Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3135302e302f32342d3234203d3e20323632393932.roa
File:                     3138362e3231392e3135302e302f32342d3234203d3e20323632393932.roa (raw, json)
Hash identifier:          Mn9V9iNr5EqpBahudV1/YgyRCnept2ppne6xwAxEWqg=
Subject key identifier:   93:BF:81:FF:9D:2A:59:38:4F:A8:9C:18:81:E0:E0:AB:54:EC:F0:4A
Certificate issuer:       /CN=001C1582B42E32880AA66677B51A015B52D2C781
Certificate serial:       16E4CF1CA1118AC5CD4D005504DD5065D135D6B8
Authority key identifier: 00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3135302e302f32342d3234203d3e20323632393932.roa
Signing time:             Mon 09 Sep 2024 15:00:19 +0000
ROA not before:           Mon 09 Sep 2024 14:55:19 +0000
ROA not after:            Mon 08 Sep 2025 15:00:19 +0000
asID:                     262992
IP address blocks:        186.219.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 19:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e4:cf:1c:a1:11:8a:c5:cd:4d:00:55:04:dd:50:65:d1:35:d6:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=001C1582B42E32880AA66677B51A015B52D2C781
        Validity
            Not Before: Sep  9 14:55:19 2024 GMT
            Not After : Sep  8 15:00:19 2025 GMT
        Subject: CN=93BF81FF9D2A59384FA89C1881E0E0AB54ECF04A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:74:ce:8d:3c:ac:50:b0:91:1c:10:71:06:59:
                    d2:af:a5:19:d5:61:99:cb:76:c7:5f:79:63:d2:a7:
                    25:cf:25:cc:07:38:c2:95:a3:8c:a6:23:8c:08:07:
                    c2:51:be:27:3e:9b:53:f2:b7:66:a8:67:8b:29:ea:
                    66:9f:24:0b:ac:ec:9a:1b:5c:6d:9f:b5:51:84:1f:
                    e1:91:88:d4:2d:6d:33:06:84:d6:d6:f8:bc:3b:13:
                    f3:1f:c2:f9:73:00:11:bd:c5:56:bb:d2:05:a1:e5:
                    ab:c0:37:60:12:ae:08:53:69:c5:5e:98:d9:4b:26:
                    d7:58:65:1a:59:b3:8f:ed:37:62:aa:03:12:1f:51:
                    83:e2:c6:7c:58:a3:70:07:f8:01:97:ff:c3:a6:ac:
                    5d:37:4b:67:19:28:22:ef:ad:d5:c7:f2:a5:69:bf:
                    38:ed:c1:39:07:fb:2f:01:41:f4:fd:87:30:1f:c7:
                    01:75:fa:29:9a:a8:28:86:21:21:f8:c3:6b:3b:90:
                    ff:a2:71:36:d8:62:db:db:c5:ea:f3:1c:8b:1e:6e:
                    71:3f:50:24:bf:65:44:00:e1:2f:c5:20:4b:ae:41:
                    60:ec:cc:20:8f:f6:dc:8b:5e:b7:40:9b:a8:5d:4b:
                    14:f8:6b:f9:12:d0:bc:6d:71:07:cb:15:d1:8f:67:
                    e5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:BF:81:FF:9D:2A:59:38:4F:A8:9C:18:81:E0:E0:AB:54:EC:F0:4A
            X509v3 Authority Key Identifier:
