Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138362e3233362e36342e302f32302d3234203d3e203237363933.roa
File:                     3138362e3233362e36342e302f32302d3234203d3e203237363933.roa (raw, json)
Hash identifier:          7If2e62te2XZwTfBSV2yfegD4f76T7lTntPQz9Vp4A8=
Subject key identifier:   6D:A0:E2:B0:95:35:82:7D:4B:21:72:5E:64:C5:4A:81:35:E1:8D:FD
Certificate issuer:       /CN=D0E128DF8234DC596D5CC92381FB1A2F9DF99876
Certificate serial:       411658EC1CA8EFC10D11D33B9039C793528231EB
Authority key identifier: D0:E1:28:DF:82:34:DC:59:6D:5C:C9:23:81:FB:1A:2F:9D:F9:98:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138362e3233362e36342e302f32302d3234203d3e203237363933.roa
Signing time:             Fri 19 Apr 2024 20:20:45 +0000
ROA not before:           Fri 19 Apr 2024 20:15:45 +0000
ROA not after:            Fri 18 Apr 2025 20:20:45 +0000
asID:                     27693
IP address blocks:        186.236.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.crl
                          rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 01:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:16:58:ec:1c:a8:ef:c1:0d:11:d3:3b:90:39:c7:93:52:82:31:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0E128DF8234DC596D5CC92381FB1A2F9DF99876
        Validity
            Not Before: Apr 19 20:15:45 2024 GMT
            Not After : Apr 18 20:20:45 2025 GMT
        Subject: CN=6DA0E2B09535827D4B21725E64C54A8135E18DFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3e:78:8f:5c:58:da:18:9a:ae:37:4b:38:04:
                    b5:fb:97:10:26:ed:73:7d:3e:8b:ef:59:a5:8c:59:
                    65:55:9d:f2:39:36:e7:db:b1:3a:54:14:03:c7:07:
                    19:75:e2:87:ca:46:90:17:0e:51:1c:f4:e8:59:e9:
                    5b:6e:bb:d2:ee:c0:d4:90:dd:b0:1f:22:05:30:0a:
                    da:77:bb:f0:88:67:0c:9f:8c:26:3d:7b:a9:82:2a:
                    26:10:68:ed:e9:63:4d:02:d4:47:98:2b:59:75:48:
                    50:05:26:c6:1f:14:2b:42:2a:50:88:78:14:b5:2f:
                    7a:8e:46:aa:58:e1:fe:16:ce:b1:9c:ea:a6:04:81:
                    7f:54:3c:08:aa:8f:31:c7:71:4b:2a:ec:b0:20:40:
                    26:e3:85:4c:23:2b:75:34:42:56:20:63:6f:d1:3d:
                    01:06:1a:3c:5e:3f:fc:74:ad:3a:d3:e6:93:72:63:
                    a3:09:e2:9e:01:e0:5a:be:7f:20:4e:fc:d4:58:1c:
                    cc:18:48:cf:49:d0:68:cc:c5:c9:38:e0:4e:25:80:
                    91:49:45:4c:c8:20:8b:dd:5d:f8:4e:72:29:02:6a:
                    e0:d9:2b:73:8e:bc:9d:54:08:bb:18:a6:c1:68:ed:
                    d5:2f:73:36:5b:6c:59:e0:db:67:c7:15:81:c1:28:
                    2b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A0:E2:B0:95:35:82:7D:4B:21:72:5E:64:C5:4A:81:35:E1:8D:FD
            X509v3 Authority Key Identifier:
                keyid:D0:E1:28:DF:82:34:DC:59:6D:5C:C9:23:81:FB:1A:2F:9D:F9:98:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138362e3233362e36342e302f32302d3234203d3e203237363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         37:72:90:b9:a1:e9:de:0d:b7:2e:ba:34:f8:c9:7f:2b:2f:10:
         27:2c:9c:47:e0:2c:69:74:14:7f:44:c0:6a:e0:57:54:04:2f:
         56:e0:33:c9:f8:6d:6a:3c:df:e3:84:a9:83:6c:06:88:51:97:
         6a:87:32:9c:7b:ec:81:7e:c2:be:be:54:63:f1:a7:b0:08:0f:
         ab:3c:0b:fa:94:5a:9a:4d:00:20:c3:4f:06:8f:4d:14:1a:2a:
         97:a1:01:48:7a:9a:7c:26:e4:19:f6:49:0f:40:13:a0:be:90:
         27:b4:d5:63:bd:bd:3a:31:23:1a:f9:2c:85:0a:5e:af:47:eb:
         88:9f:81:d7:bd:8a:eb:da:7f:c9:26:8e:37:23:71:2d:e7:c5:
         09:74:92:9f:2d:ab:d5:b7:92:fe:a3:8c:3a:6f:01:d7:b5:7b:
         b7:56:69:58:54:f0:74:56:96:1e:1a:ba:d3:78:c7:6d:49:0f:
         80:9d:4b:74:32:1c:a7:9d:4d:46:90:f6:2f:d6:3e:eb:f4:16:
         d3:5e:0a:76:02:10:d0:c0:34:32:2f:6f:76:63:41:0c:c4:5e:
         67:94:39:56:d0:1c:bf:d5:6f:83:55:bb:aa:f5:28:cd:c9:98:
         24:94:59:70:60:c9:e6:9e:e6:fb:c4:0c:20:83:f0:c7:3b:f7:
         aa:59:a7:80
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQRZY7Byo78ENEdM7kDnHk1KCMeswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBFMTI4REY4MjM0REM1OTZENUNDOTIzODFGQjFBMkY5
REY5OTg3NjAeFw0yNDA0MTkyMDE1NDVaFw0yNTA0MTgyMDIwNDVaMDMxMTAvBgNV
BAMTKDZEQTBFMkIwOTUzNTgyN0Q0QjIxNzI1RTY0QzU0QTgxMzVFMThERkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgPniPXFjaGJquN0s4BLX7lxAm
7XN9PovvWaWMWWVVnfI5NufbsTpUFAPHBxl14ofKRpAXDlEc9OhZ6Vtuu9LuwNSQ
3bAfIgUwCtp3u/CIZwyfjCY9e6mCKiYQaO3pY00C1EeYK1l1SFAFJsYfFCtCKlCI
eBS1L3qORqpY4f4WzrGc6qYEgX9UPAiqjzHHcUsq7LAgQCbjhUwjK3U0QlYgY2/R
PQEGGjxeP/x0rTrT5pNyY6MJ4p4B4Fq+fyBO/NRYHMwYSM9J0GjMxck44E4lgJFJ
RUzIIIvdXfhOcikCauDZK3OOvJ1UCLsYpsFo7dUvczZbbFng22fHFYHBKCvdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUbaDisJU1gn1LIXJeZMVKgTXhjf0wHwYDVR0j
BBgwFoAU0OEo34I03FltXMkjgfsaL535mHYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNldMZFo1c0J3NjNIREV2Z1E3QUNKdGRZU1FZRkQ0MWJkYzFVZk5pTGZX
VzYvMC9EMEUxMjhERjgyMzREQzU5NkQ1Q0M5MjM4MUZCMUEyRjlERjk5ODc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwRTEyOERGODIzNERDNTk2
RDVDQzkyMzgxRkIxQTJGOURGOTk4NzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZXTGRaNXNCdzYzSERFdmdRN0FDSnRkWVNRWUZENDFiZGMxVWZOaUxmV1c2LzAv
MzEzODM2MmUzMjMzMzYyZTM2MzQyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM3
MzYzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEuuxAMA0GCSqGSIb3DQEBCwUAA4IBAQA3cpC5oene
DbcuujT4yX8rLxAnLJxH4CxpdBR/RMBq4FdUBC9W4DPJ+G1qPN/jhKmDbAaIUZdq
hzKce+yBfsK+vlRj8aewCA+rPAv6lFqaTQAgw08Gj00UGiqXoQFIepp8JuQZ9kkP
QBOgvpAntNVjvb06MSMa+SyFCl6vR+uIn4HXvYrr2n/JJo43I3Et58UJdJKfLavV
t5L+o4w6bwHXtXu3VmlYVPB0VpYeGrrTeMdtSQ+AnUt0MhynnU1GkPYv1j7r9BbT
Xgp2AhDQwDQyL292Y0EMxF5nlDlW0By/1W+DVbuq9SjNyZgklFlwYMnmnub7xAwg
g/DHO/eqWaeA
-----END CERTIFICATE-----
Generated at Tue Jun 18 00:26:41 2024 by rpki-client on console-ams.rpki-client.org