Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/3137392e3130362e3138362e302f32332d3233203d3e203532353339.roa
File:                     3137392e3130362e3138362e302f32332d3233203d3e203532353339.roa (raw, json)
Hash identifier:          rHnX/d0KgHIi4pNfczNqleAEE2cESs6ANhqU84pVEgE=
Subject key identifier:   6F:7A:FC:06:44:E9:AD:45:37:2F:42:73:CB:EF:14:27:49:94:B3:C2
Certificate issuer:       /CN=911560DCB60DB44810B5FDD013E0F418FCA49153
Certificate serial:       2596690B2B96383773029E725AF04F33BE62C449
Authority key identifier: 91:15:60:DC:B6:0D:B4:48:10:B5:FD:D0:13:E0:F4:18:FC:A4:91:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/911560DCB60DB44810B5FDD013E0F418FCA49153.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/3137392e3130362e3138362e302f32332d3233203d3e203532353339.roa
Signing time:             Thu 25 Apr 2024 16:53:32 +0000
ROA not before:           Thu 25 Apr 2024 16:48:32 +0000
ROA not after:            Thu 24 Apr 2025 16:53:32 +0000
asID:                     52539
IP address blocks:        179.106.186.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/911560DCB60DB44810B5FDD013E0F418FCA49153.crl
                          rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/911560DCB60DB44810B5FDD013E0F418FCA49153.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/911560DCB60DB44810B5FDD013E0F418FCA49153.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 22:41:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:96:69:0b:2b:96:38:37:73:02:9e:72:5a:f0:4f:33:be:62:c4:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=911560DCB60DB44810B5FDD013E0F418FCA49153
        Validity
            Not Before: Apr 25 16:48:32 2024 GMT
            Not After : Apr 24 16:53:32 2025 GMT
        Subject: CN=6F7AFC0644E9AD45372F4273CBEF14274994B3C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3a:02:17:19:c6:5b:e6:c9:f8:a6:6f:fa:0d:
                    7b:fd:bf:88:08:bd:d0:c5:9d:bd:60:4b:7a:ed:35:
                    9c:ff:36:31:b3:59:29:55:6d:13:25:94:b5:6e:b8:
                    7a:d9:54:78:ab:cb:de:33:68:72:2e:4c:2b:11:05:
                    cc:a7:68:68:58:e8:a5:28:24:c5:c5:97:45:b7:37:
                    7e:b1:e1:4a:90:fc:6c:51:74:34:89:28:1c:9b:b4:
                    ea:fd:dc:f3:3b:44:32:3f:9e:16:98:d5:ef:48:c5:
                    2f:c0:f2:3a:67:39:fc:d3:a6:a2:1c:c6:22:41:8c:
                    83:c4:f6:73:81:31:9c:80:26:59:9c:62:f8:51:83:
                    ff:94:19:f9:dd:a1:58:01:16:3a:1d:6e:18:26:74:
                    a9:7a:cc:fb:22:09:d7:64:14:42:91:0f:4b:6e:51:
                    40:8a:b5:83:21:80:7c:b9:03:ec:c4:11:09:14:16:
                    63:ed:a7:4d:51:9f:ec:db:1f:b4:ba:ef:7d:5d:f6:
                    8b:18:10:d1:50:26:d5:4b:fc:9d:68:78:76:b5:4b:
                    7c:d5:a8:7b:92:8b:6e:50:dd:e4:73:03:2f:22:e0:
                    4f:87:14:6c:98:ed:f7:89:a6:f1:26:75:4b:41:73:
                    f2:04:2b:8d:3e:98:ad:d6:8b:4e:bd:4d:e5:de:9b:
                    cb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7A:FC:06:44:E9:AD:45:37:2F:42:73:CB:EF:14:27:49:94:B3:C2
            X509v3 Authority Key Identifier:
