Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39362e302f32312d3231203d3e20323632373537.roa
File:                     3138362e3232342e39362e302f32312d3231203d3e20323632373537.roa (raw, json)
Hash identifier:          q4m2Z4kt2Ll/i4v4yMk9NQTw8qEPU+PCDGa3RFpHjXg=
Subject key identifier:   9C:96:83:9F:12:A5:B2:DE:D7:CD:00:85:30:11:E8:C2:0A:52:5D:D3
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       189D61D27169C9BECF3892A7868A661D151C05C7
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39362e302f32312d3231203d3e20323632373537.roa
Signing time:             Sun 11 Aug 2024 20:40:52 +0000
ROA not before:           Sun 11 Aug 2024 20:35:52 +0000
ROA not after:            Sun 10 Aug 2025 20:40:52 +0000
asID:                     262757
IP address blocks:        186.224.96.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:9d:61:d2:71:69:c9:be:cf:38:92:a7:86:8a:66:1d:15:1c:05:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 11 20:35:52 2024 GMT
            Not After : Aug 10 20:40:52 2025 GMT
        Subject: CN=9C96839F12A5B2DED7CD00853011E8C20A525DD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9d:d0:16:ed:52:0a:54:83:b8:4c:6c:57:77:
                    2a:69:b4:23:5e:67:85:7d:8f:66:1c:2d:88:ce:a2:
                    f4:0b:04:ea:d7:bd:08:b0:47:77:7c:40:ab:5f:09:
                    8c:99:87:26:84:23:e5:45:65:c0:f0:c7:5e:40:af:
                    e6:b5:af:5f:ad:91:eb:38:3b:9a:eb:b9:f1:40:e5:
                    e8:ca:ad:b3:aa:68:47:5f:c5:5c:51:18:56:ef:15:
                    78:c2:9c:d2:28:1d:24:7e:4b:2c:e7:f6:18:43:cc:
                    db:90:6e:d4:07:bc:c5:c1:24:73:39:27:4d:1a:b7:
                    fa:e3:76:af:41:f0:72:ba:0c:1e:38:6f:49:a7:5b:
                    1f:dc:d7:79:c6:c2:91:67:24:25:87:17:b4:fc:da:
                    23:f6:e8:a9:81:2b:6c:b2:69:d2:14:09:c7:66:e0:
                    ee:94:0e:ac:da:4a:a9:bb:01:46:f3:a5:ef:a4:41:
                    43:cb:90:32:91:d0:fd:57:bb:4b:15:39:20:45:6b:
                    58:39:10:a6:05:14:9e:77:4e:04:65:55:81:f8:6f:
                    2e:4f:82:95:a3:4f:59:a3:1f:39:3a:ad:45:c2:25:
                    bb:93:8a:64:e9:ba:a1:91:a1:c3:72:4e:0a:99:63:
                    37:33:e0:d8:e7:39:32:91:b4:61:d4:b5:69:bb:95:
                    ec:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:96:83:9F:12:A5:B2:DE:D7:CD:00:85:30:11:E8:C2:0A:52:5D:D3
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39362e302f32312d3231203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         28:29:20:cf:ec:b5:ca:2a:d8:6e:be:03:3f:71:89:c8:dc:1b:
         a2:bb:02:ba:fd:17:be:0e:a8:0a:42:2a:9e:c9:bc:08:02:97:
