Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230302e302f32312d3231203d3e20323633313436.roa
File:                     3138372e38362e3230302e302f32312d3231203d3e20323633313436.roa (raw, json)
Hash identifier:          qC59FgaG1y7Bz8NB3KL1L2ZiQpgUNuiPqRiz+HjlJWM=
Subject key identifier:   55:D1:0F:17:38:84:84:AB:7A:70:BC:19:2F:53:47:4D:39:8A:8D:70
Certificate issuer:       /CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
Certificate serial:       2042D7E08675797DDAB752717EDA5A14F0579734
Authority key identifier: E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230302e302f32312d3231203d3e20323633313436.roa
Signing time:             Thu 04 Apr 2024 07:28:56 +0000
ROA not before:           Thu 04 Apr 2024 07:23:56 +0000
ROA not after:            Thu 03 Apr 2025 07:28:56 +0000
asID:                     263146
IP address blocks:        187.86.200.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl
                          rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:42:d7:e0:86:75:79:7d:da:b7:52:71:7e:da:5a:14:f0:57:97:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
        Validity
            Not Before: Apr  4 07:23:56 2024 GMT
            Not After : Apr  3 07:28:56 2025 GMT
        Subject: CN=55D10F17388484AB7A70BC192F53474D398A8D70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f5:e4:95:ad:31:ba:8d:90:78:c5:38:64:af:
                    20:3f:14:80:9a:2e:a7:2e:ff:52:90:36:a6:78:f2:
                    80:0e:0e:23:0e:f3:eb:ed:6f:5e:51:28:a1:ea:d3:
                    a4:dd:6a:3f:f8:f2:48:d4:65:80:6f:18:52:35:50:
                    46:61:82:50:aa:f1:5d:6e:89:14:09:a2:fe:b9:ad:
                    06:7f:96:cc:15:c5:bd:97:f8:6d:30:da:d3:dd:50:
                    3b:0a:28:b2:94:87:4f:e5:e8:e5:45:70:ac:23:9e:
                    04:f1:4a:26:b4:32:3a:b6:85:a1:b4:1a:88:85:d6:
                    20:09:6f:39:8b:d8:a7:6f:08:67:58:58:10:6d:8a:
                    bc:c6:55:c4:b7:4f:c4:98:b1:f4:21:95:22:84:c0:
                    dd:d8:06:c6:7d:69:49:18:e8:64:7f:21:9e:b1:ce:
                    2d:d7:84:4d:0b:86:77:03:05:19:ba:de:ef:8b:b8:
                    dd:99:aa:e8:64:f9:6c:26:9a:d1:2a:de:69:e6:b0:
                    6a:a4:6f:5d:3f:4d:8d:fb:05:66:63:07:06:41:8e:
                    00:ac:43:80:e2:6b:1c:0e:31:fa:c6:0c:97:22:43:
                    21:ca:96:ca:99:bf:e3:f5:bb:8a:ae:12:99:a6:f6:
                    c9:a9:16:9b:69:66:76:46:85:c0:ec:b4:51:e0:2d:
                    b0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D1:0F:17:38:84:84:AB:7A:70:BC:19:2F:53:47:4D:39:8A:8D:70
            X509v3 Authority Key Identifier:
                keyid:E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/3138372e38362e3230302e302f32312d3231203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7a:7e:c6:3b:63:61:f7:a3:fc:d0:65:9b:be:a6:18:ae:53:b7:
         b6:89:b2:31:33:66:b2:a4:f4:2b:73:db:1f:a7:56:03:d6:78:
         2e:50:9c:5d:fb:7a:fd:05:83:55:f6:87:ff:f2:38:90:52:31:
         86:8d:e5:49:7d:9a:9a:86:85:0d:ee:57:e5:ed:89:61:71:49:
         ba:80:41:32:0f:f6:8d:db:53:06:9c:29:f8:b7:85:39:ac:80:
         0b:ec:8f:af:a0:11:b4:25:f0:f8:a6:ac:15:f9:98:70:c0:f8:
         c5:55:58:60:ea:4f:83:ae:fc:3e:a2:dc:18:69:1a:d0:1d:37:
         4f:49:29:74:7a:77:b0:94:4a:dc:11:05:bc:85:82:3f:ff:a5:
         e5:07:a9:55:72:a5:f7:e4:28:7d:24:15:b9:4f:49:33:86:ed:
         3d:21:f0:ae:a1:25:b9:16:a6:76:a4:97:56:26:dc:7a:8c:81:
         50:f1:eb:52:7a:70:da:86:ea:49:eb:77:87:28:97:f4:14:cc:
         da:75:0c:9a:09:1e:76:41:d4:54:11:8b:7e:ea:c5:d0:5d:c3:
         32:71:63:8b:4d:1a:99:02:e5:54:0e:ff:9d:db:3a:08:a0:9e:
         8e:b5:ee:72:1e:8f:67:dc:e4:8a:11:7a:62:67:b9:3e:4a:77:
         7e:e6:d7:4f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIELX4IZ1eX3at1JxftpaFPBXlzQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTZGQUUzQTdBNzkwMjlCNUY1M0YyRTFBOTQwQjE5NEZF
OUIzRjQ5MzAeFw0yNDA0MDQwNzIzNTZaFw0yNTA0MDMwNzI4NTZaMDMxMTAvBgNV
BAMTKDU1RDEwRjE3Mzg4NDg0QUI3QTcwQkMxOTJGNTM0NzREMzk4QThENzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC89eSVrTG6jZB4xThkryA/FICa
Lqcu/1KQNqZ48oAODiMO8+vtb15RKKHq06Tdaj/48kjUZYBvGFI1UEZhglCq8V1u
iRQJov65rQZ/lswVxb2X+G0w2tPdUDsKKLKUh0/l6OVFcKwjngTxSia0Mjq2haG0
GoiF1iAJbzmL2KdvCGdYWBBtirzGVcS3T8SYsfQhlSKEwN3YBsZ9aUkY6GR/IZ6x
zi3XhE0LhncDBRm63u+LuN2Zquhk+WwmmtEq3mnmsGqkb10/TY37BWZjBwZBjgCs
Q4DiaxwOMfrGDJciQyHKlsqZv+P1u4quEpmm9smpFptpZnZGhcDstFHgLbBxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUVdEPFziEhKt6cLwZL1NHTTmKjXAwHwYDVR0j
BBgwFoAU5vrjp6eQKbX1Py4alAsZT+mz9JMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN05SZFFOYURVYlQ3RDF0Z29TeFJuaEw5MVp5SzZFU1dHS1ZHU2huSHhX
Z1AvMS9FNkZBRTNBN0E3OTAyOUI1RjUzRjJFMUE5NDBCMTk0RkU5QjNGNDkzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2RkFFM0E3QTc5MDI5QjVG
NTNGMkUxQTk0MEIxOTRGRTlCM0Y0OTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdOUmRRTmFEVWJUN0QxdGdvU3hSbmhMOTFaeUs2RVNXR0tWR1Nobkh4V2dQLzEv
MzEzODM3MmUzODM2MmUzMjMwMzAyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM2
MzMzMTM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO7VsgwDQYJKoZIhvcNAQELBQADggEBAHp+xjtj
Yfej/NBlm76mGK5Tt7aJsjEzZrKk9Ctz2x+nVgPWeC5QnF37ev0Fg1X2h//yOJBS
MYaN5Ul9mpqGhQ3uV+XtiWFxSbqAQTIP9o3bUwacKfi3hTmsgAvsj6+gEbQl8Pim
rBX5mHDA+MVVWGDqT4Ou/D6i3BhpGtAdN09JKXR6d7CUStwRBbyFgj//peUHqVVy
pffkKH0kFblPSTOG7T0h8K6hJbkWpnakl1Ym3HqMgVDx61J6cNqG6knrd4col/QU
zNp1DJoJHnZB1FQRi37qxdBdwzJxY4tNGpkC5VQO/53bOgigno617nIej2fc5IoR
emJnuT5Kd37m108=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:38 2024 by rpki-client on console-ams.rpki-client.org