Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33322e302f32302d3230203d3e20323632373038.roa
File:                     3138362e3139332e33322e302f32302d3230203d3e20323632373038.roa (raw, json)
Hash identifier:          su+5qp5pOXFnAPKxZRCfYzp5O/4+JPdVdcacR/jmeLM=
Subject key identifier:   51:B1:2D:67:BE:7F:EB:B6:30:21:40:61:51:4C:56:53:91:46:0E:61
Certificate issuer:       /CN=9CB835D4274BCD073EC4427B95058B79D4AA8DA2
Certificate serial:       780B58AA285E253367E33DDAE906340E24C40129
Authority key identifier: 9C:B8:35:D4:27:4B:CD:07:3E:C4:42:7B:95:05:8B:79:D4:AA:8D:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33322e302f32302d3230203d3e20323632373038.roa
Signing time:             Fri 02 Aug 2024 17:14:19 +0000
ROA not before:           Fri 02 Aug 2024 17:09:19 +0000
ROA not after:            Fri 01 Aug 2025 17:14:19 +0000
asID:                     262708
IP address blocks:        186.193.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:0b:58:aa:28:5e:25:33:67:e3:3d:da:e9:06:34:0e:24:c4:01:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CB835D4274BCD073EC4427B95058B79D4AA8DA2
        Validity
            Not Before: Aug  2 17:09:19 2024 GMT
            Not After : Aug  1 17:14:19 2025 GMT
        Subject: CN=51B12D67BE7FEBB630214061514C565391460E61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:82:13:99:a4:83:ec:ad:c2:c1:2c:f2:5b:fd:
                    8e:f2:62:04:95:50:e8:a2:b1:df:01:09:a7:69:21:
                    c8:48:3d:49:70:6e:fe:21:9c:dd:63:e5:32:d9:eb:
                    b2:98:83:75:85:76:83:90:e8:54:9e:c9:93:ff:cd:
                    68:8a:c5:8d:5e:32:4f:73:85:46:7e:7b:86:7f:de:
                    cd:24:3c:66:89:25:3f:26:28:ab:f8:73:60:0b:e2:
                    88:dd:a7:34:0f:a3:15:47:8b:1a:4f:8d:b1:34:8e:
                    34:f9:70:cf:20:31:e8:8e:9a:cb:9e:44:71:8e:8d:
                    c5:22:17:f9:21:82:a5:31:d0:78:e9:fd:a8:94:ce:
                    a6:89:f6:77:91:7a:b9:c7:bb:de:1a:59:04:24:87:
                    eb:ae:3e:2f:c3:8e:4a:2d:39:74:63:f0:16:af:dc:
                    99:82:8a:b9:06:47:29:4f:3d:70:d9:4f:d2:7b:0a:
                    63:a7:ad:65:56:38:f8:a4:3f:14:e3:b5:4f:b7:b8:
                    10:d5:32:2d:ea:51:e8:ce:b9:7b:e4:b6:bd:62:ce:
                    71:63:c0:d4:46:7c:a6:1a:26:c9:31:36:5a:22:bb:
                    42:ed:a5:71:4f:1a:8d:6f:0e:c7:73:07:2d:2e:df:
                    ed:da:d7:39:2c:66:8d:51:f7:fa:15:d0:a6:8e:82:
                    8a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B1:2D:67:BE:7F:EB:B6:30:21:40:61:51:4C:56:53:91:46:0E:61
            X509v3 Authority Key Identifier:
                keyid:9C:B8:35:D4:27:4B:CD:07:3E:C4:42:7B:95:05:8B:79:D4:AA:8D:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e33322e302f32302d3230203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a0:22:73:01:8f:37:cd:8c:81:1f:fb:20:93:77:2c:4d:42:c4:
         f1:58:3f:95:11:56:d1:97:a3:5b:95:fe:f6:17:0a:39:c2:fc:
         34:0e:ed:f6:d6:0d:b9:49:12:c3:5a:88:ce:0d:14:85:46:db:
         3a:84:da:b2:5e:5b:65:a5:32:a2:bd:bd:a6:37:b0:05:95:4f:
         8a:3e:08:74:dc:0f:9c:cd:e0:ac:34:98:5f:67:27:79:3e:e6:
         cc:4a:5b:79:b7:b6:3f:22:00:72:c7:d8:2a:ca:93:89:87:a0:
         81:0d:39:1d:7b:06:a7:35:0d:11:2d:8b:5b:c4:0c:b6:e8:b5:
         9b:8c:dd:fc:30:a4:dc:8f:50:b6:cb:e7:95:d7:8b:a1:31:e7:
         be:c6:2d:30:0b:9a:9f:0a:7a:20:26:ed:c5:2c:4d:18:91:e5:
         9d:8c:60:eb:a0:07:0c:3c:31:8a:17:f5:7a:2b:e1:2e:0c:c8:
         3d:7d:e9:2b:bc:5a:59:71:74:b8:81:40:e0:a0:4f:3d:45:6e:
         ad:05:6c:48:ae:57:7f:be:5d:4e:b5:12:e1:55:e4:f5:f7:4b:
         b9:52:70:3f:d9:be:b1:3e:f2:56:c4:16:8b:38:76:b6:13:d9:
         e1:cd:ff:ae:be:bb:93:b9:6f:16:8e:fb:82:ea:31:48:b4:39:
         0a:43:22:8a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeAtYqiheJTNn4z3a6QY0DiTEASkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNCODM1RDQyNzRCQ0QwNzNFQzQ0MjdCOTUwNThCNzlE
NEFBOERBMjAeFw0yNDA4MDIxNzA5MTlaFw0yNTA4MDExNzE0MTlaMDMxMTAvBgNV
BAMTKDUxQjEyRDY3QkU3RkVCQjYzMDIxNDA2MTUxNEM1NjUzOTE0NjBFNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsghOZpIPsrcLBLPJb/Y7yYgSV
UOiisd8BCadpIchIPUlwbv4hnN1j5TLZ67KYg3WFdoOQ6FSeyZP/zWiKxY1eMk9z
hUZ+e4Z/3s0kPGaJJT8mKKv4c2AL4ojdpzQPoxVHixpPjbE0jjT5cM8gMeiOmsue
RHGOjcUiF/khgqUx0Hjp/aiUzqaJ9neRernHu94aWQQkh+uuPi/DjkotOXRj8Bav
3JmCirkGRylPPXDZT9J7CmOnrWVWOPikPxTjtU+3uBDVMi3qUejOuXvktr1iznFj
wNRGfKYaJskxNloiu0LtpXFPGo1vDsdzBy0u3+3a1zksZo1R9/oV0KaOgorJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUUbEtZ75/67YwIUBhUUxWU5FGDmEwHwYDVR0j
BBgwFoAUnLg11CdLzQc+xEJ7lQWLedSqjaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUxmV2JwZDZUcFZVcFp2ckM2RHV5ZFYxemVUZnV2c1E4MnZZS2ZSaG44
cG0vMC85Q0I4MzVENDI3NEJDRDA3M0VDNDQyN0I5NTA1OEI3OUQ0QUE4REEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDQjgzNUQ0Mjc0QkNEMDcz
RUM0NDI3Qjk1MDU4Qjc5RDRBQThEQTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMZldicGQ2VHBWVXBadnJDNkR1eWRWMXplVGZ1dnNRODJ2WUtmUmhuOHBtLzAv
MzEzODM2MmUzMTM5MzMyZTMzMzIyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM2
MzIzNzMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS6wSAwDQYJKoZIhvcNAQELBQADggEBAKAicwGP
N82MgR/7IJN3LE1CxPFYP5URVtGXo1uV/vYXCjnC/DQO7fbWDblJEsNaiM4NFIVG
2zqE2rJeW2WlMqK9vaY3sAWVT4o+CHTcD5zN4Kw0mF9nJ3k+5sxKW3m3tj8iAHLH
2CrKk4mHoIENOR17Bqc1DREti1vEDLbotZuM3fwwpNyPULbL55XXi6Ex577GLTAL
mp8KeiAm7cUsTRiR5Z2MYOugBww8MYoX9Xor4S4MyD196Su8WllxdLiBQOCgTz1F
bq0FbEiuV3++XU61EuFV5PX3S7lScD/ZvrE+8lbEFos4drYT2eHN/66+u5O5bxaO
+4LqMUi0OQpDIoo=
-----END CERTIFICATE-----
Generated at Tue Nov 26 08:30:10 2024 by rpki-client on console-ams.rpki-client.org