Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138362e3233362e38302e302f32302d3234203d3e203237363933.roa
File:                     3138362e3233362e38302e302f32302d3234203d3e203237363933.roa (raw, json)
Hash identifier:          8tCMYcUKo9fCVpK2+l4bri4+s+kEymjfjaUuyP0LHVw=
Subject key identifier:   C3:73:80:7E:11:F3:7D:1E:F3:C2:A0:4F:06:64:08:1A:52:E6:82:CD
Certificate issuer:       /CN=D0E128DF8234DC596D5CC92381FB1A2F9DF99876
Certificate serial:       3C3DC215886767D2724F4D2556D3E3C139687F23
Authority key identifier: D0:E1:28:DF:82:34:DC:59:6D:5C:C9:23:81:FB:1A:2F:9D:F9:98:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138362e3233362e38302e302f32302d3234203d3e203237363933.roa
Signing time:             Fri 19 Apr 2024 20:20:50 +0000
ROA not before:           Fri 19 Apr 2024 20:15:50 +0000
ROA not after:            Fri 18 Apr 2025 20:20:50 +0000
asID:                     27693
IP address blocks:        186.236.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.crl
                          rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 19:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:3d:c2:15:88:67:67:d2:72:4f:4d:25:56:d3:e3:c1:39:68:7f:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0E128DF8234DC596D5CC92381FB1A2F9DF99876
        Validity
            Not Before: Apr 19 20:15:50 2024 GMT
            Not After : Apr 18 20:20:50 2025 GMT
        Subject: CN=C373807E11F37D1EF3C2A04F0664081A52E682CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:57:29:04:43:52:d8:50:ff:c1:ac:a1:87:2f:
                    76:7f:2a:a9:a6:eb:af:d3:b1:14:ab:ec:4c:9d:c5:
                    56:10:ec:2f:bb:66:b6:a3:59:32:f6:d4:92:a4:6a:
                    ff:18:1a:83:aa:a3:78:f3:60:a4:3a:d4:ca:ba:11:
                    c4:d6:fb:d6:aa:ad:5b:35:2b:94:f5:b0:52:44:e8:
                    0a:1d:0b:51:a5:31:22:96:67:1b:49:d5:60:ab:dd:
                    52:ff:43:1c:f3:b5:56:30:35:2b:73:33:0e:7a:57:
                    34:84:43:de:e4:2b:f0:73:82:62:0f:fd:00:05:18:
                    7e:36:6d:b8:eb:87:78:0b:c6:24:59:e2:45:b1:96:
                    c0:e0:35:b7:ce:5f:25:94:c7:52:5a:cc:ea:68:ee:
                    53:10:35:32:cc:03:94:b9:f4:69:df:9f:88:be:da:
                    ee:c0:20:45:b2:6c:73:36:c0:7b:58:c2:f0:2e:86:
                    fb:79:86:3d:55:53:5d:cf:14:32:30:b2:48:06:ae:
                    b9:02:ae:26:8e:df:c3:de:8c:c9:ec:b9:4f:c6:57:
                    d5:aa:98:e9:a0:d6:fa:30:a4:1d:b9:a8:27:67:74:
                    5f:36:9a:76:3d:35:97:d8:e0:ee:59:4a:2c:06:f9:
                    30:37:b3:07:bb:49:12:55:95:4f:0a:10:39:dd:f2:
                    0f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:73:80:7E:11:F3:7D:1E:F3:C2:A0:4F:06:64:08:1A:52:E6:82:CD
            X509v3 Authority Key Identifier:
                keyid:D0:E1:28:DF:82:34:DC:59:6D:5C:C9:23:81:FB:1A:2F:9D:F9:98:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0E128DF8234DC596D5CC92381FB1A2F9DF99876.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3138362e3233362e38302e302f32302d3234203d3e203237363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:69:b1:01:ec:fe:78:09:8f:43:bf:68:24:63:2b:09:eb:94:
         b3:86:e0:6d:cc:d8:86:02:a7:56:7b:0e:8a:ed:58:35:d8:9a:
         a0:37:2a:e3:94:bb:40:f7:0e:30:ec:ea:14:37:c5:a9:11:a7:
         f7:44:ce:f3:a3:a5:fe:f5:5c:5c:f2:60:58:fa:3c:bc:cb:d3:
         47:df:f5:1b:98:76:83:71:96:97:59:2c:b2:48:a9:56:b0:b1:
         68:41:7e:58:17:e2:86:17:2a:4e:7e:fc:53:dc:85:26:ff:29:
         50:fa:06:9d:b5:a0:c8:75:3a:6e:a8:66:b9:74:1a:2a:21:79:
         34:00:94:8b:b4:cd:ac:41:d9:ca:4e:25:d7:a3:8b:7a:d3:d0:
         c6:1b:dd:a2:26:61:85:5c:68:84:4a:ac:3d:c8:9f:f1:c2:b4:
         7a:d5:39:ca:79:10:25:13:d5:f9:03:79:09:d4:60:ce:c5:11:
         ec:53:b9:3a:49:6a:a5:87:66:4f:41:7c:a9:12:a5:fa:59:62:
         2e:2b:46:32:44:4f:07:17:2a:59:2f:3c:a4:eb:00:51:ed:36:
         2b:1d:04:d1:4f:03:73:10:9f:82:30:02:8b:3d:cc:39:8b:69:
         0d:9d:14:40:59:92:72:9b:60:f4:94:74:6c:96:dd:e0:10:1e:
         b2:e0:c1:65
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPD3CFYhnZ9JyT00lVtPjwTlofyMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBFMTI4REY4MjM0REM1OTZENUNDOTIzODFGQjFBMkY5
REY5OTg3NjAeFw0yNDA0MTkyMDE1NTBaFw0yNTA0MTgyMDIwNTBaMDMxMTAvBgNV
BAMTKEMzNzM4MDdFMTFGMzdEMUVGM0MyQTA0RjA2NjQwODFBNTJFNjgyQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChVykEQ1LYUP/BrKGHL3Z/Kqmm
66/TsRSr7EydxVYQ7C+7ZrajWTL21JKkav8YGoOqo3jzYKQ61Mq6EcTW+9aqrVs1
K5T1sFJE6AodC1GlMSKWZxtJ1WCr3VL/QxzztVYwNStzMw56VzSEQ97kK/BzgmIP
/QAFGH42bbjrh3gLxiRZ4kWxlsDgNbfOXyWUx1JazOpo7lMQNTLMA5S59Gnfn4i+
2u7AIEWybHM2wHtYwvAuhvt5hj1VU13PFDIwskgGrrkCriaO38PejMnsuU/GV9Wq
mOmg1vowpB25qCdndF82mnY9NZfY4O5ZSiwG+TA3swe7SRJVlU8KEDnd8g9FAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUw3OAfhHzfR7zwqBPBmQIGlLmgs0wHwYDVR0j
BBgwFoAU0OEo34I03FltXMkjgfsaL535mHYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNldMZFo1c0J3NjNIREV2Z1E3QUNKdGRZU1FZRkQ0MWJkYzFVZk5pTGZX
VzYvMC9EMEUxMjhERjgyMzREQzU5NkQ1Q0M5MjM4MUZCMUEyRjlERjk5ODc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwRTEyOERGODIzNERDNTk2
RDVDQzkyMzgxRkIxQTJGOURGOTk4NzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZXTGRaNXNCdzYzSERFdmdRN0FDSnRkWVNRWUZENDFiZGMxVWZOaUxmV1c2LzAv
MzEzODM2MmUzMjMzMzYyZTM4MzAyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM3
MzYzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEuuxQMA0GCSqGSIb3DQEBCwUAA4IBAQAMabEB7P54
CY9Dv2gkYysJ65SzhuBtzNiGAqdWew6K7Vg12JqgNyrjlLtA9w4w7OoUN8WpEaf3
RM7zo6X+9Vxc8mBY+jy8y9NH3/UbmHaDcZaXWSyySKlWsLFoQX5YF+KGFypOfvxT
3IUm/ylQ+gadtaDIdTpuqGa5dBoqIXk0AJSLtM2sQdnKTiXXo4t609DGG92iJmGF
XGiESqw9yJ/xwrR61TnKeRAlE9X5A3kJ1GDOxRHsU7k6SWqlh2ZPQXypEqX6WWIu
K0YyRE8HFypZLzyk6wBR7TYrHQTRTwNzEJ+CMAKLPcw5i2kNnRRAWZJym2D0lHRs
lt3gEB6y4MFl
-----END CERTIFICATE-----
Generated at Sat Jun 1 20:06:35 2024 by rpki-client on console-fra.rpki-client.org