Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/3138362e3230392e38382e302f32322d3234203d3e203238363130.roa
File:                     3138362e3230392e38382e302f32322d3234203d3e203238363130.roa (raw, json)
Hash identifier:          CJxxymL10yKbb15VA7MCdbxZJdDCGbVdMizJrRSfO9I=
Subject key identifier:   D0:EC:B5:DC:DE:97:04:A3:29:53:6F:4E:43:66:FF:BF:3B:3C:D7:D6
Certificate issuer:       /CN=11A2F7135D8EA026B9E72BE70E3EA679F14263F4
Certificate serial:       4BFCC025A3F0C4B7A17E7EC29F2D74804BE691FB
Authority key identifier: 11:A2:F7:13:5D:8E:A0:26:B9:E7:2B:E7:0E:3E:A6:79:F1:42:63:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A2F7135D8EA026B9E72BE70E3EA679F14263F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/3138362e3230392e38382e302f32322d3234203d3e203238363130.roa
Signing time:             Mon 23 Sep 2024 13:08:43 +0000
ROA not before:           Mon 23 Sep 2024 13:03:43 +0000
ROA not after:            Mon 22 Sep 2025 13:08:43 +0000
asID:                     28610
IP address blocks:        186.209.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/11A2F7135D8EA026B9E72BE70E3EA679F14263F4.crl
                          rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/11A2F7135D8EA026B9E72BE70E3EA679F14263F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A2F7135D8EA026B9E72BE70E3EA679F14263F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:fc:c0:25:a3:f0:c4:b7:a1:7e:7e:c2:9f:2d:74:80:4b:e6:91:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A2F7135D8EA026B9E72BE70E3EA679F14263F4
        Validity
            Not Before: Sep 23 13:03:43 2024 GMT
            Not After : Sep 22 13:08:43 2025 GMT
        Subject: CN=D0ECB5DCDE9704A329536F4E4366FFBF3B3CD7D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:82:ca:1e:24:6c:a8:a8:d7:07:74:82:6a:74:
                    ed:ec:97:ea:3d:4a:63:fd:a5:5f:93:c4:7d:80:db:
                    99:f1:2d:bf:ff:2e:86:c6:c2:9b:55:f9:f5:fb:a1:
                    ef:a4:ba:bb:73:61:da:17:fa:5b:dd:e6:72:ba:c8:
                    6e:26:12:10:61:7a:c2:db:a5:d8:2e:47:e2:42:c3:
                    7b:6a:dc:5f:4d:51:d7:cf:84:f9:2a:cd:c8:80:3b:
                    5c:fb:48:03:ea:41:56:b7:03:00:db:90:54:09:5b:
                    66:66:8c:19:ad:a1:88:ac:79:aa:f9:0a:94:c1:2e:
                    80:cf:fd:d5:75:9c:63:b7:a2:12:37:ee:d6:71:2d:
                    4f:d8:01:11:ad:17:8b:78:3a:e2:1f:33:62:dc:ac:
                    5a:69:ea:67:99:18:ee:73:18:b9:da:81:f7:76:b1:
                    94:6a:05:92:d2:99:e3:fa:67:f3:bd:b6:70:8b:ac:
                    97:c1:83:11:da:57:f2:1b:dd:53:fc:a0:83:38:b1:
                    34:35:64:f4:51:52:fb:d1:ae:37:9a:cd:7b:06:a7:
                    c9:52:62:aa:93:55:e9:e4:b8:13:c8:0d:34:1e:a2:
                    9b:96:cb:57:76:80:11:90:cf:03:f1:86:86:4d:5b:
                    93:80:44:31:e2:04:06:10:57:94:66:16:d4:19:b6:
                    5e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:EC:B5:DC:DE:97:04:A3:29:53:6F:4E:43:66:FF:BF:3B:3C:D7:D6
            X509v3 Authority Key Identifier:
                keyid:11:A2:F7:13:5D:8E:A0:26:B9:E7:2B:E7:0E:3E:A6:79:F1:42:63:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/11A2F7135D8EA026B9E72BE70E3EA679F14263F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A2F7135D8EA026B9E72BE70E3EA679F14263F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/3138362e3230392e38382e302f32322d3234203d3e203238363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:8d:13:ea:27:25:96:bd:8f:a3:fd:c1:b1:c6:29:65:a6:be:
         a4:9e:41:dd:a7:e3:e8:5b:d1:0e:c8:75:f9:a8:df:fc:69:53:
         04:a3:26:1a:46:16:b1:82:f6:f1:6a:fe:01:57:13:14:b5:66:
         9f:e2:ec:74:0a:c2:89:94:92:0b:f7:9f:6c:94:b4:57:ff:c7:
         0f:27:8d:35:e7:4e:f0:b6:85:df:3e:9a:53:31:46:3f:dd:1a:
         b5:85:e3:b1:bb:4b:8a:c0:a1:7b:33:03:62:50:e4:5d:cb:e8:
         44:26:d7:1f:8e:f4:21:3b:76:1d:72:b6:09:eb:79:50:60:6e:
         17:85:ef:19:14:33:70:ef:07:da:ff:76:c8:cd:78:31:c8:0a:
         29:37:27:0e:11:c8:cf:b1:b2:a8:86:9d:79:f4:29:9e:e5:c8:
         eb:ea:30:d1:fd:f9:eb:03:4d:39:97:49:68:f9:e9:5b:a4:bd:
         04:9e:0b:aa:75:25:51:95:77:3b:bb:ee:43:07:4f:86:98:fc:
         6b:1b:76:2c:1f:f9:60:c3:51:cf:b5:ee:77:d6:63:e9:c7:ed:
         a2:53:f0:77:dc:18:71:38:36:0f:72:db:69:6a:c1:d9:43:d1:
         24:28:1e:f4:69:53:d7:49:06:ac:6f:41:18:fd:b4:74:f4:e0:
         0b:68:fe:a5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUS/zAJaPwxLehfn7Cny10gEvmkfswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFBMkY3MTM1RDhFQTAyNkI5RTcyQkU3MEUzRUE2NzlG
MTQyNjNGNDAeFw0yNDA5MjMxMzAzNDNaFw0yNTA5MjIxMzA4NDNaMDMxMTAvBgNV
BAMTKEQwRUNCNURDREU5NzA0QTMyOTUzNkY0RTQzNjZGRkJGM0IzQ0Q3RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGgsoeJGyoqNcHdIJqdO3sl+o9
SmP9pV+TxH2A25nxLb//LobGwptV+fX7oe+kurtzYdoX+lvd5nK6yG4mEhBhesLb
pdguR+JCw3tq3F9NUdfPhPkqzciAO1z7SAPqQVa3AwDbkFQJW2ZmjBmtoYisear5
CpTBLoDP/dV1nGO3ohI37tZxLU/YARGtF4t4OuIfM2LcrFpp6meZGO5zGLnagfd2
sZRqBZLSmeP6Z/O9tnCLrJfBgxHaV/Ib3VP8oIM4sTQ1ZPRRUvvRrjeazXsGp8lS
YqqTVenkuBPIDTQeopuWy1d2gBGQzwPxhoZNW5OARDHiBAYQV5RmFtQZtl75AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU0Oy13N6XBKMpU29OQ2b/vzs819YwHwYDVR0j
BBgwFoAUEaL3E12OoCa55yvnDj6mefFCY/QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmYyd2tGOXdYWWFEcEZKYkJaaWZSMjVrRkdVNkVEa0NZNUdLZGk4Nmda
a0gvMC8xMUEyRjcxMzVEOEVBMDI2QjlFNzJCRTcwRTNFQTY3OUYxNDI2M0Y0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExQTJGNzEzNUQ4RUEwMjZC
OUU3MkJFNzBFM0VBNjc5RjE0MjYzRjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJmMndrRjl3WFlhRHBGSmJCWmlmUjI1a0ZHVTZFRGtDWTVHS2RpODZnWmtILzAv
MzEzODM2MmUzMjMwMzkyZTM4MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4
MzYzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCutFYMA0GCSqGSIb3DQEBCwUAA4IBAQAxjRPqJyWW
vY+j/cGxxillpr6knkHdp+PoW9EOyHX5qN/8aVMEoyYaRhaxgvbxav4BVxMUtWaf
4ux0CsKJlJIL959slLRX/8cPJ401507wtoXfPppTMUY/3Rq1heOxu0uKwKF7MwNi
UORdy+hEJtcfjvQhO3YdcrYJ63lQYG4Xhe8ZFDNw7wfa/3bIzXgxyAopNycOEcjP
sbKohp159Cme5cjr6jDR/fnrA005l0lo+elbpL0EnguqdSVRlXc7u+5DB0+GmPxr
G3YsH/lgw1HPte531mPpx+2iU/B33BhxODYPcttpasHZQ9EkKB70aVPXSQasb0EY
/bR09OALaP6l
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:13 2025 by rpki-client