                keyid:91:15:60:DC:B6:0D:B4:48:10:B5:FD:D0:13:E0:F4:18:FC:A4:91:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/911560DCB60DB44810B5FDD013E0F418FCA49153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/911560DCB60DB44810B5FDD013E0F418FCA49153.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/3137392e3130362e3138362e302f32332d3233203d3e203532353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:6d:74:bf:be:06:da:69:b0:b0:3b:13:1f:af:4c:13:33:02:
         29:dc:57:04:52:c3:a1:e1:87:54:1a:89:f9:b4:30:2c:1a:dc:
         c2:78:6c:84:13:c7:88:d6:48:ee:c1:11:d8:52:bd:3c:01:f1:
         be:0d:b6:be:43:5a:f5:14:65:82:44:a4:3d:e0:ba:56:9d:a3:
         19:4d:0e:63:77:ba:57:ea:5f:28:95:d6:96:69:1a:ac:7f:71:
         df:bd:48:2c:fa:63:db:15:6f:01:6f:96:ec:00:c7:fd:55:f3:
         90:62:4d:5d:98:06:77:17:54:9d:2a:f6:e6:5e:18:d0:15:b7:
         47:cf:ec:43:3a:77:c4:fb:64:a2:a9:0d:03:6e:b7:a9:99:4e:
         8f:37:a3:ca:04:5c:f6:76:07:17:78:da:ed:b0:a3:90:d4:a4:
         29:0c:28:2e:56:4f:d5:a5:36:f5:ff:c7:4e:e3:74:fe:1d:5f:
         c7:ff:c4:20:0d:f5:96:9a:3d:c0:55:40:dc:2b:04:66:7e:75:
         45:c3:31:09:74:88:b3:9a:31:c0:ed:c7:63:5d:65:0b:76:14:
         31:7a:5c:9f:12:41:20:fd:fb:16:89:0c:68:7c:09:35:2b:6d:
         f1:58:91:0a:86:36:a7:8c:f8:27:46:93:af:94:c5:88:01:66:
         97:95:93:be
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJZZpCyuWODdzAp5yWvBPM75ixEkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTExNTYwRENCNjBEQjQ0ODEwQjVGREQwMTNFMEY0MThG
Q0E0OTE1MzAeFw0yNDA0MjUxNjQ4MzJaFw0yNTA0MjQxNjUzMzJaMDMxMTAvBgNV
BAMTKDZGN0FGQzA2NDRFOUFENDUzNzJGNDI3M0NCRUYxNDI3NDk5NEIzQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpOgIXGcZb5sn4pm/6DXv9v4gI
vdDFnb1gS3rtNZz/NjGzWSlVbRMllLVuuHrZVHiry94zaHIuTCsRBcynaGhY6KUo
JMXFl0W3N36x4UqQ/GxRdDSJKBybtOr93PM7RDI/nhaY1e9IxS/A8jpnOfzTpqIc
xiJBjIPE9nOBMZyAJlmcYvhRg/+UGfndoVgBFjodbhgmdKl6zPsiCddkFEKRD0tu
UUCKtYMhgHy5A+zEEQkUFmPtp01Rn+zbH7S6731d9osYENFQJtVL/J1oeHa1S3zV
qHuSi25Q3eRzAy8i4E+HFGyY7feJpvEmdUtBc/IEK40+mK3Wi069TeXem8tJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUb3r8BkTprUU3L0Jzy+8UJ0mUs8IwHwYDVR0j
BBgwFoAUkRVg3LYNtEgQtf3QE+D0GPykkVMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOG0zTGNMNmI0WVZyRUZIc0ZOd0RrWnRNUzJwY2piaFEzNWZGYkRWRUNF
ZkEvMC85MTE1NjBEQ0I2MERCNDQ4MTBCNUZERDAxM0UwRjQxOEZDQTQ5MTUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxMTU2MERDQjYwREI0NDgx
MEI1RkREMDEzRTBGNDE4RkNBNDkxNTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhtM0xjTDZiNFlWckVGSHNGTndEa1p0TVMycGNqYmhRMzVmRmJEVkVDRWZBLzAv
MzEzNzM5MmUzMTMwMzYyZTMxMzgzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM1
MzIzNTMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGzarowDQYJKoZIhvcNAQELBQADggEBACFtdL++
BtppsLA7Ex+vTBMzAincVwRSw6Hhh1Qaifm0MCwa3MJ4bIQTx4jWSO7BEdhSvTwB
8b4Ntr5DWvUUZYJEpD3guladoxlNDmN3ulfqXyiV1pZpGqx/cd+9SCz6Y9sVbwFv
luwAx/1V85BiTV2YBncXVJ0q9uZeGNAVt0fP7EM6d8T7ZKKpDQNut6mZTo83o8oE
XPZ2Bxd42u2wo5DUpCkMKC5WT9WlNvX/x07jdP4dX8f/xCAN9ZaaPcBVQNwrBGZ+
dUXDMQl0iLOaMcDtx2NdZQt2FDF6XJ8SQSD9+xaJDGh8CTUrbfFYkQqGNqeM+CdG
k6+UxYgBZpeVk74=
-----END CERTIFICATE-----
Generated at Sun Jun 2 23:05:00 2024 by rpki-client on console-fra.rpki-client.org