Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3138362e3235312e3235302e302f32342d3234203d3e20323637353133.roa
File:                     3138362e3235312e3235302e302f32342d3234203d3e20323637353133.roa (raw, json)
Hash identifier:          hRbIs+Yzzz/zOFnSxZSlj+pIIS8jSaF5RMrEa6NBOnY=
Subject key identifier:   FF:3C:1B:51:F8:E5:28:EA:90:16:5B:CB:BC:FB:AC:F7:80:8F:0C:7A
Certificate issuer:       /CN=CF15A08CBAD6745A044863EE535BB942BA6C046E
Certificate serial:       35D790FFC6513AC43DDCB8BBFEE275AFB0D6DC63
Authority key identifier: CF:15:A0:8C:BA:D6:74:5A:04:48:63:EE:53:5B:B9:42:BA:6C:04:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3138362e3235312e3235302e302f32342d3234203d3e20323637353133.roa
Signing time:             Thu 04 Apr 2024 18:08:47 +0000
ROA not before:           Thu 04 Apr 2024 18:03:47 +0000
ROA not after:            Thu 03 Apr 2025 18:08:47 +0000
asID:                     267513
IP address blocks:        186.251.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.crl
                          rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Nov 2024 21:48:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d7:90:ff:c6:51:3a:c4:3d:dc:b8:bb:fe:e2:75:af:b0:d6:dc:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF15A08CBAD6745A044863EE535BB942BA6C046E
        Validity
            Not Before: Apr  4 18:03:47 2024 GMT
            Not After : Apr  3 18:08:47 2025 GMT
        Subject: CN=FF3C1B51F8E528EA90165BCBBCFBACF7808F0C7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:15:3e:81:5c:ae:fd:6c:23:5a:82:8e:60:91:
                    32:55:af:a3:47:d0:7e:d6:bb:53:fd:39:59:81:04:
                    38:b4:aa:13:a4:b8:7a:0e:6a:ed:3b:8d:85:22:51:
                    66:5b:5a:cd:e3:b5:a5:93:d0:5d:83:2e:ac:fa:3a:
                    2b:7d:40:2f:bd:8e:da:b6:f2:1c:34:de:24:ae:f0:
                    3f:31:0f:33:19:0c:b5:92:c5:87:a6:f3:88:73:18:
                    f1:a3:79:f5:3c:47:0c:68:95:06:a3:a2:7f:25:fb:
                    d7:b8:54:68:f0:21:b3:7c:60:50:34:af:ff:b9:9b:
                    56:85:17:45:ed:d4:10:f9:d5:71:9f:3d:08:d2:6b:
                    29:c3:20:4c:79:63:3a:20:d3:cf:7e:68:a3:89:ac:
                    a6:96:63:7f:6a:3a:2b:1f:bb:44:cf:60:d5:b0:ba:
                    80:71:04:64:c0:fa:5a:b0:ff:ab:69:a2:3b:5f:98:
                    15:c1:de:98:ff:01:26:7e:92:cb:29:8d:51:dd:fe:
                    6f:71:52:4f:19:f3:f7:d7:70:e1:d0:1a:5b:4b:52:
                    87:d9:09:fa:86:ec:fc:12:49:0e:41:6c:fb:cc:fd:
                    aa:82:77:e6:8e:2e:67:7a:24:9c:de:75:b6:e3:a4:
                    99:ef:d1:42:7c:a3:b4:97:ea:e3:ef:85:92:66:ed:
                    24:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:3C:1B:51:F8:E5:28:EA:90:16:5B:CB:BC:FB:AC:F7:80:8F:0C:7A
            X509v3 Authority Key Identifier:
                keyid:CF:15:A0:8C:BA:D6:74:5A:04:48:63:EE:53:5B:B9:42:BA:6C:04:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3138362e3235312e3235302e302f32342d3234203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:55:b9:1b:70:64:22:e0:c7:e0:cb:07:05:f2:a2:0f:c1:4a:
         43:8f:3a:be:f6:c0:72:b5:eb:de:98:98:bf:cf:e8:ff:a3:49:
         29:69:bb:37:00:48:3d:3e:8b:5d:e4:4c:54:e9:98:2c:44:39:
         e8:4d:2e:9a:5c:0a:9d:66:f7:50:3d:ab:46:b0:4e:10:4a:ce:
         8f:60:4e:65:d7:78:c2:67:e0:50:11:6d:83:0d:57:0f:5a:b1:
         c1:5b:ec:d2:12:73:a5:31:7a:c6:a1:9e:45:30:de:68:ee:32:
         c4:aa:ec:28:98:1d:8f:c3:89:67:eb:a8:71:ce:bc:2f:67:fd:
         30:88:28:ab:1c:93:1d:18:cb:cf:e0:e5:40:fc:1c:43:5d:b7:
         48:ae:36:07:fb:8e:01:ff:d8:85:16:74:32:d1:ee:dd:26:a6:
         5b:7e:bd:a9:12:a5:26:8e:f2:61:b0:3b:88:81:f1:82:61:e2:
         c2:a0:aa:6b:4a:6c:35:12:2e:af:5c:5e:8d:e8:e6:36:55:4f:
         06:80:dc:07:33:81:f5:2a:41:8c:6a:b4:c4:61:b8:93:5f:2e:
         e3:67:97:5e:be:dc:69:0e:db:7e:b6:ec:a1:52:73:58:55:78:
         b4:b7:35:b3:a3:04:db:d8:d0:df:d2:42:80:59:75:6b:0c:96:
         a1:a3:fc:8c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUNdeQ/8ZROsQ93Li7/uJ1r7DW3GMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YxNUEwOENCQUQ2NzQ1QTA0NDg2M0VFNTM1QkI5NDJC
QTZDMDQ2RTAeFw0yNDA0MDQxODAzNDdaFw0yNTA0MDMxODA4NDdaMDMxMTAvBgNV
BAMTKEZGM0MxQjUxRjhFNTI4RUE5MDE2NUJDQkJDRkJBQ0Y3ODA4RjBDN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAFT6BXK79bCNago5gkTJVr6NH
0H7Wu1P9OVmBBDi0qhOkuHoOau07jYUiUWZbWs3jtaWT0F2DLqz6Oit9QC+9jtq2
8hw03iSu8D8xDzMZDLWSxYem84hzGPGjefU8RwxolQajon8l+9e4VGjwIbN8YFA0
r/+5m1aFF0Xt1BD51XGfPQjSaynDIEx5Yzog089+aKOJrKaWY39qOisfu0TPYNWw
uoBxBGTA+lqw/6tpojtfmBXB3pj/ASZ+ksspjVHd/m9xUk8Z8/fXcOHQGltLUofZ
CfqG7PwSSQ5BbPvM/aqCd+aOLmd6JJzedbbjpJnv0UJ8o7SX6uPvhZJm7SSVAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU/zwbUfjlKOqQFlvLvPus94CPDHowHwYDVR0j
BBgwFoAUzxWgjLrWdFoESGPuU1u5QrpsBG4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnVvYzFvckdrQzZTdkF1dnhIMUpLandpM0tQd0hSS1JhTHM4c2ZCTlh6
SkcvMS9DRjE1QTA4Q0JBRDY3NDVBMDQ0ODYzRUU1MzVCQjk0MkJBNkMwNDZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGMTVBMDhDQkFENjc0NUEw
NDQ4NjNFRTUzNUJCOTQyQkE2QzA0NkUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J1b2Mxb3JHa0M2U3ZBdXZ4SDFKS2p3aTNLUHdIUktSYUxzOHNmQk5YekpHLzEv
MzEzODM2MmUzMjM1MzEyZTMyMzUzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNzM1MzEzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALr7+jANBgkqhkiG9w0BAQsFAAOCAQEAgVW5
G3BkIuDH4MsHBfKiD8FKQ486vvbAcrXr3piYv8/o/6NJKWm7NwBIPT6LXeRMVOmY
LEQ56E0umlwKnWb3UD2rRrBOEErOj2BOZdd4wmfgUBFtgw1XD1qxwVvs0hJzpTF6
xqGeRTDeaO4yxKrsKJgdj8OJZ+uocc68L2f9MIgoqxyTHRjLz+DlQPwcQ123SK42
B/uOAf/YhRZ0MtHu3SamW369qRKlJo7yYbA7iIHxgmHiwqCqa0psNRIur1xejejm
NlVPBoDcBzOB9SpBjGq0xGG4k18u42eXXr7caQ7bfrbsoVJzWFV4tLc1s6ME29jQ
39JCgFl1awyWoaP8jA==
-----END CERTIFICATE-----
Generated at Wed Nov 13 22:39:56 2024 by rpki-client on console-fra.rpki-client.org