Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3138362e3230382e3134342e302f32312d3231203d3e20323632343539.roa
File:                     3138362e3230382e3134342e302f32312d3231203d3e20323632343539.roa (raw, json)
Hash identifier:          TviLxE1Ug8WKh6bAitWY0r5h1mjTUlAiTeWJoPsvHTw=
Subject key identifier:   98:3C:C9:76:E5:63:B7:77:41:72:C5:83:F5:A3:21:98:AD:13:9D:A4
Certificate issuer:       /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial:       3CA555E9FBB61724A23EA561CEF5EB275EE092A5
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3138362e3230382e3134342e302f32312d3231203d3e20323632343539.roa
Signing time:             Fri 14 Jun 2024 20:26:17 +0000
ROA not before:           Fri 14 Jun 2024 20:21:17 +0000
ROA not after:            Fri 13 Jun 2025 20:26:17 +0000
asID:                     262459
IP address blocks:        186.208.144.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl
                          rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:12:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a5:55:e9:fb:b6:17:24:a2:3e:a5:61:ce:f5:eb:27:5e:e0:92:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
        Validity
            Not Before: Jun 14 20:21:17 2024 GMT
            Not After : Jun 13 20:26:17 2025 GMT
        Subject: CN=983CC976E563B7774172C583F5A32198AD139DA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:68:f1:4f:14:76:37:36:ca:ee:2d:9c:9a:c1:
                    f2:df:57:71:0c:02:e4:36:dd:e9:88:76:90:0a:73:
                    cc:93:6f:f5:5d:bb:75:01:3c:34:8a:d6:b9:83:56:
                    94:df:7d:b0:95:0b:4a:cb:9e:63:c1:15:b3:64:16:
                    3b:0f:2a:05:cb:b7:20:e8:1c:af:49:8a:f9:48:6d:
                    15:d0:e8:33:d3:06:ac:0e:25:8f:0d:19:c2:3a:86:
                    5f:e4:32:00:62:18:b6:a7:c6:59:97:0d:0e:b1:17:
                    6f:74:4c:e4:e9:52:86:09:06:88:91:4a:e6:ac:a5:
                    de:c4:5b:f0:6a:8a:18:68:bd:f5:10:8f:56:8c:d9:
                    68:26:33:65:75:7a:2a:6e:25:0c:d6:d8:09:ea:8c:
                    69:82:a0:82:17:7e:c0:c4:3e:c4:bd:52:a7:ad:93:
                    27:ad:e7:73:7f:1f:f0:b5:4c:3c:f1:73:9b:c4:e3:
                    09:db:6d:5e:c3:7a:da:5d:0d:43:6b:42:4e:82:9d:
                    19:50:68:cf:fc:64:8b:b8:37:81:53:6c:56:0a:a0:
                    0a:a5:20:c8:00:b0:38:6d:f9:25:9b:3b:a8:ca:dc:
                    2f:10:43:d5:b9:a8:35:34:cc:9e:cb:b2:39:a8:53:
                    e5:b1:82:b2:5a:45:26:11:22:87:12:ea:fe:ec:0c:
                    c3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:3C:C9:76:E5:63:B7:77:41:72:C5:83:F5:A3:21:98:AD:13:9D:A4
            X509v3 Authority Key Identifier:
                keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/3138362e3230382e3134342e302f32312d3231203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         fb:43:b0:19:48:94:db:39:28:b8:e3:d4:8c:1b:3d:fd:a9:48:
         4f:b9:c5:b8:ea:b8:97:2d:63:14:de:2c:02:5c:6c:ad:b2:78:
         3a:1a:f1:85:ff:a2:40:74:35:69:74:35:43:9d:cf:4c:2a:d4:
         dd:d4:75:c3:5f:6e:e2:14:35:cb:c6:14:f5:18:75:50:bc:19:
         b3:fd:bf:16:9f:1d:9f:ea:2a:93:a4:6e:34:91:37:81:40:de:
         3b:4e:58:da:1e:ad:5f:f0:2d:18:ad:51:74:e0:22:71:a3:aa:
         47:bb:b5:fa:ec:7b:f6:d3:2d:73:05:f3:ab:f3:40:b4:23:93:
         9b:c7:0e:80:90:c2:01:8e:58:d8:bb:e4:7d:27:cf:f5:ec:75:
         a4:87:d6:51:83:df:be:2b:e2:68:39:4c:55:eb:41:b5:55:9a:
         07:8e:58:24:d8:f6:7a:52:c6:53:e1:50:fc:0b:5e:5d:07:bf:
         53:34:79:03:9e:00:d9:0a:26:16:3d:02:ba:0d:08:5e:8c:76:
         40:54:12:cc:a2:41:58:31:f0:d1:c2:5f:19:da:f6:d6:f8:ec:
         02:99:90:fe:7b:34:39:08:e6:16:ef:a9:55:1e:ef:9d:2b:d8:
         22:d9:79:11:a4:aa:72:2d:dc:8b:87:86:04:05:f0:63:23:e6:
         1b:d1:ee:49
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUPKVV6fu2FySiPqVhzvXrJ17gkqUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjEyRjg1N0NFNzFFNzJFN0U4OTJDRjk3N0Q4MEI2QThC
NzVDNzhBNDAeFw0yNDA2MTQyMDIxMTdaFw0yNTA2MTMyMDI2MTdaMDMxMTAvBgNV
BAMTKDk4M0NDOTc2RTU2M0I3Nzc0MTcyQzU4M0Y1QTMyMTk4QUQxMzlEQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFaPFPFHY3NsruLZyawfLfV3EM
AuQ23emIdpAKc8yTb/Vdu3UBPDSK1rmDVpTffbCVC0rLnmPBFbNkFjsPKgXLtyDo
HK9JivlIbRXQ6DPTBqwOJY8NGcI6hl/kMgBiGLanxlmXDQ6xF290TOTpUoYJBoiR
Suaspd7EW/BqihhovfUQj1aM2WgmM2V1eipuJQzW2AnqjGmCoIIXfsDEPsS9Uqet
kyet53N/H/C1TDzxc5vE4wnbbV7DetpdDUNrQk6CnRlQaM/8ZIu4N4FTbFYKoAql
IMgAsDht+SWbO6jK3C8QQ9W5qDU0zJ7LsjmoU+WxgrJaRSYRIocS6v7sDMMlAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUmDzJduVjt3dBcsWD9aMhmK0TnaQwHwYDVR0j
BBgwFoAUsS+FfOcecufoks+XfYC2qLdceKQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjhIc3dveUszZ2kzTlUzUHl6am9zWHNnVFVBNmhVY2JQVnVhM2tidzdK
RXAvMS9CMTJGODU3Q0U3MUU3MkU3RTg5MkNGOTc3RDgwQjZBOEI3NUM3OEE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxMkY4NTdDRTcxRTcyRTdF
ODkyQ0Y5NzdEODBCNkE4Qjc1Qzc4QTQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI4SHN3b3lLM2dpM05VM1B5empvc1hzZ1RVQTZoVWNiUFZ1YTNrYnc3SkVwLzEv
MzEzODM2MmUzMjMwMzgyZTMxMzQzNDJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMy
MzYzMjM0MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEA7rQkDANBgkqhkiG9w0BAQsFAAOCAQEA+0Ow
GUiU2zkouOPUjBs9/alIT7nFuOq4ly1jFN4sAlxsrbJ4Ohrxhf+iQHQ1aXQ1Q53P
TCrU3dR1w19u4hQ1y8YU9Rh1ULwZs/2/Fp8dn+oqk6RuNJE3gUDeO05Y2h6tX/At
GK1RdOAicaOqR7u1+ux79tMtcwXzq/NAtCOTm8cOgJDCAY5Y2LvkfSfP9ex1pIfW
UYPfviviaDlMVetBtVWaB45YJNj2elLGU+FQ/AteXQe/UzR5A54A2QomFj0Cug0I
Xox2QFQSzKJBWDHw0cJfGdr21vjsApmQ/ns0OQjmFu+pVR7vnSvYItl5EaSqci3c
i4eGBAXwYyPmG9HuSQ==
-----END CERTIFICATE-----
Generated at Sat Jun 29 06:48:48 2024 by rpki-client on console-fra.rpki-client.org