Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/3230312e3231382e3139302e302f32332d3233203d3e20323731363733.roa
File:                     3230312e3231382e3139302e302f32332d3233203d3e20323731363733.roa (raw, json)
Hash identifier:          bt3jgmeWRV6hAWBKT6p2IBmW41Sqv8DBgZx/X/QYz0M=
Subject key identifier:   C8:34:08:61:A0:29:C6:DC:B7:1E:47:BE:9F:97:BB:39:10:78:E9:1B
Certificate issuer:       /CN=4730770552B961ABDC1EDD8D00268514287A52C5
Certificate serial:       244B8F689CB8263F15D2556941DC9B72DB940AD6
Authority key identifier: 47:30:77:05:52:B9:61:AB:DC:1E:DD:8D:00:26:85:14:28:7A:52:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4730770552B961ABDC1EDD8D00268514287A52C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/3230312e3231382e3139302e302f32332d3233203d3e20323731363733.roa
Signing time:             Tue 29 Oct 2024 19:48:21 +0000
ROA not before:           Tue 29 Oct 2024 19:43:21 +0000
ROA not after:            Tue 28 Oct 2025 19:48:21 +0000
asID:                     271673
IP address blocks:        201.218.190.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/4730770552B961ABDC1EDD8D00268514287A52C5.crl
                          rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/4730770552B961ABDC1EDD8D00268514287A52C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4730770552B961ABDC1EDD8D00268514287A52C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:4b:8f:68:9c:b8:26:3f:15:d2:55:69:41:dc:9b:72:db:94:0a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4730770552B961ABDC1EDD8D00268514287A52C5
        Validity
            Not Before: Oct 29 19:43:21 2024 GMT
            Not After : Oct 28 19:48:21 2025 GMT
        Subject: CN=C8340861A029C6DCB71E47BE9F97BB391078E91B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d7:b5:1e:49:11:e7:a9:47:00:ec:e9:0c:fa:
                    91:bf:1d:9b:17:7a:77:23:27:48:41:00:ba:5e:aa:
                    a3:be:b6:4c:66:21:a5:28:04:4b:69:44:7a:6c:5f:
                    84:a5:36:31:bd:97:b6:28:1f:90:55:ee:7b:98:f9:
                    16:3f:8d:b1:16:10:6a:03:1b:ed:ad:cd:78:5d:b9:
                    82:47:6a:c7:74:ac:36:94:3d:91:d1:92:26:d5:d3:
                    3e:cb:0a:b8:9e:b4:38:a0:5d:13:4c:39:4f:d2:60:
                    b9:c1:16:fc:0a:a6:ba:60:54:31:0f:22:dc:ca:48:
                    59:08:cc:73:fa:c8:1b:7c:a2:7c:10:12:dc:62:dd:
                    ca:75:76:ec:88:c3:62:18:79:9b:d1:21:5d:81:17:
                    49:e8:42:2f:99:b2:89:8a:91:a3:86:c4:e5:6c:d7:
                    01:4b:94:64:20:42:cc:2f:f9:2f:09:82:93:5f:d8:
                    9f:02:cf:25:18:be:3b:7a:fb:45:82:ef:5d:4a:7e:
                    df:a7:f4:f8:c6:28:5c:9e:53:1b:9f:a5:8a:eb:fd:
                    91:ac:a6:9a:68:1c:43:c2:13:8a:63:ce:b0:b3:b0:
                    92:23:64:50:01:f7:6a:7c:9c:d6:b0:ae:12:24:4c:
                    9c:fd:a9:9b:64:82:31:4a:b5:12:45:a7:d2:95:3b:
                    58:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:34:08:61:A0:29:C6:DC:B7:1E:47:BE:9F:97:BB:39:10:78:E9:1B
            X509v3 Authority Key Identifier:
                keyid:47:30:77:05:52:B9:61:AB:DC:1E:DD:8D:00:26:85:14:28:7A:52:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/4730770552B961ABDC1EDD8D00268514287A52C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4730770552B961ABDC1EDD8D00268514287A52C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/3230312e3231382e3139302e302f32332d3233203d3e20323731363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:d2:d3:03:34:c6:3c:85:37:48:3b:a3:7c:2f:4a:ce:a0:5b:
         9b:45:35:cf:ee:9a:0f:04:19:9f:f0:4d:a0:f3:0d:2d:1e:0f:
         d4:8f:82:02:82:70:32:6c:c1:de:2c:27:f6:48:05:cf:ee:b3:
         2e:9f:08:e1:5a:46:a3:d5:c6:f8:93:c5:a2:db:37:2f:38:c5:
         a6:b1:6a:2e:a1:51:32:8c:29:7b:0b:14:dd:e9:2b:44:7d:e4:
         e2:5e:07:10:78:72:c2:cc:5e:d0:87:39:f3:af:78:73:92:65:
         42:b5:b5:72:b0:b6:e4:c6:67:2e:36:36:ce:4c:b2:b7:e0:9f:
         16:cd:37:00:9b:c0:aa:51:a6:84:4f:5c:d5:44:cb:d4:b4:0d:
         cd:d3:40:0b:95:07:39:36:65:19:5f:f4:32:3d:d3:0b:15:99:
         01:97:6b:8d:94:02:ea:de:9b:b1:6f:f6:10:38:ba:79:83:34:
         05:6b:11:d3:b1:22:83:5c:4b:1e:c0:d4:b9:45:bd:72:e9:9b:
         ef:0d:ae:ef:6a:ce:11:fe:6e:68:1e:e7:45:8b:06:46:96:74:
         03:9d:b0:ab:51:7e:84:59:38:8d:58:4a:73:4b:f2:11:2b:4a:
         d4:5d:a9:1f:5d:24:59:23:4e:4a:d8:26:b1:f8:12:ff:00:31:
         23:18:ac:0b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUJEuPaJy4Jj8V0lVpQdybctuUCtYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDczMDc3MDU1MkI5NjFBQkRDMUVERDhEMDAyNjg1MTQy
ODdBNTJDNTAeFw0yNDEwMjkxOTQzMjFaFw0yNTEwMjgxOTQ4MjFaMDMxMTAvBgNV
BAMTKEM4MzQwODYxQTAyOUM2RENCNzFFNDdCRTlGOTdCQjM5MTA3OEU5MUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/17UeSRHnqUcA7OkM+pG/HZsX
encjJ0hBALpeqqO+tkxmIaUoBEtpRHpsX4SlNjG9l7YoH5BV7nuY+RY/jbEWEGoD
G+2tzXhduYJHasd0rDaUPZHRkibV0z7LCrietDigXRNMOU/SYLnBFvwKprpgVDEP
ItzKSFkIzHP6yBt8onwQEtxi3cp1duyIw2IYeZvRIV2BF0noQi+ZsomKkaOGxOVs
1wFLlGQgQswv+S8JgpNf2J8CzyUYvjt6+0WC711Kft+n9PjGKFyeUxufpYrr/ZGs
pppoHEPCE4pjzrCzsJIjZFAB92p8nNawrhIkTJz9qZtkgjFKtRJFp9KVO1hHAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUyDQIYaApxty3Hke+n5e7ORB46RswHwYDVR0j
BBgwFoAURzB3BVK5YavcHt2NACaFFCh6UsUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby93N1J1MU5DQ2hUZG9QOTVuakNuZlVaRHc3ZVNpbXYzNFZ6eFoxUm9BYnlN
LzAvNDczMDc3MDU1MkI5NjFBQkRDMUVERDhEMDAyNjg1MTQyODdBNTJDNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80NzMwNzcwNTUyQjk2MUFCREMx
RUREOEQwMDI2ODUxNDI4N0E1MkM1LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby93
N1J1MU5DQ2hUZG9QOTVuakNuZlVaRHc3ZVNpbXYzNFZ6eFoxUm9BYnlNLzAvMzIz
MDMxMmUzMjMxMzgyZTMxMzkzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzcz
MTM2MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAcnavjANBgkqhkiG9w0BAQsFAAOCAQEAKNLTAzTG
PIU3SDujfC9KzqBbm0U1z+6aDwQZn/BNoPMNLR4P1I+CAoJwMmzB3iwn9kgFz+6z
Lp8I4VpGo9XG+JPFots3LzjFprFqLqFRMowpewsU3ekrRH3k4l4HEHhywsxe0Ic5
8694c5JlQrW1crC25MZnLjY2zkyyt+CfFs03AJvAqlGmhE9c1UTL1LQNzdNAC5UH
OTZlGV/0Mj3TCxWZAZdrjZQC6t6bsW/2EDi6eYM0BWsR07Eig1xLHsDUuUW9cumb
7w2u72rOEf5uaB7nRYsGRpZ0A52wq1F+hFk4jVhKc0vyEStK1F2pH10kWSNOStgm
sfgS/wAxIxisCw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:57:41 2024 by rpki-client on console-fra.rpki-client.org