Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/1/3138372e34392e3230382e302f32302d3234203d3e203238313534.roa
File:                     3138372e34392e3230382e302f32302d3234203d3e203238313534.roa (raw, json)
Hash identifier:          NPztteMAyNeKOHhpZaUe02jnvSJ9I/ZptMJ8pGTCDPw=
Subject key identifier:   05:5C:2A:CD:D7:9F:29:CE:0A:10:84:D7:DC:91:76:96:17:49:9E:75
Certificate issuer:       /CN=812191D8B89140CC7C6B2A5D3CF140116F023979
Certificate serial:       6AF35A27C7D2377C696B7EEED8C0560BA499B3C4
Authority key identifier: 81:21:91:D8:B8:91:40:CC:7C:6B:2A:5D:3C:F1:40:11:6F:02:39:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/812191D8B89140CC7C6B2A5D3CF140116F023979.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/1/3138372e34392e3230382e302f32302d3234203d3e203238313534.roa
Signing time:             Thu 04 Apr 2024 07:50:50 +0000
ROA not before:           Thu 04 Apr 2024 07:45:50 +0000
ROA not after:            Thu 03 Apr 2025 07:50:50 +0000
asID:                     28154
IP address blocks:        187.49.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/1/812191D8B89140CC7C6B2A5D3CF140116F023979.crl
                          rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/1/812191D8B89140CC7C6B2A5D3CF140116F023979.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/812191D8B89140CC7C6B2A5D3CF140116F023979.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f3:5a:27:c7:d2:37:7c:69:6b:7e:ee:d8:c0:56:0b:a4:99:b3:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=812191D8B89140CC7C6B2A5D3CF140116F023979
        Validity
            Not Before: Apr  4 07:45:50 2024 GMT
            Not After : Apr  3 07:50:50 2025 GMT
        Subject: CN=055C2ACDD79F29CE0A1084D7DC91769617499E75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ec:3c:16:d6:b7:de:cc:6c:ef:94:6e:a6:c1:
                    6f:79:05:01:6e:f6:43:dc:fd:52:34:73:bd:e2:b7:
                    a3:7d:2c:35:aa:5a:ff:be:7b:0c:e1:dd:4e:02:64:
                    79:ee:56:bc:8d:2b:d3:e8:59:1c:4f:80:c9:88:28:
                    91:dd:66:8e:ee:6f:dd:c7:cc:fc:a8:b2:f3:72:9b:
                    f9:7a:e4:bd:31:3c:7b:ea:ee:7b:6f:15:3d:bf:a8:
                    7e:5c:d4:5a:41:70:f6:0b:f5:18:c0:81:e9:56:b1:
                    a1:8e:33:0c:5e:b4:de:0a:e3:87:8c:d3:12:62:0e:
                    38:eb:73:3f:f6:ce:82:a0:2c:84:eb:bd:dc:34:27:
                    39:3f:04:9e:d3:4d:13:06:6f:5a:77:e4:cd:bc:58:
                    bc:9d:bd:26:24:d6:ab:05:53:64:41:02:e6:0b:24:
                    6e:f5:db:29:17:5d:f7:9b:d4:91:77:ce:c9:24:0e:
                    e9:64:94:cc:0c:2b:01:94:02:58:c3:19:d4:21:3d:
                    39:f7:c0:8d:2e:8a:12:1a:d8:31:88:16:67:11:44:
                    ee:8f:86:05:e9:c7:35:b6:0c:3b:4b:f3:80:45:95:
                    28:f5:29:14:f8:f3:f2:60:81:9a:e2:1d:0c:b5:d0:
                    f5:79:fc:61:32:6b:37:ab:58:58:bc:f4:53:ba:c3:
                    41:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5C:2A:CD:D7:9F:29:CE:0A:10:84:D7:DC:91:76:96:17:49:9E:75
            X509v3 Authority Key Identifier:
                keyid:81:21:91:D8:B8:91:40:CC:7C:6B:2A:5D:3C:F1:40:11:6F:02:39:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/1/812191D8B89140CC7C6B2A5D3CF140116F023979.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/812191D8B89140CC7C6B2A5D3CF140116F023979.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8SyiMGxgm2vHzuKqTHFEioQyFSHASeJjrYisTkzagHG5/1/3138372e34392e3230382e302f32302d3234203d3e203238313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2c:dd:22:a8:a3:78:42:b5:af:af:38:75:53:d9:3c:90:cc:cc:
         48:97:ee:4b:73:74:31:f4:57:96:ae:6d:35:5c:a0:b2:76:e7:
         f2:5c:34:e2:93:85:7b:93:23:0b:b5:82:c2:50:3f:7c:44:c1:
         9f:df:ea:9f:d5:06:5d:39:3f:95:cd:ca:9c:43:54:43:dd:9d:
         b7:c3:37:6b:eb:4b:f5:11:cc:5e:92:47:1c:21:df:b8:56:e2:
         2a:81:9f:d2:5d:71:7c:1f:55:7d:74:f6:eb:b1:5a:54:d5:5f:
         07:cd:e9:78:c5:41:1a:76:98:89:65:68:67:ca:f7:8f:ad:22:
         05:e4:38:cb:40:21:d3:53:19:80:46:94:33:15:64:56:f6:9d:
         30:d2:3f:4f:d0:e6:c7:04:9c:37:52:ad:32:05:e3:9e:55:f0:
         77:89:c1:5f:e1:7e:6e:42:f0:61:df:b5:17:99:41:93:23:20:
         46:80:06:2e:c1:96:5c:3f:b2:4e:56:e4:50:4c:be:04:6c:cb:
         85:c0:10:d8:f6:0e:60:02:ba:2f:24:ea:4e:b8:3d:1b:05:e7:
         8c:a4:a0:b8:3c:2d:62:f6:ac:71:53:d9:49:59:64:85:bc:28:
         1c:5c:bc:3a:01:15:08:b0:79:97:39:93:9a:e3:11:69:6d:b3:
         0b:de:83:8f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUavNaJ8fSN3xpa37u2MBWC6SZs8QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODEyMTkxRDhCODkxNDBDQzdDNkIyQTVEM0NGMTQwMTE2
RjAyMzk3OTAeFw0yNDA0MDQwNzQ1NTBaFw0yNTA0MDMwNzUwNTBaMDMxMTAvBgNV
BAMTKDA1NUMyQUNERDc5RjI5Q0UwQTEwODREN0RDOTE3Njk2MTc0OTlFNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC27DwW1rfezGzvlG6mwW95BQFu
9kPc/VI0c73it6N9LDWqWv++ewzh3U4CZHnuVryNK9PoWRxPgMmIKJHdZo7ub93H
zPyosvNym/l65L0xPHvq7ntvFT2/qH5c1FpBcPYL9RjAgelWsaGOMwxetN4K44eM
0xJiDjjrcz/2zoKgLITrvdw0Jzk/BJ7TTRMGb1p35M28WLydvSYk1qsFU2RBAuYL
JG712ykXXfeb1JF3zskkDulklMwMKwGUAljDGdQhPTn3wI0uihIa2DGIFmcRRO6P
hgXpxzW2DDtL84BFlSj1KRT48/JggZriHQy10PV5/GEyazerWFi89FO6w0F7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUBVwqzdefKc4KEITX3JF2lhdJnnUwHwYDVR0j
BBgwFoAUgSGR2LiRQMx8aypdPPFAEW8COXkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFN5aU1HeGdtMnZIenVLcVRIRkVpb1F5RlNIQVNlSmpyWWlzVGt6YWdI
RzUvMS84MTIxOTFEOEI4OTE0MENDN0M2QjJBNUQzQ0YxNDAxMTZGMDIzOTc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgxMjE5MUQ4Qjg5MTQwQ0M3
QzZCMkE1RDNDRjE0MDExNkYwMjM5NzkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhTeWlNR3hnbTJ2SHp1S3FUSEZFaW9ReUZTSEFTZUpqcllpc1RremFnSEc1LzEv
MzEzODM3MmUzNDM5MmUzMjMwMzgyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4
MzEzNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEuzHQMA0GCSqGSIb3DQEBCwUAA4IBAQAs3SKoo3hC
ta+vOHVT2TyQzMxIl+5Lc3Qx9FeWrm01XKCydufyXDTik4V7kyMLtYLCUD98RMGf
3+qf1QZdOT+VzcqcQ1RD3Z23wzdr60v1EcxekkccId+4VuIqgZ/SXXF8H1V9dPbr
sVpU1V8Hzel4xUEadpiJZWhnyvePrSIF5DjLQCHTUxmARpQzFWRW9p0w0j9P0ObH
BJw3Uq0yBeOeVfB3icFf4X5uQvBh37UXmUGTIyBGgAYuwZZcP7JOVuRQTL4EbMuF
wBDY9g5gArovJOpOuD0bBeeMpKC4PC1i9qxxU9lJWWSFvCgcXLw6ARUIsHmXOZOa
4xFpbbML3oOP
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:00 2024 by rpki-client on console-ams.rpki-client.org