Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e32332e302f32342d3234203d3e20323633303232.roa
File:                     3138362e3234392e32332e302f32342d3234203d3e20323633303232.roa (raw, json)
Hash identifier:          9jACaeaVwnX2qYBJbTg3KEqNa0HZPDO/VulSkEcmFnA=
Subject key identifier:   11:AA:57:83:55:92:AA:B2:C8:89:B6:80:C5:07:02:EB:B5:6D:02:36
Certificate issuer:       /CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
Certificate serial:       578EFC9C21C60BF9BB0F12D4360CC213E3978D21
Authority key identifier: BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e32332e302f32342d3234203d3e20323633303232.roa
Signing time:             Tue 07 May 2024 19:20:43 +0000
ROA not before:           Tue 07 May 2024 19:15:43 +0000
ROA not after:            Tue 06 May 2025 19:20:43 +0000
asID:                     263022
IP address blocks:        186.249.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl
                          rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:8e:fc:9c:21:c6:0b:f9:bb:0f:12:d4:36:0c:c2:13:e3:97:8d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B
        Validity
            Not Before: May  7 19:15:43 2024 GMT
            Not After : May  6 19:20:43 2025 GMT
        Subject: CN=11AA57835592AAB2C889B680C50702EBB56D0236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:14:f5:66:20:bf:25:f1:0f:21:6d:79:24:7e:
                    8d:b7:ef:b3:09:56:89:af:51:60:2b:b6:ca:af:f4:
                    12:67:f0:42:f6:63:5e:cb:3c:45:26:1f:1c:84:94:
                    f7:56:1c:fb:73:f6:bb:cc:2a:32:67:d2:05:38:1c:
                    23:b1:83:63:30:84:ef:5c:b0:66:e6:ba:d1:5b:19:
                    26:a5:8c:73:ba:ad:ec:bb:32:7b:1e:44:d3:c3:4d:
                    21:56:18:b3:d0:44:d4:33:a7:78:a0:3f:d3:76:a4:
                    01:33:84:22:45:a9:26:9c:ee:f4:3e:2c:38:77:4a:
                    29:42:c1:ef:46:d7:34:56:32:7c:d3:e8:01:62:83:
                    6b:82:07:3c:3b:d5:a9:5c:64:36:01:cf:87:a3:0c:
                    38:dd:50:46:70:7c:2e:69:a2:43:d5:80:0b:a4:53:
                    b6:ed:cf:f1:8c:d1:a2:65:ff:cb:90:47:13:a7:34:
                    e1:ba:7d:7a:0b:00:2f:48:cd:3f:05:a8:5e:51:45:
                    f1:73:f1:a3:b2:06:9f:1e:ea:c1:be:cc:47:83:fd:
                    f6:d0:df:2f:ac:f4:39:50:7d:d3:6d:c3:73:43:ec:
                    16:1b:f9:4a:42:0d:f5:ed:a1:72:2f:2c:d0:6c:a0:
                    a6:84:43:ea:de:26:55:04:db:f0:42:ec:82:9f:b9:
                    af:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AA:57:83:55:92:AA:B2:C8:89:B6:80:C5:07:02:EB:B5:6D:02:36
            X509v3 Authority Key Identifier:
                keyid:BD:8D:13:72:FD:1D:2A:32:BF:9E:9A:0F:16:C2:F6:0D:FF:92:AD:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD8D1372FD1D2A32BF9E9A0F16C2F60DFF92AD6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e32332e302f32342d3234203d3e20323633303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:bc:d9:bb:f3:3c:d4:a0:6c:10:13:4b:18:db:6b:9e:23:33:
         64:4e:9b:fb:99:26:fd:d9:09:21:d4:aa:8c:74:ba:89:56:23:
         fc:0c:98:11:6b:d6:ad:e1:41:cb:87:7b:7e:1e:a3:1d:bf:e0:
         1a:2f:59:75:26:9d:e0:e5:bf:3a:f9:d8:6e:7b:36:f4:a1:34:
         cc:c6:5e:f7:ce:ed:82:6e:3c:cd:6b:fd:83:17:38:8f:d2:ca:
         bc:c0:9d:b9:03:f9:de:34:4e:9b:37:25:29:6c:90:83:df:0a:
         52:3a:3c:e8:6f:3d:00:24:75:00:aa:4b:51:8f:86:c6:20:a0:
         ad:c4:2b:e9:31:3d:6b:f0:4c:ab:0b:0a:4a:d2:79:13:37:1d:
         89:19:32:a2:23:2c:d3:17:80:4f:87:97:a2:60:86:a7:d3:12:
         1d:45:4b:23:c8:b3:44:c4:0a:3d:db:94:17:e1:6e:8e:b0:8e:
         c6:38:db:c0:ca:60:78:36:66:78:70:37:de:13:de:7a:2c:1c:
         2b:13:bf:e3:05:1e:f5:25:bc:88:94:45:fc:03:db:a8:c2:e8:
         fd:e3:aa:33:a1:2a:f5:a1:21:ad:b5:42:86:88:d4:33:30:7f:
         cf:51:46:08:e4:42:d3:87:92:22:06:d9:27:a4:2d:c2:18:78:
         79:59:47:84
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUV478nCHGC/m7DxLUNgzCE+OXjSEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ4RDEzNzJGRDFEMkEzMkJGOUU5QTBGMTZDMkY2MERG
RjkyQUQ2QjAeFw0yNDA1MDcxOTE1NDNaFw0yNTA1MDYxOTIwNDNaMDMxMTAvBgNV
BAMTKDExQUE1NzgzNTU5MkFBQjJDODg5QjY4MEM1MDcwMkVCQjU2RDAyMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4FPVmIL8l8Q8hbXkkfo2377MJ
VomvUWArtsqv9BJn8EL2Y17LPEUmHxyElPdWHPtz9rvMKjJn0gU4HCOxg2MwhO9c
sGbmutFbGSaljHO6rey7MnseRNPDTSFWGLPQRNQzp3igP9N2pAEzhCJFqSac7vQ+
LDh3SilCwe9G1zRWMnzT6AFig2uCBzw71alcZDYBz4ejDDjdUEZwfC5pokPVgAuk
U7btz/GM0aJl/8uQRxOnNOG6fXoLAC9IzT8FqF5RRfFz8aOyBp8e6sG+zEeD/fbQ
3y+s9DlQfdNtw3ND7BYb+UpCDfXtoXIvLNBsoKaEQ+reJlUE2/BC7IKfua/1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUEapXg1WSqrLIibaAxQcC67VtAjYwHwYDVR0j
BBgwFoAUvY0Tcv0dKjK/npoPFsL2Df+SrWswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXB0M3JLeWVqTWVkNXhoOFA4dXhVQ29zeTVpaVFyY1ZGelpGeFhUNUJx
QkMvMC9CRDhEMTM3MkZEMUQyQTMyQkY5RTlBMEYxNkMyRjYwREZGOTJBRDZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEOEQxMzcyRkQxRDJBMzJC
RjlFOUEwRjE2QzJGNjBERkY5MkFENkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlwdDNyS3llak1lZDV4aDhQOHV4VUNvc3k1aWlRcmNWRnpaRnhYVDVCcUJDLzAv
MzEzODM2MmUzMjM0MzkyZTMyMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMDMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC6+RcwDQYJKoZIhvcNAQELBQADggEBABO82bvz
PNSgbBATSxjba54jM2ROm/uZJv3ZCSHUqox0uolWI/wMmBFr1q3hQcuHe34eox2/
4BovWXUmneDlvzr52G57NvShNMzGXvfO7YJuPM1r/YMXOI/SyrzAnbkD+d40Tps3
JSlskIPfClI6POhvPQAkdQCqS1GPhsYgoK3EK+kxPWvwTKsLCkrSeRM3HYkZMqIj
LNMXgE+Hl6JghqfTEh1FSyPIs0TECj3blBfhbo6wjsY428DKYHg2ZnhwN94T3nos
HCsTv+MFHvUlvIiURfwD26jC6P3jqjOhKvWhIa21QoaI1DMwf89RRgjkQtOHkiIG
2SekLcIYeHlZR4Q=
-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:02 2024 by rpki-client on console-fra.rpki-client.org