Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e32322e302f32332d3233203d3e20323633303232.roa
File:                     3138362e3234392e32322e302f32332d3233203d3e20323633303232.roa (raw, json)
Hash identifier:          TVIsp7msjVaA5/vW7mRXbBvDjo7kJVR/gXsXDZAA3sc=
Subject key identifier:   8D:0D:3D:C4:1C:53:AE:C4:83:33:C7:E2:07:48:22:AB:AA:B0:E5:1C
Certificate issuer:       /CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
Certificate serial:       0FF323B56D60EE8B1B5E16D23F5C1B09F46F863B
Authority key identifier: BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e32322e302f32332d3233203d3e20323633303232.roa
Signing time:             Tue 07 May 2024 19:17:15 +0000
ROA not before:           Tue 07 May 2024 19:12:15 +0000
ROA not after:            Tue 06 May 2025 19:17:15 +0000
asID:                     263022
IP address blocks:        186.249.22.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl
                          rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f3:23:b5:6d:60:ee:8b:1b:5e:16:d2:3f:5c:1b:09:f4:6f:86:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
        Validity
            Not Before: May  7 19:12:15 2024 GMT
            Not After : May  6 19:17:15 2025 GMT
        Subject: CN=8D0D3DC41C53AEC48333C7E2074822ABAAB0E51C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:48:30:df:43:a2:cb:0c:11:1c:5a:94:54:10:
                    85:a5:37:62:34:ac:d4:04:66:bd:38:fb:2d:d7:a3:
                    3e:d5:ab:6d:47:94:0b:62:74:d5:05:48:55:b6:1e:
                    7e:a1:e1:ef:f5:d7:5d:ee:a8:c1:56:41:23:25:6e:
                    8c:a1:38:2a:b4:2f:91:03:d5:ab:04:d8:a6:b0:40:
                    08:47:ef:9e:d7:32:01:c3:f0:19:fa:bd:23:0c:bc:
                    8e:89:ea:ad:ec:c0:60:e8:af:16:c3:2e:86:8c:41:
                    43:95:36:db:78:2a:ad:12:27:30:7c:45:ab:0a:d4:
                    cf:3d:3e:53:b3:a3:41:ec:a8:57:25:92:41:e2:8b:
                    3e:5c:ea:f4:d3:7f:f9:a0:19:07:ba:b0:09:b4:5f:
                    1f:67:ec:91:9d:0b:87:6e:8a:7b:3a:95:14:5e:ca:
                    5c:57:f5:a0:f8:ba:42:b5:3c:b1:dd:1a:94:e9:cc:
                    fe:0b:87:50:a5:9b:b7:fa:08:63:e7:a0:d1:c6:7b:
                    72:6b:e2:8d:53:a1:5f:cc:d9:8b:24:b0:10:20:2a:
                    d3:b2:3f:11:ad:bf:bc:26:51:1d:12:e4:80:06:de:
                    1c:99:8f:0d:14:d7:64:8b:99:f8:0f:11:48:55:72:
                    b4:79:1e:45:5b:93:d9:b9:e7:ed:df:af:39:a3:cd:
                    3c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0D:3D:C4:1C:53:AE:C4:83:33:C7:E2:07:48:22:AB:AA:B0:E5:1C
            X509v3 Authority Key Identifier:
                keyid:BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e32322e302f32332d3233203d3e20323633303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:be:76:39:3c:cb:ca:0c:0b:54:61:ef:1a:cf:de:e9:5d:b6:
         26:09:42:3b:2b:73:18:ef:70:20:44:06:cb:14:8e:60:58:58:
         a8:60:19:e0:2d:ff:bd:03:41:06:7d:8c:05:0f:dd:17:37:82:
         f7:54:d9:14:7a:23:bc:e8:37:20:80:f7:d3:3b:81:4c:ae:13:
         57:ff:38:3d:7f:9d:6c:6f:3a:1f:48:88:f7:1b:08:53:ab:90:
         40:fd:5c:3d:f5:15:35:be:8d:a8:11:a6:c1:22:ea:70:4e:ef:
         84:cc:27:83:19:19:14:f6:c5:80:ec:1b:b8:49:c4:6e:66:4c:
         ad:0d:54:fa:3b:80:5f:f8:ac:79:56:fc:14:91:6a:d4:32:18:
         f6:93:5c:82:60:e4:11:5a:b5:79:90:62:63:e9:5b:a1:3a:0b:
         f6:1b:0e:85:8d:5d:7f:c8:6f:d9:a0:7f:de:49:93:9b:f9:1d:
         e0:c5:83:95:85:77:08:d2:73:58:57:6a:aa:2d:2d:16:77:21:
         9a:f1:52:34:4c:33:c5:3e:d8:87:60:e5:92:82:28:fc:f9:78:
         65:1f:70:7a:f2:94:18:0e:12:71:43:ca:3b:07:82:8d:a2:6a:
         a2:3e:59:c8:99:ec:12:9e:c0:34:23:2b:06:14:8f:de:cf:09:
         36:e6:9d:5d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUD/MjtW1g7osbXhbSP1wbCfRvhjswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ4RDEzNzJGRDFEMkEzMkJGOUU5QTBGMTZDMkY2MERG
RjkyQUQ2QjAeFw0yNDA1MDcxOTEyMTVaFw0yNTA1MDYxOTE3MTVaMDMxMTAvBgNV
BAMTKDhEMEQzREM0MUM1M0FFQzQ4MzMzQzdFMjA3NDgyMkFCQUFCMEU1MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmSDDfQ6LLDBEcWpRUEIWlN2I0
rNQEZr04+y3Xoz7Vq21HlAtidNUFSFW2Hn6h4e/1113uqMFWQSMlboyhOCq0L5ED
1asE2KawQAhH757XMgHD8Bn6vSMMvI6J6q3swGDorxbDLoaMQUOVNtt4Kq0SJzB8
RasK1M89PlOzo0HsqFclkkHiiz5c6vTTf/mgGQe6sAm0Xx9n7JGdC4duins6lRRe
ylxX9aD4ukK1PLHdGpTpzP4Lh1Clm7f6CGPnoNHGe3Jr4o1ToV/M2YsksBAgKtOy
PxGtv7wmUR0S5IAG3hyZjw0U12SLmfgPEUhVcrR5HkVbk9m55+3frzmjzTw/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjQ09xBxTrsSDM8fiB0giq6qw5RwwHwYDVR0j
BBgwFoAUvY0Tcv0dKjK/npoPFsL2Df+SrWswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXB0M3JLeWVqTWVkNXhoOFA4dXhVQ29zeTVpaVFyY1ZGelpGeFhUNUJx
QkMvMC9CRDhEMTM3MkZEMUQyQTMyQkY5RTlBMEYxNkMyRjYwREZGOTJBRDZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEOEQxMzcyRkQxRDJBMzJC
RjlFOUEwRjE2QzJGNjBERkY5MkFENkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlwdDNyS3llak1lZDV4aDhQOHV4VUNvc3k1aWlRcmNWRnpaRnhYVDVCcUJDLzAv
MzEzODM2MmUzMjM0MzkyZTMyMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzMzMDMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG6+RYwDQYJKoZIhvcNAQELBQADggEBAAG+djk8
y8oMC1Rh7xrP3uldtiYJQjsrcxjvcCBEBssUjmBYWKhgGeAt/70DQQZ9jAUP3Rc3
gvdU2RR6I7zoNyCA99M7gUyuE1f/OD1/nWxvOh9IiPcbCFOrkED9XD31FTW+jagR
psEi6nBO74TMJ4MZGRT2xYDsG7hJxG5mTK0NVPo7gF/4rHlW/BSRatQyGPaTXIJg
5BFatXmQYmPpW6E6C/YbDoWNXX/Ib9mgf95Jk5v5HeDFg5WFdwjSc1hXaqotLRZ3
IZrxUjRMM8U+2Idg5ZKCKPz5eGUfcHrylBgOEnFDyjsHgo2iaqI+WciZ7BKewDQj
KwYUj97PCTbmnV0=
-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:02 2024 by rpki-client on console-fra.rpki-client.org