Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139392e302f32342d3234203d3e203238333532.roa
File:                     3138392e35312e3139392e302f32342d3234203d3e203238333532.roa (raw, json)
Hash identifier:          syI7pyGT+j7zVoSZItb7EUTn/iqxuFZF+ftM8e5KYKg=
Subject key identifier:   58:D3:BE:EC:90:76:B4:B2:26:5C:DD:34:8A:49:2D:62:66:22:86:9F
Certificate issuer:       /CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Certificate serial:       62D3948C345E6266A1F46CF31D541C48EB96F010
Authority key identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139392e302f32342d3234203d3e203238333532.roa
Signing time:             Tue 04 Feb 2025 12:06:24 +0000
ROA not before:           Tue 04 Feb 2025 12:01:24 +0000
ROA not after:            Tue 03 Feb 2026 12:06:24 +0000
asID:                     28352
IP address blocks:        189.51.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 04:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d3:94:8c:34:5e:62:66:a1:f4:6c:f3:1d:54:1c:48:eb:96:f0:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
        Validity
            Not Before: Feb  4 12:01:24 2025 GMT
            Not After : Feb  3 12:06:24 2026 GMT
        Subject: CN=58D3BEEC9076B4B2265CDD348A492D626622869F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:66:b6:68:f2:b1:70:ed:6d:52:04:5c:54:0a:
                    79:f2:30:b9:e0:62:44:62:6e:5b:f4:b1:e4:aa:ff:
                    d1:03:83:3f:bd:f7:5e:d1:13:37:f1:d8:4b:03:72:
                    4b:c3:0c:75:15:97:af:02:90:c0:7e:65:9d:28:9e:
                    f7:82:50:2d:9d:25:e2:a7:9d:a8:57:3e:54:ef:5e:
                    9b:ae:3f:de:2b:ee:e6:a5:e8:c7:75:c2:33:f2:55:
                    83:8c:ff:3b:35:21:40:28:56:86:0d:26:e1:57:97:
                    9b:93:08:fe:d6:73:ee:29:70:44:b6:64:8c:78:3b:
                    09:0c:ea:b3:8d:72:f3:e5:5d:5b:c5:e3:8a:30:64:
                    84:e1:3d:02:1c:55:f4:dd:93:47:e0:ec:b9:69:6c:
                    d3:a1:74:15:b7:0a:b8:47:87:ef:71:7c:6a:20:c4:
                    d7:6e:a8:e5:f0:a0:b9:f6:9d:02:89:21:43:a5:80:
                    c9:1d:eb:0b:11:a2:51:ef:e8:42:a1:cf:97:6d:39:
                    e0:17:6a:17:c8:b8:aa:c0:71:59:20:69:6d:21:be:
                    90:c2:81:22:25:b4:c0:15:82:5b:e4:56:85:23:cd:
                    13:ab:8d:7c:94:c9:70:a9:0e:c0:5b:c0:fe:fb:8c:
                    83:1b:6b:8f:03:5c:ca:0a:c8:22:66:be:4f:31:c9:
                    f9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D3:BE:EC:90:76:B4:B2:26:5C:DD:34:8A:49:2D:62:66:22:86:9F
            X509v3 Authority Key Identifier:
                keyid:D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/3138392e35312e3139392e302f32342d3234203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:9b:80:ff:97:ff:1a:1e:af:39:74:54:50:3e:5c:5d:9f:a1:
         63:e7:45:53:9f:ce:1f:e7:a1:cf:84:18:39:5c:e5:d2:12:45:
         46:3b:02:68:37:90:a5:90:c1:69:f6:2d:65:73:81:0c:b6:f9:
         b6:54:34:65:b7:53:2e:27:bd:81:18:56:a7:f1:56:de:d1:34:
         0f:f1:37:f4:5f:52:0c:8b:50:7c:93:e4:2a:b1:16:cc:8a:ec:
         f4:1e:9a:d8:58:8d:d9:9b:f4:37:82:8c:81:b7:98:33:26:b7:
         cf:f0:28:5a:4f:01:99:e2:b5:d6:8b:ed:92:57:a0:a8:9d:2f:
         55:c8:1c:30:bc:b9:78:39:59:57:b1:85:d3:c9:75:39:31:84:
         6a:b9:ec:13:2a:4a:0c:39:b1:f9:dc:76:a6:86:fa:59:9a:ee:
         71:d1:7f:dc:33:35:cc:46:06:60:53:c0:50:e6:33:1d:92:eb:
         ee:b0:b9:2c:21:8a:58:d3:3b:de:ee:43:23:eb:bd:34:f5:0b:
         61:45:25:0e:1d:18:a7:43:ab:83:37:30:a7:cd:a0:f3:93:64:
         fe:eb:bd:23:56:1f:70:3f:5f:8c:7c:8d:59:ed:09:4e:c7:46:
         94:44:8f:1c:ef:6a:dd:8f:11:0b:6c:00:44:14:44:13:cf:dc:
         ff:22:ee:2f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYtOUjDReYmah9GzzHVQcSOuW8BAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA1RTlEN0UyNUZERDkyNTVFMEE4NzQ1MjIxQjQ0NzU0
OUEzM0Y5NTAeFw0yNTAyMDQxMjAxMjRaFw0yNjAyMDMxMjA2MjRaMDMxMTAvBgNV
BAMTKDU4RDNCRUVDOTA3NkI0QjIyNjVDREQzNDhBNDkyRDYyNjYyMjg2OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ZrZo8rFw7W1SBFxUCnnyMLng
YkRiblv0seSq/9EDgz+9917REzfx2EsDckvDDHUVl68CkMB+ZZ0onveCUC2dJeKn
nahXPlTvXpuuP94r7ual6Md1wjPyVYOM/zs1IUAoVoYNJuFXl5uTCP7Wc+4pcES2
ZIx4OwkM6rONcvPlXVvF44owZIThPQIcVfTdk0fg7LlpbNOhdBW3CrhHh+9xfGog
xNduqOXwoLn2nQKJIUOlgMkd6wsRolHv6EKhz5dtOeAXahfIuKrAcVkgaW0hvpDC
gSIltMAVglvkVoUjzROrjXyUyXCpDsBbwP77jIMba48DXMoKyCJmvk8xyfm/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUWNO+7JB2tLImXN00ikktYmYihp8wHwYDVR0j
BBgwFoAU0F6dfiX92SVeCodFIhtEdUmjP5UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGk2ODZQYktMWHZHY0ZXcjZ2cHN5R3VXdDdDRHczVDFYQ0Y1bXpxdG9l
SHMvMC9EMDVFOUQ3RTI1RkREOTI1NUUwQTg3NDUyMjFCNDQ3NTQ5QTMzRjk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwNUU5RDdFMjVGREQ5MjU1
RTBBODc0NTIyMUI0NDc1NDlBMzNGOTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhpNjg2UGJLTFh2R2NGV3I2dnBzeUd1V3Q3Q0R3M1QxWENGNW16cXRvZUhzLzAv
MzEzODM5MmUzNTMxMmUzMTM5MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzMzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvTPHMA0GCSqGSIb3DQEBCwUAA4IBAQCWm4D/l/8a
Hq85dFRQPlxdn6Fj50VTn84f56HPhBg5XOXSEkVGOwJoN5ClkMFp9i1lc4EMtvm2
VDRlt1MuJ72BGFan8Vbe0TQP8Tf0X1IMi1B8k+QqsRbMiuz0HprYWI3Zm/Q3goyB
t5gzJrfP8ChaTwGZ4rXWi+2SV6ConS9VyBwwvLl4OVlXsYXTyXU5MYRquewTKkoM
ObH53HamhvpZmu5x0X/cMzXMRgZgU8BQ5jMdkuvusLksIYpY0zve7kMj67009Qth
RSUOHRinQ6uDNzCnzaDzk2T+670jVh9wP1+MfI1Z7QlOx0aURI8c72rdjxELbABE
FEQTz9z/Iu4v
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:11 2025 by rpki-client