Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/1/3138362e32362e38382e302f32332d3233203d3e20323730393236.roa
File:                     3138362e32362e38382e302f32332d3233203d3e20323730393236.roa (raw, json)
Hash identifier:          1UnqsC3ALX6NJdQNVzqhC80DUzkhBc2r+AmGu8Z2uFE=
Subject key identifier:   75:81:17:86:2D:73:B6:9D:EB:00:3E:B5:CE:8F:CA:15:C6:AE:9B:EE
Certificate issuer:       /CN=5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F
Certificate serial:       09F8B6CBC8862DC17D36653B083387AA635150AB
Authority key identifier: 5D:79:80:6D:AD:4F:4A:CB:46:CA:F2:5A:4A:3E:D4:69:42:6E:6A:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/1/3138362e32362e38382e302f32332d3233203d3e20323730393236.roa
Signing time:             Thu 04 Apr 2024 08:50:31 +0000
ROA not before:           Thu 04 Apr 2024 08:45:31 +0000
ROA not after:            Thu 03 Apr 2025 08:50:31 +0000
asID:                     270926
IP address blocks:        186.26.88.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/1/5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.crl
                          rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/1/5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:f8:b6:cb:c8:86:2d:c1:7d:36:65:3b:08:33:87:aa:63:51:50:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F
        Validity
            Not Before: Apr  4 08:45:31 2024 GMT
            Not After : Apr  3 08:50:31 2025 GMT
        Subject: CN=758117862D73B69DEB003EB5CE8FCA15C6AE9BEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1c:ce:dc:68:a3:63:4f:47:e7:c5:8e:ad:88:
                    9d:2c:a7:68:8b:2e:72:d1:5e:a6:5c:99:c7:70:62:
                    0e:02:ec:f5:21:06:b5:cd:d4:2f:fc:c7:42:34:44:
                    45:53:d1:46:15:ab:03:0e:53:d0:41:80:1a:ac:54:
                    94:45:06:09:f7:3f:5d:ee:21:36:4f:9c:01:a9:ca:
                    e4:f9:7b:31:50:62:0e:a6:58:fe:79:6b:68:94:08:
                    ea:ff:f9:f2:9c:92:8c:6e:d3:1b:1f:77:af:63:6e:
                    9d:da:23:52:74:95:6e:3a:13:f1:45:44:9d:6e:1a:
                    e6:ac:4e:1d:e1:bc:8f:78:73:2c:96:92:2b:c0:9b:
                    07:69:f8:5b:f8:4c:7f:ab:3b:f0:da:15:d4:16:a7:
                    ff:57:bd:bd:77:1d:cd:b5:71:09:d6:af:0d:bc:f2:
                    db:ef:1f:8c:31:cf:e9:05:c2:5e:f0:5b:42:0a:43:
                    b8:6b:47:42:8c:01:f1:8b:a8:74:c8:3e:df:04:a8:
                    41:fe:54:11:92:de:38:ed:36:c4:e5:5e:aa:fd:1f:
                    00:8a:42:7c:f3:03:31:30:ec:1f:f4:bf:df:dd:a1:
                    1b:cf:d6:d4:cd:ad:62:a9:f1:c9:bd:da:1b:2f:e8:
                    fa:a5:0f:9c:89:0c:a3:13:d2:95:ba:2c:74:40:b0:
                    af:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:81:17:86:2D:73:B6:9D:EB:00:3E:B5:CE:8F:CA:15:C6:AE:9B:EE
            X509v3 Authority Key Identifier:
