Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e31382e302f32342d3234203d3e20323633303232.roa
File:                     3138362e3234392e31382e302f32342d3234203d3e20323633303232.roa (raw, json)
Hash identifier:          hvLVCu85jTQbG7JqWNSsVFaXHidV3z2Va+q0kFvTxEQ=
Subject key identifier:   81:F7:0D:C5:6C:2A:65:3F:55:89:E4:C3:59:6D:83:5F:E8:CC:61:A7
Certificate issuer:       /CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
Certificate serial:       36AF72927A3E9AC05EF14C9D4A667E7B3BC5EBB6
Authority key identifier: BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e31382e302f32342d3234203d3e20323633303232.roa
Signing time:             Tue 07 May 2024 19:17:05 +0000
ROA not before:           Tue 07 May 2024 19:12:05 +0000
ROA not after:            Tue 06 May 2025 19:17:05 +0000
asID:                     263022
IP address blocks:        186.249.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl
                          rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:af:72:92:7a:3e:9a:c0:5e:f1:4c:9d:4a:66:7e:7b:3b:c5:eb:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
        Validity
            Not Before: May  7 19:12:05 2024 GMT
            Not After : May  6 19:17:05 2025 GMT
        Subject: CN=81F70DC56C2A653F5589E4C3596D835FE8CC61A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a6:f2:8f:a7:a6:6c:46:a5:58:88:88:e5:ba:
                    40:1e:13:2b:1c:07:a5:c2:d6:db:9d:eb:8f:dd:44:
                    41:6a:79:5b:7c:c1:cb:48:88:27:b8:f9:ff:07:43:
                    4d:9e:bf:41:9e:9c:5b:95:37:fd:78:f9:f1:9e:cb:
                    ca:ba:65:ee:10:94:98:0f:3c:21:b7:42:fd:63:18:
                    13:e2:42:82:5c:dd:10:b3:b0:c9:33:77:0d:1a:d2:
                    fd:f8:c9:b2:82:64:d3:f7:95:c1:f0:9f:1b:39:08:
                    85:04:97:79:a6:1e:de:f3:de:a4:75:c6:d7:30:37:
                    89:ca:a4:62:31:45:9e:69:97:f9:f7:53:55:5c:1e:
                    b9:59:fd:d0:ee:d2:5f:10:2d:31:3d:fc:34:e8:ce:
                    51:82:3d:cc:ee:01:0c:1c:b4:aa:c4:f4:e9:3b:56:
                    b2:a4:4f:b0:f4:e7:d2:c3:a8:b8:bd:d5:b1:b4:5b:
                    e9:ac:6e:0a:1a:f2:d9:48:96:dc:d4:c9:2d:f7:42:
                    0a:f9:29:27:95:7e:55:8b:88:dd:17:89:fc:a3:b5:
                    5f:d4:c4:04:52:48:1d:db:6f:3b:56:b8:40:ba:b1:
                    db:9c:f3:2b:fb:c3:aa:56:82:d9:ea:fb:e9:71:cd:
                    ec:1c:33:46:42:64:1b:81:b9:41:4c:62:ed:e9:b2:
                    be:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F7:0D:C5:6C:2A:65:3F:55:89:E4:C3:59:6D:83:5F:E8:CC:61:A7
            X509v3 Authority Key Identifier:
                keyid:BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e31382e302f32342d3234203d3e20323633303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:7a:62:98:cf:0e:f2:f3:2b:2c:89:e8:49:c9:08:d9:de:f5:
