Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e36362e302f32332d3233203d3e20323632373430.roa
File:                     3138362e3230382e36362e302f32332d3233203d3e20323632373430.roa (raw, json)
Hash identifier:          2lY7wkAMCNS9+MZeQ5wRbUiu2EvryzcQD5cye8PQiww=
Subject key identifier:   5B:A6:D3:E1:A2:72:F5:CD:6E:1B:C3:D8:95:65:9C:E5:1F:23:9C:2D
Certificate issuer:       /CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
Certificate serial:       2592E1C39A4C0AA7046D52B91E0482B4FC990BA6
Authority key identifier: C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e36362e302f32332d3233203d3e20323632373430.roa
Signing time:             Mon 23 Sep 2024 20:54:41 +0000
ROA not before:           Mon 23 Sep 2024 20:49:41 +0000
ROA not after:            Mon 22 Sep 2025 20:54:41 +0000
asID:                     262740
IP address blocks:        186.208.66.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl
                          rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:92:e1:c3:9a:4c:0a:a7:04:6d:52:b9:1e:04:82:b4:fc:99:0b:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
        Validity
            Not Before: Sep 23 20:49:41 2024 GMT
            Not After : Sep 22 20:54:41 2025 GMT
        Subject: CN=5BA6D3E1A272F5CD6E1BC3D895659CE51F239C2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:80:c3:e2:78:0c:15:97:6b:44:54:6d:1a:cd:
                    a0:17:b2:ff:0b:fc:d5:ab:94:c6:64:89:13:5f:bd:
                    0b:f8:00:49:54:df:41:65:f8:a4:13:0b:3c:3b:24:
                    c1:bb:15:e6:f8:ea:c3:ca:13:bd:7e:c6:fb:15:28:
                    5e:1c:99:f2:17:8f:d3:30:f6:15:ae:1a:c7:1a:9e:
                    87:88:55:c5:5d:90:d5:01:f0:1c:7a:89:55:17:e4:
                    4e:09:48:cd:a9:57:88:93:4f:2f:40:62:2f:11:ed:
                    a1:78:e7:62:74:93:d4:83:43:7d:40:d7:84:bf:a2:
                    0f:c0:3d:b7:72:a2:3c:46:d6:89:ac:63:47:59:2b:
                    96:f9:c9:b4:90:0a:77:b6:73:24:e3:d0:68:ee:5a:
                    5d:41:0e:38:2b:8c:23:58:9b:e7:d6:36:90:07:3b:
                    16:6f:b9:66:44:3a:c0:c6:c6:ca:27:ed:0d:23:43:
                    03:1f:ca:59:ca:48:a6:55:42:8d:09:28:e3:14:95:
                    42:ce:a6:be:9e:f4:32:98:45:6a:6a:f6:6c:86:3e:
                    a6:a7:c6:7e:38:8f:58:2b:d4:8a:e3:4d:f6:8f:cf:
                    5a:b4:94:85:f7:f9:75:2c:d4:f2:7c:e0:d4:77:3e:
                    aa:3f:b1:86:79:b1:30:73:a5:f1:3c:db:e1:21:d1:
                    e0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A6:D3:E1:A2:72:F5:CD:6E:1B:C3:D8:95:65:9C:E5:1F:23:9C:2D
            X509v3 Authority Key Identifier:
                keyid:C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e36362e302f32332d3233203d3e20323632373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:71:e1:11:fc:1b:58:8c:56:16:22:f5:50:de:a3:2a:5e:fe:
