Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139382e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3139382e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          zFZQ6rqFm4M5FLTfcf1oHFJDcG8seXOnwd/9K1JwSr8=
Subject key identifier:   26:6A:59:C0:E6:8F:D4:BF:15:35:4C:84:7D:67:61:E0:5B:2A:37:3D
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       14FAB4BAAE28EC6971068C1FE3400CDD4AA6AA70
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139382e302f32342d3234203d3e20323632363837.roa
Signing time:             Mon 29 Jul 2024 10:35:00 +0000
ROA not before:           Mon 29 Jul 2024 10:30:00 +0000
ROA not after:            Mon 28 Jul 2025 10:35:00 +0000
asID:                     262687
IP address blocks:        187.87.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:fa:b4:ba:ae:28:ec:69:71:06:8c:1f:e3:40:0c:dd:4a:a6:aa:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: Jul 29 10:30:00 2024 GMT
            Not After : Jul 28 10:35:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f2:48:2f:f2:07:88:da:23:93:db:fc:ac:96:
                    e2:be:55:17:a9:e4:d5:65:12:7a:ee:fb:db:30:86:
                    f9:71:bc:05:e9:52:93:f9:58:ad:2d:28:75:78:49:
                    b4:33:ee:6c:20:77:1c:33:ad:f0:bf:3f:39:26:2b:
                    fc:d8:7f:fd:b9:2c:e3:cd:ca:ba:44:ff:f3:bb:4e:
                    52:78:7a:f6:b8:b5:68:e3:6f:f8:1a:bd:eb:92:93:
                    fd:66:c4:d5:29:17:33:de:59:7f:89:2d:c3:70:77:
                    5c:80:82:56:87:24:cc:04:a3:58:ec:62:e4:83:ed:
                    4a:29:01:85:fd:3f:7a:18:9f:75:6c:e8:54:d0:e9:
                    d4:47:db:49:d0:43:4b:cd:2b:0e:56:fc:c3:46:dc:
                    50:ce:48:3b:31:36:50:c0:76:0e:fa:03:a2:c3:c8:
                    51:4c:0f:46:b6:a7:4c:e2:6e:bb:0d:13:05:0f:7a:
                    dd:c3:f9:52:be:45:b0:4f:1b:2e:f7:45:a1:b9:47:
                    70:0a:de:b7:a1:fb:ab:1d:6f:0a:25:e9:c0:b5:d2:
                    37:b8:d5:49:eb:61:65:1d:02:94:2a:3c:cb:7d:7a:
                    c0:b8:b8:64:9f:cd:70:00:69:4d:ed:85:96:aa:c3:
                    33:b5:51:2a:04:f3:f5:9b:49:82:3a:0b:d5:97:a9:
                    4f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:6A:59:C0:E6:8F:D4:BF:15:35:4C:84:7D:67:61:E0:5B:2A:37:3D
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/3138372e38372e3139382e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:77:10:75:c9:86:16:99:c4:ce:ab:18:ec:44:8e:5e:49:ff:
         5d:e5:7a:01:cc:d2:da:71:48:a5:d9:b3:3a:54:26:0f:34:39:
         5e:74:de:66:f4:eb:59:57:48:24:70:4c:e3:0a:8f:4a:23:f1:
         c3:b2:73:18:4a:91:72:4d:bd:15:c4:d3:cd:bb:06:4c:60:dd:
         0f:ba:b2:c0:36:b9:f5:6f:48:c3:37:45:b3:78:fe:97:f8:e7:
         3c:00:d3:a5:3b:d7:00:e0:72:a0:16:9a:c2:b4:cb:fe:cc:f6:
         0c:cf:47:b0:0b:cb:dc:1f:4e:6f:cf:ee:fb:da:11:2c:e4:aa:
         f5:31:7c:82:d1:44:39:49:df:b7:d2:3a:4a:60:9d:71:7e:61:
         e9:30:86:ee:fa:42:cf:ad:1b:e0:10:06:a1:20:6b:55:1c:d6:
         bd:de:e3:fb:5e:04:db:90:b4:cf:92:94:7c:ff:02:00:9c:da:
         9d:0f:48:2e:ec:d9:ab:bb:aa:d9:94:fe:70:93:ef:0c:50:7c:
         cf:87:1d:74:21:dd:8c:0f:13:00:7d:7b:f5:ba:9c:04:47:fd:
         a6:4f:5a:20:bb:8f:e8:fe:4b:98:e6:90:61:10:e8:d9:17:29:
         87:b7:3b:5d:8a:b5:0b:3c:76:a8:ee:a7:eb:5f:34:b6:38:f7:
         8c:58:2c:bb
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUFPq0uq4o7GlxBowf40AM3UqmqnAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZENUY1NjJCMzI3MkU0NEE1MTI4MjkxMTk4NkVBMDM4
QzVENjkxOTAeFw0yNDA3MjkxMDMwMDBaFw0yNTA3MjgxMDM1MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0NGMjQ4MkZGMjA3ODhEQTIz
OTNEQkZDQUM5NkUyQkU1NTE3QTlFNEQ1NjUxMjdBRUVGQkRCMzA4NkY5NzFCQzA1
RTk1MjkzRjk1OEFEMkQyODc1Nzg0OUI0MzNFRTZDMjA3NzFDMzNBREYwQkYzRjM5
MjYyQkZDRDg3RkZEQjkyQ0UzQ0RDQUJBNDRGRkYzQkI0RTUyNzg3QUY2QjhCNTY4
RTM2RkY4MUFCREVCOTI5M0ZENjZDNEQ1MjkxNzMzREU1OTdGODkyREMzNzA3NzVD
ODA4MjU2ODcyNENDMDRBMzU4RUM2MkU0ODNFRDRBMjkwMTg1RkQzRjdBMTg5Rjc1
NkNFODU0RDBFOUQ0NDdEQjQ5RDA0MzRCQ0QyQjBFNTZGQ0MzNDZEQzUwQ0U0ODNC
MzEzNjUwQzA3NjBFRkEwM0EyQzNDODUxNEMwRjQ2QjZBNzRDRTI2RUJCMEQxMzA1
MEY3QUREQzNGOTUyQkU0NUIwNEYxQjJFRjc0NUExQjk0NzcwMEFERUI3QTFGQkFC
MUQ2RjBBMjVFOUMwQjVEMjM3QjhENTQ5RUI2MTY1MUQwMjk0MkEzQ0NCN0Q3QUMw
QjhCODY0OUZDRDcwMDA2OTRERUQ4NTk2QUFDMzMzQjU1MTJBMDRGM0Y1OUI0OTgy
M0EwQkQ1OTdBOTRGMUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzPJIL/IHiNojk9v8rJbivlUXqeTVZRJ67vvbMIb5cbwF6VKT+Vit
LSh1eEm0M+5sIHccM63wvz85Jiv82H/9uSzjzcq6RP/zu05SeHr2uLVo42/4Gr3r
kpP9ZsTVKRcz3ll/iS3DcHdcgIJWhyTMBKNY7GLkg+1KKQGF/T96GJ91bOhU0OnU
R9tJ0ENLzSsOVvzDRtxQzkg7MTZQwHYO+gOiw8hRTA9GtqdM4m67DRMFD3rdw/lS
vkWwTxsu90WhuUdwCt63ofurHW8KJenAtdI3uNVJ62FlHQKUKjzLfXrAuLhkn81w
AGlN7YWWqsMztVEqBPP1m0mCOgvVl6lPGwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FCZqWcDmj9S/FTVMhH1nYeBbKjc9MB8GA1UdIwQYMBaAFF/V9WKzJy5EpRKCkRmG
6gOMXWkZMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0E5ZkJ2dnV2NDVQMTFi
eDJWbmpWM29ndDlqV0Jjck4zMlYxWlNmeUhvcjVvLzEvNUZENUY1NjJCMzI3MkU0
NEE1MTI4MjkxMTk4NkVBMDM4QzVENjkxOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS81RkQ1RjU2MkIzMjcyRTQ0QTUxMjgyOTExOTg2RUEwMzhDNUQ2
OTE5LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BOWZCdnZ1djQ1UDExYngyVm5q
VjNvZ3Q5aldCY3JOMzJWMVpTZnlIb3I1by8xLzMxMzgzNzJlMzgzNzJlMzEzOTM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzYzODM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
u1fGMA0GCSqGSIb3DQEBCwUAA4IBAQAEdxB1yYYWmcTOqxjsRI5eSf9d5XoBzNLa
cUil2bM6VCYPNDledN5m9OtZV0gkcEzjCo9KI/HDsnMYSpFyTb0VxNPNuwZMYN0P
urLANrn1b0jDN0WzeP6X+Oc8ANOlO9cA4HKgFprCtMv+zPYMz0ewC8vcH05vz+77
2hEs5Kr1MXyC0UQ5Sd+30jpKYJ1xfmHpMIbu+kLPrRvgEAahIGtVHNa93uP7XgTb
kLTPkpR8/wIAnNqdD0gu7Nmru6rZlP5wk+8MUHzPhx10Id2MDxMAfXv1upwER/2m
T1ogu4/o/kuY5pBhEOjZFymHtztdirULPHao7qfrXzS2OPeMWCy7
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:27 2024 by rpki-client on console-fra.rpki-client.org