Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3132302e302f32312d3231203d3e20323632373537.roa
File:                     3138362e3232342e3132302e302f32312d3231203d3e20323632373537.roa (raw, json)
Hash identifier:          H6oB/FUU9Mo7DmU1rCmULWLZuSW7bhxKWLkAYwaONho=
Subject key identifier:   BD:A2:D4:8A:2D:79:2B:AB:E2:FA:7A:59:3C:41:F7:1A:80:6F:DA:AB
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       0BE4D3C5F500317B4D867F50132AD0FAD2F2BE42
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3132302e302f32312d3231203d3e20323632373537.roa
Signing time:             Sun 11 Aug 2024 20:42:28 +0000
ROA not before:           Sun 11 Aug 2024 20:37:28 +0000
ROA not after:            Sun 10 Aug 2025 20:42:28 +0000
asID:                     262757
IP address blocks:        186.224.120.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e4:d3:c5:f5:00:31:7b:4d:86:7f:50:13:2a:d0:fa:d2:f2:be:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 11 20:37:28 2024 GMT
            Not After : Aug 10 20:42:28 2025 GMT
        Subject: CN=BDA2D48A2D792BABE2FA7A593C41F71A806FDAAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:60:d7:e0:da:38:27:77:e3:98:a8:f7:6e:0b:
                    9f:f2:e9:f0:52:94:83:65:9d:a9:2c:02:2a:b6:7e:
                    4d:5e:6a:79:1a:ad:71:f3:2a:a0:31:23:40:00:b8:
                    35:c3:c9:9a:79:a1:99:2f:15:38:64:80:f0:fc:67:
                    cc:de:16:8e:62:41:7b:e3:df:fc:33:b0:e1:20:2d:
                    3a:28:c0:dc:af:c2:35:53:fc:22:d3:0a:cf:8b:d9:
                    03:3e:0a:62:ce:a4:5f:b4:fd:62:43:25:33:38:a5:
                    47:53:cd:b6:e6:cb:46:3a:36:f5:c9:55:b7:2b:1d:
                    14:b0:bf:4e:8a:35:b5:1e:d6:a1:cc:05:3f:6c:ef:
                    bc:75:fa:d6:88:a6:13:55:45:1b:f0:93:c3:61:63:
                    5e:08:10:8d:27:c6:48:87:b6:7d:72:05:a9:02:52:
                    e8:eb:f6:92:19:80:37:74:3a:e7:3e:36:23:63:fe:
                    78:7d:8a:03:71:fd:a9:3c:9b:ff:5f:26:3b:f6:9a:
                    9c:5d:15:dc:25:c6:96:df:4e:9b:be:1a:c1:ed:f5:
                    1d:69:86:21:ea:ef:8b:46:93:94:06:ea:4a:d6:b5:
                    36:36:35:e2:f6:bd:7d:55:0a:49:69:e9:f9:36:f8:
                    ec:a6:a4:f2:73:40:97:ab:03:07:e6:ab:6e:c9:e7:
                    20:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A2:D4:8A:2D:79:2B:AB:E2:FA:7A:59:3C:41:F7:1A:80:6F:DA:AB
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3132302e302f32312d3231203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a7:ea:60:29:02:cd:34:19:73:e6:fb:a7:e5:53:d4:12:33:63:
         5e:08:41:bf:16:87:89:e4:7f:d4:ab:66:ab:9a:40:fd:b8:26:
         23:73:5b:60:85:f6:13:ec:fd:71:f0:cd:11:d9:b3:3b:68:15:
         bd:64:37:d9:b5:ee:5a:a2:3e:f2:79:d4:76:a6:d1:6d:75:a1:
         eb:bf:18:e6:6b:de:71:29:b4:31:1c:83:98:5f:3c:9e:ef:02:
         29:e1:62:9a:6f:38:87:b6:11:7c:21:1f:c9:6e:39:8d:08:07:
         b1:5e:9b:d1:e2:bb:db:02:23:8d:81:7c:e7:0e:cd:50:ed:09:
         94:a0:3a:65:9c:db:ce:ee:fb:f5:c8:84:7c:77:c2:4b:ae:32:
         32:7a:79:3f:eb:27:35:e1:4c:4f:df:8d:43:d7:80:2c:79:34:
         10:d0:a1:7c:b4:bc:e8:92:48:c0:75:a1:24:e2:7a:30:ec:d9:
         e4:69:73:30:7f:14:25:b8:0e:d2:77:dd:41:31:60:74:55:f3:
         72:4c:ac:5b:c5:e1:36:36:c6:93:1b:ea:0c:cc:9a:03:8a:26:
         0f:21:79:46:52:09:50:6d:9a:3e:53:63:a8:fd:50:b3:50:1d:
         ab:91:17:43:02:21:f3:04:88:d4:cd:3c:f9:f0:bc:df:31:b2:
         fd:c2:93:38
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUC+TTxfUAMXtNhn9QEyrQ+tLyvkIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjEwMzE4RjIzRkQ0QjZFMzc2OTk1OTg5QjNBN0EwRjlF
MkUyOUU0ODAeFw0yNDA4MTEyMDM3MjhaFw0yNTA4MTAyMDQyMjhaMDMxMTAvBgNV
BAMTKEJEQTJENDhBMkQ3OTJCQUJFMkZBN0E1OTNDNDFGNzFBODA2RkRBQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0YNfg2jgnd+OYqPduC5/y6fBS
lINlnaksAiq2fk1eankarXHzKqAxI0AAuDXDyZp5oZkvFThkgPD8Z8zeFo5iQXvj
3/wzsOEgLToowNyvwjVT/CLTCs+L2QM+CmLOpF+0/WJDJTM4pUdTzbbmy0Y6NvXJ
VbcrHRSwv06KNbUe1qHMBT9s77x1+taIphNVRRvwk8NhY14IEI0nxkiHtn1yBakC
Uujr9pIZgDd0Ouc+NiNj/nh9igNx/ak8m/9fJjv2mpxdFdwlxpbfTpu+GsHt9R1p
hiHq74tGk5QG6krWtTY2NeL2vX1VCklp6fk2+OympPJzQJerAwfmq27J5yCZAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUvaLUii15K6vi+npZPEH3GoBv2qswHwYDVR0j
BBgwFoAUYQMY8j/UtuN2mVmJs6eg+eLinkgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODdjcUtkN2U5clJtSEJFSkhYWEZOZ0FxNVBkRE1rVWFkakhMRU5QSFpC
cHcvMC82MTAzMThGMjNGRDRCNkUzNzY5OTU5ODlCM0E3QTBGOUUyRTI5RTQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxMDMxOEYyM0ZENEI2RTM3
Njk5NTk4OUIzQTdBMEY5RTJFMjlFNDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg3Y3FLZDdlOXJSbUhCRUpIWFhGTmdBcTVQZERNa1VhZGpITEVOUEhaQnB3LzAv
MzEzODM2MmUzMjMyMzQyZTMxMzIzMDJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMy
MzYzMjM3MzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEA7rgeDANBgkqhkiG9w0BAQsFAAOCAQEAp+pg
KQLNNBlz5vun5VPUEjNjXghBvxaHieR/1Ktmq5pA/bgmI3NbYIX2E+z9cfDNEdmz
O2gVvWQ32bXuWqI+8nnUdqbRbXWh678Y5mvecSm0MRyDmF88nu8CKeFimm84h7YR
fCEfyW45jQgHsV6b0eK72wIjjYF85w7NUO0JlKA6ZZzbzu779ciEfHfCS64yMnp5
P+snNeFMT9+NQ9eALHk0ENChfLS86JJIwHWhJOJ6MOzZ5GlzMH8UJbgO0nfdQTFg
dFXzckysW8XhNjbGkxvqDMyaA4omDyF5RlIJUG2aPlNjqP1Qs1Adq5EXQwIh8wSI
1M08+fC83zGy/cKTOA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:05 2024 by rpki-client on console-ams.rpki-client.org