Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/3138362e3233322e3137392e302f32342d3332203d3e20323632373732.roa
File:                     3138362e3233322e3137392e302f32342d3332203d3e20323632373732.roa (raw, json)
Hash identifier:          81HvswpoAAjYRouxfxQ0HzqnTmTWq7dM2W5hAtsVkJI=
Subject key identifier:   FA:F3:0B:38:25:3A:41:DB:98:35:09:69:B0:BD:45:EC:31:68:E1:42
Certificate issuer:       /CN=6F38A2B5B49F372598D00DF4B040EBEC6BDD176C
Certificate serial:       4D7C624E04FCDA2FB14D0D01B64F801F9C3F6F18
Authority key identifier: 6F:38:A2:B5:B4:9F:37:25:98:D0:0D:F4:B0:40:EB:EC:6B:DD:17:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/3138362e3233322e3137392e302f32342d3332203d3e20323632373732.roa
Signing time:             Thu 04 Apr 2024 16:56:14 +0000
ROA not before:           Thu 04 Apr 2024 16:51:14 +0000
ROA not after:            Thu 03 Apr 2025 16:56:14 +0000
asID:                     262772
IP address blocks:        186.232.179.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl
                          rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:13:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:7c:62:4e:04:fc:da:2f:b1:4d:0d:01:b6:4f:80:1f:9c:3f:6f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F38A2B5B49F372598D00DF4B040EBEC6BDD176C
        Validity
            Not Before: Apr  4 16:51:14 2024 GMT
            Not After : Apr  3 16:56:14 2025 GMT
        Subject: CN=FAF30B38253A41DB98350969B0BD45EC3168E142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f1:d1:c0:8d:51:ce:6f:6a:09:45:65:70:13:
                    61:84:1d:5d:3a:01:1e:12:93:c1:52:92:08:b3:ed:
                    bc:2a:d9:0d:ae:f5:47:b6:b4:f2:31:38:85:11:a3:
                    76:c7:a3:76:1b:22:f5:73:80:cb:3f:a6:17:ba:e0:
                    59:1e:55:ab:07:94:fe:c4:6e:4e:9e:bb:25:13:73:
                    46:28:05:9a:12:f5:70:b5:19:e0:0e:77:70:00:e4:
                    13:72:b5:74:bf:cc:fd:e3:a4:96:1a:4f:01:58:08:
                    fd:d3:7a:c1:73:81:26:fe:39:3c:eb:46:e1:8c:a7:
                    7c:8c:58:a1:2d:e5:ef:3b:bb:b7:d5:73:fb:f2:0a:
                    fe:9f:d3:d8:12:4c:74:93:b9:a2:6d:4d:11:9c:2a:
                    93:c3:f1:00:be:d0:38:fc:7c:e4:5a:94:c9:3e:44:
                    ef:c5:ff:3a:07:b8:88:53:9a:6b:08:6c:25:18:af:
                    ee:ad:11:b8:61:a0:9b:43:20:f8:a9:a5:c2:37:40:
                    4e:4c:b3:cc:cc:cd:0c:0c:38:94:3c:be:8a:db:e0:
                    e3:12:b3:f2:1c:d1:4b:e4:34:0f:2b:98:ef:41:74:
                    a1:c5:b9:7b:33:07:e6:b2:3d:0b:c0:c7:cc:7a:0c:
                    f3:0f:0f:74:80:30:45:96:0f:c6:00:fe:b8:7f:47:
                    b3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F3:0B:38:25:3A:41:DB:98:35:09:69:B0:BD:45:EC:31:68:E1:42
            X509v3 Authority Key Identifier:
