Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34342e302f32322d3232203d3e20323632373038.roa
File:                     3138362e3139332e34342e302f32322d3232203d3e20323632373038.roa (raw, json)
Hash identifier:          eRBT1x9yeZlQk8Dq/LSM3ZDQ0nnkdhxzJU9zOOy8W7U=
Subject key identifier:   18:80:BF:14:AF:A7:5F:62:47:96:6D:09:40:A5:04:C7:1A:D8:3C:18
Certificate issuer:       /CN=9CB835D4274BCD073EC4427B95058B79D4AA8DA2
Certificate serial:       107E3AE783FE3B53AE02A33532209F11992F6EBF
Authority key identifier: 9C:B8:35:D4:27:4B:CD:07:3E:C4:42:7B:95:05:8B:79:D4:AA:8D:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34342e302f32322d3232203d3e20323632373038.roa
Signing time:             Fri 02 Aug 2024 17:14:18 +0000
ROA not before:           Fri 02 Aug 2024 17:09:18 +0000
ROA not after:            Fri 01 Aug 2025 17:14:18 +0000
asID:                     262708
IP address blocks:        186.193.44.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:7e:3a:e7:83:fe:3b:53:ae:02:a3:35:32:20:9f:11:99:2f:6e:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CB835D4274BCD073EC4427B95058B79D4AA8DA2
        Validity
            Not Before: Aug  2 17:09:18 2024 GMT
            Not After : Aug  1 17:14:18 2025 GMT
        Subject: CN=1880BF14AFA75F6247966D0940A504C71AD83C18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0a:7b:11:85:13:ce:45:7d:59:61:a8:1a:ba:
                    90:b6:2c:e5:fc:b9:e2:51:6d:57:6c:e8:84:81:88:
                    54:4d:84:c9:c8:f0:fb:2c:84:28:eb:84:04:ad:cd:
                    1c:1f:13:62:93:27:3d:0b:e0:dc:96:90:10:e5:9c:
                    5d:c6:be:99:77:c9:33:de:f9:48:82:d8:e3:38:33:
                    52:86:89:99:6b:87:25:ef:d4:0a:1c:5b:3d:54:3e:
                    e2:64:61:30:ee:dc:12:1c:f4:22:f6:bb:b3:52:f8:
                    50:55:f2:d2:9e:54:bb:44:11:f8:16:04:28:1f:a9:
                    6d:5c:d9:73:96:d6:ab:b7:0a:76:c5:a3:60:ba:0f:
                    f7:7b:3a:74:35:8a:0d:a9:c7:b4:13:ff:68:e0:05:
                    8b:f2:ca:24:53:a2:c4:cd:a8:93:bb:22:b2:86:d6:
                    06:0e:d7:86:49:89:d3:bf:3e:c8:1c:04:29:38:a0:
                    a0:cc:c3:8d:eb:08:e7:aa:17:ca:2b:45:2a:97:15:
                    90:71:36:bf:21:60:a2:a5:2e:8e:ae:fe:de:75:72:
                    af:74:33:30:19:53:ad:92:15:15:33:b0:ed:c8:ff:
                    5d:bf:6f:b6:88:45:2b:1f:1d:fd:72:a6:ec:ed:ff:
                    01:1c:0a:a5:34:93:6d:ed:90:6d:96:52:33:d3:77:
                    d0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:80:BF:14:AF:A7:5F:62:47:96:6D:09:40:A5:04:C7:1A:D8:3C:18
            X509v3 Authority Key Identifier:
                keyid:9C:B8:35:D4:27:4B:CD:07:3E:C4:42:7B:95:05:8B:79:D4:AA:8D:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34342e302f32322d3232203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:f3:d1:90:84:a0:94:75:e8:8f:17:cd:32:be:ef:5c:cb:3a:
         18:31:46:a1:09:2f:f1:0a:5e:ec:f6:c7:77:c6:84:93:e7:27:
         07:85:a4:e5:f5:19:b3:f3:71:57:dd:3f:14:eb:c3:b0:07:33:
         56:d3:2d:21:42:1c:b2:03:79:e1:d3:ad:e5:af:78:07:c3:a4:
         34:ec:7e:07:e9:7b:93:0a:47:f9:a8:1f:56:b3:cc:b9:48:03:
         72:97:df:91:09:6f:66:85:5a:ca:81:98:8b:de:4a:30:ca:e4:
         0e:c6:d8:4a:e0:36:6f:ee:f2:c7:e1:65:5c:59:40:4f:5e:0b:
         0c:15:db:4a:70:bc:dc:56:59:d1:6c:d3:f2:51:78:20:d9:91:
         fa:05:04:6a:d4:77:f4:b8:5f:fc:2b:e6:d4:60:0b:90:d5:df:
         d5:42:0f:50:d8:6a:b0:f3:fc:68:a4:bf:a7:37:52:ea:5f:1a:
         63:77:3a:61:52:fb:ab:9a:17:94:07:ac:7b:5c:e6:30:9f:26:
         c3:97:4e:69:d2:19:05:44:c8:86:70:b1:32:a4:e1:33:3d:54:
         ad:df:a2:8f:45:34:d5:6d:1e:6d:68:3a:1d:66:50:64:71:cb:
         79:58:8b:3e:6d:33:a2:56:f1:f1:08:39:06:d8:b4:d2:36:06:
         21:40:ee:18
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEH4654P+O1OuAqM1MiCfEZkvbr8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNCODM1RDQyNzRCQ0QwNzNFQzQ0MjdCOTUwNThCNzlE
NEFBOERBMjAeFw0yNDA4MDIxNzA5MThaFw0yNTA4MDExNzE0MThaMDMxMTAvBgNV
BAMTKDE4ODBCRjE0QUZBNzVGNjI0Nzk2NkQwOTQwQTUwNEM3MUFEODNDMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHCnsRhRPORX1ZYagaupC2LOX8
ueJRbVds6ISBiFRNhMnI8PsshCjrhAStzRwfE2KTJz0L4NyWkBDlnF3Gvpl3yTPe
+UiC2OM4M1KGiZlrhyXv1AocWz1UPuJkYTDu3BIc9CL2u7NS+FBV8tKeVLtEEfgW
BCgfqW1c2XOW1qu3CnbFo2C6D/d7OnQ1ig2px7QT/2jgBYvyyiRTosTNqJO7IrKG
1gYO14ZJidO/PsgcBCk4oKDMw43rCOeqF8orRSqXFZBxNr8hYKKlLo6u/t51cq90
MzAZU62SFRUzsO3I/12/b7aIRSsfHf1ypuzt/wEcCqU0k23tkG2WUjPTd9CVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGIC/FK+nX2JHlm0JQKUExxrYPBgwHwYDVR0j
BBgwFoAUnLg11CdLzQc+xEJ7lQWLedSqjaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUxmV2JwZDZUcFZVcFp2ckM2RHV5ZFYxemVUZnV2c1E4MnZZS2ZSaG44
cG0vMC85Q0I4MzVENDI3NEJDRDA3M0VDNDQyN0I5NTA1OEI3OUQ0QUE4REEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDQjgzNUQ0Mjc0QkNEMDcz
RUM0NDI3Qjk1MDU4Qjc5RDRBQThEQTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMZldicGQ2VHBWVXBadnJDNkR1eWRWMXplVGZ1dnNRODJ2WUtmUmhuOHBtLzAv
MzEzODM2MmUzMTM5MzMyZTM0MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzIzNzMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK6wSwwDQYJKoZIhvcNAQELBQADggEBALDz0ZCE
oJR16I8XzTK+71zLOhgxRqEJL/EKXuz2x3fGhJPnJweFpOX1GbPzcVfdPxTrw7AH
M1bTLSFCHLIDeeHTreWveAfDpDTsfgfpe5MKR/moH1azzLlIA3KX35EJb2aFWsqB
mIveSjDK5A7G2ErgNm/u8sfhZVxZQE9eCwwV20pwvNxWWdFs0/JReCDZkfoFBGrU
d/S4X/wr5tRgC5DV39VCD1DYarDz/Gikv6c3UupfGmN3OmFS+6uaF5QHrHtc5jCf
JsOXTmnSGQVEyIZwsTKk4TM9VK3foo9FNNVtHm1oOh1mUGRxy3lYiz5tM6JW8fEI
OQbYtNI2BiFA7hg=
-----END CERTIFICATE-----
Generated at Tue Nov 26 09:06:07 2024 by rpki-client on console-fra.rpki-client.org