Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130342e302f32322d3232203d3e20323632373537.roa
File:                     3138362e3232342e3130342e302f32322d3232203d3e20323632373537.roa (raw, json)
Hash identifier:          AnqRHbIPViwfuS8UZgjiysFLoSDW3zsC7T+ClttHyeM=
Subject key identifier:   BB:D4:37:64:59:95:79:3A:1D:7C:21:8F:28:41:3E:A0:8B:B2:CD:34
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       6758EFE5BD4509BDA70FBAA77427B030FE3D38C1
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130342e302f32322d3232203d3e20323632373537.roa
Signing time:             Sun 11 Aug 2024 20:41:59 +0000
ROA not before:           Sun 11 Aug 2024 20:36:59 +0000
ROA not after:            Sun 10 Aug 2025 20:41:59 +0000
asID:                     262757
IP address blocks:        186.224.104.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:58:ef:e5:bd:45:09:bd:a7:0f:ba:a7:74:27:b0:30:fe:3d:38:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 11 20:36:59 2024 GMT
            Not After : Aug 10 20:41:59 2025 GMT
        Subject: CN=BBD437645995793A1D7C218F28413EA08BB2CD34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ec:11:e7:84:2b:7b:99:b7:fb:6d:ea:7d:0d:
                    0b:78:d0:bf:c5:c1:f3:96:4a:96:76:43:47:63:46:
                    be:ca:16:e0:1f:4f:ab:39:40:70:d6:b7:92:a5:c2:
                    d8:43:98:cd:21:18:71:fe:9d:01:6f:2b:c3:bc:a4:
                    3f:9d:80:c7:bf:7d:c3:88:63:00:88:6f:36:99:40:
                    7f:2d:cb:97:e1:30:04:5c:98:f1:2a:1b:14:ae:3b:
                    99:22:46:cd:b8:18:be:e8:b4:7c:9f:73:56:a7:9b:
                    1e:19:0f:29:6e:db:7e:03:1a:09:30:b3:70:e4:17:
                    df:ae:d6:90:61:fa:ac:d8:e0:61:a9:a5:a7:4e:5a:
                    76:b9:65:83:ed:f9:4c:b8:2a:99:b0:c8:45:69:3f:
                    13:41:93:1b:2e:72:59:58:8b:9f:cb:42:9a:c0:91:
                    75:27:eb:d6:8f:d8:25:89:73:5f:83:cd:7b:b2:90:
                    06:c1:4b:13:d6:70:07:49:a2:86:c8:1b:34:32:e1:
                    03:c6:87:2f:ba:14:90:e9:ea:73:33:a8:3f:8a:91:
                    83:32:6a:b5:eb:e8:16:0f:84:b9:dd:d9:bf:79:5c:
                    91:fb:17:54:fb:ea:a5:67:d7:1f:7a:93:90:08:d7:
                    f2:07:50:ba:7f:ac:c2:e1:32:d2:6d:3a:2d:aa:a4:
                    a9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D4:37:64:59:95:79:3A:1D:7C:21:8F:28:41:3E:A0:8B:B2:CD:34
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130342e302f32322d3232203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:b0:63:23:4f:af:d9:6e:49:de:31:34:04:31:c9:0f:23:0f:
         2e:27:f9:57:12:de:82:6f:42:8b:c8:82:a6:0c:0b:43:08:c7:
         b9:df:d2:72:7e:8f:b1:3e:be:7f:83:27:29:c2:75:50:ad:39:
         27:c1:2e:44:04:67:ac:03:f4:b2:90:01:f1:78:78:4c:ac:4d:
         7c:8e:8e:4f:46:74:35:d6:47:70:f1:11:bd:59:24:cc:80:89:
         96:05:53:55:5c:e9:8e:f3:23:62:c0:70:8d:ac:ab:36:f0:60:
         b6:3a:ad:5e:6f:50:2a:00:4b:2b:4e:55:55:96:67:b5:a3:eb:
         d1:e4:c8:09:47:e5:30:ee:25:67:25:24:a3:64:d1:41:01:f2:
         76:fe:ad:7a:74:e1:2d:53:90:60:53:11:0f:6d:be:b1:6e:d1:
         82:f7:0c:68:95:fe:81:25:b6:2f:84:9b:86:a0:34:20:67:ed:
         7e:9a:78:68:ef:97:af:7f:d2:d8:d9:e8:fa:90:4e:0a:e1:14:
         20:31:ca:f0:f8:0d:10:b7:6e:82:99:23:a5:38:90:b4:8b:51:
         bc:17:9a:e0:d3:6b:8f:5c:17:23:46:a0:af:f7:74:ba:bc:f4:
         9a:b0:0f:81:06:db:b1:c3:e4:98:6b:db:d3:fe:ee:42:50:f6:
         36:98:5e:a4
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUZ1jv5b1FCb2nD7qndCewMP49OMEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjEwMzE4RjIzRkQ0QjZFMzc2OTk1OTg5QjNBN0EwRjlF
MkUyOUU0ODAeFw0yNDA4MTEyMDM2NTlaFw0yNTA4MTAyMDQxNTlaMDMxMTAvBgNV
BAMTKEJCRDQzNzY0NTk5NTc5M0ExRDdDMjE4RjI4NDEzRUEwOEJCMkNEMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb7BHnhCt7mbf7bep9DQt40L/F
wfOWSpZ2Q0djRr7KFuAfT6s5QHDWt5KlwthDmM0hGHH+nQFvK8O8pD+dgMe/fcOI
YwCIbzaZQH8ty5fhMARcmPEqGxSuO5kiRs24GL7otHyfc1anmx4ZDylu234DGgkw
s3DkF9+u1pBh+qzY4GGppadOWna5ZYPt+Uy4KpmwyEVpPxNBkxsucllYi5/LQprA
kXUn69aP2CWJc1+DzXuykAbBSxPWcAdJoobIGzQy4QPGhy+6FJDp6nMzqD+KkYMy
arXr6BYPhLnd2b95XJH7F1T76qVn1x96k5AI1/IHULp/rMLhMtJtOi2qpKkNAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUu9Q3ZFmVeTodfCGPKEE+oIuyzTQwHwYDVR0j
BBgwFoAUYQMY8j/UtuN2mVmJs6eg+eLinkgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODdjcUtkN2U5clJtSEJFSkhYWEZOZ0FxNVBkRE1rVWFkakhMRU5QSFpC
cHcvMC82MTAzMThGMjNGRDRCNkUzNzY5OTU5ODlCM0E3QTBGOUUyRTI5RTQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxMDMxOEYyM0ZENEI2RTM3
Njk5NTk4OUIzQTdBMEY5RTJFMjlFNDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg3Y3FLZDdlOXJSbUhCRUpIWFhGTmdBcTVQZERNa1VhZGpITEVOUEhaQnB3LzAv
MzEzODM2MmUzMjMyMzQyZTMxMzAzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMjM3MzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArrgaDANBgkqhkiG9w0BAQsFAAOCAQEAMbBj
I0+v2W5J3jE0BDHJDyMPLif5VxLegm9Ci8iCpgwLQwjHud/Scn6PsT6+f4MnKcJ1
UK05J8EuRARnrAP0spAB8Xh4TKxNfI6OT0Z0NdZHcPERvVkkzICJlgVTVVzpjvMj
YsBwjayrNvBgtjqtXm9QKgBLK05VVZZntaPr0eTICUflMO4lZyUko2TRQQHydv6t
enThLVOQYFMRD22+sW7RgvcMaJX+gSW2L4SbhqA0IGftfpp4aO+Xr3/S2Nno+pBO
CuEUIDHK8PgNELdugpkjpTiQtItRvBea4NNrj1wXI0agr/d0urz0mrAPgQbbscPk
mGvb0/7uQlD2NphepA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:05 2024 by rpki-client on console-ams.rpki-client.org