Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/3138362e3233332e3131342e302f32342d3234203d3e20323636313831.roa
File:                     3138362e3233332e3131342e302f32342d3234203d3e20323636313831.roa (raw, json)
Hash identifier:          5NlcjiQz1RmdgURO4XuPTRN3vb5NOXzWBDFP6ycHfnI=
Subject key identifier:   9F:D1:E1:16:3A:75:2C:5E:B7:51:CA:B9:B0:80:18:FD:48:DD:A8:F3
Certificate issuer:       /CN=FFC4303836B932A4DA8D15E4873FC94402312A8C
Certificate serial:       41F5D7BF42C0D909EFF007F19107795B452CCCCB
Authority key identifier: FF:C4:30:38:36:B9:32:A4:DA:8D:15:E4:87:3F:C9:44:02:31:2A:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/3138362e3233332e3131342e302f32342d3234203d3e20323636313831.roa
Signing time:             Fri 19 Jul 2024 16:59:33 +0000
ROA not before:           Fri 19 Jul 2024 16:54:33 +0000
ROA not after:            Fri 18 Jul 2025 16:59:33 +0000
asID:                     266181
IP address blocks:        186.233.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.crl
                          rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f5:d7:bf:42:c0:d9:09:ef:f0:07:f1:91:07:79:5b:45:2c:cc:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFC4303836B932A4DA8D15E4873FC94402312A8C
        Validity
            Not Before: Jul 19 16:54:33 2024 GMT
            Not After : Jul 18 16:59:33 2025 GMT
        Subject: CN=9FD1E1163A752C5EB751CAB9B08018FD48DDA8F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bb:3e:ab:d4:c0:e0:79:a9:a3:8a:2b:d5:b0:
                    e3:94:27:01:dd:5c:a6:5c:62:d2:c0:f5:06:f1:d2:
                    2d:83:b1:25:d1:90:11:ff:e5:a4:cd:3e:ad:ae:99:
                    3e:ba:c4:91:4a:b8:ef:6a:14:82:ab:54:44:dd:22:
                    e2:bd:95:5a:0f:4c:81:aa:a4:5c:43:d1:96:50:12:
                    af:2c:9b:a6:64:b0:07:73:0c:a2:0c:5a:bd:fe:4b:
                    dd:06:c7:93:7b:0b:47:7b:7b:b5:c3:a8:70:57:8b:
                    be:11:c5:5d:06:1f:25:f9:68:6b:54:dc:77:70:d7:
                    c1:f7:09:23:38:df:8a:79:e3:d3:91:a5:54:39:7e:
                    82:dc:17:1d:97:35:31:cf:4a:ac:65:f9:b5:cc:a7:
                    97:9e:8a:a1:77:a5:38:60:74:a8:cb:96:44:93:56:
                    33:2f:84:7b:55:98:1c:ee:5a:80:21:4b:b6:95:28:
                    2f:fd:95:c0:a2:3e:be:ef:32:58:58:f7:b9:6f:54:
                    ee:9c:be:21:91:5e:1c:82:4d:1c:1c:a8:1f:60:b8:
                    9d:6f:39:5f:40:9b:95:4d:6b:dd:2f:fc:81:e3:69:
                    5c:ea:ba:54:5d:d9:7f:ec:87:1b:68:63:5f:47:24:
                    d6:5e:c0:04:d1:60:57:27:cd:85:75:b1:99:be:08:
                    f6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D1:E1:16:3A:75:2C:5E:B7:51:CA:B9:B0:80:18:FD:48:DD:A8:F3
            X509v3 Authority Key Identifier:
                keyid:FF:C4:30:38:36:B9:32:A4:DA:8D:15:E4:87:3F:C9:44:02:31:2A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/FFC4303836B932A4DA8D15E4873FC94402312A8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFC4303836B932A4DA8D15E4873FC94402312A8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/3138362e3233332e3131342e302f32342d3234203d3e20323636313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:0e:5a:78:13:c4:28:f4:77:52:ae:c3:e3:c1:aa:fb:97:8d:
         ef:f4:f9:44:23:84:c4:2e:df:34:df:c2:6f:a6:57:27:b0:23:
         0f:cb:50:6c:47:d4:0f:4a:3d:4c:8c:bc:ad:12:d5:85:fd:5a:
         46:fd:a0:8f:ff:8d:33:49:bb:6c:a3:7f:bd:a5:7a:60:76:07:
         30:c9:b8:66:ee:e0:95:ff:c9:3e:5a:81:b1:a4:14:f7:57:ad:
         f7:10:7f:13:dd:1f:5c:4c:d3:a4:6b:ee:93:e1:de:2c:51:81:
         b8:94:e0:5f:6d:85:9a:27:7b:38:f8:a4:3e:2b:30:4c:e6:d1:
         84:07:30:b3:98:d5:a2:48:dd:f1:d1:ef:39:59:a8:11:93:58:
         0c:e0:1e:be:74:c4:83:a2:d6:f1:6e:24:d8:6e:60:b0:f4:c7:
         6a:5b:b1:83:1c:6a:61:2f:8c:2d:a8:df:54:18:d1:b8:82:23:
         3b:5b:2b:a3:cd:0a:eb:52:8a:1a:7b:e3:31:22:d9:5f:ce:9f:
         83:49:ad:ec:40:e5:6a:9b:bf:8c:26:24:a2:4b:df:de:0d:63:
         b5:82:a3:c9:45:64:f3:d9:9c:bd:32:67:dc:37:9d:b7:ce:79:
         69:4e:7b:0a:f8:56:a1:28:65:38:19:20:18:32:5e:c7:52:1d:
         3b:13:0b:02
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQfXXv0LA2Qnv8AfxkQd5W0UszMswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkZDNDMwMzgzNkI5MzJBNERBOEQxNUU0ODczRkM5NDQw
MjMxMkE4QzAeFw0yNDA3MTkxNjU0MzNaFw0yNTA3MTgxNjU5MzNaMDMxMTAvBgNV
BAMTKDlGRDFFMTE2M0E3NTJDNUVCNzUxQ0FCOUIwODAxOEZENDhEREE4RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWuz6r1MDgeamjiivVsOOUJwHd
XKZcYtLA9Qbx0i2DsSXRkBH/5aTNPq2umT66xJFKuO9qFIKrVETdIuK9lVoPTIGq
pFxD0ZZQEq8sm6ZksAdzDKIMWr3+S90Gx5N7C0d7e7XDqHBXi74RxV0GHyX5aGtU
3Hdw18H3CSM434p549ORpVQ5foLcFx2XNTHPSqxl+bXMp5eeiqF3pThgdKjLlkST
VjMvhHtVmBzuWoAhS7aVKC/9lcCiPr7vMlhY97lvVO6cviGRXhyCTRwcqB9guJ1v
OV9Am5VNa90v/IHjaVzqulRd2X/shxtoY19HJNZewATRYFcnzYV1sZm+CPbVAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUn9HhFjp1LF63Ucq5sIAY/UjdqPMwHwYDVR0j
BBgwFoAU/8QwODa5MqTajRXkhz/JRAIxKowwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1dRdUhLajNpVHBOdGprZDUxOXA1NnFTSHpGWEx3YlUzTjJhVHNGVU52
bTUvMC9GRkM0MzAzODM2QjkzMkE0REE4RDE1RTQ4NzNGQzk0NDAyMzEyQThDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGQzQzMDM4MzZCOTMyQTRE
QThEMTVFNDg3M0ZDOTQ0MDIzMTJBOEMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdXUXVIS2ozaVRwTnRqa2Q1MTlwNTZxU0h6RlhMd2JVM04yYVRzRlVOdm01LzAv
MzEzODM2MmUzMjMzMzMyZTMxMzEzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNjMxMzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALrpcjANBgkqhkiG9w0BAQsFAAOCAQEAfQ5a
eBPEKPR3Uq7D48Gq+5eN7/T5RCOExC7fNN/Cb6ZXJ7AjD8tQbEfUD0o9TIy8rRLV
hf1aRv2gj/+NM0m7bKN/vaV6YHYHMMm4Zu7glf/JPlqBsaQU91et9xB/E90fXEzT
pGvuk+HeLFGBuJTgX22Fmid7OPikPiswTObRhAcws5jVokjd8dHvOVmoEZNYDOAe
vnTEg6LW8W4k2G5gsPTHaluxgxxqYS+MLajfVBjRuIIjO1sro80K61KKGnvjMSLZ
X86fg0mt7EDlapu/jCYkokvf3g1jtYKjyUVk89mcvTJn3Dedt855aU57CvhWoShl
OBkgGDJex1IdOxMLAg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:07 2024 by rpki-client on console-ams.rpki-client.org