Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/3138362e3232372e37362e302f32322d3332203d3e20323733343331.roa
File:                     3138362e3232372e37362e302f32322d3332203d3e20323733343331.roa (raw, json)
Hash identifier:          0P7iD2hXXk4qUK7tK9OJ9KHe5Yp/FRtXioFvVUvwsJo=
Subject key identifier:   84:9C:ED:AE:52:33:C8:98:49:31:13:0A:32:06:22:52:24:0D:9E:C8
Certificate issuer:       /CN=7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6
Certificate serial:       784F2F6D282C647296CD9CAA8FA48A1EA10AAE6A
Authority key identifier: 7D:BF:23:D2:D2:FE:1E:5F:87:E0:2D:AA:39:CF:DE:13:BD:6C:79:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/3138362e3232372e37362e302f32322d3332203d3e20323733343331.roa
Signing time:             Mon 11 Nov 2024 20:33:09 +0000
ROA not before:           Mon 11 Nov 2024 20:28:09 +0000
ROA not after:            Mon 10 Nov 2025 20:33:09 +0000
asID:                     273431
IP address blocks:        186.227.76.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6.crl
                          rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:4f:2f:6d:28:2c:64:72:96:cd:9c:aa:8f:a4:8a:1e:a1:0a:ae:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6
        Validity
            Not Before: Nov 11 20:28:09 2024 GMT
            Not After : Nov 10 20:33:09 2025 GMT
        Subject: CN=849CEDAE5233C8984931130A32062252240D9EC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c4:d0:69:5a:4d:81:0a:d6:13:75:2a:df:20:
                    34:ec:d7:3a:32:1c:73:fd:06:26:f4:80:67:bc:fb:
                    6a:2f:63:14:cd:63:97:38:68:cf:f2:88:e9:88:b5:
                    ad:4a:9d:18:3c:e1:ca:c4:94:10:5b:32:cf:1b:1a:
                    bb:6a:51:ed:53:c0:37:49:5a:56:80:2a:d1:5c:51:
                    d8:d6:98:bd:c0:c5:0b:59:be:2f:ab:c5:69:eb:da:
                    8e:6a:c2:23:26:2a:c5:09:98:60:e0:08:fe:9e:75:
                    7c:17:87:0b:4f:d7:73:3f:e3:c8:d1:55:0e:5d:26:
                    98:0e:b7:f3:59:e0:c1:56:1b:3e:1d:02:4a:6c:2d:
                    33:94:71:42:1d:c1:04:60:44:e7:b0:ab:c0:4b:0a:
                    1f:a3:2c:0d:a8:af:67:99:cf:af:be:57:af:f2:3f:
                    91:9c:a3:46:0b:fd:92:1f:4e:79:0d:a8:9e:81:65:
                    33:34:cb:2a:ee:fa:da:e3:48:1b:08:10:49:64:4a:
                    6a:ed:a8:23:30:08:44:bb:3c:9c:d3:38:57:05:f2:
                    67:e5:5b:3c:2f:3e:6c:c6:12:e8:7c:37:db:43:af:
                    12:bb:5a:91:be:a8:09:35:9d:a0:af:97:17:f0:61:
                    33:f9:04:3a:65:e5:b1:22:d4:d7:65:c7:b5:e2:4a:
                    62:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:9C:ED:AE:52:33:C8:98:49:31:13:0A:32:06:22:52:24:0D:9E:C8
            X509v3 Authority Key Identifier:
                keyid:7D:BF:23:D2:D2:FE:1E:5F:87:E0:2D:AA:39:CF:DE:13:BD:6C:79:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/3138362e3232372e37362e302f32322d3332203d3e20323733343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:b5:34:a8:3a:d2:ba:9d:44:e5:9b:e7:37:13:56:be:7e:9d:
         72:f8:b2:85:f3:8c:6a:ea:6d:b2:94:2c:60:dc:75:79:d5:50:
         93:37:fe:14:a3:82:e6:4a:c6:bd:86:a4:25:73:ec:7b:f3:e6:
         9a:36:bb:53:5f:62:03:6e:82:f5:90:91:bc:fa:0b:65:a9:47:
         bd:a4:64:2b:c1:a0:ee:c6:26:94:ca:8b:85:d3:59:52:d2:40:
         7b:42:a2:44:51:f9:93:0f:b6:4e:9c:9e:1a:4f:f9:ff:85:8d:
         d5:ad:b2:c2:0c:ae:98:a0:9b:00:58:f4:45:93:89:2d:9e:1e:
         71:e9:de:5a:ec:6b:a9:27:0b:61:4a:50:61:3c:12:45:3f:57:
         92:2c:be:27:5e:7a:7d:bd:73:54:c4:c1:f0:42:e6:83:31:d4:
         b8:54:f0:a3:3b:59:a1:ce:b1:5f:da:13:73:86:87:89:ad:0d:
         66:36:52:de:06:82:09:dc:09:09:4c:53:59:da:d9:78:94:9e:
         8e:8d:d0:98:46:47:c0:8c:ed:ff:4e:36:e5:6c:d4:8a:49:2f:
         af:05:c4:2d:01:ad:5f:4d:06:d5:70:89:36:85:76:44:1a:81:
         5c:94:87:ac:ab:0c:74:0f:c7:28:f0:03:a4:96:3c:e2:f6:2c:
         84:72:de:a9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeE8vbSgsZHKWzZyqj6SKHqEKrmowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0RCRjIzRDJEMkZFMUU1Rjg3RTAyREFBMzlDRkRFMTNC
RDZDNzlDNjAeFw0yNDExMTEyMDI4MDlaFw0yNTExMTAyMDMzMDlaMDMxMTAvBgNV
BAMTKDg0OUNFREFFNTIzM0M4OTg0OTMxMTMwQTMyMDYyMjUyMjQwRDlFQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQxNBpWk2BCtYTdSrfIDTs1zoy
HHP9Bib0gGe8+2ovYxTNY5c4aM/yiOmIta1KnRg84crElBBbMs8bGrtqUe1TwDdJ
WlaAKtFcUdjWmL3AxQtZvi+rxWnr2o5qwiMmKsUJmGDgCP6edXwXhwtP13M/48jR
VQ5dJpgOt/NZ4MFWGz4dAkpsLTOUcUIdwQRgROewq8BLCh+jLA2or2eZz6++V6/y
P5Gco0YL/ZIfTnkNqJ6BZTM0yyru+trjSBsIEElkSmrtqCMwCES7PJzTOFcF8mfl
WzwvPmzGEuh8N9tDrxK7WpG+qAk1naCvlxfwYTP5BDpl5bEi1Ndlx7XiSmKzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhJztrlIzyJhJMRMKMgYiUiQNnsgwHwYDVR0j
BBgwFoAUfb8j0tL+Hl+H4C2qOc/eE71secYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGlwazRlUWQ5elV1Y3lFeExrc0NZeHlLNFNxRWR2R1FzSkxMazlNc3Bt
RlgvMC83REJGMjNEMkQyRkUxRTVGODdFMDJEQUEzOUNGREUxM0JENkM3OUM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdEQkYyM0QyRDJGRTFFNUY4
N0UwMkRBQTM5Q0ZERTEzQkQ2Qzc5QzYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRpcGs0ZVFkOXpVdWN5RXhMa3NDWXh5SzRTcUVkdkdRc0pMTGs5TXNwbUZYLzAv
MzEzODM2MmUzMjMyMzcyZTM3MzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM3
MzMzNDMzMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK640wwDQYJKoZIhvcNAQELBQADggEBAGa1NKg6
0rqdROWb5zcTVr5+nXL4soXzjGrqbbKULGDcdXnVUJM3/hSjguZKxr2GpCVz7Hvz
5po2u1NfYgNugvWQkbz6C2WpR72kZCvBoO7GJpTKi4XTWVLSQHtCokRR+ZMPtk6c
nhpP+f+FjdWtssIMrpigmwBY9EWTiS2eHnHp3lrsa6knC2FKUGE8EkU/V5Isvide
en29c1TEwfBC5oMx1LhU8KM7WaHOsV/aE3OGh4mtDWY2Ut4GggncCQlMU1na2XiU
no6N0JhGR8CM7f9ONuVs1IpJL68FxC0BrV9NBtVwiTaFdkQagVyUh6yrDHQPxyjw
A6SWPOL2LIRy3qk=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:02 2024 by rpki-client on console-ams.rpki-client.org