Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/3138372e34342e3132382e302f31372d3234203d3e203238313836.roa
File:                     3138372e34342e3132382e302f31372d3234203d3e203238313836.roa (raw, json)
Hash identifier:          1PL/1Sd1LH9o7/V5eGkqX5QOTAxJg4D1GbBgIlokhZ0=
Subject key identifier:   07:EF:B2:33:21:9A:DA:35:D9:17:1F:C1:C3:08:49:62:4D:14:55:35
Certificate issuer:       /CN=2E81F2956E5C1958C1F538A1AAA9994DCB83DA21
Certificate serial:       75FB391058827DE03438534C4E1A2BF046EA2618
Authority key identifier: 2E:81:F2:95:6E:5C:19:58:C1:F5:38:A1:AA:A9:99:4D:CB:83:DA:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/3138372e34342e3132382e302f31372d3234203d3e203238313836.roa
Signing time:             Wed 03 Apr 2024 22:48:06 +0000
ROA not before:           Wed 03 Apr 2024 22:43:06 +0000
ROA not after:            Wed 02 Apr 2025 22:48:06 +0000
asID:                     28186
IP address blocks:        187.44.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.crl
                          rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:50:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:fb:39:10:58:82:7d:e0:34:38:53:4c:4e:1a:2b:f0:46:ea:26:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E81F2956E5C1958C1F538A1AAA9994DCB83DA21
        Validity
            Not Before: Apr  3 22:43:06 2024 GMT
            Not After : Apr  2 22:48:06 2025 GMT
        Subject: CN=07EFB233219ADA35D9171FC1C30849624D145535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:eb:6a:cc:36:32:9e:4d:7c:9c:37:7f:0c:3c:
                    34:82:7d:a7:1e:53:67:dc:ba:47:0d:df:4a:a5:69:
                    4f:9c:f0:2d:98:ab:04:21:8a:b0:3a:aa:ac:af:ed:
                    ae:f3:08:7f:41:78:7a:5d:53:06:1c:31:b6:ab:7d:
                    28:46:5f:4d:d1:d5:3c:10:ef:e3:6d:a9:d7:91:ad:
                    5f:46:58:ab:e8:57:0c:e3:0d:60:38:fa:f3:95:18:
                    82:51:0c:6e:d2:c2:a0:15:ef:2e:e8:b6:03:39:16:
                    2e:5e:76:25:6b:8d:93:89:e0:60:1f:b9:cb:12:40:
                    ae:c9:60:7d:00:7a:4c:c3:f7:31:1c:60:05:1e:64:
                    e1:07:78:c8:62:83:75:50:6d:0c:e8:0b:98:6b:26:
                    13:15:56:89:41:87:ba:d5:7b:41:55:5f:a1:c1:c8:
                    fb:c2:5f:98:50:ac:c0:7e:ec:88:b4:16:b6:f4:da:
                    e5:1d:27:fc:ba:46:c6:3b:1e:58:13:c2:7c:13:0e:
                    9d:d9:ca:26:b0:97:bd:e4:e8:07:69:91:01:0f:76:
                    6c:4b:0b:45:99:13:d2:9e:11:6d:76:99:8e:4f:42:
                    f9:51:02:e2:25:95:5d:13:40:6f:2b:14:a8:29:87:
                    64:f0:b4:65:0e:e7:a8:4e:34:5e:32:0f:21:f3:bd:
                    46:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:EF:B2:33:21:9A:DA:35:D9:17:1F:C1:C3:08:49:62:4D:14:55:35
            X509v3 Authority Key Identifier:
                keyid:2E:81:F2:95:6E:5C:19:58:C1:F5:38:A1:AA:A9:99:4D:CB:83:DA:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E81F2956E5C1958C1F538A1AAA9994DCB83DA21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/1/3138372e34342e3132382e302f31372d3234203d3e203238313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         75:a2:85:f7:58:90:93:74:44:83:1d:59:65:55:2d:4f:7c:a8:
         e1:97:f6:71:a1:e9:6b:04:d5:a0:19:8f:de:2d:0e:bf:39:b8:
         11:1b:e0:39:12:50:9d:17:13:02:41:a3:40:46:e2:7c:5f:ce:
         11:08:11:b7:be:aa:eb:34:ed:48:8d:05:76:23:16:fd:f9:cd:
         71:bc:64:fe:2c:88:e7:36:88:1a:c8:41:69:9f:9f:b9:e7:31:
         ce:4f:29:6a:3e:d4:e7:10:26:11:8a:09:17:ce:66:04:f5:0f:
         ef:81:96:7b:71:1f:eb:2b:84:aa:97:09:c1:b3:0e:f6:16:c2:
         45:00:a5:64:fb:b5:f9:1f:70:8b:4b:9f:c5:92:4b:dd:fe:f3:
         64:75:ca:73:79:51:6a:6a:27:87:5f:95:ec:b1:59:d6:99:d1:
         83:34:bb:61:25:b5:ce:fc:9f:50:3c:4d:53:8a:20:ee:e4:a6:
         e0:15:71:33:c5:1e:5e:a0:d2:6a:46:e5:d3:78:d0:71:a3:2d:
         28:7a:93:90:b6:8b:5a:18:29:18:5f:66:d6:ca:2f:85:4f:ca:
         a9:5f:f4:e4:e2:a3:10:d4:37:09:8b:8d:fd:60:b4:c8:66:c5:
         fc:46:14:30:77:45:39:71:07:62:e7:95:93:a2:0a:87:2d:ac:
         47:33:18:5a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdfs5EFiCfeA0OFNMThor8EbqJhgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU4MUYyOTU2RTVDMTk1OEMxRjUzOEExQUFBOTk5NERD
QjgzREEyMTAeFw0yNDA0MDMyMjQzMDZaFw0yNTA0MDIyMjQ4MDZaMDMxMTAvBgNV
BAMTKDA3RUZCMjMzMjE5QURBMzVEOTE3MUZDMUMzMDg0OTYyNEQxNDU1MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz62rMNjKeTXycN38MPDSCface
U2fcukcN30qlaU+c8C2YqwQhirA6qqyv7a7zCH9BeHpdUwYcMbarfShGX03R1TwQ
7+NtqdeRrV9GWKvoVwzjDWA4+vOVGIJRDG7SwqAV7y7otgM5Fi5ediVrjZOJ4GAf
ucsSQK7JYH0AekzD9zEcYAUeZOEHeMhig3VQbQzoC5hrJhMVVolBh7rVe0FVX6HB
yPvCX5hQrMB+7Ii0Frb02uUdJ/y6RsY7HlgTwnwTDp3Zyiawl73k6AdpkQEPdmxL
C0WZE9KeEW12mY5PQvlRAuIllV0TQG8rFKgph2TwtGUO56hONF4yDyHzvUbjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUB++yMyGa2jXZFx/BwwhJYk0UVTUwHwYDVR0j
BBgwFoAULoHylW5cGVjB9TihqqmZTcuD2iEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOE5UZUFyWW5aNHBWY2lXYjRKbnJoczZWTDRpTFlkeEg0eUZRR1ZoZTlF
dnkvMS8yRTgxRjI5NTZFNUMxOTU4QzFGNTM4QTFBQUE5OTk0RENCODNEQTIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFODFGMjk1NkU1QzE5NThD
MUY1MzhBMUFBQTk5OTREQ0I4M0RBMjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhOVGVBclluWjRwVmNpV2I0Sm5yaHM2Vkw0aUxZZHhINHlGUUdWaGU5RXZ5LzEv
MzEzODM3MmUzNDM0MmUzMTMyMzgyZTMwMmYzMTM3MmQzMjM0MjAzZDNlMjAzMjM4
MzEzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQHuyyAMA0GCSqGSIb3DQEBCwUAA4IBAQB1ooX3WJCT
dESDHVllVS1PfKjhl/ZxoelrBNWgGY/eLQ6/ObgRG+A5ElCdFxMCQaNARuJ8X84R
CBG3vqrrNO1IjQV2Ixb9+c1xvGT+LIjnNogayEFpn5+55zHOTylqPtTnECYRigkX
zmYE9Q/vgZZ7cR/rK4SqlwnBsw72FsJFAKVk+7X5H3CLS5/Fkkvd/vNkdcpzeVFq
aieHX5XssVnWmdGDNLthJbXO/J9QPE1TiiDu5KbgFXEzxR5eoNJqRuXTeNBxoy0o
epOQtotaGCkYX2bWyi+FT8qpX/Tk4qMQ1DcJi439YLTIZsX8RhQwd0U5cQdi55WT
ogqHLaxHMxha
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:34 2024 by rpki-client on console-ams.rpki-client.org