Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/3138362e3233352e3138342e302f32322d3234203d3e203631383838.roa
File:                     3138362e3233352e3138342e302f32322d3234203d3e203631383838.roa (raw, json)
Hash identifier:          4C0JEVlJowGwTWY1PAmnxx2WurBxLZlvgden9Ta5dtQ=
Subject key identifier:   D3:DE:EB:F7:8D:1B:E0:80:D5:EA:4F:C9:49:00:8C:87:A9:66:6B:6E
Certificate issuer:       /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Certificate serial:       340AE45AD59EB1944C31BC1F8E084D612B80F88E
Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/3138362e3233352e3138342e302f32322d3234203d3e203631383838.roa
Signing time:             Wed 03 Apr 2024 18:31:36 +0000
ROA not before:           Wed 03 Apr 2024 18:26:36 +0000
ROA not after:            Wed 02 Apr 2025 18:31:36 +0000
asID:                     61888
IP address blocks:        186.235.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl
                          rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:0a:e4:5a:d5:9e:b1:94:4c:31:bc:1f:8e:08:4d:61:2b:80:f8:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
        Validity
            Not Before: Apr  3 18:26:36 2024 GMT
            Not After : Apr  2 18:31:36 2025 GMT
        Subject: CN=D3DEEBF78D1BE080D5EA4FC949008C87A9666B6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:93:5c:24:65:05:a8:b6:fb:ec:88:e0:a5:fd:
                    e8:2e:58:6b:94:16:34:75:60:5a:33:b5:8a:30:35:
                    af:2f:0c:3d:d1:6b:cc:a1:76:8a:3c:82:77:68:6a:
                    ee:17:b0:d8:b3:f4:33:db:cd:85:88:f8:1f:f7:8b:
                    a2:5e:89:1a:7e:b3:79:55:c6:e8:39:e5:d0:f4:c6:
                    b0:92:02:46:e2:24:ed:6c:e3:3f:f3:fa:73:10:9c:
                    8b:83:a5:d2:47:00:db:9e:fb:f3:0a:e9:01:84:ec:
                    7f:72:ee:7b:41:46:ad:b3:22:c5:c3:d7:7a:c3:9d:
                    1c:af:cf:cc:32:cb:c5:bf:bf:a6:37:bf:97:95:ca:
                    2d:b9:da:32:ce:2d:1c:8f:8a:c7:ba:00:72:cb:05:
                    35:6e:7e:cf:19:d0:8f:3e:95:ee:ae:4a:5d:7c:29:
                    a8:2e:1f:77:ff:4d:30:e0:8a:39:50:6e:06:29:38:
                    41:75:b5:72:d9:79:53:c0:84:8d:5c:c9:1e:46:eb:
                    f3:8c:27:7d:ab:1a:85:5d:d0:14:88:f3:37:5d:a1:
                    75:08:0f:41:a6:2f:a7:1b:13:3d:93:f2:1b:ab:b7:
                    3f:2e:dd:1c:40:e7:12:de:e0:97:54:15:44:46:33:
                    c2:1c:d1:af:b9:c4:ec:68:90:33:06:8a:f8:b3:0b:
                    bb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DE:EB:F7:8D:1B:E0:80:D5:EA:4F:C9:49:00:8C:87:A9:66:6B:6E
            X509v3 Authority Key Identifier:
                keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/3138362e3233352e3138342e302f32322d3234203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:0c:0b:ef:28:2d:bc:0e:e4:b4:51:da:57:48:55:1f:f9:8d:
         4e:53:10:c5:e9:2c:88:87:32:29:d9:51:ce:b4:d4:6d:eb:ef:
         3a:11:e3:38:5d:73:85:8a:f0:1e:71:2b:fb:db:07:55:a7:3b:
         e4:82:ba:88:11:47:8a:4b:68:1e:82:e0:c6:59:3e:bf:b0:fb:
         db:f2:72:9c:7d:4c:64:c3:a4:8a:05:b7:92:da:8f:8e:62:2f:
         ac:2e:76:e9:7f:ab:5d:9c:24:37:96:82:6d:ad:2c:c9:12:e2:
         5c:8e:57:10:3f:bd:68:5f:1a:eb:5d:9b:6b:01:b9:54:67:8e:
         41:00:12:49:54:3f:aa:4c:39:5c:e2:9a:c9:63:f6:76:46:d6:
         ea:23:47:c3:6e:4a:d4:77:b5:50:f0:29:da:8e:34:01:1a:a1:
         f7:9b:cc:1e:9a:75:81:8c:61:6b:2d:1c:f8:99:d2:ce:e2:b3:
         bb:9c:5d:83:72:cf:30:bf:6e:c2:7d:e7:19:22:0c:eb:f1:cf:
         e7:04:0b:9f:b3:c3:a8:65:b1:db:14:b4:c0:b6:a0:75:10:2a:
         3d:13:ff:0c:26:bd:2c:c1:df:bd:df:df:d9:ea:2b:9a:fc:12:
         53:8c:a8:8c:2a:48:e8:aa:ed:0c:67:df:9b:d1:59:60:6f:7e:
         a8:f0:85:17
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNArkWtWesZRMMbwfjghNYSuA+I4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTYxQUU1RDQ3OUIyNTM0MDIyNjgyQjY0RDdGMEVGRTZB
QTExRjc5MTAeFw0yNDA0MDMxODI2MzZaFw0yNTA0MDIxODMxMzZaMDMxMTAvBgNV
BAMTKEQzREVFQkY3OEQxQkUwODBENUVBNEZDOTQ5MDA4Qzg3QTk2NjZCNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsk1wkZQWotvvsiOCl/eguWGuU
FjR1YFoztYowNa8vDD3Ra8yhdoo8gndoau4XsNiz9DPbzYWI+B/3i6JeiRp+s3lV
xug55dD0xrCSAkbiJO1s4z/z+nMQnIuDpdJHANue+/MK6QGE7H9y7ntBRq2zIsXD
13rDnRyvz8wyy8W/v6Y3v5eVyi252jLOLRyPise6AHLLBTVufs8Z0I8+le6uSl18
KaguH3f/TTDgijlQbgYpOEF1tXLZeVPAhI1cyR5G6/OMJ32rGoVd0BSI8zddoXUI
D0GmL6cbEz2T8hurtz8u3RxA5xLe4JdUFURGM8Ic0a+5xOxokDMGivizC7vfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU097r940b4IDV6k/JSQCMh6lma24wHwYDVR0j
BBgwFoAUlhrl1HmyU0AiaCtk1/Dv5qoR95EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzRoUzdCOHVHWXNEVk42eVVvVDVMckVpNWVFaTFuVFh6SDNLNW1RS1JC
QmUvMS85NjFBRTVENDc5QjI1MzQwMjI2ODJCNjREN0YwRUZFNkFBMTFGNzkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2MUFFNUQ0NzlCMjUzNDAy
MjY4MkI2NEQ3RjBFRkU2QUExMUY3OTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM0aFM3Qjh1R1lzRFZONnlVb1Q1THJFaTVlRWkxblRYekgzSzVtUUtSQkJlLzEv
MzEzODM2MmUzMjMzMzUyZTMxMzgzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM2
MzEzODM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK667gwDQYJKoZIhvcNAQELBQADggEBAJAMC+8o
LbwO5LRR2ldIVR/5jU5TEMXpLIiHMinZUc601G3r7zoR4zhdc4WK8B5xK/vbB1Wn
O+SCuogRR4pLaB6C4MZZPr+w+9vycpx9TGTDpIoFt5Laj45iL6wudul/q12cJDeW
gm2tLMkS4lyOVxA/vWhfGutdm2sBuVRnjkEAEklUP6pMOVzimslj9nZG1uojR8Nu
StR3tVDwKdqONAEaofebzB6adYGMYWstHPiZ0s7is7ucXYNyzzC/bsJ95xkiDOvx
z+cEC5+zw6hlsdsUtMC2oHUQKj0T/wwmvSzB373f39nqK5r8ElOMqIwqSOiq7Qxn
35vRWWBvfqjwhRc=
-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:27 2024 by rpki-client on console-ams.rpki-client.org