Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138392e35312e3230302e302f32312d3231203d3e203238333532.roa
File:                     3138392e35312e3230302e302f32312d3231203d3e203238333532.roa (raw, json)
Hash identifier:          Wh5vV84051xrRhfkIpjDT6gf283Df7zl2fQtazSlbYE=
Subject key identifier:   80:BD:BA:CF:EA:31:8C:81:4B:35:90:22:20:C5:52:68:42:0B:9A:FC
Certificate issuer:       /CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
Certificate serial:       0DEB4E00D26D5352B2992BD42B26364F2C54B1B7
Authority key identifier: 9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138392e35312e3230302e302f32312d3231203d3e203238333532.roa
Signing time:             Thu 04 Apr 2024 10:16:48 +0000
ROA not before:           Thu 04 Apr 2024 10:11:48 +0000
ROA not after:            Thu 03 Apr 2025 10:16:48 +0000
asID:                     28352
IP address blocks:        189.51.200.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:eb:4e:00:d2:6d:53:52:b2:99:2b:d4:2b:26:36:4f:2c:54:b1:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
        Validity
            Not Before: Apr  4 10:11:48 2024 GMT
            Not After : Apr  3 10:16:48 2025 GMT
        Subject: CN=80BDBACFEA318C814B35902220C55268420B9AFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:85:b1:61:37:62:dd:df:c9:d0:1f:a7:a3:84:
                    9a:0d:8d:22:2d:1f:14:49:d9:2a:20:ca:6a:92:7c:
                    ad:95:87:bd:ee:a9:9b:9b:71:28:3c:38:9b:ca:0b:
                    7e:24:c7:e2:81:55:2e:01:e3:24:ef:40:75:68:c0:
                    2a:cf:5a:d1:93:ec:25:40:f7:1a:e5:05:70:1c:8d:
                    f7:05:b4:bf:20:d0:09:b0:00:8d:3c:15:70:c9:59:
                    d4:a2:b3:04:2f:73:ea:df:21:72:a5:19:92:ab:39:
                    3a:4a:95:f2:f1:93:24:d0:31:52:f0:b0:3a:db:e0:
                    5f:1c:54:b6:c3:4b:0e:a5:14:2e:f4:ac:77:23:6f:
                    65:83:17:53:8a:9b:8c:4b:41:bf:e0:eb:35:31:09:
                    da:05:94:52:7f:98:0d:b2:2d:36:f8:c5:1a:be:71:
                    9e:ba:55:07:19:4a:ea:e2:76:a9:3a:c8:db:28:a0:
                    ed:fd:fc:51:35:d2:d4:40:16:45:7e:4f:ee:a9:8d:
                    6d:a6:cb:b2:87:82:d6:2d:d0:6b:b4:b6:f5:df:5d:
                    a3:9e:c1:5e:d3:29:7c:e6:05:b1:1d:df:60:f2:68:
                    6b:f8:6c:7b:e9:ed:a7:6a:dd:a6:7b:10:5a:c7:41:
                    f3:43:ab:4a:99:2e:58:ef:59:10:6b:99:a4:d9:ee:
                    78:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:BD:BA:CF:EA:31:8C:81:4B:35:90:22:20:C5:52:68:42:0B:9A:FC
            X509v3 Authority Key Identifier:
                keyid:9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/3138392e35312e3230302e302f32312d3231203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a6:5c:70:e6:20:a9:61:13:f3:e6:49:c9:f8:54:b1:f9:3f:e7:
         6a:7a:28:c1:34:5a:67:1f:98:fc:4e:e7:0f:a9:d2:d4:d4:5f:
         66:be:fe:71:e7:c3:f1:e4:da:72:11:19:ac:de:50:b3:f6:a0:
         41:3b:2b:6a:12:00:3e:ea:f7:0e:51:69:13:9e:64:56:69:f2:
         99:53:e1:59:85:79:72:45:20:dc:c1:ad:39:24:2d:e7:02:ee:
         75:19:01:b7:55:de:62:32:b4:30:5f:8f:2d:fd:2c:77:41:96:
         ed:f7:dc:18:6f:25:63:71:86:97:67:07:59:c4:00:58:3c:8e:
         5d:45:45:3f:75:e5:c6:9f:1a:05:ae:af:36:62:23:50:6d:57:
         4d:87:01:7e:cd:a1:24:32:c6:6a:18:2b:54:68:9c:1b:5a:7b:
         7f:78:cc:5a:12:59:18:1d:32:88:b3:67:f8:9c:19:d3:25:fc:
         5c:35:be:7b:77:f7:5f:7d:f1:18:fe:52:d1:b1:e7:26:95:3c:
         5c:8c:41:6e:9a:3b:62:f6:fd:93:d3:12:cf:0f:b6:dd:df:b7:
         dd:2d:2f:69:fe:cf:81:f5:b7:69:ff:77:0b:09:0e:11:83:20:
         ec:35:41:bf:19:70:16:d6:f5:48:a5:0a:fa:02:6d:ea:97:94:
         76:69:c2:6d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUDetOANJtU1KymSvUKyY2TyxUsbcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUZDNDEyNkUwRjM1MUU2N0ZFRjlCMTRFQ0Q0QzMwQzQ1
M0M2M0ZGQjAeFw0yNDA0MDQxMDExNDhaFw0yNTA0MDMxMDE2NDhaMDMxMTAvBgNV
BAMTKDgwQkRCQUNGRUEzMThDODE0QjM1OTAyMjIwQzU1MjY4NDIwQjlBRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNhbFhN2Ld38nQH6ejhJoNjSIt
HxRJ2SogymqSfK2Vh73uqZubcSg8OJvKC34kx+KBVS4B4yTvQHVowCrPWtGT7CVA
9xrlBXAcjfcFtL8g0AmwAI08FXDJWdSiswQvc+rfIXKlGZKrOTpKlfLxkyTQMVLw
sDrb4F8cVLbDSw6lFC70rHcjb2WDF1OKm4xLQb/g6zUxCdoFlFJ/mA2yLTb4xRq+
cZ66VQcZSuridqk6yNsooO39/FE10tRAFkV+T+6pjW2my7KHgtYt0Gu0tvXfXaOe
wV7TKXzmBbEd32DyaGv4bHvp7adq3aZ7EFrHQfNDq0qZLljvWRBrmaTZ7nh7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUgL26z+oxjIFLNZAiIMVSaEILmvwwHwYDVR0j
BBgwFoAUn8QSbg81Hmf++bFOzUwwxFPGP/swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGk2ODZQYktMWHZHY0ZXcjZ2cHN5R3VXdDdDRHczVDFYQ0Y1bXpxdG9l
SHMvMS85RkM0MTI2RTBGMzUxRTY3RkVGOUIxNEVDRDRDMzBDNDUzQzYzRkZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlGQzQxMjZFMEYzNTFFNjdG
RUY5QjE0RUNENEMzMEM0NTNDNjNGRkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhpNjg2UGJLTFh2R2NGV3I2dnBzeUd1V3Q3Q0R3M1QxWENGNW16cXRvZUhzLzEv
MzEzODM5MmUzNTMxMmUzMjMwMzAyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM4
MzMzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDvTPIMA0GCSqGSIb3DQEBCwUAA4IBAQCmXHDmIKlh
E/PmScn4VLH5P+dqeijBNFpnH5j8TucPqdLU1F9mvv5x58Px5NpyERms3lCz9qBB
OytqEgA+6vcOUWkTnmRWafKZU+FZhXlyRSDcwa05JC3nAu51GQG3Vd5iMrQwX48t
/Sx3QZbt99wYbyVjcYaXZwdZxABYPI5dRUU/deXGnxoFrq82YiNQbVdNhwF+zaEk
MsZqGCtUaJwbWnt/eMxaElkYHTKIs2f4nBnTJfxcNb57d/dfffEY/lLRsecmlTxc
jEFumjti9v2T0xLPD7bd37fdLS9p/s+B9bdp/3cLCQ4RgyDsNUG/GXAW1vVIpQr6
Am3ql5R2acJt
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:47 2024 by rpki-client on console-fra.rpki-client.org