Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138392e35312e3139322e302f32302d3230203d3e203238333532.roa
File:                     3138392e35312e3139322e302f32302d3230203d3e203238333532.roa (raw, json)
Hash identifier:          jKUOuqHivZVomdepUBMoMvqwLzD3OjCNxXo9DbmXL74=
Subject key identifier:   E5:B3:ED:BA:AC:B9:16:28:50:BA:F9:C8:C0:EE:49:AB:52:67:17:B7
Certificate issuer:       /CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
Certificate serial:       7FCA34D40E66536407ECAC399558D321EC40A102
Authority key identifier: 9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138392e35312e3139322e302f32302d3230203d3e203238333532.roa
Signing time:             Thu 04 Apr 2024 10:16:47 +0000
ROA not before:           Thu 04 Apr 2024 10:11:47 +0000
ROA not after:            Thu 03 Apr 2025 10:16:47 +0000
asID:                     28352
IP address blocks:        189.51.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ca:34:d4:0e:66:53:64:07:ec:ac:39:95:58:d3:21:ec:40:a1:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
        Validity
            Not Before: Apr  4 10:11:47 2024 GMT
            Not After : Apr  3 10:16:47 2025 GMT
        Subject: CN=E5B3EDBAACB9162850BAF9C8C0EE49AB526717B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fd:b5:1f:3b:7a:3e:5b:66:df:2a:28:4c:cb:
                    ca:05:bd:49:5c:d8:63:32:e1:98:1d:40:a6:16:28:
                    95:65:ca:64:a2:67:6b:e6:59:44:f9:ec:e5:bd:25:
                    eb:a0:d9:81:7b:57:b4:6b:88:2c:1c:00:06:1a:a6:
                    fc:0c:e4:b9:c6:d6:7c:a2:de:5a:eb:4b:b9:26:2f:
                    be:f5:83:d8:7a:55:1d:b9:6c:ba:09:80:26:95:62:
                    f1:eb:32:56:21:75:70:78:4a:d7:46:74:a8:f6:53:
                    fa:cd:04:b4:85:b1:9a:e0:92:9d:98:ff:db:68:d6:
                    b7:1c:99:12:6f:6c:79:d4:b3:79:66:cd:93:32:06:
                    ef:94:03:70:b8:ac:2d:46:4b:c2:d7:10:c1:b2:07:
                    b4:e4:26:32:d8:54:75:52:33:40:e2:37:d9:ac:48:
                    f3:12:e7:d0:33:21:9d:57:4c:54:63:fd:a8:f7:d6:
                    da:b0:0a:c0:cd:95:d5:99:7e:95:e7:a6:5e:fa:d1:
                    04:c3:da:8a:13:46:76:d2:c4:5b:75:17:33:a8:90:
                    72:c7:47:56:a4:00:4a:7a:b8:1b:20:9d:b8:97:29:
                    8d:18:ff:e0:49:30:92:8e:c0:a5:63:35:43:62:77:
                    0c:5e:dc:5e:c3:b0:77:3f:9e:5e:a5:bc:d3:be:de:
                    45:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B3:ED:BA:AC:B9:16:28:50:BA:F9:C8:C0:EE:49:AB:52:67:17:B7
            X509v3 Authority Key Identifier:
                keyid:9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138392e35312e3139322e302f32302d3230203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         85:89:a6:e1:e6:c9:66:7b:5e:7b:94:39:58:1f:4f:3b:a0:3b:
         11:99:9f:55:cd:85:f0:47:a4:f7:e4:b7:be:6e:26:de:62:55:
         3c:f1:cf:6b:7b:27:28:7a:6e:19:e0:c2:d9:10:66:2e:d0:c9:
         af:29:39:6e:d3:c1:bb:3c:77:b2:49:bc:6a:ee:92:79:1c:0d:
         0c:f5:40:54:29:45:89:2d:fc:aa:b5:5f:04:71:30:71:52:47:
         86:ca:aa:a2:07:52:ed:84:ac:94:75:94:48:a1:6c:89:a4:80:
         8a:05:3f:3c:f3:6e:ae:47:49:1e:25:d6:46:b7:40:84:1c:11:
         a2:47:bb:b8:30:51:ac:ae:b9:3d:58:7e:fa:b7:7d:5c:6e:bc:
         e5:db:1b:60:ab:b8:73:8e:c0:ab:d9:5b:ba:20:6b:1b:e7:f3:
         ba:bc:43:ef:18:e7:c7:12:1e:53:e2:a3:a3:b6:c9:bf:d5:ee:
         74:00:77:4e:16:20:a6:d2:63:1b:fa:2e:ca:d3:af:7d:f6:b4:
         09:39:ce:22:46:46:6d:7e:9d:4b:4d:e6:c6:9f:59:2a:fc:b9:
         b9:53:70:e8:0b:bf:c0:96:c2:ef:0f:ba:9b:d9:70:b4:79:81:
         e9:bf:0e:32:73:5c:e6:8a:ef:d5:bf:d6:a5:2f:4f:27:f7:80:
         86:c7:85:90
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUf8o01A5mU2QH7Kw5lVjTIexAoQIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUZDNDEyNkUwRjM1MUU2N0ZFRjlCMTRFQ0Q0QzMwQzQ1
M0M2M0ZGQjAeFw0yNDA0MDQxMDExNDdaFw0yNTA0MDMxMDE2NDdaMDMxMTAvBgNV
BAMTKEU1QjNFREJBQUNCOTE2Mjg1MEJBRjlDOEMwRUU0OUFCNTI2NzE3QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq/bUfO3o+W2bfKihMy8oFvUlc
2GMy4ZgdQKYWKJVlymSiZ2vmWUT57OW9Jeug2YF7V7RriCwcAAYapvwM5LnG1nyi
3lrrS7kmL771g9h6VR25bLoJgCaVYvHrMlYhdXB4StdGdKj2U/rNBLSFsZrgkp2Y
/9to1rccmRJvbHnUs3lmzZMyBu+UA3C4rC1GS8LXEMGyB7TkJjLYVHVSM0DiN9ms
SPMS59AzIZ1XTFRj/aj31tqwCsDNldWZfpXnpl760QTD2ooTRnbSxFt1FzOokHLH
R1akAEp6uBsgnbiXKY0Y/+BJMJKOwKVjNUNidwxe3F7DsHc/nl6lvNO+3kWNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU5bPtuqy5FihQuvnIwO5Jq1JnF7cwHwYDVR0j
BBgwFoAUn8QSbg81Hmf++bFOzUwwxFPGP/swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGk2ODZQYktMWHZHY0ZXcjZ2cHN5R3VXdDdDRHczVDFYQ0Y1bXpxdG9l
SHMvMS85RkM0MTI2RTBGMzUxRTY3RkVGOUIxNEVDRDRDMzBDNDUzQzYzRkZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlGQzQxMjZFMEYzNTFFNjdG
RUY5QjE0RUNENEMzMEM0NTNDNjNGRkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhpNjg2UGJLTFh2R2NGV3I2dnBzeUd1V3Q3Q0R3M1QxWENGNW16cXRvZUhzLzEv
MzEzODM5MmUzNTMxMmUzMTM5MzIyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM4
MzMzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEvTPAMA0GCSqGSIb3DQEBCwUAA4IBAQCFiabh5slm
e157lDlYH087oDsRmZ9VzYXwR6T35Le+bibeYlU88c9reycoem4Z4MLZEGYu0Mmv
KTlu08G7PHeySbxq7pJ5HA0M9UBUKUWJLfyqtV8EcTBxUkeGyqqiB1LthKyUdZRI
oWyJpICKBT88826uR0keJdZGt0CEHBGiR7u4MFGsrrk9WH76t31cbrzl2xtgq7hz
jsCr2Vu6IGsb5/O6vEPvGOfHEh5T4qOjtsm/1e50AHdOFiCm0mMb+i7K06999rQJ
Oc4iRkZtfp1LTebGn1kq/Lm5U3DoC7/AlsLvD7qb2XC0eYHpvw4yc1zmiu/Vv9al
L08n94CGx4WQ
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:12 2024 by rpki-client on console-ams.rpki-client.org