Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/1/3138362e32362e39302e302f32332d3233203d3e20323730393236.roa
File:                     3138362e32362e39302e302f32332d3233203d3e20323730393236.roa (raw, json)
Hash identifier:          jWC/4X4q0mKfTPZAvV5/BuE9BbMFwhxCXQ52kkL2Qec=
Subject key identifier:   44:3D:11:DF:E3:A6:9D:09:26:FC:3B:84:0F:3C:65:50:12:D4:E3:C8
Certificate issuer:       /CN=5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F
Certificate serial:       7D2A214EFFD9BDADBB991D254F50EFE925983C37
Authority key identifier: 5D:79:80:6D:AD:4F:4A:CB:46:CA:F2:5A:4A:3E:D4:69:42:6E:6A:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/1/3138362e32362e39302e302f32332d3233203d3e20323730393236.roa
Signing time:             Thu 04 Apr 2024 08:50:32 +0000
ROA not before:           Thu 04 Apr 2024 08:45:32 +0000
ROA not after:            Thu 03 Apr 2025 08:50:32 +0000
asID:                     270926
IP address blocks:        186.26.90.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/1/5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.crl
                          rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/1/5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 12:30:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:2a:21:4e:ff:d9:bd:ad:bb:99:1d:25:4f:50:ef:e9:25:98:3c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F
        Validity
            Not Before: Apr  4 08:45:32 2024 GMT
            Not After : Apr  3 08:50:32 2025 GMT
        Subject: CN=443D11DFE3A69D0926FC3B840F3C655012D4E3C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5f:d2:34:95:4d:d0:04:11:25:af:f2:52:a4:
                    5d:18:75:ec:d3:76:ae:de:fa:7c:02:4c:13:f2:09:
                    d4:93:bf:a4:0d:d6:b8:04:2c:6d:9e:34:ab:38:34:
                    a2:8e:e0:15:73:d3:80:19:e3:cc:13:f6:ff:d7:b3:
                    c4:28:fb:f6:d0:8a:ee:87:d9:5d:cc:b3:40:fa:c1:
                    0d:1a:d7:47:5a:2b:ed:ca:d7:67:1d:b7:af:b1:1d:
                    05:c9:75:87:92:09:02:b9:bb:5b:1f:7c:01:34:2b:
                    29:28:2e:53:82:d3:1a:9d:23:fc:95:34:d2:73:04:
                    41:12:d7:2f:31:83:ba:42:2e:fd:52:ba:3e:4c:42:
                    4e:7a:cc:e7:ad:76:d9:4a:0a:e1:05:c6:69:50:f3:
                    55:22:58:aa:8c:ca:75:ca:5c:b4:ac:cd:dd:1f:ca:
                    bc:6b:6d:5d:fe:fd:22:68:2d:4c:61:93:ab:c1:3c:
                    87:4e:e9:7e:5b:54:97:4b:87:d3:3b:30:a1:3d:88:
                    0a:93:73:52:5a:49:02:01:dc:87:19:53:06:8f:08:
                    50:0b:84:7c:f1:70:d6:25:28:50:8f:e5:11:db:3f:
                    aa:1f:0a:02:e5:a9:29:8c:8e:76:e8:51:05:34:62:
                    6b:02:17:27:75:60:52:fc:6f:90:35:dd:35:e1:ed:
                    2e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3D:11:DF:E3:A6:9D:09:26:FC:3B:84:0F:3C:65:50:12:D4:E3:C8
            X509v3 Authority Key Identifier:
                keyid:5D:79:80:6D:AD:4F:4A:CB:46:CA:F2:5A:4A:3E:D4:69:42:6E:6A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/1/5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D79806DAD4F4ACB46CAF25A4A3ED469426E6A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/1/3138362e32362e39302e302f32332d3233203d3e20323730393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.26.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:6f:27:bb:0e:62:5c:19:6a:6d:c5:c2:16:b4:71:b8:5a:38:
         a4:60:60:1a:d7:69:d6:d8:71:24:c7:18:34:a3:d4:e5:a4:01:
         0c:dc:25:5f:9a:1b:0f:3d:d5:4f:cc:a1:50:b5:a2:d4:72:f7:
         57:21:89:d9:e4:c8:dd:d8:de:d7:81:f4:1c:57:9c:c0:6d:2b:
         87:63:8f:8d:f3:dc:c5:a9:34:ff:c7:48:3a:1a:2a:30:e2:fc:
         49:0b:7d:0b:da:8f:d1:79:39:dd:04:91:17:68:fc:e9:59:99:
         db:5a:06:c6:c6:1a:21:a8:ad:f9:ef:9a:ab:59:b7:fd:a0:bc:
         33:6b:24:36:08:45:d8:fa:ec:fb:1e:7e:d2:be:7f:00:83:41:
         35:56:1a:cb:70:7d:8e:2f:5e:25:dc:c8:e5:74:49:c5:96:30:
         c8:6e:f5:ab:39:5a:c5:3b:80:59:13:a3:34:5b:e7:ba:fc:fd:
         11:e9:05:7b:3d:74:43:cc:f8:d8:17:37:06:90:1d:7d:03:82:
         bc:d6:e3:f1:02:62:62:81:b0:5e:c7:f7:df:24:f2:1e:7d:82:
         50:69:65:dd:3c:3d:10:87:a4:0c:47:7f:92:36:eb:dc:bd:ef:
         7a:ca:16:eb:ed:4c:95:0c:26:ba:59:41:be:01:43:65:bc:a7:
         bf:a6:dc:72
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfSohTv/Zva27mR0lT1Dv6SWYPDcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQ3OTgwNkRBRDRGNEFDQjQ2Q0FGMjVBNEEzRUQ0Njk0
MjZFNkEyRjAeFw0yNDA0MDQwODQ1MzJaFw0yNTA0MDMwODUwMzJaMDMxMTAvBgNV
BAMTKDQ0M0QxMURGRTNBNjlEMDkyNkZDM0I4NDBGM0M2NTUwMTJENEUzQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8X9I0lU3QBBElr/JSpF0YdezT
dq7e+nwCTBPyCdSTv6QN1rgELG2eNKs4NKKO4BVz04AZ48wT9v/Xs8Qo+/bQiu6H
2V3Ms0D6wQ0a10daK+3K12cdt6+xHQXJdYeSCQK5u1sffAE0KykoLlOC0xqdI/yV
NNJzBEES1y8xg7pCLv1Suj5MQk56zOetdtlKCuEFxmlQ81UiWKqMynXKXLSszd0f
yrxrbV3+/SJoLUxhk6vBPIdO6X5bVJdLh9M7MKE9iAqTc1JaSQIB3IcZUwaPCFAL
hHzxcNYlKFCP5RHbP6ofCgLlqSmMjnboUQU0YmsCFyd1YFL8b5A13TXh7S5fAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQURD0R3+OmnQkm/DuEDzxlUBLU48gwHwYDVR0j
BBgwFoAUXXmAba1PSstGyvJaSj7UaUJuai8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFpZUm5kQWFOUDZrNjVWUm9vdWpjU3BkaVk5cWJpdHlFZjNhTVd0VDY1
Y1MvMS81RDc5ODA2REFENEY0QUNCNDZDQUYyNUE0QTNFRDQ2OTQyNkU2QTJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVENzk4MDZEQUQ0RjRBQ0I0
NkNBRjI1QTRBM0VENDY5NDI2RTZBMkYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhaWVJuZEFhTlA2azY1VlJvb3VqY1NwZGlZOXFiaXR5RWYzYU1XdFQ2NWNTLzEv
MzEzODM2MmUzMjM2MmUzOTMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNzMw
MzkzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBuhpaMA0GCSqGSIb3DQEBCwUAA4IBAQA0bye7DmJc
GWptxcIWtHG4WjikYGAa12nW2HEkxxg0o9TlpAEM3CVfmhsPPdVPzKFQtaLUcvdX
IYnZ5Mjd2N7XgfQcV5zAbSuHY4+N89zFqTT/x0g6Giow4vxJC30L2o/ReTndBJEX
aPzpWZnbWgbGxhohqK3575qrWbf9oLwzayQ2CEXY+uz7Hn7Svn8Ag0E1VhrLcH2O
L14l3MjldEnFljDIbvWrOVrFO4BZE6M0W+e6/P0R6QV7PXRDzPjYFzcGkB19A4K8
1uPxAmJigbBex/ffJPIefYJQaWXdPD0Qh6QMR3+SNuvcve96yhbr7UyVDCa6WUG+
AUNlvKe/ptxy
-----END CERTIFICATE-----
Generated at Fri Sep 27 12:52:58 2024 by rpki-client on console-ams.rpki-client.org