Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e36382e302f32342d3234203d3e20323632373430.roa
File:                     3138362e3230382e36382e302f32342d3234203d3e20323632373430.roa (raw, json)
Hash identifier:          4JEBbgHOpYXE9+CKQGxQzyZiN8/Ar8zhuFSeVBI2NNo=
Subject key identifier:   EC:AE:D9:98:4A:87:AA:5D:60:E7:98:55:90:15:8C:14:1B:01:BB:7F
Certificate issuer:       /CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
Certificate serial:       14223FF96E20A737317432A13AC8C3A7B4871B97
Authority key identifier: C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e36382e302f32342d3234203d3e20323632373430.roa
Signing time:             Mon 23 Sep 2024 20:55:07 +0000
ROA not before:           Mon 23 Sep 2024 20:50:07 +0000
ROA not after:            Mon 22 Sep 2025 20:55:07 +0000
asID:                     262740
IP address blocks:        186.208.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl
                          rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:22:3f:f9:6e:20:a7:37:31:74:32:a1:3a:c8:c3:a7:b4:87:1b:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
        Validity
            Not Before: Sep 23 20:50:07 2024 GMT
            Not After : Sep 22 20:55:07 2025 GMT
        Subject: CN=ECAED9984A87AA5D60E7985590158C141B01BB7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ce:07:71:1d:3f:8b:2b:5a:63:f6:7a:91:97:
                    7b:2c:5b:9c:95:b9:3f:29:08:af:1e:4c:33:f3:dd:
                    f3:9c:27:ba:69:59:8a:cb:89:5a:28:7f:90:ca:7f:
                    ed:23:68:0d:13:54:60:6c:f6:fb:74:18:86:d0:49:
                    f5:27:1f:3b:b2:b7:bf:87:09:91:69:2a:78:dc:7d:
                    81:fd:ed:a5:77:3c:1f:5d:f8:ef:e5:b4:7a:17:20:
                    e2:1e:25:3b:e3:49:3e:1c:5e:43:be:a7:da:fc:a9:
                    1f:b7:75:f1:c0:8f:fc:ed:55:14:b8:7e:21:f6:e3:
                    77:d5:5d:a6:4e:c5:fb:c3:49:80:e0:86:a7:9a:ed:
                    29:ea:f4:33:a2:6b:ec:ab:21:1a:49:45:79:c5:c9:
                    c1:22:4b:0a:8e:ce:30:68:e8:fc:50:6f:5e:93:aa:
                    45:8c:3b:b8:c3:5c:2b:d9:f0:55:fd:c3:f2:bc:f7:
                    8d:6c:20:46:d0:ee:3d:ab:5c:4b:51:3e:f3:6b:46:
                    6e:e0:e8:5c:cf:fe:1b:52:98:15:ad:b7:1f:02:89:
                    3b:64:dd:ac:33:3f:fc:21:22:e1:1e:2a:82:eb:cd:
                    18:2d:eb:dd:c2:4d:08:8d:4d:8b:cb:3e:0c:5c:ae:
                    84:0f:f6:ca:7d:25:f0:c9:2f:68:dc:00:27:c1:bd:
                    7e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AE:D9:98:4A:87:AA:5D:60:E7:98:55:90:15:8C:14:1B:01:BB:7F
            X509v3 Authority Key Identifier:
                keyid:C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e36382e302f32342d3234203d3e20323632373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:2c:42:1d:17:7a:c1:d5:71:4c:98:c7:a6:77:e3:34:7c:89:
         47:f5:a7:60:6d:59:28:f1:da:a1:04:3b:15:d1:6b:df:c0:f3:
         90:11:22:dc:ae:e9:57:c3:54:d6:ca:21:3f:1d:a2:b1:19:d0:
         2e:66:84:9a:75:a2:37:89:d8:55:36:91:39:9e:66:50:9c:a5:
         27:a6:85:b0:2a:a1:ba:57:e3:f4:80:17:43:32:1f:04:f7:58:
         a4:8d:cd:83:20:3e:96:b5:9f:28:d3:56:39:9e:41:79:98:1e:
         af:f6:55:d8:74:25:79:7c:95:d7:e3:a1:d9:1b:d6:a2:c1:a9:
         95:2c:c6:0b:55:97:99:be:e8:26:0b:be:b5:12:f6:b9:d8:7a:
         0b:15:de:ec:d0:3c:db:5f:d7:01:45:e1:b1:fc:ec:13:bd:28:
         1c:1f:30:2b:14:aa:17:98:7b:37:fd:d7:2a:89:3b:47:4b:60:
         ee:61:d2:40:08:f9:69:fc:22:0b:b9:7a:d8:bd:0a:04:9e:cb:
         9d:68:d9:05:fd:a0:04:a1:a2:40:64:c3:74:f3:36:ac:0d:e5:
         85:74:5c:54:42:c6:2c:96:f7:fe:a1:13:41:52:ea:6e:e1:c7:
         2b:98:7e:ae:7c:cc:b2:4e:5d:18:12:b7:f3:df:e3:70:24:d9:
         9c:67:bf:6b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFCI/+W4gpzcxdDKhOsjDp7SHG5cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhBRDU5ODlDOTY5MkNFMjlEQjlDM0ZFNDA0NDhBNDc2
MjJDNDJDQjAeFw0yNDA5MjMyMDUwMDdaFw0yNTA5MjIyMDU1MDdaMDMxMTAvBgNV
BAMTKEVDQUVEOTk4NEE4N0FBNUQ2MEU3OTg1NTkwMTU4QzE0MUIwMUJCN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxzgdxHT+LK1pj9nqRl3ssW5yV
uT8pCK8eTDPz3fOcJ7ppWYrLiVoof5DKf+0jaA0TVGBs9vt0GIbQSfUnHzuyt7+H
CZFpKnjcfYH97aV3PB9d+O/ltHoXIOIeJTvjST4cXkO+p9r8qR+3dfHAj/ztVRS4
fiH243fVXaZOxfvDSYDghqea7Snq9DOia+yrIRpJRXnFycEiSwqOzjBo6PxQb16T
qkWMO7jDXCvZ8FX9w/K8941sIEbQ7j2rXEtRPvNrRm7g6FzP/htSmBWttx8CiTtk
3awzP/whIuEeKoLrzRgt693CTQiNTYvLPgxcroQP9sp9JfDJL2jcACfBvX79AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU7K7ZmEqHql1g55hVkBWMFBsBu38wHwYDVR0j
BBgwFoAUyK1ZiclpLOKducP+QESKR2IsQsswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM21yZGlMc1FCa0xKaTFTQ25ZdjVRUXM0MVBTaURmUmlQTVNVQmlYWW93
bU4vMC9DOEFENTk4OUM5NjkyQ0UyOURCOUMzRkU0MDQ0OEE0NzYyMkM0MkNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4QUQ1OTg5Qzk2OTJDRTI5
REI5QzNGRTQwNDQ4QTQ3NjIyQzQyQ0IuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNtcmRpTHNRQmtMSmkxU0NuWXY1UVFzNDFQU2lEZlJpUE1TVUJpWFlvd21OLzAv
MzEzODM2MmUzMjMwMzgyZTM2MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNzM0MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC60EQwDQYJKoZIhvcNAQELBQADggEBAC8sQh0X
esHVcUyYx6Z34zR8iUf1p2BtWSjx2qEEOxXRa9/A85ARItyu6VfDVNbKIT8dorEZ
0C5mhJp1ojeJ2FU2kTmeZlCcpSemhbAqobpX4/SAF0MyHwT3WKSNzYMgPpa1nyjT
VjmeQXmYHq/2Vdh0JXl8ldfjodkb1qLBqZUsxgtVl5m+6CYLvrUS9rnYegsV3uzQ
PNtf1wFF4bH87BO9KBwfMCsUqheYezf91yqJO0dLYO5h0kAI+Wn8Igu5eti9CgSe
y51o2QX9oAShokBkw3TzNqwN5YV0XFRCxiyW9/6hE0FS6m7hxyuYfq58zLJOXRgS
t/Pf43Ak2Zxnv2s=
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:01 2024 by rpki-client on console-fra.rpki-client.org