Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3137312e302f32342d3234203d3e20323632373834.roa
File:                     3138362e3233352e3137312e302f32342d3234203d3e20323632373834.roa (raw, json)
Hash identifier:          QfVL5ImgStqdLIQviwSn824zG/5B6zargB+c6HNjY6Q=
Subject key identifier:   9F:6B:60:CE:0B:B8:E7:F9:22:88:BC:29:82:EE:58:C6:3A:89:7C:EF
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       0681D5942358890DB01B05E3D3903E30D2C1BF68
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3137312e302f32342d3234203d3e20323632373834.roa
Signing time:             Sat 20 Apr 2024 09:49:02 +0000
ROA not before:           Sat 20 Apr 2024 09:44:02 +0000
ROA not after:            Sat 19 Apr 2025 09:49:02 +0000
asID:                     262784
IP address blocks:        186.235.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
                          rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:81:d5:94:23:58:89:0d:b0:1b:05:e3:d3:90:3e:30:d2:c1:bf:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Apr 20 09:44:02 2024 GMT
            Not After : Apr 19 09:49:02 2025 GMT
        Subject: CN=9F6B60CE0BB8E7F92288BC2982EE58C63A897CEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:00:39:5a:22:8e:6e:26:af:8d:e1:b0:a2:e6:
                    47:91:e5:6a:c5:18:d0:79:31:45:43:d0:92:8d:8b:
                    9e:30:30:27:c8:e1:54:c2:f4:22:4c:5f:84:30:ae:
                    14:93:1f:0f:09:ba:b9:17:3e:9b:46:9d:ea:04:6e:
                    02:88:f7:4c:18:f7:44:2c:55:1d:a3:44:79:01:ad:
                    a9:65:4b:ae:1c:98:aa:a9:5c:e7:d0:83:60:24:d6:
                    40:2f:70:1e:9d:6b:ac:d6:89:4d:c9:af:0c:b4:13:
                    d9:64:c1:5b:cb:59:3d:d1:5f:52:84:ec:45:98:d6:
                    8f:51:6e:4a:13:58:4d:be:4c:c0:02:e4:19:e1:68:
                    37:fe:d0:84:e1:5a:2f:f6:c5:39:37:7a:b4:c0:11:
                    f4:ff:61:fb:39:9a:59:4a:45:83:9a:a4:e3:85:fb:
                    95:b8:e1:0c:d2:16:17:4d:32:51:57:8f:60:0a:fc:
                    d9:4e:7f:26:6c:b6:d1:6b:32:82:3e:fb:a2:67:42:
                    4d:22:70:d8:b6:b2:3f:d6:89:44:1a:2f:b7:ec:b8:
                    90:0c:4a:7c:9c:7b:82:b2:a9:e3:34:5e:3d:a3:d1:
                    c4:50:d9:29:00:d6:64:aa:36:7d:5c:9b:f9:cf:30:
                    68:fa:3a:79:31:70:c7:6a:ed:6f:27:ea:b1:2d:1a:
                    fd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:6B:60:CE:0B:B8:E7:F9:22:88:BC:29:82:EE:58:C6:3A:89:7C:EF
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3138362e3233352e3137312e302f32342d3234203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:a7:ac:79:7b:b7:2f:d4:57:75:21:f7:db:47:0f:fc:49:11:
         1c:41:02:1b:91:fa:92:e1:33:6c:09:24:07:bd:cb:55:c8:ad:
         3a:7e:89:c5:2a:46:f0:4a:03:48:33:4d:15:63:91:0f:00:49:
         50:eb:04:b6:99:b9:01:d6:ae:de:04:98:30:f9:a3:5e:fb:6a:
         7c:76:82:04:9d:3a:c7:14:11:13:4d:c8:f8:54:4d:3c:7c:59:
         91:c0:a8:55:95:8f:15:cc:8c:4e:5b:a8:8f:76:9f:7a:fa:13:
         66:cd:66:73:d9:37:6e:63:b8:a5:ae:47:ea:ca:ef:10:ed:61:
         86:57:bf:6f:1d:04:74:cd:89:4d:46:e7:4a:c9:21:e2:a3:bd:
         11:07:81:15:63:44:81:eb:6b:13:44:b5:81:f9:7f:d5:bd:36:
         ba:4b:21:0d:bc:13:c6:66:ef:30:7c:19:d8:b6:58:ea:07:a6:
         ab:7e:0f:52:62:8a:23:8c:ab:4e:4b:8f:af:e9:2c:d8:88:b6:
         a3:d3:d4:7c:00:24:85:c9:55:8e:fd:ff:da:ff:77:43:a9:ff:
         e7:e6:e5:6a:a9:de:a5:9b:c9:cc:a4:57:0a:76:02:2a:55:49:
         ad:e7:d7:6a:f1:9a:2b:7d:62:b4:fe:ea:25:d2:97:b0:c9:15:
         41:b5:d7:59
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUBoHVlCNYiQ2wGwXj05A+MNLBv2gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENEMkU3NEMwQjUxNDE0ODI1Rjk1QzlEM0Q0MzJBREQ1
Njg5Njc1MTAeFw0yNDA0MjAwOTQ0MDJaFw0yNTA0MTkwOTQ5MDJaMDMxMTAvBgNV
BAMTKDlGNkI2MENFMEJCOEU3RjkyMjg4QkMyOTgyRUU1OEM2M0E4OTdDRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0ADlaIo5uJq+N4bCi5keR5WrF
GNB5MUVD0JKNi54wMCfI4VTC9CJMX4QwrhSTHw8JurkXPptGneoEbgKI90wY90Qs
VR2jRHkBrallS64cmKqpXOfQg2Ak1kAvcB6da6zWiU3Jrwy0E9lkwVvLWT3RX1KE
7EWY1o9RbkoTWE2+TMAC5BnhaDf+0IThWi/2xTk3erTAEfT/Yfs5mllKRYOapOOF
+5W44QzSFhdNMlFXj2AK/NlOfyZsttFrMoI++6JnQk0icNi2sj/WiUQaL7fsuJAM
Snyce4KyqeM0Xj2j0cRQ2SkA1mSqNn1cm/nPMGj6OnkxcMdq7W8n6rEtGv3ZAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUn2tgzgu45/kiiLwpgu5YxjqJfO8wHwYDVR0j
BBgwFoAUjNLnTAtRQUgl+VydPUMq3VaJZ1EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXVFTmlIRFl3Vnk0REFBZVFneEw0bkx0c3JxbkhhZlBEVnczS1l3dXdK
TDUvMS84Q0QyRTc0QzBCNTE0MTQ4MjVGOTVDOUQzRDQzMkFERDU2ODk2NzUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDRDJFNzRDMEI1MTQxNDgy
NUY5NUM5RDNENDMyQURENTY4OTY3NTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1RU5pSERZd1Z5NERBQWVRZ3hMNG5MdHNycW5IYWZQRFZ3M0tZd3V3Skw1LzEv
MzEzODM2MmUzMjMzMzUyZTMxMzczMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM3MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALrrqzANBgkqhkiG9w0BAQsFAAOCAQEAmaes
eXu3L9RXdSH320cP/EkRHEECG5H6kuEzbAkkB73LVcitOn6JxSpG8EoDSDNNFWOR
DwBJUOsEtpm5Adau3gSYMPmjXvtqfHaCBJ06xxQRE03I+FRNPHxZkcCoVZWPFcyM
Tluoj3afevoTZs1mc9k3bmO4pa5H6srvEO1hhle/bx0EdM2JTUbnSskh4qO9EQeB
FWNEgetrE0S1gfl/1b02ukshDbwTxmbvMHwZ2LZY6gemq34PUmKKI4yrTkuPr+ks
2Ii2o9PUfAAkhclVjv3/2v93Q6n/5+blaqnepZvJzKRXCnYCKlVJrefXavGaK31i
tP7qJdKXsMkVQbXXWQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:09 2024 by rpki-client on console-ams.rpki-client.org