Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e35382e302f32342d3234203d3e203238333532.roa
File:                     3138372e302e35382e302f32342d3234203d3e203238333532.roa (raw, json)
Hash identifier:          +nR38+N+8gWGz0hy7i9Q6AJWWFIviUg8nQWZlN8Doq0=
Subject key identifier:   09:41:C5:62:DE:84:39:E0:14:AA:0C:8E:C6:EC:AC:F6:C6:6B:7B:36
Certificate issuer:       /CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
Certificate serial:       02E48D529138351BFB0545602029AB97455ACE7E
Authority key identifier: 9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e35382e302f32342d3234203d3e203238333532.roa
Signing time:             Fri 12 Jul 2024 12:25:43 +0000
ROA not before:           Fri 12 Jul 2024 12:20:43 +0000
ROA not after:            Fri 11 Jul 2025 12:25:43 +0000
asID:                     28352
IP address blocks:        187.0.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e4:8d:52:91:38:35:1b:fb:05:45:60:20:29:ab:97:45:5a:ce:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
        Validity
            Not Before: Jul 12 12:20:43 2024 GMT
            Not After : Jul 11 12:25:43 2025 GMT
        Subject: CN=0941C562DE8439E014AA0C8EC6ECACF6C66B7B36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:02:41:16:91:d1:39:5a:d2:d4:ef:ac:db:47:
                    bd:df:db:f3:23:d9:89:d7:93:75:8c:5a:a0:2b:07:
                    d4:9a:75:88:9d:83:48:d2:e9:b6:42:07:07:8e:d0:
                    91:46:4a:75:84:d5:33:a8:68:41:a0:12:e2:dc:d2:
                    21:ab:97:35:c3:23:22:91:df:48:2a:2e:b5:55:ae:
                    7e:79:3b:2b:31:16:81:5a:a8:b6:38:91:6c:9c:d7:
                    2a:62:3d:db:f9:69:8b:9d:77:fb:4e:4c:13:8c:e3:
                    e3:7a:d3:09:37:a7:3a:65:f8:43:5e:12:06:2b:23:
                    0b:d3:70:71:82:b9:61:b3:69:57:6c:88:03:ce:6b:
                    eb:59:58:fc:c4:e1:a2:17:d1:c1:63:8f:cf:ae:da:
                    19:70:d7:4e:22:d5:05:8e:8e:e1:d4:7a:a0:f0:e4:
                    bb:09:6f:17:00:a3:77:a0:50:05:01:68:d6:a3:ec:
                    03:3f:1a:b8:1b:c7:83:2a:57:8a:56:c6:c2:68:85:
                    1d:83:27:f4:a9:6e:64:ee:78:49:4e:a5:54:f0:fb:
                    9d:1e:b7:0f:55:66:72:56:aa:85:2a:53:e2:1f:00:
                    d4:3c:7e:d4:96:c8:85:1e:f0:67:1a:5f:40:08:52:
                    dd:32:4b:6a:11:ef:2e:07:c2:d4:18:3d:a7:05:a6:
                    4c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:41:C5:62:DE:84:39:E0:14:AA:0C:8E:C6:EC:AC:F6:C6:6B:7B:36
            X509v3 Authority Key Identifier:
                keyid:9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138372e302e35382e302f32342d3234203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:43:b0:98:af:7b:65:51:28:08:de:a7:df:f8:28:33:61:c7:
         c7:b0:a5:50:a1:33:ab:e8:9e:7f:6f:09:91:07:8c:13:7e:d5:
         cd:60:89:ca:66:43:3c:8a:82:00:c7:c2:f4:67:39:e6:16:96:
         ce:a0:17:53:86:e6:f9:6e:e3:87:70:92:71:b1:79:52:c7:1e:
         11:77:72:92:8f:2b:d3:f4:c1:2c:6a:bb:27:ae:d1:d1:c0:a7:
         bd:62:a6:23:6e:69:36:83:1a:a3:53:07:a8:72:0b:d3:b9:8f:
         7f:40:3a:a5:62:69:ed:a8:64:2d:e4:80:eb:d4:8d:44:01:d0:
         d9:95:b6:65:58:92:9b:e7:d7:ac:ca:42:ca:47:49:21:ad:c7:
         99:21:db:86:7a:e7:fd:20:14:17:cf:da:7a:f6:40:65:d1:f3:
         d4:7e:42:96:43:87:7c:b6:ab:81:fc:49:b0:2e:c0:f8:9a:92:
         9a:23:3c:30:2e:73:76:92:27:a1:80:69:9e:c0:f2:23:33:32:
         c5:1f:a4:19:81:f0:a4:99:96:f7:e5:1b:19:33:d0:6f:c0:e4:
         95:7b:58:ce:2e:03:07:d1:9f:9f:0a:50:57:b6:b4:75:3e:d0:
         f3:22:cb:66:77:30:03:54:c1:cb:00:b0:0f:84:ff:84:c1:ec:
         99:44:3e:df
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUAuSNUpE4NRv7BUVgICmrl0Vazn4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUZDNDEyNkUwRjM1MUU2N0ZFRjlCMTRFQ0Q0QzMwQzQ1
M0M2M0ZGQjAeFw0yNDA3MTIxMjIwNDNaFw0yNTA3MTExMjI1NDNaMDMxMTAvBgNV
BAMTKDA5NDFDNTYyREU4NDM5RTAxNEFBMEM4RUM2RUNBQ0Y2QzY2QjdCMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCAkEWkdE5WtLU76zbR73f2/Mj
2YnXk3WMWqArB9SadYidg0jS6bZCBweO0JFGSnWE1TOoaEGgEuLc0iGrlzXDIyKR
30gqLrVVrn55OysxFoFaqLY4kWyc1ypiPdv5aYudd/tOTBOM4+N60wk3pzpl+ENe
EgYrIwvTcHGCuWGzaVdsiAPOa+tZWPzE4aIX0cFjj8+u2hlw104i1QWOjuHUeqDw
5LsJbxcAo3egUAUBaNaj7AM/Grgbx4MqV4pWxsJohR2DJ/SpbmTueElOpVTw+50e
tw9VZnJWqoUqU+IfANQ8ftSWyIUe8GcaX0AIUt0yS2oR7y4HwtQYPacFpkwzAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUCUHFYt6EOeAUqgyOxuys9sZrezYwHwYDVR0j
BBgwFoAUn8QSbg81Hmf++bFOzUwwxFPGP/swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGk2ODZQYktMWHZHY0ZXcjZ2cHN5R3VXdDdDRHczVDFYQ0Y1bXpxdG9l
SHMvMS85RkM0MTI2RTBGMzUxRTY3RkVGOUIxNEVDRDRDMzBDNDUzQzYzRkZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlGQzQxMjZFMEYzNTFFNjdG
RUY5QjE0RUNENEMzMEM0NTNDNjNGRkIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhpNjg2UGJLTFh2R2NGV3I2dnBzeUd1V3Q3Q0R3M1QxWENGNW16cXRvZUhzLzEv
MzEzODM3MmUzMDJlMzUzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzgzMzM1
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAC7ADowDQYJKoZIhvcNAQELBQADggEBAMJDsJive2VRKAje
p9/4KDNhx8ewpVChM6vonn9vCZEHjBN+1c1gicpmQzyKggDHwvRnOeYWls6gF1OG
5vlu44dwknGxeVLHHhF3cpKPK9P0wSxquyeu0dHAp71ipiNuaTaDGqNTB6hyC9O5
j39AOqViae2oZC3kgOvUjUQB0NmVtmVYkpvn16zKQspHSSGtx5kh24Z65/0gFBfP
2nr2QGXR89R+QpZDh3y2q4H8SbAuwPiakpojPDAuc3aSJ6GAaZ7A8iMzMsUfpBmB
8KSZlvflGxkz0G/A5JV7WM4uAwfRn58KUFe2tHU+0PMiy2Z3MANUwcsAsA+E/4TB
7JlEPt8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:47 2024 by rpki-client on console-fra.rpki-client.org