Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/3138372e38372e31362e302f32312d3234203d3e203238333636.roa
File:                     3138372e38372e31362e302f32312d3234203d3e203238333636.roa (raw, json)
Hash identifier:          ZyTm13jenl5ueTplAtQb21E+4oXnFnmigcybR40ocBg=
Subject key identifier:   A7:AB:65:86:1A:33:2F:DE:9A:C6:CC:0F:D7:1E:9B:A9:95:B7:5C:F3
Certificate issuer:       /CN=1031D5671A47D195D84CA481A448830A4ADFCE7E
Certificate serial:       332E0C8ACEA450CCFC546D591003130FF27C91F2
Authority key identifier: 10:31:D5:67:1A:47:D1:95:D8:4C:A4:81:A4:48:83:0A:4A:DF:CE:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1031D5671A47D195D84CA481A448830A4ADFCE7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/3138372e38372e31362e302f32312d3234203d3e203238333636.roa
Signing time:             Tue 23 Jul 2024 23:20:48 +0000
ROA not before:           Tue 23 Jul 2024 23:15:48 +0000
ROA not after:            Tue 22 Jul 2025 23:20:48 +0000
asID:                     28366
IP address blocks:        187.87.16.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/1031D5671A47D195D84CA481A448830A4ADFCE7E.crl
                          rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/1031D5671A47D195D84CA481A448830A4ADFCE7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1031D5671A47D195D84CA481A448830A4ADFCE7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:2e:0c:8a:ce:a4:50:cc:fc:54:6d:59:10:03:13:0f:f2:7c:91:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1031D5671A47D195D84CA481A448830A4ADFCE7E
        Validity
            Not Before: Jul 23 23:15:48 2024 GMT
            Not After : Jul 22 23:20:48 2025 GMT
        Subject: CN=A7AB65861A332FDE9AC6CC0FD71E9BA995B75CF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e8:29:3e:76:16:78:6c:87:2d:25:b8:33:7c:
                    c7:84:67:27:9f:fa:b7:2a:f6:dc:d7:be:ac:3e:9a:
                    b1:6a:a9:03:69:14:21:33:e0:b6:c0:f0:41:ed:17:
                    a6:57:ac:77:a9:77:fb:b2:f9:34:d9:ab:b7:4e:47:
                    4a:dc:62:cd:36:c1:49:53:e4:08:ba:4e:bc:8e:26:
                    99:c7:4e:f7:41:e9:d9:dd:7b:3a:e4:12:5c:0d:f9:
                    9f:c6:33:37:c2:f6:fb:58:5a:6e:07:d7:7c:c3:db:
                    e3:4a:cb:9b:06:34:12:c9:eb:cb:7e:b0:09:4d:a8:
                    6b:d7:3d:94:3c:81:03:03:ce:58:49:16:ec:88:15:
                    d1:11:fe:39:15:41:24:89:05:f4:fb:21:18:09:38:
                    36:b9:fc:ef:e0:fa:2d:cb:52:13:79:ea:ee:41:7c:
                    66:a6:82:11:af:1a:ee:ec:90:ff:aa:fd:79:58:33:
                    03:a9:3f:0d:d4:f2:8a:e8:3c:4a:82:ef:c1:4b:7b:
                    63:57:ec:3a:d8:8d:34:30:11:88:fb:b2:1e:d3:39:
                    37:bd:74:0a:a9:32:7f:8c:14:fb:8c:76:6b:82:e8:
                    25:c2:2a:8d:ac:89:9e:c2:01:9f:d4:a0:4f:de:4f:
                    06:22:50:0e:d4:ee:8c:52:ff:c6:d2:bb:5c:b8:82:
                    b0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:AB:65:86:1A:33:2F:DE:9A:C6:CC:0F:D7:1E:9B:A9:95:B7:5C:F3
            X509v3 Authority Key Identifier:
                keyid:10:31:D5:67:1A:47:D1:95:D8:4C:A4:81:A4:48:83:0A:4A:DF:CE:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/1031D5671A47D195D84CA481A448830A4ADFCE7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1031D5671A47D195D84CA481A448830A4ADFCE7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bbpc1vd3miVgntuWLocQMD5bxXEhqioafigy6tLZb2B/0/3138372e38372e31362e302f32312d3234203d3e203238333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7d:52:3e:9a:62:01:32:d0:22:2d:0d:2a:b6:1d:06:50:c0:d9:
         4b:c7:7c:07:80:74:d3:a0:51:cb:97:c8:9d:13:7c:23:b8:aa:
         4d:e4:6c:45:25:99:c1:a3:46:4b:0c:a9:c4:ca:af:8e:65:1c:
         dc:36:51:02:48:b2:84:7f:14:9d:37:bc:0f:09:70:87:b3:c3:
         a1:21:5c:0e:de:f9:9a:a8:08:ff:d4:66:c7:84:31:13:6c:2d:
         96:c9:c5:7b:b3:62:e8:b9:02:02:c0:38:a2:ac:24:f2:3f:95:
         71:d5:bc:5f:51:01:70:be:d6:1c:b1:d9:f1:bc:ec:5e:46:23:
         b2:9e:ec:ab:4a:73:0f:10:2e:fa:13:2f:09:07:a5:88:fd:85:
         36:5d:1c:62:df:fc:9c:42:09:e6:96:31:8b:94:39:db:d1:cb:
         a5:5d:c9:00:6d:1e:99:5b:bc:c9:73:8d:1f:8c:93:fd:9b:de:
         2a:3a:64:3b:ae:85:2f:c8:ad:52:ee:7c:13:e8:b1:cb:ea:24:
         a8:76:90:08:96:b9:bf:d1:c7:bf:e5:95:6d:8a:72:14:93:0c:
         58:4b:66:54:1e:cf:70:83:0d:9e:5e:de:7a:4c:b9:c8:1d:9b:
         ff:87:21:33:ab:29:40:3c:31:2b:93:3c:ec:c5:d8:1d:11:71:
         f6:db:d6:47
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUMy4Mis6kUMz8VG1ZEAMTD/J8kfIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTAzMUQ1NjcxQTQ3RDE5NUQ4NENBNDgxQTQ0ODgzMEE0
QURGQ0U3RTAeFw0yNDA3MjMyMzE1NDhaFw0yNTA3MjIyMzIwNDhaMDMxMTAvBgNV
BAMTKEE3QUI2NTg2MUEzMzJGREU5QUM2Q0MwRkQ3MUU5QkE5OTVCNzVDRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU6Ck+dhZ4bIctJbgzfMeEZyef
+rcq9tzXvqw+mrFqqQNpFCEz4LbA8EHtF6ZXrHepd/uy+TTZq7dOR0rcYs02wUlT
5Ai6TryOJpnHTvdB6dndezrkElwN+Z/GMzfC9vtYWm4H13zD2+NKy5sGNBLJ68t+
sAlNqGvXPZQ8gQMDzlhJFuyIFdER/jkVQSSJBfT7IRgJODa5/O/g+i3LUhN56u5B
fGamghGvGu7skP+q/XlYMwOpPw3U8oroPEqC78FLe2NX7DrYjTQwEYj7sh7TOTe9
dAqpMn+MFPuMdmuC6CXCKo2siZ7CAZ/UoE/eTwYiUA7U7oxS/8bSu1y4grCZAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUp6tlhhozL96axswP1x6bqZW3XPMwHwYDVR0j
BBgwFoAUEDHVZxpH0ZXYTKSBpEiDCkrfzn4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWJicGMxdmQzbWlWZ250dVdMb2NRTUQ1YnhYRWhxaW9hZmlneTZ0TFpi
MkIvMC8xMDMxRDU2NzFBNDdEMTk1RDg0Q0E0ODFBNDQ4ODMwQTRBREZDRTdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEwMzFENTY3MUE0N0QxOTVE
ODRDQTQ4MUE0NDg4MzBBNEFERkNFN0UuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzliYnBjMXZkM21pVmdudHVXTG9jUU1ENWJ4WEVocWlvYWZpZ3k2dExaYjJCLzAv
MzEzODM3MmUzODM3MmUzMTM2MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzODMz
MzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEA7tXEDANBgkqhkiG9w0BAQsFAAOCAQEAfVI+mmIBMtAi
LQ0qth0GUMDZS8d8B4B006BRy5fInRN8I7iqTeRsRSWZwaNGSwypxMqvjmUc3DZR
AkiyhH8UnTe8Dwlwh7PDoSFcDt75mqgI/9Rmx4QxE2wtlsnFe7Ni6LkCAsA4oqwk
8j+VcdW8X1EBcL7WHLHZ8bzsXkYjsp7sq0pzDxAu+hMvCQeliP2FNl0cYt/8nEIJ
5pYxi5Q529HLpV3JAG0emVu8yXONH4yT/ZveKjpkO66FL8itUu58E+ixy+okqHaQ
CJa5v9HHv+WVbYpyFJMMWEtmVB7PcIMNnl7eeky5yB2b/4chM6spQDwxK5M87MXY
HRFx9tvWRw==
-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:46 2024 by rpki-client on console-fra.rpki-client.org