         4c:2b:cf:0a:c2:ef:f9:07:39:77:29:db:1b:03:a9:a6:c5:52:
         99:c4:41:88:94:0b:8a:a5:92:34:97:bc:01:6a:b6:72:42:9b:
         5d:0b:3c:8f:68:e5:30:71:87:5d:cf:2f:3d:ea:ff:71:2e:d0:
         15:b1:c1:d7:98:cf:48:6b:55:1b:a0:c6:63:63:bb:75:e5:db:
         1d:2f:ed:4a:b2:8a:77:27:73:3a:7f:8c:21:60:86:15:dd:f4:
         25:e2:cb:b0:1f:a8:fd:cc:ae:71:cb:40:9d:c1:37:0d:3b:d7:
         1e:11:d6:e0:51:e0:6d:ff:04:a6:13:64:4b:93:fb:4b:04:6f:
         e6:b0:59:02:5f:ac:f8:73:fc:81:da:46:5b:6e:79:34:8a:7f:
         5c:22:ab:93:cf:d8:e8:53:db:6f:7a:95:cf:20:01:2d:32:92:
         c8:cd:0f:c7:4a:04:29:f3:ad:19:56:bc:29:b7:69:1f:d7:6d:
         11:88:3e:1b:77:9c:ab:e8:5a:f6:ad:81:c3:69:99:bd:49:84:
         90:10:93:a4:67:7f:42:74:d0:c8:57:bf:75:e1:25:76:18:7e:
         3f:cc:56:05
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGJ1h0nFpyb7POJKnhopmHRUcBccwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjEwMzE4RjIzRkQ0QjZFMzc2OTk1OTg5QjNBN0EwRjlF
MkUyOUU0ODAeFw0yNDA4MTEyMDM1NTJaFw0yNTA4MTAyMDQwNTJaMDMxMTAvBgNV
BAMTKDlDOTY4MzlGMTJBNUIyREVEN0NEMDA4NTMwMTFFOEMyMEE1MjVERDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCondAW7VIKVIO4TGxXdypptCNe
Z4V9j2YcLYjOovQLBOrXvQiwR3d8QKtfCYyZhyaEI+VFZcDwx15Ar+a1r1+tkes4
O5rrufFA5ejKrbOqaEdfxVxRGFbvFXjCnNIoHSR+Syzn9hhDzNuQbtQHvMXBJHM5
J00at/rjdq9B8HK6DB44b0mnWx/c13nGwpFnJCWHF7T82iP26KmBK2yyadIUCcdm
4O6UDqzaSqm7AUbzpe+kQUPLkDKR0P1Xu0sVOSBFa1g5EKYFFJ53TgRlVYH4by5P
gpWjT1mjHzk6rUXCJbuTimTpuqGRocNyTgqZYzcz4NjnOTKRtGHUtWm7lezzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUnJaDnxKlst7XzQCFMBHowgpSXdMwHwYDVR0j
BBgwFoAUYQMY8j/UtuN2mVmJs6eg+eLinkgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODdjcUtkN2U5clJtSEJFSkhYWEZOZ0FxNVBkRE1rVWFkakhMRU5QSFpC
cHcvMC82MTAzMThGMjNGRDRCNkUzNzY5OTU5ODlCM0E3QTBGOUUyRTI5RTQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxMDMxOEYyM0ZENEI2RTM3
Njk5NTk4OUIzQTdBMEY5RTJFMjlFNDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg3Y3FLZDdlOXJSbUhCRUpIWFhGTmdBcTVQZERNa1VhZGpITEVOUEhaQnB3LzAv
MzEzODM2MmUzMjMyMzQyZTM5MzYyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM2
MzIzNzM1Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO64GAwDQYJKoZIhvcNAQELBQADggEBACgpIM/s
tcoq2G6+Az9xicjcG6K7Arr9F74OqApCKp7JvAgCl0wrzwrC7/kHOXcp2xsDqabF
UpnEQYiUC4qlkjSXvAFqtnJCm10LPI9o5TBxh13PLz3q/3Eu0BWxwdeYz0hrVRug
xmNju3Xl2x0v7Uqyincnczp/jCFghhXd9CXiy7AfqP3MrnHLQJ3BNw071x4R1uBR
4G3/BKYTZEuT+0sEb+awWQJfrPhz/IHaRltueTSKf1wiq5PP2OhT2296lc8gAS0y
ksjND8dKBCnzrRlWvCm3aR/XbRGIPht3nKvoWvatgcNpmb1JhJAQk6Rnf0J00MhX
v3XhJXYYfj/MVgU=
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:05 2024 by rpki-client on console-ams.rpki-client.org