Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e34382e302f32312d3231203d3e203238333532.roa
File:                     3138372e302e34382e302f32312d3231203d3e203238333532.roa (raw, json)
Hash identifier:          8FRQFhRz/YzP+dgdqZr69OtPrvdELGl2lxyUugTPfQQ=
Subject key identifier:   67:DC:5F:F7:25:5A:7E:5E:BD:1E:3F:DA:5E:BE:EF:37:90:DD:BE:4D
Certificate issuer:       /CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
Certificate serial:       2A97A342AE45E720865C00D0594585DBE9B53F51
Authority key identifier: 9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e34382e302f32312d3231203d3e203238333532.roa
Signing time:             Thu 04 Apr 2024 10:16:49 +0000
ROA not before:           Thu 04 Apr 2024 10:11:49 +0000
ROA not after:            Thu 03 Apr 2025 10:16:49 +0000
asID:                     28352
IP address blocks:        187.0.48.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:97:a3:42:ae:45:e7:20:86:5c:00:d0:59:45:85:db:e9:b5:3f:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
        Validity
            Not Before: Apr  4 10:11:49 2024 GMT
            Not After : Apr  3 10:16:49 2025 GMT
        Subject: CN=67DC5FF7255A7E5EBD1E3FDA5EBEEF3790DDBE4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f9:72:1e:bd:83:e6:5f:70:92:8e:7e:84:3a:
                    a5:fe:05:fa:b4:ae:ca:62:22:49:32:1e:05:23:75:
                    49:c6:db:0b:87:5a:0b:10:f2:f0:73:e8:e4:e6:57:
                    c6:db:c8:43:1b:7b:f7:cd:90:ba:63:15:ca:a7:90:
                    3c:91:23:d0:7c:0f:d3:50:44:88:59:a5:7b:b4:cb:
                    62:02:b7:b2:96:e7:18:24:9b:d0:ea:8d:03:4f:4a:
                    77:1a:51:3a:be:ce:03:af:30:de:29:b8:cb:e2:fb:
                    14:af:58:31:8b:88:55:c4:b3:e9:92:2a:6f:32:79:
                    ec:ec:92:5b:e7:b2:88:39:f7:2e:06:cf:5a:72:c9:
                    0d:2c:f2:a0:74:f7:77:12:76:ed:1f:b9:73:50:05:
                    b3:82:d8:e1:49:12:63:29:d7:5e:82:52:e9:3a:17:
                    9a:9b:d2:92:e6:12:27:2c:b8:09:de:60:c4:3b:03:
                    0f:db:f8:f8:da:10:ee:86:ed:90:6d:73:cc:c3:2f:
                    7a:86:6b:67:53:b5:37:64:bf:c9:4e:94:ff:d2:02:
                    a3:40:07:1e:05:51:a3:1b:78:f5:be:7d:f8:ac:b4:
                    f6:f5:e5:68:75:19:eb:d0:fe:4d:5d:fb:bd:51:84:
                    f1:79:48:45:56:d5:d6:f3:78:d2:36:c2:f7:05:8a:
                    cc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:DC:5F:F7:25:5A:7E:5E:BD:1E:3F:DA:5E:BE:EF:37:90:DD:BE:4D
            X509v3 Authority Key Identifier:
                keyid:9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e34382e302f32312d3231203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         08:17:23:f9:81:02:e2:47:8c:a3:7d:9e:be:4a:51:99:1e:72:
         d0:14:62:9a:7e:7c:30:95:f7:3a:ba:93:f1:f2:c8:30:e3:3e:
         a3:7e:ff:36:3c:66:19:86:1c:63:c9:16:e4:80:34:b4:1f:17:
         e7:95:f4:60:34:5b:ff:4a:d2:c4:07:c6:25:4d:d9:64:84:54:
         49:d9:fc:cd:62:2d:10:14:8a:63:25:54:8e:39:2e:23:7c:34:
         f0:63:f4:86:24:84:26:65:19:a5:c4:20:b6:12:08:ca:09:45:
         ca:bd:93:fa:e8:eb:92:55:0a:ea:20:1f:f4:88:cb:0a:c4:db:
         65:1e:48:c3:55:ab:d0:21:ca:f2:fb:a8:60:4c:78:94:ee:37:
         87:20:b0:ac:38:29:d0:e2:cf:98:48:49:ab:b6:59:a9:66:62:
         88:99:79:85:3d:ad:30:97:25:d4:3d:14:fc:91:3a:79:34:fa:
         65:09:4c:62:8f:2b:bf:79:61:29:3b:7c:f2:c2:e1:de:24:78:
         64:f8:50:0a:d6:bf:aa:5c:73:9c:6b:4d:df:ba:23:0a:2c:d8:
         bd:8d:61:5a:df:92:a1:09:01:ab:20:a4:b1:1e:a7:c2:0a:19:
         e0:eb:1f:9b:96:b6:bc:ce:7c:88:bd:66:55:24:b0:ba:b4:8f:
         dd:ba:1c:46
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUKpejQq5F5yCGXADQWUWF2+m1P1EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUZDNDEyNkUwRjM1MUU2N0ZFRjlCMTRFQ0Q0QzMwQzQ1
M0M2M0ZGQjAeFw0yNDA0MDQxMDExNDlaFw0yNTA0MDMxMDE2NDlaMDMxMTAvBgNV
BAMTKDY3REM1RkY3MjU1QTdFNUVCRDFFM0ZEQTVFQkVFRjM3OTBEREJFNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN+XIevYPmX3CSjn6EOqX+Bfq0
rspiIkkyHgUjdUnG2wuHWgsQ8vBz6OTmV8bbyEMbe/fNkLpjFcqnkDyRI9B8D9NQ
RIhZpXu0y2ICt7KW5xgkm9DqjQNPSncaUTq+zgOvMN4puMvi+xSvWDGLiFXEs+mS
Km8yeezsklvnsog59y4Gz1pyyQ0s8qB093cSdu0fuXNQBbOC2OFJEmMp116CUuk6
F5qb0pLmEicsuAneYMQ7Aw/b+PjaEO6G7ZBtc8zDL3qGa2dTtTdkv8lOlP/SAqNA
Bx4FUaMbePW+ffistPb15Wh1GevQ/k1d+71RhPF5SEVW1dbzeNI2wvcFisxdAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUZ9xf9yVafl69Hj/aXr7vN5Ddvk0wHwYDVR0j
BBgwFoAUn8QSbg81Hmf++bFOzUwwxFPGP/swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGk2ODZQYktMWHZHY0ZXcjZ2cHN5R3VXdDdDRHczVDFYQ0Y1bXpxdG9l
SHMvMS85RkM0MTI2RTBGMzUxRTY3RkVGOUIxNEVDRDRDMzBDNDUzQzYzRkZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlGQzQxMjZFMEYzNTFFNjdG
RUY5QjE0RUNENEMzMEM0NTNDNjNGRkIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhpNjg2UGJLTFh2R2NGV3I2dnBzeUd1V3Q3Q0R3M1QxWENGNW16cXRvZUhzLzEv
MzEzODM3MmUzMDJlMzQzODJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMyMzgzMzM1
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAO7ADAwDQYJKoZIhvcNAQELBQADggEBAAgXI/mBAuJHjKN9
nr5KUZkectAUYpp+fDCV9zq6k/HyyDDjPqN+/zY8ZhmGHGPJFuSANLQfF+eV9GA0
W/9K0sQHxiVN2WSEVEnZ/M1iLRAUimMlVI45LiN8NPBj9IYkhCZlGaXEILYSCMoJ
Rcq9k/ro65JVCuogH/SIywrE22UeSMNVq9AhyvL7qGBMeJTuN4cgsKw4KdDiz5hI
Sau2WalmYoiZeYU9rTCXJdQ9FPyROnk0+mUJTGKPK795YSk7fPLC4d4keGT4UArW
v6pcc5xrTd+6Iwos2L2NYVrfkqEJAasgpLEep8IKGeDrH5uWtrzOfIi9ZlUksLq0
j926HEY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:47 2024 by rpki-client on console-fra.rpki-client.org