         3b:9e:06:c6:03:6e:9a:91:3c:bf:90:f0:99:b9:94:5d:35:9f:
         bf:37:1e:b0:48:d2:dc:e7:04:cb:a1:8e:68:97:3c:76:3f:3d:
         e9:78:54:6c:2e:f6:d2:83:51:de:84:0b:89:9d:54:93:4c:4d:
         f3:70:4c:89:b1:61:64:92:0d:5e:25:31:c3:eb:db:0d:6d:d2:
         25:9a:58:8c:39:e7:d6:6e:18:56:64:71:eb:89:56:46:26:ee:
         71:ce:3c:fe:3a:4b:f5:85:2a:0c:b5:09:94:7b:eb:49:e9:b1:
         3e:3f:59:d9:ed:25:64:3a:25:94:6a:4b:78:3d:44:a6:e8:a6:
         c8:f6:e5:85:26:3e:e4:63:80:00:47:36:c1:bc:a7:16:25:61:
         7c:83:40:f3:1d:3e:62:1f:a7:9d:0a:6c:c9:7a:11:1a:2b:dd:
         c8:0f:aa:c0:96:c6:ab:d2:31:f2:25:5d:fb:71:93:c9:c8:7a:
         83:8b:b0:23:2d:89:a3:15:a3:dc:77:4d:36:34:d0:cd:b7:97:
         cc:2f:de:8e:70:11:75:3d:0e:22:96:4d:39:45:69:19:50:ca:
         cd:2f:7a:67:50:57:8b:b9:d1:28:6d:60:f8:88:b3:8e:d7:d6:
         12:2c:6a:42
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJZLhw5pMCqcEbVK5HgSCtPyZC6YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhBRDU5ODlDOTY5MkNFMjlEQjlDM0ZFNDA0NDhBNDc2
MjJDNDJDQjAeFw0yNDA5MjMyMDQ5NDFaFw0yNTA5MjIyMDU0NDFaMDMxMTAvBgNV
BAMTKDVCQTZEM0UxQTI3MkY1Q0Q2RTFCQzNEODk1NjU5Q0U1MUYyMzlDMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpgMPieAwVl2tEVG0azaAXsv8L
/NWrlMZkiRNfvQv4AElU30Fl+KQTCzw7JMG7Feb46sPKE71+xvsVKF4cmfIXj9Mw
9hWuGscanoeIVcVdkNUB8Bx6iVUX5E4JSM2pV4iTTy9AYi8R7aF452J0k9SDQ31A
14S/og/APbdyojxG1omsY0dZK5b5ybSQCne2cyTj0GjuWl1BDjgrjCNYm+fWNpAH
OxZvuWZEOsDGxson7Q0jQwMfylnKSKZVQo0JKOMUlULOpr6e9DKYRWpq9myGPqan
xn44j1gr1IrjTfaPz1q0lIX3+XUs1PJ84NR3Pqo/sYZ5sTBzpfE82+Eh0eDrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUW6bT4aJy9c1uG8PYlWWc5R8jnC0wHwYDVR0j
BBgwFoAUyK1ZiclpLOKducP+QESKR2IsQsswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM21yZGlMc1FCa0xKaTFTQ25ZdjVRUXM0MVBTaURmUmlQTVNVQmlYWW93
bU4vMC9DOEFENTk4OUM5NjkyQ0UyOURCOUMzRkU0MDQ0OEE0NzYyMkM0MkNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4QUQ1OTg5Qzk2OTJDRTI5
REI5QzNGRTQwNDQ4QTQ3NjIyQzQyQ0IuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNtcmRpTHNRQmtMSmkxU0NuWXY1UVFzNDFQU2lEZlJpUE1TVUJpWFlvd21OLzAv
MzEzODM2MmUzMjMwMzgyZTM2MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzNzM0MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG60EIwDQYJKoZIhvcNAQELBQADggEBAFFx4RH8
G1iMVhYi9VDeoype/jueBsYDbpqRPL+Q8Jm5lF01n783HrBI0tznBMuhjmiXPHY/
Pel4VGwu9tKDUd6EC4mdVJNMTfNwTImxYWSSDV4lMcPr2w1t0iWaWIw559ZuGFZk
ceuJVkYm7nHOPP46S/WFKgy1CZR760npsT4/WdntJWQ6JZRqS3g9RKbopsj25YUm
PuRjgABHNsG8pxYlYXyDQPMdPmIfp50KbMl6ERor3cgPqsCWxqvSMfIlXftxk8nI
eoOLsCMtiaMVo9x3TTY00M23l8wv3o5wEXU9DiKWTTlFaRlQys0vemdQV4u50Sht
YPiIs47X1hIsakI=
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:01 2024 by rpki-client on console-fra.rpki-client.org