                keyid:00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3135302e302f32342d3234203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:74:da:f8:a2:36:98:fd:06:7b:a8:32:6c:52:5b:ab:80:cc:
         5b:e9:36:dd:c8:02:05:36:63:f0:39:56:15:31:5e:35:a9:00:
         6b:01:f9:ff:c2:e1:e5:90:d5:29:21:dc:a2:eb:7b:a3:68:c9:
         9a:10:9e:86:0e:ab:d0:13:da:c3:e9:80:ad:1f:ed:8e:c8:da:
         c7:85:1c:aa:dc:7c:f5:0f:18:11:9c:75:e9:b8:47:5a:3c:d5:
         d6:d3:20:df:0a:97:89:74:85:26:30:9a:67:fd:b3:6f:7c:e5:
         ef:ba:03:7c:2f:99:fb:00:34:79:c4:4d:95:fa:44:e7:f1:88:
         be:90:31:86:57:71:2d:79:5f:22:f5:85:c4:5b:a6:25:e7:e9:
         1c:7c:2a:93:8c:50:b4:16:5b:de:33:52:5a:8b:0f:4a:fe:27:
         ec:4d:bc:de:2e:d1:b5:4f:e5:ef:d7:a8:65:d3:79:fd:88:64:
         13:a3:14:2d:61:f5:04:4a:a5:df:66:a1:c9:40:59:e5:7a:42:
         7c:8a:5d:a2:0a:91:f8:9a:a8:cf:f8:75:51:da:ce:88:e5:31:
         05:89:63:1c:44:98:9f:56:48:d1:fb:5a:3f:29:19:c1:6d:69:
         94:67:c3:1d:6c:d5:f3:ed:a0:e7:f6:5e:3a:ff:c0:96:fa:d0:
         62:4b:f2:b7
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUFuTPHKERisXNTQBVBN1QZdE11rgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDAxQzE1ODJCNDJFMzI4ODBBQTY2Njc3QjUxQTAxNUI1
MkQyQzc4MTAeFw0yNDA5MDkxNDU1MTlaFw0yNTA5MDgxNTAwMTlaMDMxMTAvBgNV
BAMTKDkzQkY4MUZGOUQyQTU5Mzg0RkE4OUMxODgxRTBFMEFCNTRFQ0YwNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChdM6NPKxQsJEcEHEGWdKvpRnV
YZnLdsdfeWPSpyXPJcwHOMKVo4ymI4wIB8JRvic+m1Pyt2aoZ4sp6mafJAus7Job
XG2ftVGEH+GRiNQtbTMGhNbW+Lw7E/MfwvlzABG9xVa70gWh5avAN2ASrghTacVe
mNlLJtdYZRpZs4/tN2KqAxIfUYPixnxYo3AH+AGX/8OmrF03S2cZKCLvrdXH8qVp
vzjtwTkH+y8BQfT9hzAfxwF1+imaqCiGISH4w2s7kP+icTbYYtvbxerzHIsebnE/
UCS/ZUQA4S/FIEuuQWDszCCP9tyLXrdAm6hdSxT4a/kS0LxtcQfLFdGPZ+VpAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUk7+B/50qWThPqJwYgeDgq1Ts8EowHwYDVR0j
BBgwFoAUABwVgrQuMogKpmZ3tRoBW1LSx4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC8wMDFDMTU4MkI0MkUzMjg4MEFBNjY2NzdCNTFBMDE1QjUyRDJDNzgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwMUMxNTgyQjQyRTMyODgw
QUE2NjY3N0I1MUEwMTVCNTJEMkM3ODEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzODM2MmUzMjMxMzkyZTMxMzUzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM5MzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALrbljANBgkqhkiG9w0BAQsFAAOCAQEALXTa
+KI2mP0Ge6gybFJbq4DMW+k23cgCBTZj8DlWFTFeNakAawH5/8Lh5ZDVKSHcout7
o2jJmhCehg6r0BPaw+mArR/tjsjax4Ucqtx89Q8YEZx16bhHWjzV1tMg3wqXiXSF
JjCaZ/2zb3zl77oDfC+Z+wA0ecRNlfpE5/GIvpAxhldxLXlfIvWFxFumJefpHHwq
k4xQtBZb3jNSWosPSv4n7E283i7RtU/l79eoZdN5/YhkE6MULWH1BEql32ahyUBZ
5XpCfIpdogqR+Jqoz/h1UdrOiOUxBYljHESYn1ZI0ftaPykZwW1plGfDHWzV8+2g
5/ZeOv/AlvrQYkvytw==
-----END CERTIFICATE-----
Generated at Fri Sep 20 20:56:27 2024 by rpki-client on console-ams.rpki-client.org