Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131302e302f32332d3233203d3e20323632373537.roa
File:                     3138362e3232342e3131302e302f32332d3233203d3e20323632373537.roa (raw, json)
Hash identifier:          5GF25vRjjGyzFZ+DOQPgOwmLxGuHqiclrCXG8pShAn4=
Subject key identifier:   9C:DA:9D:EF:71:F2:A2:22:5E:49:84:BF:C2:81:50:1D:D8:C5:77:FB
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       1644A90AEAD9FF3A8D7AF2A507AEDC93EE3126D8
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131302e302f32332d3233203d3e20323632373537.roa
Signing time:             Sun 11 Aug 2024 20:44:56 +0000
ROA not before:           Sun 11 Aug 2024 20:39:56 +0000
ROA not after:            Sun 10 Aug 2025 20:44:56 +0000
asID:                     262757
IP address blocks:        186.224.110.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:44:a9:0a:ea:d9:ff:3a:8d:7a:f2:a5:07:ae:dc:93:ee:31:26:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 11 20:39:56 2024 GMT
            Not After : Aug 10 20:44:56 2025 GMT
        Subject: CN=9CDA9DEF71F2A2225E4984BFC281501DD8C577FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d9:b6:8b:d2:78:26:35:6c:08:0d:01:b3:52:
                    4b:cc:62:01:67:10:d5:d7:7b:fa:52:8f:3c:b3:c3:
                    41:3d:84:3f:98:27:8a:07:88:b1:e5:c8:08:ac:65:
                    3d:e0:ac:66:70:b0:fd:fb:45:cd:0c:e4:bd:fd:39:
                    5f:63:17:45:9d:7e:24:52:28:c5:ab:41:79:5e:4b:
                    ff:60:54:45:bb:e8:60:5f:7b:e6:22:de:e7:ae:01:
                    23:25:d0:0a:a3:0f:71:7f:eb:c5:12:44:9f:de:a6:
                    7f:e7:27:9e:8e:b5:7a:60:24:8d:68:b1:1f:60:e5:
                    35:7f:f9:04:02:d4:d5:7c:e8:86:18:14:47:f5:81:
                    99:ef:e9:17:35:cc:39:c6:e9:80:9f:d3:6f:91:44:
                    07:28:67:0b:4e:1e:f4:43:aa:34:78:1b:c9:fd:85:
                    76:6a:14:fa:1e:4f:54:81:8c:b6:e4:23:11:f3:f8:
                    9b:9a:89:0f:70:3e:94:e9:0f:75:82:ea:eb:e7:b4:
                    8d:fc:9f:3e:9a:f1:87:ab:f0:82:9b:b1:79:88:fe:
                    3d:52:6a:5b:80:6f:17:bc:ff:3b:53:d5:8a:6f:72:
                    ca:45:37:6b:ad:a8:fd:d3:b3:6d:56:e5:28:23:ed:
                    32:72:80:c9:b8:05:49:77:57:52:3d:51:96:fd:1a:
                    6e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:DA:9D:EF:71:F2:A2:22:5E:49:84:BF:C2:81:50:1D:D8:C5:77:FB
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131302e302f32332d3233203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:7b:22:96:e8:a6:8f:89:fc:cd:ff:d2:2a:bd:8c:bd:cc:8a:
         b1:54:61:54:63:b4:25:9f:82:f8:68:f8:70:ea:e5:44:51:87:
         b2:ae:9b:8a:07:32:9a:51:0d:8b:e1:ed:7e:a0:bb:69:11:ab:
         54:dc:26:00:d9:70:f7:aa:7b:9c:c0:95:85:5a:9e:d9:4b:f9:
         45:48:f3:83:b7:75:3e:10:96:af:97:fa:66:90:82:a2:e3:38:
         9f:db:be:b8:f3:05:c5:65:9b:61:ef:cb:6c:e3:ee:06:2f:81:
         fc:f5:77:f0:6b:48:6f:0f:0e:d0:36:46:16:29:68:b1:e1:26:
         cf:f7:f1:c4:16:b4:25:63:f8:9f:5b:5b:c6:68:76:ef:0f:f1:
         c5:26:43:b6:53:8d:d8:80:87:92:4a:43:e3:55:0e:58:89:00:
         bf:10:f2:f2:33:ef:74:7c:80:62:0b:17:e9:b8:6c:fe:96:66:
         3b:ce:fe:89:f3:45:c6:bc:cd:a2:6d:7a:c7:cd:bd:c6:32:f6:
         63:9d:4a:eb:99:36:01:e8:1c:8f:4a:56:a3:5f:f4:9d:df:18:
         09:d2:e5:a1:8a:57:03:2a:80:44:a0:58:a4:d5:62:fd:03:84:
         0f:50:e7:4d:9e:85:de:f7:cd:16:92:a5:49:2c:df:ad:bf:f3:
         61:d1:d6:61
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUFkSpCurZ/zqNevKlB67ck+4xJtgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjEwMzE4RjIzRkQ0QjZFMzc2OTk1OTg5QjNBN0EwRjlF
MkUyOUU0ODAeFw0yNDA4MTEyMDM5NTZaFw0yNTA4MTAyMDQ0NTZaMDMxMTAvBgNV
BAMTKDlDREE5REVGNzFGMkEyMjI1RTQ5ODRCRkMyODE1MDFERDhDNTc3RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC12baL0ngmNWwIDQGzUkvMYgFn
ENXXe/pSjzyzw0E9hD+YJ4oHiLHlyAisZT3grGZwsP37Rc0M5L39OV9jF0WdfiRS
KMWrQXleS/9gVEW76GBfe+Yi3ueuASMl0AqjD3F/68USRJ/epn/nJ56OtXpgJI1o
sR9g5TV/+QQC1NV86IYYFEf1gZnv6Rc1zDnG6YCf02+RRAcoZwtOHvRDqjR4G8n9
hXZqFPoeT1SBjLbkIxHz+JuaiQ9wPpTpD3WC6uvntI38nz6a8Yer8IKbsXmI/j1S
aluAbxe8/ztT1YpvcspFN2utqP3Ts21W5Sgj7TJygMm4BUl3V1I9UZb9Gm7vAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUnNqd73HyoiJeSYS/woFQHdjFd/swHwYDVR0j
BBgwFoAUYQMY8j/UtuN2mVmJs6eg+eLinkgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODdjcUtkN2U5clJtSEJFSkhYWEZOZ0FxNVBkRE1rVWFkakhMRU5QSFpC
cHcvMC82MTAzMThGMjNGRDRCNkUzNzY5OTU5ODlCM0E3QTBGOUUyRTI5RTQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxMDMxOEYyM0ZENEI2RTM3
Njk5NTk4OUIzQTdBMEY5RTJFMjlFNDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg3Y3FLZDdlOXJSbUhCRUpIWFhGTmdBcTVQZERNa1VhZGpITEVOUEhaQnB3LzAv
MzEzODM2MmUzMjMyMzQyZTMxMzEzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM3MzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbrgbjANBgkqhkiG9w0BAQsFAAOCAQEAE3si
luimj4n8zf/SKr2MvcyKsVRhVGO0JZ+C+Gj4cOrlRFGHsq6bigcymlENi+HtfqC7
aRGrVNwmANlw96p7nMCVhVqe2Uv5RUjzg7d1PhCWr5f6ZpCCouM4n9u+uPMFxWWb
Ye/LbOPuBi+B/PV38GtIbw8O0DZGFiloseEmz/fxxBa0JWP4n1tbxmh27w/xxSZD
tlON2ICHkkpD41UOWIkAvxDy8jPvdHyAYgsX6bhs/pZmO87+ifNFxrzNom16x829
xjL2Y51K65k2Aegcj0pWo1/0nd8YCdLloYpXAyqARKBYpNVi/QOED1DnTZ6F3vfN
FpKlSSzfrb/zYdHWYQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:01 2024 by rpki-client on console-fra.rpki-client.org