Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138392e35312e3139392e302f32342d3234203d3e203238333532.roa
File:                     3138392e35312e3139392e302f32342d3234203d3e203238333532.roa (raw, json)
Hash identifier:          3PmAUMo8x/vwLJyWgPRsw74IDx5HOkBUdbJy/F7OxTU=
Subject key identifier:   4C:81:E2:AE:C0:F1:72:F5:8E:49:9B:29:8F:CF:A3:D8:C4:18:B1:22
Certificate issuer:       /CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
Certificate serial:       2F5E7F98DDD1618B1532FA0A1E2328FAD7029FC3
Authority key identifier: 9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138392e35312e3139392e302f32342d3234203d3e203238333532.roa
Signing time:             Thu 04 Apr 2024 10:16:46 +0000
ROA not before:           Thu 04 Apr 2024 10:11:46 +0000
ROA not after:            Thu 03 Apr 2025 10:16:46 +0000
asID:                     28352
IP address blocks:        189.51.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:5e:7f:98:dd:d1:61:8b:15:32:fa:0a:1e:23:28:fa:d7:02:9f:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
        Validity
            Not Before: Apr  4 10:11:46 2024 GMT
            Not After : Apr  3 10:16:46 2025 GMT
        Subject: CN=4C81E2AEC0F172F58E499B298FCFA3D8C418B122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2e:7f:95:44:cd:03:cd:ed:da:e1:cd:47:72:
                    b7:e9:80:09:06:99:e8:70:9c:ca:21:17:14:49:aa:
                    4f:7c:c2:3d:de:fe:2d:c8:82:ed:3b:56:5d:a0:64:
                    0d:81:d5:a9:6b:02:81:34:34:22:ff:07:30:19:a2:
                    c1:e6:19:98:4f:0d:34:2e:ec:b3:1e:c5:b0:17:4e:
                    63:0c:33:04:70:de:ff:84:66:25:62:83:4e:a9:24:
                    45:1f:b1:ac:bd:d0:68:29:bc:aa:54:b3:f4:d6:fa:
                    9e:7b:d1:2f:fb:df:12:79:4a:aa:b7:78:b9:1f:32:
                    36:9e:09:91:f0:9b:b5:af:32:5d:dc:d7:e6:0a:56:
                    8d:f3:2d:2f:9a:62:2d:ae:2b:1d:72:62:42:9c:b5:
                    5d:4c:e1:80:60:4e:24:e4:d0:fb:8b:a1:3b:0f:40:
                    e1:ac:ce:da:f0:0e:6f:47:c8:b9:20:76:33:54:72:
                    c6:47:93:5f:b8:da:05:1f:04:c5:b6:7b:30:cc:d1:
                    22:bc:be:8d:cc:fa:45:68:a2:81:51:86:eb:db:8e:
                    cb:02:7b:7d:0e:0d:68:85:28:b1:33:56:37:f0:95:
                    7b:7d:05:79:14:96:6e:0f:29:3f:83:d1:e7:90:ee:
                    e9:45:58:b9:35:8f:a1:0a:e2:3f:e8:03:d2:d8:55:
                    98:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:81:E2:AE:C0:F1:72:F5:8E:49:9B:29:8F:CF:A3:D8:C4:18:B1:22
            X509v3 Authority Key Identifier:
                keyid:9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138392e35312e3139392e302f32342d3234203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:02:67:73:ad:f3:2e:03:d9:a4:72:3d:4d:10:f3:37:6c:c5:
         41:06:bc:dd:5d:a6:d6:e0:e0:de:bd:20:19:04:52:fe:05:d2:
         03:41:87:f5:e6:40:34:a1:20:0a:67:1d:2a:e5:41:bf:26:99:
         f6:4b:31:86:c9:08:89:ca:cf:30:69:06:08:8b:29:a2:28:ee:
         86:08:12:08:08:4f:4e:2a:b7:86:b2:7b:bb:48:c7:cb:7b:70:
         ba:e3:bd:ab:ee:7b:7e:d1:b3:6c:a6:46:a7:6c:46:71:05:a5:
         e7:56:6b:34:bd:c2:a0:bd:4d:ca:f8:78:7b:94:93:f5:02:1b:
         de:cc:a4:64:e3:30:ad:41:94:1a:75:b8:b9:27:21:19:22:49:
         c9:11:0d:1b:97:76:32:fa:aa:59:9e:40:83:02:57:7b:f3:7e:
         8a:35:a2:71:ea:f3:b1:35:31:37:98:3f:e8:4a:60:dc:a0:28:
         c8:38:f8:f3:65:89:21:c6:f4:0b:59:34:94:c0:f7:6f:32:19:
         b1:47:59:3c:82:25:dc:cd:e9:bd:12:37:f6:fd:e1:58:66:00:
         21:48:f9:b4:c9:c9:d5:db:13:6d:98:68:da:a8:6c:22:ba:c0:
         c2:e6:47:ba:04:4b:66:e2:00:ca:0f:08:b0:af:a3:f0:31:f6:
         e0:65:7e:49
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUL15/mN3RYYsVMvoKHiMo+tcCn8MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUZDNDEyNkUwRjM1MUU2N0ZFRjlCMTRFQ0Q0QzMwQzQ1
M0M2M0ZGQjAeFw0yNDA0MDQxMDExNDZaFw0yNTA0MDMxMDE2NDZaMDMxMTAvBgNV
BAMTKDRDODFFMkFFQzBGMTcyRjU4RTQ5OUIyOThGQ0ZBM0Q4QzQxOEIxMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgLn+VRM0Dze3a4c1HcrfpgAkG
mehwnMohFxRJqk98wj3e/i3Igu07Vl2gZA2B1alrAoE0NCL/BzAZosHmGZhPDTQu
7LMexbAXTmMMMwRw3v+EZiVig06pJEUfsay90GgpvKpUs/TW+p570S/73xJ5Sqq3
eLkfMjaeCZHwm7WvMl3c1+YKVo3zLS+aYi2uKx1yYkKctV1M4YBgTiTk0PuLoTsP
QOGsztrwDm9HyLkgdjNUcsZHk1+42gUfBMW2ezDM0SK8vo3M+kVoooFRhuvbjssC
e30ODWiFKLEzVjfwlXt9BXkUlm4PKT+D0eeQ7ulFWLk1j6EK4j/oA9LYVZgFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUTIHirsDxcvWOSZspj8+j2MQYsSIwHwYDVR0j
BBgwFoAUn8QSbg81Hmf++bFOzUwwxFPGP/swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGk2ODZQYktMWHZHY0ZXcjZ2cHN5R3VXdDdDRHczVDFYQ0Y1bXpxdG9l
SHMvMS85RkM0MTI2RTBGMzUxRTY3RkVGOUIxNEVDRDRDMzBDNDUzQzYzRkZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlGQzQxMjZFMEYzNTFFNjdG
RUY5QjE0RUNENEMzMEM0NTNDNjNGRkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhpNjg2UGJLTFh2R2NGV3I2dnBzeUd1V3Q3Q0R3M1QxWENGNW16cXRvZUhzLzEv
MzEzODM5MmUzNTMxMmUzMTM5MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzMzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvTPHMA0GCSqGSIb3DQEBCwUAA4IBAQAkAmdzrfMu
A9mkcj1NEPM3bMVBBrzdXabW4ODevSAZBFL+BdIDQYf15kA0oSAKZx0q5UG/Jpn2
SzGGyQiJys8waQYIiymiKO6GCBIICE9OKreGsnu7SMfLe3C6472r7nt+0bNspkan
bEZxBaXnVms0vcKgvU3K+Hh7lJP1AhvezKRk4zCtQZQadbi5JyEZIknJEQ0bl3Yy
+qpZnkCDAld7836KNaJx6vOxNTE3mD/oSmDcoCjIOPjzZYkhxvQLWTSUwPdvMhmx
R1k8giXczem9Ejf2/eFYZgAhSPm0ycnV2xNtmGjaqGwiusDC5ke6BEtm4gDKDwiw
r6PwMfbgZX5J
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:12 2024 by rpki-client on console-ams.rpki-client.org