                keyid:6F:38:A2:B5:B4:9F:37:25:98:D0:0D:F4:B0:40:EB:EC:6B:DD:17:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F38A2B5B49F372598D00DF4B040EBEC6BDD176C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fME6HhMoKNG33A2ceuhZKr8VKDSeDnJVG6QUEta8NjH/1/3138362e3233322e3137392e302f32342d3332203d3e20323632373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:c2:7e:f1:c4:72:c7:74:5c:d3:1c:7f:df:c7:37:4f:e5:cc:
         9c:b7:c9:0e:bc:17:ec:12:98:da:9b:b8:94:de:69:19:ca:76:
         5c:06:4a:af:fb:35:a2:8b:5a:b3:42:14:4c:71:0a:1a:62:8f:
         69:45:cb:b5:10:43:15:72:94:93:3b:3f:c5:24:16:34:88:cd:
         42:2a:78:79:85:00:75:87:46:a2:8d:f8:27:12:11:45:2a:b7:
         37:4c:90:55:77:24:ba:25:d5:71:ba:01:12:0c:b7:3e:18:5b:
         fa:de:58:72:fc:90:ec:7d:ed:b5:5e:ba:ed:c2:05:cc:52:b6:
         d2:f2:42:2a:b5:fd:6e:e7:c3:f2:a4:88:56:f7:65:b1:6f:52:
         d8:89:20:40:38:3d:d8:08:42:65:24:3a:1b:26:30:11:94:aa:
         77:e5:43:e1:ed:58:0a:9d:5c:18:66:2f:bf:1e:25:c5:0b:72:
         f6:09:52:1f:12:8c:4d:4d:b3:ab:eb:e6:47:5e:7b:bc:a0:f9:
         75:cb:37:1e:de:1b:6c:50:29:b9:1c:ad:c1:d2:c6:33:16:0c:
         5d:19:4c:54:6b:c9:b5:24:2e:0d:48:0c:85:7a:2e:4c:81:4a:
         3a:c9:05:d7:18:30:14:3b:cf:16:9a:df:37:fe:1c:7f:d6:88:
         4a:44:54:9d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUTXxiTgT82i+xTQ0Btk+AH5w/bxgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkYzOEEyQjVCNDlGMzcyNTk4RDAwREY0QjA0MEVCRUM2
QkREMTc2QzAeFw0yNDA0MDQxNjUxMTRaFw0yNTA0MDMxNjU2MTRaMDMxMTAvBgNV
BAMTKEZBRjMwQjM4MjUzQTQxREI5ODM1MDk2OUIwQkQ0NUVDMzE2OEUxNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE8dHAjVHOb2oJRWVwE2GEHV06
AR4Sk8FSkgiz7bwq2Q2u9Ue2tPIxOIURo3bHo3YbIvVzgMs/phe64FkeVasHlP7E
bk6euyUTc0YoBZoS9XC1GeAOd3AA5BNytXS/zP3jpJYaTwFYCP3TesFzgSb+OTzr
RuGMp3yMWKEt5e87u7fVc/vyCv6f09gSTHSTuaJtTRGcKpPD8QC+0Dj8fORalMk+
RO/F/zoHuIhTmmsIbCUYr+6tEbhhoJtDIPippcI3QE5Ms8zMzQwMOJQ8vorb4OMS
s/Ic0UvkNA8rmO9BdKHFuXszB+ayPQvAx8x6DPMPD3SAMEWWD8YA/rh/R7OTAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU+vMLOCU6QduYNQlpsL1F7DFo4UIwHwYDVR0j
BBgwFoAUbziitbSfNyWY0A30sEDr7GvdF2wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2ZNRTZIaE1vS05HMzNBMmNldWhaS3I4VktEU2VEbkpWRzZRVUV0YThO
akgvMS82RjM4QTJCNUI0OUYzNzI1OThEMDBERjRCMDQwRUJFQzZCREQxNzZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGMzhBMkI1QjQ5RjM3MjU5
OEQwMERGNEIwNDBFQkVDNkJERDE3NkMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNmTUU2SGhNb0tORzMzQTJjZXVoWktyOFZLRFNlRG5KVkc2UVVFdGE4TmpILzEv
MzEzODM2MmUzMjMzMzIyZTMxMzczOTJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMy
MzYzMjM3MzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALroszANBgkqhkiG9w0BAQsFAAOCAQEAq8J+
8cRyx3Rc0xx/38c3T+XMnLfJDrwX7BKY2pu4lN5pGcp2XAZKr/s1ootas0IUTHEK
GmKPaUXLtRBDFXKUkzs/xSQWNIjNQip4eYUAdYdGoo34JxIRRSq3N0yQVXckuiXV
cboBEgy3Phhb+t5YcvyQ7H3ttV667cIFzFK20vJCKrX9bufD8qSIVvdlsW9S2Ikg
QDg92AhCZSQ6GyYwEZSqd+VD4e1YCp1cGGYvvx4lxQty9glSHxKMTU2zq+vmR157
vKD5dcs3Ht4bbFApuRytwdLGMxYMXRlMVGvJtSQuDUgMhXouTIFKOskF1xgwFDvP
FprfN/4cf9aISkRUnQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:13 2024 by rpki-client on console-fra.rpki-client.org