Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e32312e302f32342d3234203d3e20323633303232.roa
File:                     3138362e3234392e32312e302f32342d3234203d3e20323633303232.roa (raw, json)
Hash identifier:          k/3jP5croUjARXdRc062K/lrXL/JOS705o2Zeoy0Q8g=
Subject key identifier:   2D:21:70:9B:56:BF:0B:49:75:40:F5:51:9C:FA:84:94:04:B9:9A:99
Certificate issuer:       /CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
Certificate serial:       067C4B916E871B12D738A4105072406185D2FD5E
Authority key identifier: BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e32312e302f32342d3234203d3e20323633303232.roa
Signing time:             Tue 07 May 2024 19:20:17 +0000
ROA not before:           Tue 07 May 2024 19:15:17 +0000
ROA not after:            Tue 06 May 2025 19:20:17 +0000
asID:                     263022
IP address blocks:        186.249.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl
                          rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7c:4b:91:6e:87:1b:12:d7:38:a4:10:50:72:40:61:85:d2:fd:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
        Validity
            Not Before: May  7 19:15:17 2024 GMT
            Not After : May  6 19:20:17 2025 GMT
        Subject: CN=2D21709B56BF0B497540F5519CFA849404B99A99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:49:87:15:d5:d7:2b:44:31:11:07:38:2e:12:
                    ba:c8:59:e9:db:38:da:38:a9:e5:40:ac:08:26:8d:
                    18:a4:0e:b5:9c:22:f4:15:71:98:fe:ab:a7:83:2e:
                    2a:09:77:c0:e0:0f:50:3c:0a:a2:29:b3:49:21:c7:
                    d7:c9:4e:d6:d6:28:26:74:ce:6d:90:57:c0:5e:ab:
                    7b:06:dc:27:bf:c3:df:02:3b:a3:e6:23:14:e0:d3:
                    d4:5f:80:c1:fa:16:e4:19:ce:8c:59:b2:c1:39:2b:
                    c3:c6:54:75:8b:46:16:6b:d0:28:61:9c:76:0b:16:
                    49:4d:95:bc:8f:ea:2c:3f:8f:bb:be:6b:46:b5:52:
                    0d:0f:bf:62:34:c7:11:74:6b:53:ad:3e:64:4a:4b:
                    98:5b:e1:0f:bc:b7:ad:dc:16:62:23:d5:7c:12:0e:
                    72:77:fd:cf:25:fe:09:bc:d6:c6:99:e3:75:ff:2b:
                    69:1e:2a:d4:d3:d4:4d:70:a5:a0:53:15:80:ab:29:
                    e2:99:9b:c4:3e:e7:3b:ff:a4:41:19:33:11:7d:44:
                    9e:8f:16:42:c9:88:75:30:53:c1:05:73:05:4e:76:
                    84:49:f7:53:c8:47:c9:ab:5b:fa:20:79:ed:7f:1b:
                    64:fd:0a:bb:77:b3:51:26:e6:29:22:b5:ed:74:86:
                    ca:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:21:70:9B:56:BF:0B:49:75:40:F5:51:9C:FA:84:94:04:B9:9A:99
            X509v3 Authority Key Identifier:
                keyid:BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e32312e302f32342d3234203d3e20323633303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:77:64:81:e2:a2:87:ac:7c:ab:3f:b9:90:7d:df:bb:23:2a:
         c4:c0:e9:e6:1b:8b:70:ca:44:21:23:15:2d:39:08:0a:61:7b:
         ce:00:0e:fa:1b:e8:fb:0a:3b:a9:91:04:fd:d0:32:91:4b:cb:
         0f:09:0c:42:71:6c:ac:6a:fc:8c:ce:b7:b6:6c:99:d1:75:ad:
         89:85:fd:bb:5e:40:95:38:f2:39:63:06:b7:be:a9:b2:ff:78:
         08:17:02:bd:59:8a:22:12:0e:50:81:06:44:6c:41:73:3c:0d:
         e3:29:d1:be:d8:61:86:f7:21:9f:f2:c4:2a:2d:00:a1:e1:73:
         f7:f5:ae:43:1c:2b:ee:29:7c:9c:25:3e:59:04:b6:70:ca:d0:
         6c:f2:22:53:d6:d3:6d:26:87:92:7b:61:90:84:3e:e7:ef:53:
         d9:2d:b1:97:98:d7:64:a5:da:51:99:3e:93:ae:63:04:fd:f4:
         d0:7f:fc:d8:3e:35:3b:08:6d:46:5e:09:98:3c:ad:f5:07:d1:
         ff:ea:a8:08:df:8b:f6:c6:e1:3b:b7:d4:51:26:01:81:0f:a9:
         84:ef:ae:34:24:74:3e:a4:bc:cd:83:c9:45:ed:9f:f4:d5:94:
         70:4e:8f:d2:3d:70:eb:d6:25:97:32:7c:65:61:13:e3:a8:fd:
         15:31:cb:62
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBnxLkW6HGxLXOKQQUHJAYYXS/V4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ4RDEzNzJGRDFEMkEzMkJGOUU5QTBGMTZDMkY2MERG
RjkyQUQ2QjAeFw0yNDA1MDcxOTE1MTdaFw0yNTA1MDYxOTIwMTdaMDMxMTAvBgNV
BAMTKDJEMjE3MDlCNTZCRjBCNDk3NTQwRjU1MTlDRkE4NDk0MDRCOTlBOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWSYcV1dcrRDERBzguErrIWenb
ONo4qeVArAgmjRikDrWcIvQVcZj+q6eDLioJd8DgD1A8CqIps0khx9fJTtbWKCZ0
zm2QV8Beq3sG3Ce/w98CO6PmIxTg09RfgMH6FuQZzoxZssE5K8PGVHWLRhZr0Chh
nHYLFklNlbyP6iw/j7u+a0a1Ug0Pv2I0xxF0a1OtPmRKS5hb4Q+8t63cFmIj1XwS
DnJ3/c8l/gm81saZ43X/K2keKtTT1E1wpaBTFYCrKeKZm8Q+5zv/pEEZMxF9RJ6P
FkLJiHUwU8EFcwVOdoRJ91PIR8mrW/ogee1/G2T9Crt3s1Em5ikite10hsrJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQULSFwm1a/C0l1QPVRnPqElAS5mpkwHwYDVR0j
BBgwFoAUvY0Tcv0dKjK/npoPFsL2Df+SrWswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXB0M3JLeWVqTWVkNXhoOFA4dXhVQ29zeTVpaVFyY1ZGelpGeFhUNUJx
QkMvMC9CRDhEMTM3MkZEMUQyQTMyQkY5RTlBMEYxNkMyRjYwREZGOTJBRDZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEOEQxMzcyRkQxRDJBMzJC
RjlFOUEwRjE2QzJGNjBERkY5MkFENkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlwdDNyS3llak1lZDV4aDhQOHV4VUNvc3k1aWlRcmNWRnpaRnhYVDVCcUJDLzAv
MzEzODM2MmUzMjM0MzkyZTMyMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMDMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC6+RUwDQYJKoZIhvcNAQELBQADggEBAJR3ZIHi
ooesfKs/uZB937sjKsTA6eYbi3DKRCEjFS05CAphe84ADvob6PsKO6mRBP3QMpFL
yw8JDEJxbKxq/IzOt7ZsmdF1rYmF/bteQJU48jljBre+qbL/eAgXAr1ZiiISDlCB
BkRsQXM8DeMp0b7YYYb3IZ/yxCotAKHhc/f1rkMcK+4pfJwlPlkEtnDK0GzyIlPW
020mh5J7YZCEPufvU9ktsZeY12Sl2lGZPpOuYwT99NB//Ng+NTsIbUZeCZg8rfUH
0f/qqAjfi/bG4Tu31FEmAYEPqYTvrjQkdD6kvM2DyUXtn/TVlHBOj9I9cOvWJZcy
fGVhE+Oo/RUxy2I=
-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:02 2024 by rpki-client on console-fra.rpki-client.org