Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3138372e302e36342e302f31382d3234203d3e203232363839.roa
File:                     3138372e302e36342e302f31382d3234203d3e203232363839.roa (raw, json)
Hash identifier:          Ps0wadJv5myIZxPYOWmllv8TCPa+2IUBmjGV50Zc36g=
Subject key identifier:   D9:34:1A:73:DC:A8:47:0B:CD:F7:15:9D:42:21:B4:E7:5B:AC:4D:91
Certificate issuer:       /CN=B6DD0286E17B756E91475332E495995F85C36F08
Certificate serial:       41EAD62E43F8F3B3FFCF866D9BB0E879DAABEFF0
Authority key identifier: B6:DD:02:86:E1:7B:75:6E:91:47:53:32:E4:95:99:5F:85:C3:6F:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3138372e302e36342e302f31382d3234203d3e203232363839.roa
Signing time:             Fri 05 Apr 2024 01:35:16 +0000
ROA not before:           Fri 05 Apr 2024 01:30:16 +0000
ROA not after:            Fri 04 Apr 2025 01:35:16 +0000
asID:                     22689
IP address blocks:        187.0.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.crl
                          rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:29:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ea:d6:2e:43:f8:f3:b3:ff:cf:86:6d:9b:b0:e8:79:da:ab:ef:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6DD0286E17B756E91475332E495995F85C36F08
        Validity
            Not Before: Apr  5 01:30:16 2024 GMT
            Not After : Apr  4 01:35:16 2025 GMT
        Subject: CN=D9341A73DCA8470BCDF7159D4221B4E75BAC4D91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:98:30:06:f7:44:ca:f4:b2:2c:3e:43:5a:22:
                    f5:86:c5:52:66:2b:fc:82:ff:8e:63:a6:fe:d9:f2:
                    01:43:bb:e2:a9:53:81:45:7e:32:0b:59:33:fb:fd:
                    f3:c7:b0:3c:bc:a3:54:f8:73:5e:22:6b:57:d5:dc:
                    c1:a8:21:2d:fc:d9:9c:69:a9:70:ea:27:27:77:9b:
                    55:31:99:e0:4d:ff:cb:7e:ab:e0:13:12:10:23:25:
                    2b:23:5b:38:89:0a:bf:7a:04:a0:f4:d0:b6:69:ec:
                    2b:97:71:29:b3:ed:c3:6c:78:ec:e5:a3:35:4e:90:
                    e6:8b:d4:ef:fd:96:c8:d7:7b:f8:54:0d:ae:28:50:
                    57:e1:b0:79:c4:57:96:0f:f0:82:f4:a9:90:72:23:
                    6e:af:77:58:40:a9:a4:53:6c:10:a4:5d:a3:14:7d:
                    ee:4e:a4:74:f8:e4:05:29:2a:f4:f9:5d:b1:92:42:
                    62:a5:03:b6:eb:b5:34:53:ac:2b:0e:5b:f5:21:0d:
                    0e:49:30:8c:c5:05:1c:2b:3d:c5:81:15:b4:e8:7d:
                    00:86:4b:be:b4:53:e8:8f:61:19:6c:4c:51:2c:a0:
                    0a:64:97:5c:44:ba:e7:fb:1a:8a:a8:49:d9:2e:ab:
                    58:de:24:ab:26:bb:b5:9f:97:05:57:eb:35:fa:63:
                    81:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:34:1A:73:DC:A8:47:0B:CD:F7:15:9D:42:21:B4:E7:5B:AC:4D:91
            X509v3 Authority Key Identifier:
                keyid:B6:DD:02:86:E1:7B:75:6E:91:47:53:32:E4:95:99:5F:85:C3:6F:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/B6DD0286E17B756E91475332E495995F85C36F08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6DD0286E17B756E91475332E495995F85C36F08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/1/3138372e302e36342e302f31382d3234203d3e203232363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         15:7c:55:5a:34:99:d7:42:60:f9:84:6a:a2:f1:da:db:a6:80:
         07:ab:64:b1:ca:43:2f:b2:17:fb:bf:9b:0e:fb:59:57:34:64:
         96:b7:73:8c:44:e0:9e:eb:29:8b:fd:b9:e1:7c:bc:04:a5:77:
         82:1b:d7:db:dc:f0:f0:18:3e:98:75:68:5c:74:7e:bd:06:cb:
         53:db:d5:ba:07:38:78:03:42:2b:8f:7d:95:ae:de:01:ba:2b:
         e4:01:52:58:a6:34:75:5a:8c:f0:08:77:7b:ca:30:d7:93:d9:
         d6:2b:b5:9e:59:30:4f:5a:ad:06:07:77:d3:fd:f6:87:09:a3:
         ef:83:f2:8c:6c:df:d4:70:80:3e:26:7f:2c:ac:64:73:b5:8e:
         8c:02:83:23:df:ad:df:b5:51:05:01:56:43:e1:6f:b7:69:b1:
         07:b0:9c:ee:8d:f6:9e:16:ec:25:11:a6:4c:8c:1c:70:7c:12:
         82:77:3f:9a:df:25:8e:c8:b4:eb:e5:91:6f:f4:3e:6f:ce:74:
         35:d8:45:09:e3:64:66:24:52:c7:61:d3:73:45:28:ee:a8:de:
         6f:73:b9:c0:fe:c9:74:6d:49:a4:2d:9a:ea:e0:a3:e4:f5:a6:
         ca:d3:03:db:5b:c1:56:f8:9f:12:0c:2b:8d:4e:ef:b3:45:a8:
         e7:2f:33:1a
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUQerWLkP487P/z4Ztm7Doedqr7/AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZERDAyODZFMTdCNzU2RTkxNDc1MzMyRTQ5NTk5NUY4
NUMzNkYwODAeFw0yNDA0MDUwMTMwMTZaFw0yNTA0MDQwMTM1MTZaMDMxMTAvBgNV
BAMTKEQ5MzQxQTczRENBODQ3MEJDREY3MTU5RDQyMjFCNEU3NUJBQzREOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsmDAG90TK9LIsPkNaIvWGxVJm
K/yC/45jpv7Z8gFDu+KpU4FFfjILWTP7/fPHsDy8o1T4c14ia1fV3MGoIS382Zxp
qXDqJyd3m1UxmeBN/8t+q+ATEhAjJSsjWziJCr96BKD00LZp7CuXcSmz7cNseOzl
ozVOkOaL1O/9lsjXe/hUDa4oUFfhsHnEV5YP8IL0qZByI26vd1hAqaRTbBCkXaMU
fe5OpHT45AUpKvT5XbGSQmKlA7brtTRTrCsOW/UhDQ5JMIzFBRwrPcWBFbTofQCG
S760U+iPYRlsTFEsoApkl1xEuuf7GoqoSdkuq1jeJKsmu7WflwVX6zX6Y4E1AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQU2TQac9yoRwvN9xWdQiG051usTZEwHwYDVR0j
BBgwFoAUtt0ChuF7dW6RR1My5JWZX4XDbwgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0VtRFBqeWR2YTdlNHVkZHhMdDlhY21ONjJ4UjE1ZVYzVU1zZ3hWVWs3
NlMvMS9CNkREMDI4NkUxN0I3NTZFOTE0NzUzMzJFNDk1OTk1Rjg1QzM2RjA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I2REQwMjg2RTE3Qjc1NkU5
MTQ3NTMzMkU0OTU5OTVGODVDMzZGMDguY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdFbURQanlkdmE3ZTR1ZGR4THQ5YWNtTjYyeFIxNWVWM1VNc2d4VlVrNzZTLzEv
MzEzODM3MmUzMDJlMzYzNDJlMzAyZjMxMzgyZDMyMzQyMDNkM2UyMDMyMzIzNjM4
Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAa7AEAwDQYJKoZIhvcNAQELBQADggEBABV8VVo0mddCYPmE
aqLx2tumgAerZLHKQy+yF/u/mw77WVc0ZJa3c4xE4J7rKYv9ueF8vASld4Ib19vc
8PAYPph1aFx0fr0Gy1Pb1boHOHgDQiuPfZWu3gG6K+QBUlimNHVajPAId3vKMNeT
2dYrtZ5ZME9arQYHd9P99ocJo++D8oxs39RwgD4mfyysZHO1jowCgyPfrd+1UQUB
VkPhb7dpsQewnO6N9p4W7CURpkyMHHB8EoJ3P5rfJY7ItOvlkW/0Pm/OdDXYRQnj
ZGYkUsdh03NFKO6o3m9zucD+yXRtSaQtmurgo+T1psrTA9tbwVb4nxIMK41O77NF
qOcvMxo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:19 2024 by rpki-client on console-ams.rpki-client.org