Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3132342e302f32342d3234203d3e20323632373537.roa
File:                     3138362e3232342e3132342e302f32342d3234203d3e20323632373537.roa (raw, json)
Hash identifier:          UOHsK318VQWi8XtOs/O8mhq4pyHlOuxfZx4xSrLUVck=
Subject key identifier:   F3:31:73:46:D7:43:91:C8:64:A3:E8:37:A0:87:17:3A:9E:9A:0A:6E
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       47E23E6D8C24125A71385ADCF0BFDEBBBD81E194
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3132342e302f32342d3234203d3e20323632373537.roa
Signing time:             Sun 11 Aug 2024 20:43:03 +0000
ROA not before:           Sun 11 Aug 2024 20:38:03 +0000
ROA not after:            Sun 10 Aug 2025 20:43:03 +0000
asID:                     262757
IP address blocks:        186.224.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:e2:3e:6d:8c:24:12:5a:71:38:5a:dc:f0:bf:de:bb:bd:81:e1:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 11 20:38:03 2024 GMT
            Not After : Aug 10 20:43:03 2025 GMT
        Subject: CN=F3317346D74391C864A3E837A087173A9E9A0A6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9d:d3:1b:0c:83:80:0f:03:a0:10:69:44:7c:
                    f3:e9:60:be:0c:00:15:d4:ce:f0:e8:bc:33:09:42:
                    3a:d9:70:cf:31:15:c0:e3:ae:98:fa:c4:ae:1c:84:
                    fc:f4:17:4e:a0:d6:ce:dd:b0:84:f5:8e:63:c8:a7:
                    3d:d2:23:b8:b2:bf:cf:0e:98:91:fa:6c:ff:23:09:
                    a0:52:23:fa:81:f8:09:d4:f9:76:a9:87:9d:a7:a4:
                    09:1a:e8:2e:86:f0:9f:07:5c:2d:a8:aa:54:d1:48:
                    1c:69:82:93:fd:ec:05:f6:33:5c:54:13:bf:22:4e:
                    ab:8f:6b:22:49:ea:2c:93:eb:52:43:a1:02:66:53:
                    b1:73:80:d1:58:42:98:c5:6f:6b:7d:4f:4c:65:aa:
                    90:9a:92:fe:7e:b3:33:fe:ba:8e:79:45:d9:73:fb:
                    98:f4:83:83:aa:e7:9b:18:72:ee:f7:29:49:e3:c8:
                    12:d8:ce:b5:ab:75:45:65:51:63:6d:f9:2e:1b:30:
                    59:20:4f:24:f0:27:fa:84:d6:45:ca:88:d6:77:83:
                    ed:56:84:bf:14:52:42:ee:82:9f:44:82:19:bc:78:
                    10:20:4b:d3:66:dc:26:89:2d:fe:26:93:97:f6:10:
                    4d:66:9b:d8:01:c4:27:8b:75:19:8b:4a:55:f8:6e:
                    b6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:31:73:46:D7:43:91:C8:64:A3:E8:37:A0:87:17:3A:9E:9A:0A:6E
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3132342e302f32342d3234203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:ac:02:cd:1a:12:0a:44:c9:c9:c0:ae:ad:e0:c8:3a:77:30:
         7c:87:99:b4:b1:61:18:30:53:d9:22:ad:2c:1c:ce:8c:60:54:
         43:e4:96:56:0c:db:95:e7:69:a7:02:5f:a9:46:a1:ad:4a:a0:
         ae:b3:e4:e4:90:fa:7f:66:c2:0f:84:1c:51:8c:99:f1:cc:2d:
         5f:d6:fd:e3:87:cb:46:2f:70:4e:bc:f1:17:71:02:49:23:1b:
         c7:6d:07:15:00:5b:7d:d0:91:bc:ab:6f:dd:61:cd:e7:cb:06:
         76:70:13:8f:ba:88:4f:ad:13:16:02:ed:f2:9c:21:64:87:1f:
         10:f6:0b:32:52:c7:65:6f:41:33:57:dd:7f:14:14:11:ff:3c:
         40:ee:4a:91:ed:14:ab:17:f1:ad:6c:a4:68:77:95:2f:1c:32:
         02:c9:bb:a6:a3:62:fc:e8:24:ac:db:93:93:6e:1a:9e:75:ca:
         64:1c:62:58:24:02:cf:48:2e:ca:1e:de:b9:51:f9:73:11:74:
         92:85:0e:f6:8e:ac:9a:81:db:55:9a:b2:1b:df:63:f0:8e:46:
         64:83:92:b5:56:7a:0e:a9:e1:0b:5e:50:bb:df:9a:e8:f3:4b:
         48:a4:e4:1c:ab:75:a7:69:42:df:c8:31:6d:3f:00:92:ca:0a:
         f7:bf:12:cb
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUR+I+bYwkElpxOFrc8L/eu72B4ZQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjEwMzE4RjIzRkQ0QjZFMzc2OTk1OTg5QjNBN0EwRjlF
MkUyOUU0ODAeFw0yNDA4MTEyMDM4MDNaFw0yNTA4MTAyMDQzMDNaMDMxMTAvBgNV
BAMTKEYzMzE3MzQ2RDc0MzkxQzg2NEEzRTgzN0EwODcxNzNBOUU5QTBBNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ndMbDIOADwOgEGlEfPPpYL4M
ABXUzvDovDMJQjrZcM8xFcDjrpj6xK4chPz0F06g1s7dsIT1jmPIpz3SI7iyv88O
mJH6bP8jCaBSI/qB+AnU+Xaph52npAka6C6G8J8HXC2oqlTRSBxpgpP97AX2M1xU
E78iTquPayJJ6iyT61JDoQJmU7FzgNFYQpjFb2t9T0xlqpCakv5+szP+uo55Rdlz
+5j0g4Oq55sYcu73KUnjyBLYzrWrdUVlUWNt+S4bMFkgTyTwJ/qE1kXKiNZ3g+1W
hL8UUkLugp9Eghm8eBAgS9Nm3CaJLf4mk5f2EE1mm9gBxCeLdRmLSlX4brZHAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU8zFzRtdDkchko+g3oIcXOp6aCm4wHwYDVR0j
BBgwFoAUYQMY8j/UtuN2mVmJs6eg+eLinkgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODdjcUtkN2U5clJtSEJFSkhYWEZOZ0FxNVBkRE1rVWFkakhMRU5QSFpC
cHcvMC82MTAzMThGMjNGRDRCNkUzNzY5OTU5ODlCM0E3QTBGOUUyRTI5RTQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxMDMxOEYyM0ZENEI2RTM3
Njk5NTk4OUIzQTdBMEY5RTJFMjlFNDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg3Y3FLZDdlOXJSbUhCRUpIWFhGTmdBcTVQZERNa1VhZGpITEVOUEhaQnB3LzAv
MzEzODM2MmUzMjMyMzQyZTMxMzIzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM3MzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALrgfDANBgkqhkiG9w0BAQsFAAOCAQEASqwC
zRoSCkTJycCureDIOncwfIeZtLFhGDBT2SKtLBzOjGBUQ+SWVgzbledppwJfqUah
rUqgrrPk5JD6f2bCD4QcUYyZ8cwtX9b944fLRi9wTrzxF3ECSSMbx20HFQBbfdCR
vKtv3WHN58sGdnATj7qIT60TFgLt8pwhZIcfEPYLMlLHZW9BM1fdfxQUEf88QO5K
ke0UqxfxrWykaHeVLxwyAsm7pqNi/OgkrNuTk24annXKZBxiWCQCz0guyh7euVH5
cxF0koUO9o6smoHbVZqyG99j8I5GZIOStVZ6DqnhC15Qu9+a6PNLSKTkHKt1p2lC
38gxbT8AksoK978Syw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:05 2024 by rpki-client on console-ams.rpki-client.org