Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3136362e302f32342d3234203d3e20323632373834.roa
File:                     3138362e3233352e3136362e302f32342d3234203d3e20323632373834.roa (raw, json)
Hash identifier:          7Gfi/LAb6TEY9aT1uzzjoTrORrkr8ZAqn5TC+hRv1LU=
Subject key identifier:   FF:39:2C:39:E0:9E:D1:EF:58:43:B8:BD:CC:F9:27:1B:8F:7C:D5:2D
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       2AF5EAC882EF1BC32AF9A7965164446A8D381AEF
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3136362e302f32342d3234203d3e20323632373834.roa
Signing time:             Sat 20 Apr 2024 09:49:02 +0000
ROA not before:           Sat 20 Apr 2024 09:44:02 +0000
ROA not after:            Sat 19 Apr 2025 09:49:02 +0000
asID:                     262784
IP address blocks:        186.235.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
                          rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f5:ea:c8:82:ef:1b:c3:2a:f9:a7:96:51:64:44:6a:8d:38:1a:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Apr 20 09:44:02 2024 GMT
            Not After : Apr 19 09:49:02 2025 GMT
        Subject: CN=FF392C39E09ED1EF5843B8BDCCF9271B8F7CD52D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a2:64:90:06:11:9a:01:b8:61:5b:4d:8e:68:
                    0a:fc:0d:25:86:5c:82:ff:c5:0f:0c:de:66:f7:30:
                    a2:29:94:7b:ff:d8:30:98:76:27:d7:c5:40:99:ce:
                    ee:45:c7:da:7d:9a:86:5c:8d:f6:02:43:23:cf:9f:
                    16:26:6d:db:3e:ef:95:48:c1:cd:6e:24:ed:12:87:
                    33:49:42:fc:07:27:b7:2d:fc:b8:28:bb:bf:65:90:
                    6b:9f:86:46:38:c2:3e:e1:8d:8a:24:ae:d8:57:cd:
                    1c:33:19:fe:2b:0a:a3:4d:2d:1d:7a:6a:2d:c2:8a:
                    85:26:11:83:22:1e:b7:06:7c:7d:49:40:f0:ee:44:
                    fb:df:c2:1c:a7:78:8e:32:75:ff:39:76:c2:ce:f9:
                    38:78:1b:e4:b7:be:67:2d:75:1e:6f:68:cc:53:51:
                    bc:1a:d5:ca:fd:2e:4f:81:93:83:0c:04:54:f9:d5:
                    bf:32:2f:0c:68:6e:6f:95:75:01:30:bf:0e:83:cf:
                    9b:f1:0b:e5:f2:c7:40:4b:4f:fc:cc:1c:c3:e9:d8:
                    60:03:95:09:c8:94:b1:e7:4c:e0:1c:60:aa:13:29:
                    ba:f7:c7:53:e4:06:d0:7a:51:0e:d8:eb:51:64:10:
                    c9:8f:6d:ae:08:9c:66:3a:7a:db:71:a3:64:da:24:
                    d3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:39:2C:39:E0:9E:D1:EF:58:43:B8:BD:CC:F9:27:1B:8F:7C:D5:2D
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3136362e302f32342d3234203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:09:0c:c7:62:28:2b:34:a2:50:6d:84:d0:67:cd:22:7a:5f:
         a9:ac:42:e6:38:e6:f7:68:d7:56:a8:c5:f7:9c:5f:70:92:dc:
         ec:11:ff:0d:1f:31:7b:88:73:00:0a:55:75:52:ff:8d:43:8f:
         0a:31:9d:a0:c1:be:5d:20:d6:e7:b1:b0:44:1c:ca:6d:fb:7e:
         3f:bf:4e:86:6d:6a:ed:65:79:be:9e:30:12:a0:3f:87:ff:90:
         ba:b0:cd:d5:ed:7f:61:3d:a9:6c:54:55:1d:ad:c9:d6:2b:e5:
         7f:e6:24:b8:a6:fe:df:d9:27:03:99:17:56:07:6c:57:f0:af:
         8a:d8:db:45:29:58:da:83:37:c4:f6:2e:0b:59:09:71:71:7c:
         00:65:ab:66:1e:c3:3b:e8:71:bf:f0:68:92:3b:6e:54:fb:45:
         47:e6:2b:29:16:43:38:e0:4e:c2:5a:bc:37:73:07:10:eb:37:
         1c:a1:8e:55:7e:45:84:5f:c4:20:3f:70:08:67:49:62:fe:44:
         ac:b6:7b:bd:a1:68:e1:f7:0f:83:3f:ce:df:ca:d5:8e:41:44:
         6a:b6:dc:98:ab:07:07:7c:e6:48:84:7b:ba:c4:76:6b:5c:09:
         22:f9:e6:18:cf:96:81:d6:90:3b:63:9f:b9:b8:1b:3c:0d:d1:
         46:0d:de:aa
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUKvXqyILvG8Mq+aeWUWREao04Gu8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENEMkU3NEMwQjUxNDE0ODI1Rjk1QzlEM0Q0MzJBREQ1
Njg5Njc1MTAeFw0yNDA0MjAwOTQ0MDJaFw0yNTA0MTkwOTQ5MDJaMDMxMTAvBgNV
BAMTKEZGMzkyQzM5RTA5RUQxRUY1ODQzQjhCRENDRjkyNzFCOEY3Q0Q1MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLomSQBhGaAbhhW02OaAr8DSWG
XIL/xQ8M3mb3MKIplHv/2DCYdifXxUCZzu5Fx9p9moZcjfYCQyPPnxYmbds+75VI
wc1uJO0ShzNJQvwHJ7ct/Lgou79lkGufhkY4wj7hjYokrthXzRwzGf4rCqNNLR16
ai3CioUmEYMiHrcGfH1JQPDuRPvfwhyneI4ydf85dsLO+Th4G+S3vmctdR5vaMxT
Ubwa1cr9Lk+Bk4MMBFT51b8yLwxobm+VdQEwvw6Dz5vxC+Xyx0BLT/zMHMPp2GAD
lQnIlLHnTOAcYKoTKbr3x1PkBtB6UQ7Y61FkEMmPba4InGY6ettxo2TaJNMRAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU/zksOeCe0e9YQ7i9zPknG4981S0wHwYDVR0j
BBgwFoAUjNLnTAtRQUgl+VydPUMq3VaJZ1EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXVFTmlIRFl3Vnk0REFBZVFneEw0bkx0c3JxbkhhZlBEVnczS1l3dXdK
TDUvMS84Q0QyRTc0QzBCNTE0MTQ4MjVGOTVDOUQzRDQzMkFERDU2ODk2NzUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDRDJFNzRDMEI1MTQxNDgy
NUY5NUM5RDNENDMyQURENTY4OTY3NTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1RU5pSERZd1Z5NERBQWVRZ3hMNG5MdHNycW5IYWZQRFZ3M0tZd3V3Skw1LzEv
MzEzODM2MmUzMjMzMzUyZTMxMzYzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM3MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALrrpjANBgkqhkiG9w0BAQsFAAOCAQEAogkM
x2IoKzSiUG2E0GfNInpfqaxC5jjm92jXVqjF95xfcJLc7BH/DR8xe4hzAApVdVL/
jUOPCjGdoMG+XSDW57GwRBzKbft+P79Ohm1q7WV5vp4wEqA/h/+QurDN1e1/YT2p
bFRVHa3J1ivlf+YkuKb+39knA5kXVgdsV/CvitjbRSlY2oM3xPYuC1kJcXF8AGWr
Zh7DO+hxv/BokjtuVPtFR+YrKRZDOOBOwlq8N3MHEOs3HKGOVX5FhF/EID9wCGdJ
Yv5ErLZ7vaFo4fcPgz/O38rVjkFEarbcmKsHB3zmSIR7usR2a1wJIvnmGM+WgdaQ
O2OfubgbPA3RRg3eqg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:43 2024 by rpki-client on console-fra.rpki-client.org