Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34302e302f32312d3231203d3e20323632373038.roa
File:                     3138362e3139332e34302e302f32312d3231203d3e20323632373038.roa (raw, json)
Hash identifier:          7H2tzm80TIEC1IB6zm7/SPZxFj8wLzeIHQ//rz5NdDU=
Subject key identifier:   7E:A6:95:98:5A:A9:AB:C2:23:0C:89:59:A5:CD:D4:D5:45:FF:03:79
Certificate issuer:       /CN=9CB835D4274BCD073EC4427B95058B79D4AA8DA2
Certificate serial:       4EAFB3104CE61FFB48AA3D6C60DDB0BC41751EB0
Authority key identifier: 9C:B8:35:D4:27:4B:CD:07:3E:C4:42:7B:95:05:8B:79:D4:AA:8D:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34302e302f32312d3231203d3e20323632373038.roa
Signing time:             Fri 02 Aug 2024 17:14:17 +0000
ROA not before:           Fri 02 Aug 2024 17:09:17 +0000
ROA not after:            Fri 01 Aug 2025 17:14:17 +0000
asID:                     262708
IP address blocks:        186.193.40.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:af:b3:10:4c:e6:1f:fb:48:aa:3d:6c:60:dd:b0:bc:41:75:1e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CB835D4274BCD073EC4427B95058B79D4AA8DA2
        Validity
            Not Before: Aug  2 17:09:17 2024 GMT
            Not After : Aug  1 17:14:17 2025 GMT
        Subject: CN=7EA695985AA9ABC2230C8959A5CDD4D545FF0379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bc:ed:05:26:b6:d9:8f:a9:0f:09:3b:d9:ff:
                    d1:db:20:e5:87:5f:59:8e:c6:3c:73:7c:64:24:fb:
                    e6:89:c2:b0:21:d1:b9:7b:e3:e6:e3:a6:bc:3c:f0:
                    d0:55:53:19:ea:24:58:7f:a9:0f:1a:ee:00:cd:94:
                    6e:a9:14:a5:c5:70:3c:f4:f9:81:2e:8b:81:ad:de:
                    fe:d8:7f:a1:cd:21:da:8b:78:3c:64:6c:8f:96:d0:
                    fa:42:dd:1e:a5:7e:f9:ac:72:a6:62:16:2c:16:83:
                    1e:d5:5e:fa:fc:b8:b8:8f:77:00:45:a1:a5:eb:b1:
                    36:57:3f:98:32:28:86:1e:9e:0d:e5:13:b2:1e:66:
                    e8:6c:d0:db:09:3f:73:59:e5:88:0c:18:b8:21:4e:
                    95:ad:e1:5c:49:5f:43:74:22:a2:0f:5e:56:0c:86:
                    c2:83:dd:7b:71:64:0a:c5:61:fb:6a:c4:be:97:86:
                    82:22:a4:08:05:c6:29:42:87:e1:a0:7d:dc:7d:aa:
                    e8:e5:9c:51:68:22:02:74:6f:39:32:6b:d1:ee:bf:
                    5f:a7:d6:21:1e:d7:c4:fb:e6:d0:78:f4:4e:8c:0a:
                    b3:6c:19:89:19:33:85:df:11:22:cf:77:8b:f4:44:
                    d5:fa:33:4f:bf:6f:6d:41:e9:6c:89:27:67:1d:dc:
                    91:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A6:95:98:5A:A9:AB:C2:23:0C:89:59:A5:CD:D4:D5:45:FF:03:79
            X509v3 Authority Key Identifier:
                keyid:9C:B8:35:D4:27:4B:CD:07:3E:C4:42:7B:95:05:8B:79:D4:AA:8D:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34302e302f32312d3231203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8a:36:57:4c:43:bc:69:cb:9e:e8:c1:d5:d0:2c:38:d4:d1:df:
         8d:be:96:71:d5:c7:31:cf:6d:ed:df:eb:8c:cd:35:3e:84:2d:
         f4:81:8d:32:3e:9f:07:8e:3e:bf:d9:4c:2b:a3:67:53:01:86:
         03:0d:59:ba:6f:cd:6e:f6:38:31:7a:c5:d4:f7:15:33:be:b6:
         7c:da:f8:5d:e6:3e:e7:5e:96:65:0b:fe:5f:5e:f1:8d:60:2e:
         cd:66:7e:5b:27:87:e0:d5:f8:2a:f0:96:c6:95:f3:d0:e1:6a:
         42:15:d8:ba:81:f6:12:ea:1c:d4:29:72:13:5d:76:75:45:29:
         63:8b:13:b0:55:20:1c:f8:90:1e:44:61:36:44:c6:32:cf:76:
         ed:72:bf:e0:0e:17:03:0a:5b:5f:fb:d3:c4:35:90:e4:6e:38:
         23:fc:60:c1:a0:fd:cc:51:7d:cd:9b:f9:7b:0b:ca:c0:d2:61:
         5a:7e:02:f6:d6:f1:47:4d:4b:31:89:6d:e9:51:07:df:31:65:
         87:7f:ef:34:8b:4e:6b:aa:a0:55:40:cc:8d:85:12:a0:78:34:
         ad:d7:b3:52:78:36:77:93:64:02:7b:f6:f5:10:9e:8a:e1:c4:
         18:c9:0d:48:2f:3b:16:0b:76:ff:4b:37:da:1d:df:74:df:71:
         50:1e:f3:94
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTq+zEEzmH/tIqj1sYN2wvEF1HrAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNCODM1RDQyNzRCQ0QwNzNFQzQ0MjdCOTUwNThCNzlE
NEFBOERBMjAeFw0yNDA4MDIxNzA5MTdaFw0yNTA4MDExNzE0MTdaMDMxMTAvBgNV
BAMTKDdFQTY5NTk4NUFBOUFCQzIyMzBDODk1OUE1Q0RENEQ1NDVGRjAzNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8vO0FJrbZj6kPCTvZ/9HbIOWH
X1mOxjxzfGQk++aJwrAh0bl74+bjprw88NBVUxnqJFh/qQ8a7gDNlG6pFKXFcDz0
+YEui4Gt3v7Yf6HNIdqLeDxkbI+W0PpC3R6lfvmscqZiFiwWgx7VXvr8uLiPdwBF
oaXrsTZXP5gyKIYeng3lE7IeZuhs0NsJP3NZ5YgMGLghTpWt4VxJX0N0IqIPXlYM
hsKD3XtxZArFYftqxL6XhoIipAgFxilCh+Ggfdx9qujlnFFoIgJ0bzkya9Huv1+n
1iEe18T75tB49E6MCrNsGYkZM4XfESLPd4v0RNX6M0+/b21B6WyJJ2cd3JFRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUfqaVmFqpq8IjDIlZpc3U1UX/A3kwHwYDVR0j
BBgwFoAUnLg11CdLzQc+xEJ7lQWLedSqjaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUxmV2JwZDZUcFZVcFp2ckM2RHV5ZFYxemVUZnV2c1E4MnZZS2ZSaG44
cG0vMC85Q0I4MzVENDI3NEJDRDA3M0VDNDQyN0I5NTA1OEI3OUQ0QUE4REEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDQjgzNUQ0Mjc0QkNEMDcz
RUM0NDI3Qjk1MDU4Qjc5RDRBQThEQTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMZldicGQ2VHBWVXBadnJDNkR1eWRWMXplVGZ1dnNRODJ2WUtmUmhuOHBtLzAv
MzEzODM2MmUzMTM5MzMyZTM0MzAyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM2
MzIzNzMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO6wSgwDQYJKoZIhvcNAQELBQADggEBAIo2V0xD
vGnLnujB1dAsONTR342+lnHVxzHPbe3f64zNNT6ELfSBjTI+nweOPr/ZTCujZ1MB
hgMNWbpvzW72ODF6xdT3FTO+tnza+F3mPudelmUL/l9e8Y1gLs1mflsnh+DV+Crw
lsaV89DhakIV2LqB9hLqHNQpchNddnVFKWOLE7BVIBz4kB5EYTZExjLPdu1yv+AO
FwMKW1/708Q1kORuOCP8YMGg/cxRfc2b+XsLysDSYVp+AvbW8UdNSzGJbelRB98x
ZYd/7zSLTmuqoFVAzI2FEqB4NK3Xs1J4NneTZAJ79vUQnorhxBjJDUgvOxYLdv9L
N9od33TfcVAe85Q=
-----END CERTIFICATE-----
Generated at Tue Nov 26 09:06:07 2024 by rpki-client on console-fra.rpki-client.org