Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39372e302f32342d3234203d3e20323632373537.roa
File:                     3138362e3232342e39372e302f32342d3234203d3e20323632373537.roa (raw, json)
Hash identifier:          Xn/MKEmRlu8wcfyTernuXf/tHibxm9elXfaJMpnslKQ=
Subject key identifier:   3A:75:20:A3:CB:29:D4:48:41:14:41:A1:4F:0E:5D:99:1C:BC:21:50
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       42FF33F38868823072103A442E0F200ABFB0FF27
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39372e302f32342d3234203d3e20323632373537.roa
Signing time:             Sun 11 Aug 2024 20:41:06 +0000
ROA not before:           Sun 11 Aug 2024 20:36:06 +0000
ROA not after:            Sun 10 Aug 2025 20:41:06 +0000
asID:                     262757
IP address blocks:        186.224.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ff:33:f3:88:68:82:30:72:10:3a:44:2e:0f:20:0a:bf:b0:ff:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 11 20:36:06 2024 GMT
            Not After : Aug 10 20:41:06 2025 GMT
        Subject: CN=3A7520A3CB29D448411441A14F0E5D991CBC2150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9c:a4:50:df:4a:17:09:6f:86:7a:76:a1:76:
                    a9:10:c6:91:1b:c9:06:1e:20:60:21:90:13:a1:7f:
                    fe:ae:a5:0b:f4:92:82:01:8e:5c:cf:75:f9:24:fe:
                    0e:51:a1:97:32:4d:47:92:ff:80:05:78:79:fc:80:
                    18:f4:c2:39:ea:da:7a:2c:19:0f:60:ca:29:6c:ce:
                    4f:7e:bc:3a:51:55:a5:1d:2c:22:af:c3:1d:0b:7f:
                    2e:a6:d8:33:0a:82:a4:5b:23:da:83:1c:ce:4f:74:
                    df:14:67:91:6a:fa:ea:0c:0b:61:3d:39:5d:f3:cb:
                    eb:ba:af:fc:91:1b:99:23:35:41:12:74:32:8b:81:
                    68:9b:61:2e:ec:6b:ef:5f:0f:57:95:4b:12:ec:1e:
                    70:f3:89:0a:28:fe:10:92:d4:91:64:78:64:1d:be:
                    ba:b0:e4:e0:25:89:00:9f:5a:46:ad:04:5b:92:ef:
                    a3:a6:a8:e1:74:bb:cb:3a:ab:35:aa:e3:65:2d:fb:
                    81:ff:1a:34:06:10:8f:ed:c5:e7:41:13:0c:4b:6e:
                    cc:8f:7e:16:1e:b6:76:5e:ae:9b:8f:ef:27:77:a4:
                    63:e9:83:ad:bb:30:48:7e:2f:6a:c2:8e:ad:7f:a8:
                    a5:b7:29:6a:8d:41:c3:60:ea:75:e4:df:d2:81:48:
                    78:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:75:20:A3:CB:29:D4:48:41:14:41:A1:4F:0E:5D:99:1C:BC:21:50
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39372e302f32342d3234203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:fa:5b:38:25:7e:4e:9a:fe:36:6e:f8:8a:75:31:9d:43:e8:
         98:0b:ed:f3:38:05:ba:09:da:6d:94:c5:c0:af:fd:f4:15:03:
         aa:38:fa:81:ea:e6:88:30:25:5a:2f:47:dd:6d:3d:2d:29:41:
         d9:ed:12:a3:19:dc:65:67:95:3f:32:36:a2:d8:c9:e4:df:38:
         4d:bd:15:86:a5:91:85:e4:5a:2d:55:84:6f:a6:c8:18:00:e9:
         88:ce:db:4d:ea:0b:9d:65:3e:00:a7:d4:5b:61:6a:05:85:bb:
         7a:a3:b7:de:58:ee:18:01:85:12:d3:26:76:61:ae:a9:e9:94:
         c0:65:09:15:fe:b8:0b:d2:57:60:19:ab:fb:52:97:67:72:f3:
         e6:1e:41:5f:9a:9f:f8:be:01:b2:ca:cd:b8:d3:07:c0:39:72:
         cc:e5:42:89:1f:bf:8e:9a:11:37:8b:80:a2:ee:c0:df:0c:05:
         4e:08:71:19:7d:6c:e4:be:4e:84:d0:62:38:c3:21:f1:d7:fd:
         e4:9e:82:52:c0:ef:9d:c2:b7:25:05:14:a4:39:f1:b3:52:cd:
         d0:18:31:c3:da:11:d0:89:fc:28:7f:d9:84:6c:3e:ea:e8:c9:
         8f:30:78:57:15:cd:e4:df:31:ac:b5:d9:6b:8c:2c:3a:a3:66:
         35:c8:4b:c6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQv8z84hogjByEDpELg8gCr+w/ycwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjEwMzE4RjIzRkQ0QjZFMzc2OTk1OTg5QjNBN0EwRjlF
MkUyOUU0ODAeFw0yNDA4MTEyMDM2MDZaFw0yNTA4MTAyMDQxMDZaMDMxMTAvBgNV
BAMTKDNBNzUyMEEzQ0IyOUQ0NDg0MTE0NDFBMTRGMEU1RDk5MUNCQzIxNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDInKRQ30oXCW+GenahdqkQxpEb
yQYeIGAhkBOhf/6upQv0koIBjlzPdfkk/g5RoZcyTUeS/4AFeHn8gBj0wjnq2nos
GQ9gyilszk9+vDpRVaUdLCKvwx0Lfy6m2DMKgqRbI9qDHM5PdN8UZ5Fq+uoMC2E9
OV3zy+u6r/yRG5kjNUESdDKLgWibYS7sa+9fD1eVSxLsHnDziQoo/hCS1JFkeGQd
vrqw5OAliQCfWkatBFuS76OmqOF0u8s6qzWq42Ut+4H/GjQGEI/txedBEwxLbsyP
fhYetnZerpuP7yd3pGPpg627MEh+L2rCjq1/qKW3KWqNQcNg6nXk39KBSHiFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUOnUgo8sp1EhBFEGhTw5dmRy8IVAwHwYDVR0j
BBgwFoAUYQMY8j/UtuN2mVmJs6eg+eLinkgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODdjcUtkN2U5clJtSEJFSkhYWEZOZ0FxNVBkRE1rVWFkakhMRU5QSFpC
cHcvMC82MTAzMThGMjNGRDRCNkUzNzY5OTU5ODlCM0E3QTBGOUUyRTI5RTQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxMDMxOEYyM0ZENEI2RTM3
Njk5NTk4OUIzQTdBMEY5RTJFMjlFNDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg3Y3FLZDdlOXJSbUhCRUpIWFhGTmdBcTVQZERNa1VhZGpITEVOUEhaQnB3LzAv
MzEzODM2MmUzMjMyMzQyZTM5MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNzM1Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC64GEwDQYJKoZIhvcNAQELBQADggEBAFj6Wzgl
fk6a/jZu+Ip1MZ1D6JgL7fM4BboJ2m2UxcCv/fQVA6o4+oHq5ogwJVovR91tPS0p
QdntEqMZ3GVnlT8yNqLYyeTfOE29FYalkYXkWi1VhG+myBgA6YjO203qC51lPgCn
1FthagWFu3qjt95Y7hgBhRLTJnZhrqnplMBlCRX+uAvSV2AZq/tSl2dy8+YeQV+a
n/i+AbLKzbjTB8A5cszlQokfv46aETeLgKLuwN8MBU4IcRl9bOS+ToTQYjjDIfHX
/eSeglLA753CtyUFFKQ58bNSzdAYMcPaEdCJ/Ch/2YRsPuroyY8weFcVzeTfMay1
2WuMLDqjZjXIS8Y=
-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:01 2024 by rpki-client on console-fra.rpki-client.org