Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130382e302f32342d3234203d3e20323632373537.roa
File:                     3138362e3232342e3130382e302f32342d3234203d3e20323632373537.roa (raw, json)
Hash identifier:          NNNS33rV4NcZQFHGnIGoMqgt7i69i46OLcPvc7mwK98=
Subject key identifier:   41:BB:C8:27:43:DE:C7:AB:AD:4E:C0:5A:6D:52:18:66:AD:B1:C6:6A
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       3EB837E5F2BD9CD13926E1A2B83BD048DB121463
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130382e302f32342d3234203d3e20323632373537.roa
Signing time:             Sun 11 Aug 2024 20:45:03 +0000
ROA not before:           Sun 11 Aug 2024 20:40:03 +0000
ROA not after:            Sun 10 Aug 2025 20:45:03 +0000
asID:                     262757
IP address blocks:        186.224.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:b8:37:e5:f2:bd:9c:d1:39:26:e1:a2:b8:3b:d0:48:db:12:14:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 11 20:40:03 2024 GMT
            Not After : Aug 10 20:45:03 2025 GMT
        Subject: CN=41BBC82743DEC7ABAD4EC05A6D521866ADB1C66A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ba:6b:e6:a0:96:53:ef:44:48:56:42:c1:55:
                    95:7a:5d:94:e5:3f:65:58:81:35:1d:67:30:b8:7f:
                    77:15:5d:2e:27:69:13:d7:66:39:e4:de:c7:65:2f:
                    4c:58:2a:06:d8:11:1b:1d:da:83:77:2d:d7:6c:76:
                    bc:82:6d:99:57:f3:70:c5:86:ec:2e:1d:09:3f:30:
                    c1:0b:70:34:56:c0:f9:37:7d:55:2d:67:38:6d:0b:
                    f3:4a:22:b8:3f:85:83:7c:26:eb:48:e9:db:01:bf:
                    03:c5:3d:d5:52:21:91:ad:de:50:98:12:d7:ea:0c:
                    27:f4:48:11:de:bb:57:b4:ca:87:cd:c8:43:1c:72:
                    53:13:fa:a9:ee:ed:bc:bd:b6:a1:97:57:9d:08:cb:
                    db:2c:44:26:0d:71:32:0f:be:56:e9:ff:fd:33:e6:
                    d9:0b:2e:9c:9a:43:6a:1b:59:94:fa:b3:be:54:93:
                    0b:fe:0a:11:f6:40:bb:59:de:20:14:26:5d:16:64:
                    36:30:d7:98:81:21:78:c2:ad:19:79:4a:95:13:23:
                    4e:98:e3:5f:e8:e5:c1:5f:0a:55:9c:4d:52:02:6d:
                    9b:e3:4f:4b:ac:2f:0a:1f:05:e7:75:ed:4c:bb:15:
                    e4:bb:4e:9c:2e:c0:2a:f3:2b:6b:27:b6:0f:a3:06:
                    d8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:BB:C8:27:43:DE:C7:AB:AD:4E:C0:5A:6D:52:18:66:AD:B1:C6:6A
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130382e302f32342d3234203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:8a:67:e6:cc:b7:f8:ff:13:02:eb:ee:b3:bc:4f:a2:ef:25:
         cb:34:ea:17:e8:3a:b7:73:4b:71:e4:53:4d:40:f5:c6:28:9b:
         4c:c2:a7:6f:ab:ff:32:9d:34:90:ec:d1:69:03:d8:87:bf:74:
         31:2d:ef:bc:9f:a0:1f:53:15:58:ca:c5:24:32:e9:07:6b:8a:
         d3:a0:ee:05:2d:e7:dd:68:8d:95:38:d8:b2:ba:db:cd:12:88:
         c5:06:b7:18:95:5a:da:7d:c2:50:61:b7:8a:b3:fa:b1:d1:ff:
         19:78:4f:fe:52:36:42:80:b1:cc:9b:10:b7:e3:f7:91:91:42:
         da:bc:b9:ec:32:95:60:f6:7f:f5:7a:81:04:08:61:4f:ce:81:
         2b:63:11:dc:2f:ca:9d:09:0f:1a:ce:00:32:fd:db:0a:66:72:
         22:15:c2:fb:dd:c4:10:04:cc:1b:fc:23:09:76:3b:54:b4:3f:
         d7:da:9e:9b:18:3d:4c:f2:54:3d:b1:d0:47:ea:5b:a6:d9:3e:
         91:01:ba:39:97:7f:5d:55:25:13:e0:f6:b2:7e:79:5a:9c:bf:
         0b:fa:2c:b4:16:cd:9c:8e:07:86:28:83:7a:03:78:e0:7e:82:
         b2:3c:ca:f7:f1:1f:b4:f9:d0:1f:be:a1:59:09:91:c1:5c:4f:
         e9:5f:d2:2d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUPrg35fK9nNE5JuGiuDvQSNsSFGMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjEwMzE4RjIzRkQ0QjZFMzc2OTk1OTg5QjNBN0EwRjlF
MkUyOUU0ODAeFw0yNDA4MTEyMDQwMDNaFw0yNTA4MTAyMDQ1MDNaMDMxMTAvBgNV
BAMTKDQxQkJDODI3NDNERUM3QUJBRDRFQzA1QTZENTIxODY2QURCMUM2NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQumvmoJZT70RIVkLBVZV6XZTl
P2VYgTUdZzC4f3cVXS4naRPXZjnk3sdlL0xYKgbYERsd2oN3LddsdryCbZlX83DF
huwuHQk/MMELcDRWwPk3fVUtZzhtC/NKIrg/hYN8JutI6dsBvwPFPdVSIZGt3lCY
EtfqDCf0SBHeu1e0yofNyEMcclMT+qnu7by9tqGXV50Iy9ssRCYNcTIPvlbp//0z
5tkLLpyaQ2obWZT6s75Ukwv+ChH2QLtZ3iAUJl0WZDYw15iBIXjCrRl5SpUTI06Y
41/o5cFfClWcTVICbZvjT0usLwofBed17Uy7FeS7TpwuwCrzK2sntg+jBtj/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUQbvIJ0Pex6utTsBabVIYZq2xxmowHwYDVR0j
BBgwFoAUYQMY8j/UtuN2mVmJs6eg+eLinkgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODdjcUtkN2U5clJtSEJFSkhYWEZOZ0FxNVBkRE1rVWFkakhMRU5QSFpC
cHcvMC82MTAzMThGMjNGRDRCNkUzNzY5OTU5ODlCM0E3QTBGOUUyRTI5RTQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxMDMxOEYyM0ZENEI2RTM3
Njk5NTk4OUIzQTdBMEY5RTJFMjlFNDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg3Y3FLZDdlOXJSbUhCRUpIWFhGTmdBcTVQZERNa1VhZGpITEVOUEhaQnB3LzAv
MzEzODM2MmUzMjMyMzQyZTMxMzAzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM3MzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALrgbDANBgkqhkiG9w0BAQsFAAOCAQEAh4pn
5sy3+P8TAuvus7xPou8lyzTqF+g6t3NLceRTTUD1xiibTMKnb6v/Mp00kOzRaQPY
h790MS3vvJ+gH1MVWMrFJDLpB2uK06DuBS3n3WiNlTjYsrrbzRKIxQa3GJVa2n3C
UGG3irP6sdH/GXhP/lI2QoCxzJsQt+P3kZFC2ry57DKVYPZ/9XqBBAhhT86BK2MR
3C/KnQkPGs4AMv3bCmZyIhXC+93EEATMG/wjCXY7VLQ/19qemxg9TPJUPbHQR+pb
ptk+kQG6OZd/XVUlE+D2sn55Wpy/C/ostBbNnI4HhiiDegN44H6CsjzK9/EftPnQ
H76hWQmRwVxP6V/SLQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:01 2024 by rpki-client on console-fra.rpki-client.org