Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/3138312e3137342e3234342e302f32322d3234203d3e20323731343533.roa
File:                     3138312e3137342e3234342e302f32322d3234203d3e20323731343533.roa (raw, json)
Hash identifier:          npFoKIz/TCvCKewLfRYUg7DQy5HUlUs/qrEBF02VWI4=
Subject key identifier:   C2:21:92:19:35:05:29:55:FA:81:E2:3A:54:57:FF:7B:D9:B5:C4:5E
Certificate issuer:       /CN=86B866A596E8D1E4F9F450CD36DE327C951D6EB9
Certificate serial:       358700C2B1EFBDC56C686FB577ACAB40FB7465F1
Authority key identifier: 86:B8:66:A5:96:E8:D1:E4:F9:F4:50:CD:36:DE:32:7C:95:1D:6E:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/3138312e3137342e3234342e302f32322d3234203d3e20323731343533.roa
Signing time:             Wed 03 Apr 2024 19:44:47 +0000
ROA not before:           Wed 03 Apr 2024 19:39:47 +0000
ROA not after:            Wed 02 Apr 2025 19:44:47 +0000
asID:                     271453
IP address blocks:        181.174.244.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl
                          rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:87:00:c2:b1:ef:bd:c5:6c:68:6f:b5:77:ac:ab:40:fb:74:65:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86B866A596E8D1E4F9F450CD36DE327C951D6EB9
        Validity
            Not Before: Apr  3 19:39:47 2024 GMT
            Not After : Apr  2 19:44:47 2025 GMT
        Subject: CN=C221921935052955FA81E23A5457FF7BD9B5C45E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e8:74:a6:fe:71:ac:54:60:db:63:8b:d3:4d:
                    c1:d2:51:45:c0:58:f1:a2:bf:9a:26:e6:41:92:e7:
                    c3:23:ec:42:17:14:ef:19:8b:6f:03:03:d7:47:a2:
                    96:31:79:88:39:a0:f3:a7:b5:4a:5e:cd:34:5f:22:
                    96:66:c3:fb:6b:da:f1:05:40:9e:c0:71:7e:aa:6b:
                    46:06:ce:c3:03:09:b9:cf:d0:8a:9c:72:fa:57:d5:
                    4a:a7:bc:5d:f7:89:19:fd:78:6d:b6:a6:df:b8:c4:
                    25:86:ae:8d:2c:be:71:5e:85:50:90:47:be:9e:63:
                    20:e8:41:32:4b:10:6c:32:88:ad:f9:be:e7:13:d3:
                    36:5d:ad:e0:94:c6:49:9a:48:99:3e:96:49:70:3b:
                    af:b3:7e:7d:48:17:b1:9c:34:1f:96:b2:f3:06:f3:
                    ed:2c:b9:9d:30:00:c2:d9:ea:24:ff:7c:05:94:fa:
                    79:87:35:4a:9f:ce:c6:e5:77:9a:aa:91:3f:ac:c2:
                    f4:8d:91:4d:18:9b:28:cb:c2:b3:22:31:d3:4a:85:
                    cf:27:12:17:fb:21:d8:ec:8e:f7:e5:d3:35:6f:4b:
                    7c:d0:29:11:ed:07:1a:86:65:f1:b4:17:2e:62:49:
                    8d:06:fc:ce:da:dd:eb:70:5a:16:42:bb:bb:a3:2d:
                    4d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:21:92:19:35:05:29:55:FA:81:E2:3A:54:57:FF:7B:D9:B5:C4:5E
            X509v3 Authority Key Identifier:
                keyid:86:B8:66:A5:96:E8:D1:E4:F9:F4:50:CD:36:DE:32:7C:95:1D:6E:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86B866A596E8D1E4F9F450CD36DE327C951D6EB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7pAS8QMvK59yWPRFxfaRZUqeCntcyvkXC3YiXL1PqUzK/1/3138312e3137342e3234342e302f32322d3234203d3e20323731343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:3f:a3:b3:fa:98:6d:c4:cd:e2:31:60:56:a8:3a:72:8d:fa:
         86:35:e6:47:59:46:2e:75:ec:a8:8a:39:ab:36:a1:62:bc:80:
         c2:53:0d:e0:80:c9:33:40:fa:40:ff:2f:cb:93:fc:ae:d4:38:
         12:e1:3e:29:56:43:f7:13:21:61:96:f6:d6:be:a2:f7:a9:f1:
         82:62:04:dd:b2:fd:e6:17:6a:9d:83:2f:09:dd:67:e5:7a:b1:
         6e:63:a7:24:b2:ed:24:c3:5d:5d:f8:a9:db:9c:03:ba:f2:9b:
         e9:58:88:b2:39:b7:2b:1e:a6:ea:54:b2:d0:9c:f6:2e:d3:e9:
         7c:85:94:74:0a:d1:cd:fe:b9:73:63:e6:46:d2:7f:a1:2d:fc:
         9f:98:67:f2:d1:e2:7d:ca:61:1f:1a:0e:21:f3:8b:82:c0:da:
         25:ec:c9:ab:2c:ff:99:9f:53:7b:57:10:e9:fb:43:69:c8:8c:
         13:60:a6:60:e1:0a:f5:c7:49:c2:d2:07:10:80:d2:f8:41:50:
         1d:7a:5c:5a:74:ff:a1:71:9e:b5:23:c1:fc:81:14:38:b9:4a:
         4a:0e:7b:7c:cd:9b:3f:cf:b4:8d:f1:a7:2e:fe:48:aa:87:c7:
         f8:ff:6f:1c:08:ff:ce:64:81:6c:57:a7:c8:9f:a8:f9:57:26:
         27:2d:5c:80
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUNYcAwrHvvcVsaG+1d6yrQPt0ZfEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODZCODY2QTU5NkU4RDFFNEY5RjQ1MENEMzZERTMyN0M5
NTFENkVCOTAeFw0yNDA0MDMxOTM5NDdaFw0yNTA0MDIxOTQ0NDdaMDMxMTAvBgNV
BAMTKEMyMjE5MjE5MzUwNTI5NTVGQTgxRTIzQTU0NTdGRjdCRDlCNUM0NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ6HSm/nGsVGDbY4vTTcHSUUXA
WPGiv5om5kGS58Mj7EIXFO8Zi28DA9dHopYxeYg5oPOntUpezTRfIpZmw/tr2vEF
QJ7AcX6qa0YGzsMDCbnP0IqccvpX1UqnvF33iRn9eG22pt+4xCWGro0svnFehVCQ
R76eYyDoQTJLEGwyiK35vucT0zZdreCUxkmaSJk+lklwO6+zfn1IF7GcNB+WsvMG
8+0suZ0wAMLZ6iT/fAWU+nmHNUqfzsbld5qqkT+swvSNkU0YmyjLwrMiMdNKhc8n
Ehf7Idjsjvfl0zVvS3zQKRHtBxqGZfG0Fy5iSY0G/M7a3etwWhZCu7ujLU2pAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUwiGSGTUFKVX6geI6VFf/e9m1xF4wHwYDVR0j
BBgwFoAUhrhmpZbo0eT59FDNNt4yfJUdbrkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3BBUzhRTXZLNTl5V1BSRnhmYVJaVXFlQ250Y3l2a1hDM1lpWEwxUHFV
eksvMS84NkI4NjZBNTk2RThEMUU0RjlGNDUwQ0QzNkRFMzI3Qzk1MUQ2RUI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2Qjg2NkE1OTZFOEQxRTRG
OUY0NTBDRDM2REUzMjdDOTUxRDZFQjkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdwQVM4UU12SzU5eVdQUkZ4ZmFSWlVxZUNudGN5dmtYQzNZaVhMMVBxVXpLLzEv
MzEzODMxMmUzMTM3MzQyZTMyMzQzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzczMTM0MzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArWu9DANBgkqhkiG9w0BAQsFAAOCAQEAPj+j
s/qYbcTN4jFgVqg6co36hjXmR1lGLnXsqIo5qzahYryAwlMN4IDJM0D6QP8vy5P8
rtQ4EuE+KVZD9xMhYZb21r6i96nxgmIE3bL95hdqnYMvCd1n5XqxbmOnJLLtJMNd
Xfip25wDuvKb6ViIsjm3Kx6m6lSy0Jz2LtPpfIWUdArRzf65c2PmRtJ/oS38n5hn
8tHifcphHxoOIfOLgsDaJezJqyz/mZ9Te1cQ6ftDaciME2CmYOEK9cdJwtIHEIDS
+EFQHXpcWnT/oXGetSPB/IEUOLlKSg57fM2bP8+0jfGnLv5IqofH+P9vHAj/zmSB
bFenyJ+o+VcmJy1cgA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:05 2024 by rpki-client on console-fra.rpki-client.org