Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e37392e302f32342d3234203d3e20323632373430.roa
File:                     3138362e3230382e37392e302f32342d3234203d3e20323632373430.roa (raw, json)
Hash identifier:          f7P2TJCu5imj4jyCJDwsDNNRzLXmMophJHJhkz2S73k=
Subject key identifier:   DF:B6:00:6F:79:10:3F:F7:BA:53:2F:76:66:98:04:1A:3A:72:48:C8
Certificate issuer:       /CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
Certificate serial:       5F07252226261618EE9E54673D6522E3377A5769
Authority key identifier: C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e37392e302f32342d3234203d3e20323632373430.roa
Signing time:             Mon 23 Sep 2024 20:55:09 +0000
ROA not before:           Mon 23 Sep 2024 20:50:09 +0000
ROA not after:            Mon 22 Sep 2025 20:55:09 +0000
asID:                     262740
IP address blocks:        186.208.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl
                          rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:07:25:22:26:26:16:18:ee:9e:54:67:3d:65:22:e3:37:7a:57:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
        Validity
            Not Before: Sep 23 20:50:09 2024 GMT
            Not After : Sep 22 20:55:09 2025 GMT
        Subject: CN=DFB6006F79103FF7BA532F766698041A3A7248C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:26:80:52:a3:5b:73:f4:97:19:9b:8a:1a:27:
                    43:1d:92:4a:6c:fb:41:8e:44:8a:47:d4:a0:ab:4e:
                    18:3c:85:7d:39:df:f8:41:6b:ba:8f:f8:67:18:11:
                    f9:73:21:89:41:38:b0:03:ec:05:42:6a:7c:8f:42:
                    d7:de:25:57:4b:11:fa:70:7a:74:4e:0d:1e:37:81:
                    02:ed:19:51:5c:ba:37:43:9f:14:50:d5:3b:ef:6a:
                    d3:c9:55:1f:39:65:ad:b3:7b:d9:92:19:b7:18:71:
                    03:98:55:8b:53:41:cd:ee:d5:09:48:9e:31:df:27:
                    ba:88:92:ec:1e:15:b0:43:43:b3:01:a0:e5:21:7a:
                    d0:12:7b:0d:22:6d:d6:93:ce:73:7b:ec:49:72:ca:
                    e9:93:3b:f9:d9:fe:26:53:b4:74:1e:cb:b1:3c:ea:
                    af:bf:b5:21:b6:13:ab:13:d6:34:ef:1c:ad:c9:27:
                    9c:e8:f7:04:80:88:9d:c9:c5:7f:0f:32:e8:e2:3e:
                    94:2a:e8:c3:17:0a:2c:e3:31:12:56:bb:2c:b0:88:
                    02:39:f8:37:e3:9b:03:6e:7e:51:60:18:f3:a8:2b:
                    a6:91:1d:f6:a2:ef:4d:c4:eb:ff:06:ab:07:b6:12:
                    22:1e:9c:82:d6:08:1a:d4:e4:9a:0a:c3:07:16:37:
                    04:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B6:00:6F:79:10:3F:F7:BA:53:2F:76:66:98:04:1A:3A:72:48:C8
            X509v3 Authority Key Identifier:
                keyid:C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/3138362e3230382e37392e302f32342d3234203d3e20323632373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:fd:91:f1:79:6e:2b:b6:aa:42:5c:c2:fd:e1:40:e9:0c:b0:
         b1:8d:ab:4c:77:c9:1d:c8:8e:4e:1f:17:ff:91:fb:38:62:f7:
         7c:2d:99:db:b4:72:c8:12:c2:eb:04:f4:81:75:cc:66:e3:ee:
         2b:50:69:84:61:34:c1:e6:7c:a1:31:eb:fe:c3:b3:89:23:5c:
         8d:44:b1:cd:f3:34:5e:49:93:92:f8:5d:fa:90:c0:eb:e1:a5:
         51:76:d2:1c:3d:8e:72:2e:dd:16:e7:1c:49:b5:a4:2c:35:42:
         f5:64:01:67:0a:fc:cf:2f:fb:c2:2e:26:49:b5:63:d3:b7:cf:
         9e:9f:9c:fb:55:84:07:50:1c:c2:ae:74:ce:9a:db:c6:c9:d9:
         0c:d3:0a:b4:08:99:36:be:60:67:36:31:73:63:c1:eb:9d:44:
         b3:6c:e0:98:32:63:61:10:60:62:f6:1d:3c:ee:a7:7c:3c:e1:
         17:8a:24:28:13:16:e8:ed:36:b1:c9:85:f2:b7:7c:88:54:39:
         cb:94:58:64:ca:5c:3b:d7:ef:2f:a5:5c:be:fa:fc:22:95:90:
         d6:ed:35:e5:bc:0e:ed:35:87:2a:bc:aa:2e:c3:43:82:78:ae:
         65:34:89:30:2c:ac:ba:ea:98:6d:ae:b3:e4:c7:16:2b:2f:94:
         7a:77:74:22
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXwclIiYmFhjunlRnPWUi4zd6V2kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhBRDU5ODlDOTY5MkNFMjlEQjlDM0ZFNDA0NDhBNDc2
MjJDNDJDQjAeFw0yNDA5MjMyMDUwMDlaFw0yNTA5MjIyMDU1MDlaMDMxMTAvBgNV
BAMTKERGQjYwMDZGNzkxMDNGRjdCQTUzMkY3NjY2OTgwNDFBM0E3MjQ4QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmJoBSo1tz9JcZm4oaJ0Mdkkps
+0GORIpH1KCrThg8hX053/hBa7qP+GcYEflzIYlBOLAD7AVCanyPQtfeJVdLEfpw
enRODR43gQLtGVFcujdDnxRQ1TvvatPJVR85Za2ze9mSGbcYcQOYVYtTQc3u1QlI
njHfJ7qIkuweFbBDQ7MBoOUhetASew0ibdaTznN77ElyyumTO/nZ/iZTtHQey7E8
6q+/tSG2E6sT1jTvHK3JJ5zo9wSAiJ3JxX8PMujiPpQq6MMXCizjMRJWuyywiAI5
+DfjmwNuflFgGPOoK6aRHfai703E6/8Gqwe2EiIenILWCBrU5JoKwwcWNwSBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU37YAb3kQP/e6Uy92ZpgEGjpySMgwHwYDVR0j
BBgwFoAUyK1ZiclpLOKducP+QESKR2IsQsswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM21yZGlMc1FCa0xKaTFTQ25ZdjVRUXM0MVBTaURmUmlQTVNVQmlYWW93
bU4vMC9DOEFENTk4OUM5NjkyQ0UyOURCOUMzRkU0MDQ0OEE0NzYyMkM0MkNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4QUQ1OTg5Qzk2OTJDRTI5
REI5QzNGRTQwNDQ4QTQ3NjIyQzQyQ0IuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNtcmRpTHNRQmtMSmkxU0NuWXY1UVFzNDFQU2lEZlJpUE1TVUJpWFlvd21OLzAv
MzEzODM2MmUzMjMwMzgyZTM3MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNzM0MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC60E8wDQYJKoZIhvcNAQELBQADggEBAMz9kfF5
biu2qkJcwv3hQOkMsLGNq0x3yR3Ijk4fF/+R+zhi93wtmdu0csgSwusE9IF1zGbj
7itQaYRhNMHmfKEx6/7Ds4kjXI1Esc3zNF5Jk5L4XfqQwOvhpVF20hw9jnIu3Rbn
HEm1pCw1QvVkAWcK/M8v+8IuJkm1Y9O3z56fnPtVhAdQHMKudM6a28bJ2QzTCrQI
mTa+YGc2MXNjweudRLNs4JgyY2EQYGL2HTzup3w84ReKJCgTFujtNrHJhfK3fIhU
OcuUWGTKXDvX7y+lXL76/CKVkNbtNeW8Du01hyq8qi7DQ4J4rmU0iTAsrLrqmG2u
s+THFisvlHp3dCI=
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:01 2024 by rpki-client on console-fra.rpki-client.org