Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3132352e302f32342d3234203d3e20323632373537.roa
File:                     3138362e3232342e3132352e302f32342d3234203d3e20323632373537.roa (raw, json)
Hash identifier:          4WsPNUEueO22QUMm6oxcwtinzrq/npZIAKKUX7wmFq4=
Subject key identifier:   87:FF:57:78:82:28:48:AB:86:AA:AD:BE:D5:B5:89:05:93:FD:AA:35
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       405856589CC3DD23B70D87861276F78384528F75
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3132352e302f32342d3234203d3e20323632373537.roa
Signing time:             Sun 11 Aug 2024 20:43:00 +0000
ROA not before:           Sun 11 Aug 2024 20:38:00 +0000
ROA not after:            Sun 10 Aug 2025 20:43:00 +0000
asID:                     262757
IP address blocks:        186.224.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:58:56:58:9c:c3:dd:23:b7:0d:87:86:12:76:f7:83:84:52:8f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 11 20:38:00 2024 GMT
            Not After : Aug 10 20:43:00 2025 GMT
        Subject: CN=87FF5778822848AB86AAADBED5B5890593FDAA35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:16:d9:89:4d:e9:27:18:2d:5a:18:fc:12:34:
                    10:da:f2:85:67:de:20:40:3d:b2:2c:d1:28:94:91:
                    ac:15:d7:c8:04:de:14:df:76:a3:a5:62:e5:d2:6d:
                    02:10:9f:27:a3:4a:8a:6c:8d:59:c9:bf:d9:f0:bd:
                    af:18:1a:f2:21:b9:84:fa:b3:46:bd:fc:9b:87:18:
                    33:81:fa:1c:84:fc:ef:19:59:45:83:7b:5b:4a:29:
                    9e:23:cd:b7:b4:45:66:eb:db:9c:fd:16:84:c0:5f:
                    97:78:69:70:d6:45:33:4c:f4:2e:3c:64:44:6e:6b:
                    f0:81:37:7e:6c:d6:37:4f:e3:e3:1e:8c:c6:63:7a:
                    41:42:92:be:48:5e:c3:33:bb:a9:20:bc:e7:80:d3:
                    74:e2:06:7a:1d:18:5f:40:c2:d1:fb:e0:a7:a9:3d:
                    ba:6c:80:3d:16:f4:4a:e3:d0:87:4e:ad:3e:4e:db:
                    f8:86:32:23:d1:67:82:eb:24:97:c6:eb:00:a7:ec:
                    88:71:52:22:32:b5:c1:0b:02:5e:8f:a3:d8:b4:4c:
                    45:3b:95:69:26:2e:9a:7c:76:68:08:d7:91:e5:7f:
                    d1:8f:bc:c7:4f:26:8b:6a:7b:bf:f2:0d:cf:02:fd:
                    e0:4c:af:2a:6c:ce:a7:39:1d:4c:fd:81:9b:cc:e1:
                    d1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FF:57:78:82:28:48:AB:86:AA:AD:BE:D5:B5:89:05:93:FD:AA:35
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3132352e302f32342d3234203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:8a:b9:5e:00:6b:c3:10:75:98:0a:f5:6a:db:28:3f:3f:e6:
         7f:68:29:dc:8b:46:65:55:4d:3d:b0:6b:a7:4d:49:d1:7a:74:
         da:04:e0:75:fc:64:75:06:d0:05:91:ea:26:c2:b3:43:f1:67:
         93:d6:58:f4:31:cd:a6:5d:73:91:29:b3:a1:11:d6:6b:11:db:
         bb:57:b5:4e:37:2e:be:19:07:d6:3b:62:b4:4f:f6:de:f9:1e:
         6e:15:6c:cc:44:a8:aa:c4:56:bb:83:8f:94:73:77:3f:ab:41:
         e1:56:53:fc:0a:19:df:fb:22:6d:0c:83:4c:60:70:f6:9b:5e:
         5e:a2:bc:4a:96:b0:7d:7f:27:fb:08:a5:ce:b9:7b:40:c2:73:
         29:5f:dc:d6:d4:de:eb:5d:bd:d8:0b:e6:a0:44:16:bc:68:d3:
         48:36:b2:f3:e6:9a:74:3b:5d:08:35:d8:f0:48:92:cb:b8:df:
         0f:5c:31:2d:3a:39:2f:21:1a:09:93:7c:8f:57:77:71:3a:ec:
         fd:3a:57:3d:a6:95:ef:05:93:7f:e9:c2:df:c4:7f:72:8d:2d:
         ec:8a:89:be:aa:a0:58:0a:86:59:dd:03:d6:09:3d:14:d1:d4:
         cf:23:ed:5e:2c:a1:d8:b2:ef:82:e1:39:7c:81:1a:84:ab:07:
         46:54:9f:54
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQFhWWJzD3SO3DYeGEnb3g4RSj3UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjEwMzE4RjIzRkQ0QjZFMzc2OTk1OTg5QjNBN0EwRjlF
MkUyOUU0ODAeFw0yNDA4MTEyMDM4MDBaFw0yNTA4MTAyMDQzMDBaMDMxMTAvBgNV
BAMTKDg3RkY1Nzc4ODIyODQ4QUI4NkFBQURCRUQ1QjU4OTA1OTNGREFBMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYFtmJTeknGC1aGPwSNBDa8oVn
3iBAPbIs0SiUkawV18gE3hTfdqOlYuXSbQIQnyejSopsjVnJv9nwva8YGvIhuYT6
s0a9/JuHGDOB+hyE/O8ZWUWDe1tKKZ4jzbe0RWbr25z9FoTAX5d4aXDWRTNM9C48
ZERua/CBN35s1jdP4+MejMZjekFCkr5IXsMzu6kgvOeA03TiBnodGF9AwtH74Kep
PbpsgD0W9Erj0IdOrT5O2/iGMiPRZ4LrJJfG6wCn7IhxUiIytcELAl6Po9i0TEU7
lWkmLpp8dmgI15Hlf9GPvMdPJotqe7/yDc8C/eBMrypszqc5HUz9gZvM4dGjAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUh/9XeIIoSKuGqq2+1bWJBZP9qjUwHwYDVR0j
BBgwFoAUYQMY8j/UtuN2mVmJs6eg+eLinkgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODdjcUtkN2U5clJtSEJFSkhYWEZOZ0FxNVBkRE1rVWFkakhMRU5QSFpC
cHcvMC82MTAzMThGMjNGRDRCNkUzNzY5OTU5ODlCM0E3QTBGOUUyRTI5RTQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxMDMxOEYyM0ZENEI2RTM3
Njk5NTk4OUIzQTdBMEY5RTJFMjlFNDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg3Y3FLZDdlOXJSbUhCRUpIWFhGTmdBcTVQZERNa1VhZGpITEVOUEhaQnB3LzAv
MzEzODM2MmUzMjMyMzQyZTMxMzIzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM3MzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALrgfTANBgkqhkiG9w0BAQsFAAOCAQEAwYq5
XgBrwxB1mAr1atsoPz/mf2gp3ItGZVVNPbBrp01J0Xp02gTgdfxkdQbQBZHqJsKz
Q/Fnk9ZY9DHNpl1zkSmzoRHWaxHbu1e1TjcuvhkH1jtitE/23vkebhVszESoqsRW
u4OPlHN3P6tB4VZT/AoZ3/sibQyDTGBw9pteXqK8SpawfX8n+wilzrl7QMJzKV/c
1tTe61292AvmoEQWvGjTSDay8+aadDtdCDXY8EiSy7jfD1wxLTo5LyEaCZN8j1d3
cTrs/TpXPaaV7wWTf+nC38R/co0t7IqJvqqgWAqGWd0D1gk9FNHUzyPtXiyh2LLv
guE5fIEahKsHRlSfVA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:05 2024 by rpki-client on console-ams.rpki-client.org