                keyid:5D:79:80:6D:AD:4F:4A:CB:46:CA:F2:5A:4A:3E:D4:69:42:6E:6A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/1/5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/1/3138362e32362e38382e302f32332d3233203d3e20323730393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.26.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:4b:46:ac:29:45:29:dd:7b:89:01:2b:2c:bc:78:62:c6:41:
         a6:0f:e5:92:13:74:35:7c:13:18:3b:b8:38:1c:80:f5:c2:eb:
         89:82:8e:d5:b2:cd:82:8b:05:c2:9d:95:d7:40:fa:c8:52:8e:
         f8:e9:e0:3e:fb:d4:b8:bb:bf:a7:d3:83:e2:cb:45:9b:85:9f:
         4e:ea:8f:c8:a2:cd:e6:67:a1:e8:a9:74:45:15:b3:a2:f2:88:
         87:bc:5d:b5:f8:5d:a2:73:b8:87:fb:2e:1c:6b:2c:14:b7:58:
         53:b3:9d:aa:48:42:a9:24:8f:c8:72:a4:ee:b7:c8:e8:0c:3a:
         c1:45:4e:d0:21:5d:17:5c:7e:f4:f8:30:1a:2c:6c:cb:54:34:
         84:11:f3:d0:6a:48:78:02:42:50:d2:86:7a:f1:4a:16:5e:30:
         e3:35:72:4d:e0:d0:75:c2:03:2e:a6:38:eb:34:af:90:a3:ea:
         d3:c3:68:89:ac:e7:ec:0d:db:33:67:83:cb:8b:25:5b:dd:3e:
         cf:4d:b0:14:b4:5d:c0:6c:44:2b:3f:4e:c0:24:4d:76:9f:7a:
         62:9e:43:67:b1:fe:87:5d:9e:50:73:63:92:07:09:c8:a2:5a:
         3f:6f:77:b1:b2:29:58:a2:75:bb:87:de:53:de:8e:0b:a0:bd:
         1d:b0:fc:be
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCfi2y8iGLcF9NmU7CDOHqmNRUKswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQ3OTgwNkRBRDRGNEFDQjQ2Q0FGMjVBNEEzRUQ0Njk0
MjZFNkEyRjAeFw0yNDA0MDQwODQ1MzFaFw0yNTA0MDMwODUwMzFaMDMxMTAvBgNV
BAMTKDc1ODExNzg2MkQ3M0I2OURFQjAwM0VCNUNFOEZDQTE1QzZBRTlCRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYHM7caKNjT0fnxY6tiJ0sp2iL
LnLRXqZcmcdwYg4C7PUhBrXN1C/8x0I0REVT0UYVqwMOU9BBgBqsVJRFBgn3P13u
ITZPnAGpyuT5ezFQYg6mWP55a2iUCOr/+fKckoxu0xsfd69jbp3aI1J0lW46E/FF
RJ1uGuasTh3hvI94cyyWkivAmwdp+Fv4TH+rO/DaFdQWp/9Xvb13Hc21cQnWrw28
8tvvH4wxz+kFwl7wW0IKQ7hrR0KMAfGLqHTIPt8EqEH+VBGS3jjtNsTlXqr9HwCK
QnzzAzEw7B/0v9/doRvP1tTNrWKp8cm92hsv6PqlD5yJDKMT0pW6LHRAsK/9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUdYEXhi1ztp3rAD61zo/KFcaum+4wHwYDVR0j
BBgwFoAUXXmAba1PSstGyvJaSj7UaUJuai8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFpZUm5kQWFOUDZrNjVWUm9vdWpjU3BkaVk5cWJpdHlFZjNhTVd0VDY1
Y1MvMS81RDc5ODA2REFENEY0QUNCNDZDQUYyNUE0QTNFRDQ2OTQyNkU2QTJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVENzk4MDZEQUQ0RjRBQ0I0
NkNBRjI1QTRBM0VENDY5NDI2RTZBMkYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhaWVJuZEFhTlA2azY1VlJvb3VqY1NwZGlZOXFiaXR5RWYzYU1XdFQ2NWNTLzEv
MzEzODM2MmUzMjM2MmUzODM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNzMw
MzkzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBuhpYMA0GCSqGSIb3DQEBCwUAA4IBAQBSS0asKUUp
3XuJASssvHhixkGmD+WSE3Q1fBMYO7g4HID1wuuJgo7Vss2CiwXCnZXXQPrIUo74
6eA++9S4u7+n04Piy0WbhZ9O6o/Ios3mZ6HoqXRFFbOi8oiHvF21+F2ic7iH+y4c
aywUt1hTs52qSEKpJI/IcqTut8joDDrBRU7QIV0XXH70+DAaLGzLVDSEEfPQakh4
AkJQ0oZ68UoWXjDjNXJN4NB1wgMupjjrNK+Qo+rTw2iJrOfsDdszZ4PLiyVb3T7P
TbAUtF3AbEQrP07AJE12n3pinkNnsf6HXZ5Qc2OSBwnIolo/b3exsilYonW7h95T
3o4LoL0dsPy+
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:39 2024 by rpki-client on console-fra.rpki-client.org