
                    cc:89:79:de:ef:cb:21:27:aa:90:27:71:fe:b3:d1:
                    5f:3e:38:b8:d5:fc:83:1f:50:97:0b:f2:d6:fc:39:
                    b1:15:5a:8a:b2:88:ac:1c:6c:a3:ed:ec:c5:53:ff:
                    be:33:a8:a9:26:e5:84:34:2c:ca:0d:dd:0e:64:2b:
                    ee:fe:34:ac:fe:0c:e1:d4:30:a5:6d:b3:12:b2:4a:
                    20:4c:37:f6:4e:b9:9b:20:e2:48:d5:56:ec:1a:7f:
                    9f:88:2e:b3:54:61:10:f7:07:43:6d:44:2e:06:2b:
                    2e:5d:d9:4d:81:34:a3:3e:dc:a2:73:4d:a4:d2:05:
                    11:3d:ad:06:0e:b8:ab:88:37:d0:ac:24:f4:b6:ad:
                    71:ac:d5:92:12:2a:19:cd:15:99:57:e6:5c:f9:ad:
                    14:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:69:80:00:D3:59:7A:D5:77:5E:B6:AC:AE:FB:D6:75:B4:3D:C2:7D
            X509v3 Authority Key Identifier:
                keyid:4A:B6:1C:2B:EB:22:80:83:B6:1C:39:B8:53:C0:01:DD:57:4D:E2:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/3138312e3138392e31302e302f32332d3233203d3e20323731333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d7:93:c6:de:d0:88:d2:4a:e2:b4:c4:ee:31:3d:0c:0b:3f:fa:
         62:e2:3d:99:11:73:e9:8b:60:71:9f:99:ca:ef:4b:ba:7b:29:
         d9:22:69:c2:da:fa:83:24:3a:03:a3:8d:a3:98:a0:10:c7:d4:
         fe:c3:db:23:8a:a3:46:5e:6e:0a:96:6e:cc:11:ff:43:5a:30:
         48:27:4f:d2:cf:96:99:03:1e:f2:e4:da:d4:dd:21:0a:71:84:
         14:53:7f:d2:df:92:3a:d3:65:82:ce:ad:50:b0:da:91:86:3d:
         4c:12:2d:a8:2e:47:16:af:38:b1:84:aa:92:df:7a:89:cd:b8:
         22:9f:7a:fc:32:b6:ed:78:f0:b6:4c:8e:55:7e:af:5b:01:0e:
         ca:27:ea:22:90:00:37:c8:24:e4:2b:cb:70:bc:0f:45:c7:ca:
         b3:81:5d:61:9b:6d:3b:7a:53:c1:3a:48:30:fb:9d:43:47:8e:
         51:a9:3c:8a:17:ba:6d:1b:91:2a:35:68:8a:b1:1e:88:f4:d3:
         91:81:48:98:fd:13:8f:f0:ca:0f:ce:db:27:78:2a:a1:da:fe:
         b7:63:49:71:41:95:96:e9:e7:bd:37:0e:48:0a:5e:40:93:e1:
         82:ac:48:ac:79:92:77:dc:1f:bf:26:4f:35:0f:18:aa:80:e1:
         31:c4:f1:0a
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUdlGrHuc/P3L60aLO8p4ZhgWGvJcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEFCNjFDMkJFQjIyODA4M0I2MUMzOUI4NTNDMDAxREQ1
NzRERTJGQjAeFw0yNDA4MDgxMjQ5MjJaFw0yNTA4MDcxMjU0MjJaMDMxMTAvBgNV
BAMTKDU4Njk4MDAwRDM1OTdBRDU3NzVFQjZBQ0FFRkJENjc1QjQzREMyN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC13C1Em9iQKsBRh61rYHDhRtn2
7ubSkbcPOwQPwJEgN7QXFApVctfGZkRkSplkI5Dz6h2F4hTKbw1bpOoVbnsv0npP
tRi1BV4XKNq9p1TCGVe95Y50gVoA8NqKnjgapLV53ebjuJb3LsyJed7vyyEnqpAn
cf6z0V8+OLjV/IMfUJcL8tb8ObEVWoqyiKwcbKPt7MVT/74zqKkm5YQ0LMoN3Q5k
K+7+NKz+DOHUMKVtsxKySiBMN/ZOuZsg4kjVVuwaf5+ILrNUYRD3B0NtRC4GKy5d
2U2BNKM+3KJzTaTSBRE9rQYOuKuIN9CsJPS2rXGs1ZISKhnNFZlX5lz5rRSnAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUWGmAANNZetV3XrasrvvWdbQ9wn0wHwYDVR0j
BBgwFoAUSrYcK+sigIO2HDm4U8AB3VdN4vswDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9wb3ZRbkpSbTRwc3dveFVVQmZkSG91VU01elFNV0dWbTNlSFBKVHNwb1Fy
LzEvNEFCNjFDMkJFQjIyODA4M0I2MUMzOUI4NTNDMDAxREQ1NzRERTJGQi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80QUI2MUMyQkVCMjI4MDgzQjYx
QzM5Qjg1M0MwMDFERDU3NERFMkZCLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9w
b3ZRbkpSbTRwc3dveFVVQmZkSG91VU01elFNV0dWbTNlSFBKVHNwb1FyLzEvMzEz
ODMxMmUzMTM4MzkyZTMxMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3MzEz
MzM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAG1vQowDQYJKoZIhvcNAQELBQADggEBANeTxt7QiNJK
4rTE7jE9DAs/+mLiPZkRc+mLYHGfmcrvS7p7KdkiacLa+oMkOgOjjaOYoBDH1P7D
2yOKo0ZebgqWbswR/0NaMEgnT9LPlpkDHvLk2tTdIQpxhBRTf9LfkjrTZYLOrVCw
2pGGPUwSLaguRxavOLGEqpLfeonNuCKfevwytu148LZMjlV+r1sBDson6iKQADfI
JOQry3C8D0XHyrOBXWGbbTt6U8E6SDD7nUNHjlGpPIoXum0bkSo1aIqxHoj005GB
SJj9E4/wyg/O2yd4KqHa/rdjSXFBlZbp5703DkgKXkCT4YKsSKx5knfcH78mTzUP
GKqA4THE8Qo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:01:28 2024 by rpki-client on console-ams.rpki-client.org