Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138372e3131302e3137362e302f32302d3234203d3e203238313436.roa
File:                     3138372e3131302e3137362e302f32302d3234203d3e203238313436.roa (raw, json)
Hash identifier:          LC5Xj1loBuqUeey9CbZUagGU0jlxNV1tb9lGoUVDaNc=
Subject key identifier:   70:6B:87:B3:66:10:39:0B:21:E4:A6:54:EE:76:65:94:53:D8:8E:60
Certificate issuer:       /CN=C33A5DDC754BD16555FE132A7EE0F058C2FF7B56
Certificate serial:       5E2FD14520CE5EF9D6546F4360EB19E383483BDD
Authority key identifier: C3:3A:5D:DC:75:4B:D1:65:55:FE:13:2A:7E:E0:F0:58:C2:FF:7B:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138372e3131302e3137362e302f32302d3234203d3e203238313436.roa
Signing time:             Fri 08 Nov 2024 18:36:18 +0000
ROA not before:           Fri 08 Nov 2024 18:31:18 +0000
ROA not after:            Fri 07 Nov 2025 18:36:18 +0000
asID:                     28146
IP address blocks:        187.110.176.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:2f:d1:45:20:ce:5e:f9:d6:54:6f:43:60:eb:19:e3:83:48:3b:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C33A5DDC754BD16555FE132A7EE0F058C2FF7B56
        Validity
            Not Before: Nov  8 18:31:18 2024 GMT
            Not After : Nov  7 18:36:18 2025 GMT
        Subject: CN=706B87B36610390B21E4A654EE76659453D88E60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:55:82:1e:2c:ba:a0:06:3f:fc:f4:b2:50:8b:
                    c9:e0:b9:d9:a2:85:81:21:d0:d2:1b:ac:31:cc:d5:
                    a5:eb:91:ab:40:f1:eb:3b:45:71:e8:61:b6:bf:20:
                    7d:3a:42:01:f7:ab:59:33:3f:94:78:14:ef:d0:20:
                    be:bb:4b:4b:08:86:80:64:f1:7e:44:1d:c5:06:3c:
                    15:b1:53:60:5f:16:92:f5:11:31:a7:88:32:2b:f8:
                    25:d4:6e:1e:26:50:84:29:9c:45:e0:af:85:25:46:
                    06:ce:c7:b5:0f:49:15:eb:ae:73:3f:7d:1c:35:d0:
                    bd:b7:24:a6:ae:86:3e:4e:2c:91:73:6a:c4:a9:f9:
                    59:67:df:0f:b3:8d:f1:84:d6:81:75:ac:11:e0:2e:
                    55:ea:44:86:8e:f9:4e:89:fb:8e:eb:a5:73:9b:a1:
                    1e:35:2b:f4:cc:90:c2:e5:8a:d1:eb:a6:44:77:51:
                    15:f4:c1:95:8e:44:e9:35:04:a9:bb:b6:ac:f6:55:
                    4b:4b:63:5d:55:91:ba:03:c0:b6:90:82:09:d6:3f:
                    b2:27:bf:19:24:3a:7a:7c:1a:29:38:39:42:f0:53:
                    fa:e3:b0:ab:f8:eb:98:dc:29:26:4a:ef:94:f8:01:
                    6a:ea:02:cf:bf:b0:b2:00:c3:e1:7e:fe:05:7f:88:
                    f9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6B:87:B3:66:10:39:0B:21:E4:A6:54:EE:76:65:94:53:D8:8E:60
            X509v3 Authority Key Identifier:
                keyid:C3:3A:5D:DC:75:4B:D1:65:55:FE:13:2A:7E:E0:F0:58:C2:FF:7B:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C33A5DDC754BD16555FE132A7EE0F058C2FF7B56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/3138372e3131302e3137362e302f32302d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         45:0f:c5:fb:25:b9:bd:d6:31:94:8c:87:a6:e2:ba:41:86:a7:
         c9:b5:59:c3:d5:88:3a:a3:6f:c3:6a:56:e6:13:90:c2:45:c4:
         a4:bd:75:dd:7d:8a:46:4c:55:da:d7:ee:e3:22:07:b5:74:fc:
         69:3a:d5:ae:31:fe:78:52:05:7a:fc:ef:07:87:a3:89:21:4a:
         db:50:0d:1b:5b:27:24:0d:63:3f:03:32:e0:c8:f9:1e:f2:9b:
         ba:42:4c:35:4e:30:a4:18:17:be:cc:13:bd:34:0e:08:7e:00:
         18:4a:c8:a5:53:60:28:c9:2d:65:4d:dd:da:e6:0e:30:0f:a6:
         9b:44:a7:4f:aa:cf:95:da:34:5f:e7:ea:a1:21:d9:39:12:e2:
         bf:84:d4:55:4f:99:e1:32:94:aa:27:68:52:95:cd:1e:31:a9:
         ef:22:e0:da:a3:98:e6:7f:99:b8:d2:b0:6b:ea:fa:a5:75:b8:
         77:c7:97:e5:40:15:ea:97:70:65:52:f0:1b:e3:6d:06:fd:04:
         15:b4:fb:22:33:04:f1:ed:05:93:e2:e3:6b:d7:ab:2d:96:3e:
         ba:5d:64:0f:fc:50:65:b2:db:1b:d8:e4:3f:41:52:5d:3d:72:
         91:ba:5e:20:30:45:71:8f:37:29:36:39:1b:2b:d0:b7:a0:3a:
         15:0a:66:9f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXi/RRSDOXvnWVG9DYOsZ44NIO90wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzMzQTVEREM3NTRCRDE2NTU1RkUxMzJBN0VFMEYwNThD
MkZGN0I1NjAeFw0yNDExMDgxODMxMThaFw0yNTExMDcxODM2MThaMDMxMTAvBgNV
BAMTKDcwNkI4N0IzNjYxMDM5MEIyMUU0QTY1NEVFNzY2NTk0NTNEODhFNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8VYIeLLqgBj/89LJQi8ngudmi
hYEh0NIbrDHM1aXrkatA8es7RXHoYba/IH06QgH3q1kzP5R4FO/QIL67S0sIhoBk
8X5EHcUGPBWxU2BfFpL1ETGniDIr+CXUbh4mUIQpnEXgr4UlRgbOx7UPSRXrrnM/
fRw10L23JKauhj5OLJFzasSp+Vln3w+zjfGE1oF1rBHgLlXqRIaO+U6J+47rpXOb
oR41K/TMkMLlitHrpkR3URX0wZWOROk1BKm7tqz2VUtLY11VkboDwLaQggnWP7In
vxkkOnp8Gik4OULwU/rjsKv465jcKSZK75T4AWrqAs+/sLIAw+F+/gV/iPn7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcGuHs2YQOQsh5KZU7nZllFPYjmAwHwYDVR0j
BBgwFoAUwzpd3HVL0WVV/hMqfuDwWML/e1YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEZEQ2g2WDV5cktkN0NZWXZacERMOVNxU3pNQUJqUGFhNmRzMUtSSzZx
SzYvMC9DMzNBNUREQzc1NEJEMTY1NTVGRTEzMkE3RUUwRjA1OEMyRkY3QjU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzM0E1RERDNzU0QkQxNjU1
NUZFMTMyQTdFRTBGMDU4QzJGRjdCNTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhGRENoNlg1eXJLZDdDWVl2WnBETDlTcVN6TUFCalBhYTZkczFLUks2cUs2LzAv
MzEzODM3MmUzMTMxMzAyZTMxMzczNjJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMy
MzgzMTM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS7brAwDQYJKoZIhvcNAQELBQADggEBAEUPxfsl
ub3WMZSMh6biukGGp8m1WcPViDqjb8NqVuYTkMJFxKS9dd19ikZMVdrX7uMiB7V0
/Gk61a4x/nhSBXr87weHo4khSttQDRtbJyQNYz8DMuDI+R7ym7pCTDVOMKQYF77M
E700Dgh+ABhKyKVTYCjJLWVN3drmDjAPpptEp0+qz5XaNF/n6qEh2TkS4r+E1FVP
meEylKonaFKVzR4xqe8i4NqjmOZ/mbjSsGvq+qV1uHfHl+VAFeqXcGVS8BvjbQb9
BBW0+yIzBPHtBZPi42vXqy2WPrpdZA/8UGWy2xvY5D9BUl09cpG6XiAwRXGPNyk2
ORsr0LegOhUKZp8=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:05 2024 by rpki-client on console-ams.rpki-client.org