         af:8c:cd:01:26:c9:33:84:c5:e8:88:85:4c:13:f0:17:03:93:
         7c:54:94:81:bb:51:fc:f4:f1:aa:45:f6:70:57:c8:99:05:89:
         b5:5d:f8:b9:7f:3b:c3:63:e7:39:00:0d:7b:cc:9c:3c:13:7f:
         23:fc:7c:34:f9:87:52:70:93:5a:93:ef:5d:b7:20:dc:a5:9a:
         80:68:08:3d:e8:3b:75:5b:4b:35:c7:45:c4:69:be:fb:9c:26:
         28:a7:c0:de:af:91:e2:0f:6f:8b:01:bc:73:bb:0a:71:d8:b1:
         47:90:c3:d1:a4:ef:21:dd:33:ed:37:f5:78:81:90:68:85:6d:
         8e:c6:78:03:27:c0:28:fa:f5:fb:aa:51:ab:ea:0a:61:a4:3e:
         56:a9:76:0d:9a:68:25:9a:c2:4a:6a:00:55:a6:15:e7:1f:88:
         70:7d:f1:67:7c:22:d9:0f:eb:48:b9:60:b7:ee:be:86:3a:fe:
         ea:7b:c1:93:35:41:24:c9:a7:f1:67:dd:4b:01:bc:eb:ef:f6:
         4d:bc:01:0b:39:d5:0c:10:51:5c:fb:b2:1b:4f:f9:b5:1d:2f:
         04:ab:53:5c:77:5e:5a:33:af:dd:d8:85:2f:18:57:3d:00:0c:
         f1:f3:12:0b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNq9ykno+msBe8UydSmZ+ezvF67YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ4RDEzNzJGRDFEMkEzMkJGOUU5QTBGMTZDMkY2MERG
RjkyQUQ2QjAeFw0yNDA1MDcxOTEyMDVaFw0yNTA1MDYxOTE3MDVaMDMxMTAvBgNV
BAMTKDgxRjcwREM1NkMyQTY1M0Y1NTg5RTRDMzU5NkQ4MzVGRThDQzYxQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQpvKPp6ZsRqVYiIjlukAeEysc
B6XC1tud64/dREFqeVt8wctIiCe4+f8HQ02ev0GenFuVN/14+fGey8q6Ze4QlJgP
PCG3Qv1jGBPiQoJc3RCzsMkzdw0a0v34ybKCZNP3lcHwnxs5CIUEl3mmHt7z3qR1
xtcwN4nKpGIxRZ5pl/n3U1VcHrlZ/dDu0l8QLTE9/DTozlGCPczuAQwctKrE9Ok7
VrKkT7D059LDqLi91bG0W+msbgoa8tlIltzUyS33Qgr5KSeVflWLiN0XifyjtV/U
xARSSB3bbztWuEC6sduc8yv7w6pWgtnq++lxzewcM0ZCZBuBuUFMYu3psr6hAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUgfcNxWwqZT9VieTDWW2DX+jMYacwHwYDVR0j
BBgwFoAUvY0Tcv0dKjK/npoPFsL2Df+SrWswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXB0M3JLeWVqTWVkNXhoOFA4dXhVQ29zeTVpaVFyY1ZGelpGeFhUNUJx
QkMvMC9CRDhEMTM3MkZEMUQyQTMyQkY5RTlBMEYxNkMyRjYwREZGOTJBRDZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEOEQxMzcyRkQxRDJBMzJC
RjlFOUEwRjE2QzJGNjBERkY5MkFENkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlwdDNyS3llak1lZDV4aDhQOHV4VUNvc3k1aWlRcmNWRnpaRnhYVDVCcUJDLzAv
MzEzODM2MmUzMjM0MzkyZTMxMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMDMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC6+RIwDQYJKoZIhvcNAQELBQADggEBABx6YpjP
DvLzKyyJ6EnJCNne9a+MzQEmyTOExeiIhUwT8BcDk3xUlIG7Ufz08apF9nBXyJkF
ibVd+Ll/O8Nj5zkADXvMnDwTfyP8fDT5h1Jwk1qT7123INylmoBoCD3oO3VbSzXH
RcRpvvucJiinwN6vkeIPb4sBvHO7CnHYsUeQw9Gk7yHdM+039XiBkGiFbY7GeAMn
wCj69fuqUavqCmGkPlapdg2aaCWawkpqAFWmFecfiHB98Wd8ItkP60i5YLfuvoY6
/up7wZM1QSTJp/Fn3UsBvOvv9k28AQs51QwQUVz7shtP+bUdLwSrU1x3Xlozr93Y
hS8YVz0ADPHzEgs=
-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:02 2024 by rpki-client on console-fra.rpki-client.org