Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34342e302f32342d3234203d3e20323632373038.roa
File:                     3138362e3139332e34342e302f32342d3234203d3e20323632373038.roa (raw, json)
Hash identifier:          ZkF160Jt5nKxeVw8Pn5I6ebt0iVEtWbpOhLGaNHqo1M=
Subject key identifier:   8E:33:74:4F:27:EE:63:C7:36:84:AE:A6:D1:82:80:E6:9D:DD:B8:7F
Certificate issuer:       /CN=9CB835D4274BCD073EC4427B95058B79D4AA8DA2
Certificate serial:       38A235D0125915172FA7F1178B2999C061C8D53C
Authority key identifier: 9C:B8:35:D4:27:4B:CD:07:3E:C4:42:7B:95:05:8B:79:D4:AA:8D:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34342e302f32342d3234203d3e20323632373038.roa
Signing time:             Fri 02 Aug 2024 17:14:18 +0000
ROA not before:           Fri 02 Aug 2024 17:09:18 +0000
ROA not after:            Fri 01 Aug 2025 17:14:18 +0000
asID:                     262708
IP address blocks:        186.193.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.crl
                          rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:a2:35:d0:12:59:15:17:2f:a7:f1:17:8b:29:99:c0:61:c8:d5:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CB835D4274BCD073EC4427B95058B79D4AA8DA2
        Validity
            Not Before: Aug  2 17:09:18 2024 GMT
            Not After : Aug  1 17:14:18 2025 GMT
        Subject: CN=8E33744F27EE63C73684AEA6D18280E69DDDB87F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d2:98:c2:0b:31:4d:8a:91:55:f5:21:da:5c:
                    31:eb:60:79:14:a1:d6:30:62:5e:4f:59:fa:0a:01:
                    0c:07:29:c9:75:1c:11:b6:ad:ec:e3:47:02:e3:9e:
                    4a:68:60:a7:d2:02:5b:9e:97:2f:5d:d7:c5:ff:be:
                    fe:ea:ca:b7:ec:2d:1f:58:ef:da:f0:71:a4:51:5c:
                    39:e4:ef:6b:3a:f0:22:8d:e8:46:fe:e4:d1:72:06:
                    ba:14:33:e7:3d:7b:ec:1c:05:a0:76:84:99:da:ba:
                    aa:51:79:bc:8d:16:b8:5c:66:a8:a1:86:10:2b:32:
                    97:eb:5c:90:56:cd:f2:dc:61:bf:4d:56:d5:e3:d5:
                    08:d4:ef:f1:73:46:d8:92:77:c6:35:e4:d4:28:f0:
                    98:c8:ab:32:aa:ee:8d:c4:c9:6c:36:f6:5b:6a:1e:
                    59:6a:85:22:42:26:8c:21:b4:7f:45:d8:31:6c:33:
                    61:9c:de:1a:11:cf:32:77:cb:74:3a:99:9e:0d:10:
                    73:2c:3b:0a:67:4f:62:76:1a:10:b7:13:1b:ac:0a:
                    19:bd:2d:75:8b:f3:fb:16:e5:76:95:f6:00:87:6a:
                    ec:5d:24:ea:0c:9c:7b:e1:e6:53:76:04:08:bb:dd:
                    fd:a4:ad:f1:43:7d:e6:f6:a4:fd:7c:05:87:b2:4c:
                    54:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:33:74:4F:27:EE:63:C7:36:84:AE:A6:D1:82:80:E6:9D:DD:B8:7F
            X509v3 Authority Key Identifier:
                keyid:9C:B8:35:D4:27:4B:CD:07:3E:C4:42:7B:95:05:8B:79:D4:AA:8D:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB835D4274BCD073EC4427B95058B79D4AA8DA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LfWbpd6TpVUpZvrC6DuydV1zeTfuvsQ82vYKfRhn8pm/0/3138362e3139332e34342e302f32342d3234203d3e20323632373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:8e:2d:a9:4f:29:7a:34:05:d4:4c:eb:59:0b:42:15:14:2e:
         70:61:01:a4:45:d8:a9:9f:8f:e6:9c:03:61:b5:54:ea:e5:6a:
         b1:5e:a3:bb:c5:ea:a7:29:5c:4f:47:3c:f9:ef:5b:df:5a:fa:
         ab:22:9a:3c:98:4f:3b:b3:b8:ec:f7:59:7b:97:b3:52:9b:ea:
         e9:a2:73:a1:fa:fc:2e:42:a3:29:e7:77:c8:6c:31:fb:2e:d9:
         e6:49:6b:f5:98:f9:6e:20:37:ef:28:fa:2d:0a:93:6a:da:6e:
         6c:52:04:d8:c0:38:d7:fc:e7:1f:1a:c8:a3:9c:aa:51:0f:b1:
         a1:25:03:6c:94:ee:17:7a:63:ed:d9:39:f5:e7:ee:71:09:e8:
         f9:14:36:91:66:c6:bb:88:1a:3f:a2:31:2b:da:3b:df:32:9c:
         2c:41:38:9d:aa:1e:07:f5:df:b9:b3:47:ff:9c:d8:b3:91:41:
         4e:70:ec:05:34:b0:c7:18:a8:87:14:c7:67:76:e7:d2:f5:26:
         bd:28:85:4f:01:b8:00:4f:a9:5a:6f:f0:50:68:69:23:be:39:
         14:2f:73:9c:cb:5b:3c:d7:29:5f:08:41:cc:90:1d:1f:f0:da:
         b5:f2:a3:ec:08:ec:b7:5e:80:bc:28:1b:e6:25:9f:6d:44:e1:
         a2:2d:99:f2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOKI10BJZFRcvp/EXiymZwGHI1TwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNCODM1RDQyNzRCQ0QwNzNFQzQ0MjdCOTUwNThCNzlE
NEFBOERBMjAeFw0yNDA4MDIxNzA5MThaFw0yNTA4MDExNzE0MThaMDMxMTAvBgNV
BAMTKDhFMzM3NDRGMjdFRTYzQzczNjg0QUVBNkQxODI4MEU2OUREREI4N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu0pjCCzFNipFV9SHaXDHrYHkU
odYwYl5PWfoKAQwHKcl1HBG2rezjRwLjnkpoYKfSAluely9d18X/vv7qyrfsLR9Y
79rwcaRRXDnk72s68CKN6Eb+5NFyBroUM+c9e+wcBaB2hJnauqpRebyNFrhcZqih
hhArMpfrXJBWzfLcYb9NVtXj1QjU7/FzRtiSd8Y15NQo8JjIqzKq7o3EyWw29ltq
HllqhSJCJowhtH9F2DFsM2Gc3hoRzzJ3y3Q6mZ4NEHMsOwpnT2J2GhC3ExusChm9
LXWL8/sW5XaV9gCHauxdJOoMnHvh5lN2BAi73f2krfFDfeb2pP18BYeyTFQHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjjN0TyfuY8c2hK6m0YKA5p3duH8wHwYDVR0j
BBgwFoAUnLg11CdLzQc+xEJ7lQWLedSqjaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUxmV2JwZDZUcFZVcFp2ckM2RHV5ZFYxemVUZnV2c1E4MnZZS2ZSaG44
cG0vMC85Q0I4MzVENDI3NEJDRDA3M0VDNDQyN0I5NTA1OEI3OUQ0QUE4REEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDQjgzNUQ0Mjc0QkNEMDcz
RUM0NDI3Qjk1MDU4Qjc5RDRBQThEQTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMZldicGQ2VHBWVXBadnJDNkR1eWRWMXplVGZ1dnNRODJ2WUtmUmhuOHBtLzAv
MzEzODM2MmUzMTM5MzMyZTM0MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNzMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC6wSwwDQYJKoZIhvcNAQELBQADggEBAImOLalP
KXo0BdRM61kLQhUULnBhAaRF2Kmfj+acA2G1VOrlarFeo7vF6qcpXE9HPPnvW99a
+qsimjyYTzuzuOz3WXuXs1Kb6umic6H6/C5Coynnd8hsMfsu2eZJa/WY+W4gN+8o
+i0Kk2rabmxSBNjAONf85x8ayKOcqlEPsaElA2yU7hd6Y+3ZOfXn7nEJ6PkUNpFm
xruIGj+iMSvaO98ynCxBOJ2qHgf137mzR/+c2LORQU5w7AU0sMcYqIcUx2d259L1
Jr0ohU8BuABPqVpv8FBoaSO+ORQvc5zLWzzXKV8IQcyQHR/w2rXyo+wI7LdegLwo
G+Yln21E4aItmfI=
-----END CERTIFICATE-----
Generated at Tue Nov 26 09:06:07 2024 by rpki-client on console-fra.rpki-client.org