Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3137362e302f32302d3332203d3e203238313931.roa
File:                     3138362e3139332e3137362e302f32302d3332203d3e203238313931.roa (raw, json)
Hash identifier:          c2urmIKEu6tZU24sCn4bd7V6NlwlOt5R6/ocpGM45nQ=
Subject key identifier:   E4:F1:E3:DD:6D:56:01:5B:8C:04:0F:A9:13:53:1E:08:BA:2F:91:21
Certificate issuer:       /CN=000E8F0F5BCF155986A68F056DBFD3BAA939FE78
Certificate serial:       287DB358788AFC5182F9A29CB7C87B636F3C6B44
Authority key identifier: 00:0E:8F:0F:5B:CF:15:59:86:A6:8F:05:6D:BF:D3:BA:A9:39:FE:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/000E8F0F5BCF155986A68F056DBFD3BAA939FE78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3137362e302f32302d3332203d3e203238313931.roa
Signing time:             Mon 11 Nov 2024 20:26:20 +0000
ROA not before:           Mon 11 Nov 2024 20:21:20 +0000
ROA not after:            Mon 10 Nov 2025 20:26:20 +0000
asID:                     28191
IP address blocks:        186.193.176.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/000E8F0F5BCF155986A68F056DBFD3BAA939FE78.crl
                          rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/000E8F0F5BCF155986A68F056DBFD3BAA939FE78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/000E8F0F5BCF155986A68F056DBFD3BAA939FE78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:26:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:7d:b3:58:78:8a:fc:51:82:f9:a2:9c:b7:c8:7b:63:6f:3c:6b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=000E8F0F5BCF155986A68F056DBFD3BAA939FE78
        Validity
            Not Before: Nov 11 20:21:20 2024 GMT
            Not After : Nov 10 20:26:20 2025 GMT
        Subject: CN=E4F1E3DD6D56015B8C040FA913531E08BA2F9121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b0:22:60:e7:25:f2:3b:06:17:2c:0a:5c:03:
                    fc:2e:63:b9:67:30:ea:29:c0:04:97:61:4d:d5:bf:
                    c9:6a:12:34:c7:2d:e6:b3:2c:2b:ef:67:74:04:a6:
                    d9:84:10:b3:33:25:d6:16:11:0d:0f:40:78:92:a9:
                    c1:b8:2c:17:57:7b:85:68:c8:75:b1:a3:5c:8b:6c:
                    95:7e:3d:54:41:ff:7d:16:b1:4d:6b:5b:55:88:38:
                    f5:53:06:f5:8d:04:d5:e0:d2:f9:7b:d2:79:05:53:
                    08:c7:8b:07:98:dd:af:fd:ec:96:65:30:8f:81:7f:
                    17:33:e9:50:15:72:b3:0f:4a:e2:29:a9:5a:1c:f5:
                    97:89:c6:3d:c9:ff:66:48:02:6f:92:68:0b:c4:3e:
                    ce:79:5a:dc:01:da:4c:1b:b7:66:6d:bc:c9:52:85:
                    00:e0:6f:65:0d:44:e1:92:3d:df:8f:be:5f:5b:6f:
                    3e:b1:cb:25:5e:c4:62:35:bb:1a:4a:d5:0e:39:c2:
                    21:99:59:70:c4:be:9c:c3:6b:9f:58:dc:52:3b:ba:
                    60:7f:f8:06:44:75:b6:13:1a:87:d1:7f:ae:70:b4:
                    09:dc:b8:62:b4:8a:8d:9f:09:db:cc:87:a9:11:f7:
                    18:58:66:04:f8:ec:f8:37:70:96:78:f7:fa:93:a9:
                    7d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F1:E3:DD:6D:56:01:5B:8C:04:0F:A9:13:53:1E:08:BA:2F:91:21
            X509v3 Authority Key Identifier:
                keyid:00:0E:8F:0F:5B:CF:15:59:86:A6:8F:05:6D:BF:D3:BA:A9:39:FE:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/000E8F0F5BCF155986A68F056DBFD3BAA939FE78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/000E8F0F5BCF155986A68F056DBFD3BAA939FE78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3137362e302f32302d3332203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:2e:36:68:7b:29:ba:e1:7f:72:34:28:e5:54:71:d7:a0:fb:
         84:4e:9e:de:36:65:7b:b3:1b:61:ae:11:f5:55:e5:42:4f:d1:
         c9:5a:bf:ec:75:e4:bc:b9:04:67:7d:22:64:29:9d:21:96:6f:
         c6:05:c9:63:aa:f9:3e:e6:e1:8d:61:59:e8:87:95:d7:96:72:
         7e:cd:fe:0b:15:2e:6e:be:53:13:a6:5c:00:ad:36:f1:cc:77:
         99:57:f7:91:51:69:df:1d:bc:d6:af:2f:80:a6:47:07:20:86:
         88:a4:0b:67:2a:55:90:11:7c:8f:e7:33:7b:70:c7:f0:9d:76:
         10:9c:40:02:00:51:e8:38:cc:2a:e3:fa:77:6a:bc:be:3c:48:
         e4:45:45:f0:04:8a:db:52:59:1f:c1:0f:34:1a:8d:ab:48:f5:
         79:c3:43:2e:f2:e9:34:6e:c8:38:42:03:5f:81:09:dc:70:4a:
         fd:cb:32:fa:63:58:7b:a7:66:92:aa:0a:6c:33:b4:86:99:51:
         67:0c:5f:2a:5b:07:a8:01:dd:ad:a6:7d:82:ef:a5:5e:32:2e:
         d6:9b:dd:fb:8a:26:02:d3:aa:f1:b6:b8:81:66:e7:c6:85:9a:
         fa:94:01:eb:79:34:db:52:91:00:82:a9:75:c0:32:f8:e1:86:
         13:b9:11:da
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKH2zWHiK/FGC+aKct8h7Y288a0QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDAwRThGMEY1QkNGMTU1OTg2QTY4RjA1NkRCRkQzQkFB
OTM5RkU3ODAeFw0yNDExMTEyMDIxMjBaFw0yNTExMTAyMDI2MjBaMDMxMTAvBgNV
BAMTKEU0RjFFM0RENkQ1NjAxNUI4QzA0MEZBOTEzNTMxRTA4QkEyRjkxMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvsCJg5yXyOwYXLApcA/wuY7ln
MOopwASXYU3Vv8lqEjTHLeazLCvvZ3QEptmEELMzJdYWEQ0PQHiSqcG4LBdXe4Vo
yHWxo1yLbJV+PVRB/30WsU1rW1WIOPVTBvWNBNXg0vl70nkFUwjHiweY3a/97JZl
MI+Bfxcz6VAVcrMPSuIpqVoc9ZeJxj3J/2ZIAm+SaAvEPs55WtwB2kwbt2ZtvMlS
hQDgb2UNROGSPd+Pvl9bbz6xyyVexGI1uxpK1Q45wiGZWXDEvpzDa59Y3FI7umB/
+AZEdbYTGofRf65wtAncuGK0io2fCdvMh6kR9xhYZgT47Pg3cJZ49/qTqX1VAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5PHj3W1WAVuMBA+pE1MeCLovkSEwHwYDVR0j
BBgwFoAUAA6PD1vPFVmGpo8Fbb/Tuqk5/ngwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjgxU245d2lDbm44QU5RckpNNmdSTEdpTVFvUlFkazVrVWJvZGZkWXF5
R1MvMC8wMDBFOEYwRjVCQ0YxNTU5ODZBNjhGMDU2REJGRDNCQUE5MzlGRTc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwMEU4RjBGNUJDRjE1NTk4
NkE2OEYwNTZEQkZEM0JBQTkzOUZFNzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4MVNuOXdpQ25uOEFOUXJKTTZnUkxHaU1Rb1JRZGs1a1Vib2RmZFlxeUdTLzAv
MzEzODM2MmUzMTM5MzMyZTMxMzczNjJlMzAyZjMyMzAyZDMzMzIyMDNkM2UyMDMy
MzgzMTM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS6wbAwDQYJKoZIhvcNAQELBQADggEBAAwuNmh7
Kbrhf3I0KOVUcdeg+4ROnt42ZXuzG2GuEfVV5UJP0clav+x15Ly5BGd9ImQpnSGW
b8YFyWOq+T7m4Y1hWeiHldeWcn7N/gsVLm6+UxOmXACtNvHMd5lX95FRad8dvNav
L4CmRwcghoikC2cqVZARfI/nM3twx/CddhCcQAIAUeg4zCrj+ndqvL48SORFRfAE
ittSWR/BDzQajatI9XnDQy7y6TRuyDhCA1+BCdxwSv3LMvpjWHunZpKqCmwztIaZ
UWcMXypbB6gB3a2mfYLvpV4yLtab3fuKJgLTqvG2uIFm58aFmvqUAet5NNtSkQCC
qXXAMvjhhhO5Edo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:52 2024 by rpki-client on console-fra.rpki-client.org