Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3134382e302f32342d3234203d3e20323632393932.roa
File:                     3138362e3231392e3134382e302f32342d3234203d3e20323632393932.roa (raw, json)
Hash identifier:          uBTV8DJ5StrbzoSIyYkwqR/jhVLFuaTMhJsLYHPmECE=
Subject key identifier:   CA:91:BB:71:32:3E:7C:2B:2C:E1:0F:66:91:67:85:89:CA:77:A5:01
Certificate issuer:       /CN=001C1582B42E32880AA66677B51A015B52D2C781
Certificate serial:       7C9683403B8BD2C2AF69A05168258B2C85549C09
Authority key identifier: 00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3134382e302f32342d3234203d3e20323632393932.roa
Signing time:             Mon 09 Sep 2024 15:00:20 +0000
ROA not before:           Mon 09 Sep 2024 14:55:20 +0000
ROA not after:            Mon 08 Sep 2025 15:00:20 +0000
asID:                     262992
IP address blocks:        186.219.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 09:55:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:96:83:40:3b:8b:d2:c2:af:69:a0:51:68:25:8b:2c:85:54:9c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=001C1582B42E32880AA66677B51A015B52D2C781
        Validity
            Not Before: Sep  9 14:55:20 2024 GMT
            Not After : Sep  8 15:00:20 2025 GMT
        Subject: CN=CA91BB71323E7C2B2CE10F6691678589CA77A501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4d:76:94:c5:49:d6:59:ba:23:db:c1:bc:a2:
                    dd:3e:a1:e0:68:5a:af:47:5b:8a:a5:7b:c6:b8:5b:
                    f3:10:2b:f9:b7:44:f7:eb:5e:26:4c:a5:a9:50:31:
                    4d:29:30:27:38:3e:fc:1a:91:8b:f4:79:20:be:e9:
                    6e:2f:a5:7a:cd:e3:26:cb:aa:44:32:cb:ed:38:90:
                    3d:1c:35:ea:38:7d:bd:80:15:6d:38:26:59:5c:7e:
                    e6:bd:f3:a1:0b:58:68:4f:f3:e1:c8:a2:e9:03:21:
                    67:15:d4:f5:75:c5:a4:b3:f5:8b:50:92:b4:31:5e:
                    16:a4:af:97:09:b4:74:51:ed:f5:8e:32:9b:0f:91:
                    9a:88:1c:5d:08:7a:f1:a1:4a:40:9b:db:bb:21:d7:
                    a8:e2:71:30:60:24:ee:c2:f9:28:dd:e6:15:b9:6d:
                    9b:23:b2:c7:ac:24:ca:d0:b2:8a:9e:1b:c7:95:9e:
                    6c:ab:db:d7:b5:a0:63:2b:fa:86:cd:63:e8:78:96:
                    de:08:58:5d:38:d7:58:e6:7d:c5:50:b8:6d:ec:b7:
                    95:0d:32:57:da:05:4f:c5:c5:2e:a9:0e:10:65:d1:
                    0a:6b:7b:ef:95:e1:36:89:45:81:de:0e:a6:a2:aa:
                    9e:53:1e:ad:58:2d:82:d7:81:10:7c:2f:1e:fd:89:
                    23:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:91:BB:71:32:3E:7C:2B:2C:E1:0F:66:91:67:85:89:CA:77:A5:01
            X509v3 Authority Key Identifier:
                keyid:00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3134382e302f32342d3234203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:89:67:e0:37:d5:65:20:5c:4d:a2:d0:11:a7:c4:cd:d5:0a:
         55:ac:91:e3:b4:95:d6:1d:5d:7c:5d:5a:f0:d0:d2:e5:88:7f:
         2b:57:fd:02:1d:51:18:ea:30:df:64:51:15:aa:88:fc:98:8e:
         21:88:05:da:cb:a5:69:c4:81:2c:1b:eb:b7:05:16:e1:79:13:
         36:89:a9:ea:0d:69:c7:88:b8:34:76:39:a5:b0:38:2b:72:dd:
         d8:1c:ba:c9:ab:77:2d:e8:9f:a7:d3:68:0f:8c:9f:a8:02:bc:
         66:e0:54:9e:8d:03:94:0d:1e:cb:74:3b:31:a2:fb:69:72:83:
         de:18:07:10:00:fe:6d:bc:49:3f:35:b9:00:50:0a:92:3a:b2:
         33:69:84:1c:25:95:4e:73:38:ca:46:53:57:11:80:93:f1:a8:
         ef:7d:c1:04:92:62:c5:b5:0b:3d:ae:a5:7f:93:1c:72:9c:02:
         6e:6a:c8:6f:91:22:09:89:f8:11:c6:b7:c8:85:26:19:2d:74:
         65:7d:1d:35:5d:e1:fd:b4:c3:ff:e9:91:57:c3:5a:da:99:d7:
         dc:7c:71:e1:5b:05:58:75:eb:83:b1:ce:a9:0d:cb:94:03:98:
         d2:9b:3b:f7:b9:87:8f:d6:df:65:02:6d:62:f6:df:fb:0b:2c:
         e3:64:93:1b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUfJaDQDuL0sKvaaBRaCWLLIVUnAkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDAxQzE1ODJCNDJFMzI4ODBBQTY2Njc3QjUxQTAxNUI1
MkQyQzc4MTAeFw0yNDA5MDkxNDU1MjBaFw0yNTA5MDgxNTAwMjBaMDMxMTAvBgNV
BAMTKENBOTFCQjcxMzIzRTdDMkIyQ0UxMEY2NjkxNjc4NTg5Q0E3N0E1MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+TXaUxUnWWboj28G8ot0+oeBo
Wq9HW4qle8a4W/MQK/m3RPfrXiZMpalQMU0pMCc4PvwakYv0eSC+6W4vpXrN4ybL
qkQyy+04kD0cNeo4fb2AFW04Jllcfua986ELWGhP8+HIoukDIWcV1PV1xaSz9YtQ
krQxXhakr5cJtHRR7fWOMpsPkZqIHF0IevGhSkCb27sh16jicTBgJO7C+Sjd5hW5
bZsjssesJMrQsoqeG8eVnmyr29e1oGMr+obNY+h4lt4IWF0411jmfcVQuG3st5UN
MlfaBU/FxS6pDhBl0Qpre++V4TaJRYHeDqaiqp5THq1YLYLXgRB8Lx79iSP9AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUypG7cTI+fCss4Q9mkWeFicp3pQEwHwYDVR0j
BBgwFoAUABwVgrQuMogKpmZ3tRoBW1LSx4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC8wMDFDMTU4MkI0MkUzMjg4MEFBNjY2NzdCNTFBMDE1QjUyRDJDNzgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwMUMxNTgyQjQyRTMyODgw
QUE2NjY3N0I1MUEwMTVCNTJEMkM3ODEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzODM2MmUzMjMxMzkyZTMxMzQzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM5MzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALrblDANBgkqhkiG9w0BAQsFAAOCAQEAQYln
4DfVZSBcTaLQEafEzdUKVayR47SV1h1dfF1a8NDS5Yh/K1f9Ah1RGOow32RRFaqI
/JiOIYgF2sulacSBLBvrtwUW4XkTNomp6g1px4i4NHY5pbA4K3Ld2By6yat3Leif
p9NoD4yfqAK8ZuBUno0DlA0ey3Q7MaL7aXKD3hgHEAD+bbxJPzW5AFAKkjqyM2mE
HCWVTnM4ykZTVxGAk/Go733BBJJixbULPa6lf5MccpwCbmrIb5EiCYn4Eca3yIUm
GS10ZX0dNV3h/bTD/+mRV8Na2pnX3Hxx4VsFWHXrg7HOqQ3LlAOY0ps797mHj9bf
ZQJtYvbf+wss42STGw==
-----END CERTIFICATE-----
Generated at Sat Sep 28 10:27:28 2024 by rpki-client on console-ams.rpki-client.org