Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3138372e38352e3230302e302f32312d3234203d3e203238333439.roa
File:                     3138372e38352e3230302e302f32312d3234203d3e203238333439.roa (raw, json)
Hash identifier:          q4tdO9vg02WoA2IF3CxRHud4+1Ri2v28HnX+JSYn/X4=
Subject key identifier:   11:F6:93:73:3A:D9:3C:6A:42:15:4B:DA:86:5A:25:68:62:21:18:65
Certificate issuer:       /CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
Certificate serial:       0F1A17389720C061038E46A8996ACA74D01B8C17
Authority key identifier: 0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3138372e38352e3230302e302f32312d3234203d3e203238333439.roa
Signing time:             Mon 08 Jul 2024 19:43:08 +0000
ROA not before:           Mon 08 Jul 2024 19:38:08 +0000
ROA not after:            Mon 07 Jul 2025 19:43:08 +0000
asID:                     28349
IP address blocks:        187.85.200.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 Nov 2024 21:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:1a:17:38:97:20:c0:61:03:8e:46:a8:99:6a:ca:74:d0:1b:8c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
        Validity
            Not Before: Jul  8 19:38:08 2024 GMT
            Not After : Jul  7 19:43:08 2025 GMT
        Subject: CN=11F693733AD93C6A42154BDA865A256862211865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0e:1a:7e:52:cb:c4:f5:d8:cc:6b:d6:7d:b8:
                    ec:08:72:a3:21:76:a6:fc:93:64:25:32:d6:54:19:
                    1d:61:4f:a2:53:92:ab:1d:9f:66:0e:a3:47:0c:11:
                    25:f8:fd:79:e7:d1:fb:9e:c7:1d:cb:6e:77:86:8f:
                    54:52:55:28:4f:d7:fb:af:20:c3:00:28:42:45:c6:
                    c8:f4:1c:6d:67:09:41:42:d6:24:cc:e3:67:07:48:
                    44:dc:92:5e:b3:a1:6d:a3:d0:a9:17:61:ad:e7:5c:
                    c8:98:91:be:6d:c9:7d:db:1d:5c:3f:81:4d:d9:9a:
                    d1:57:a6:ad:df:d0:7c:da:e6:d7:0d:0a:d5:18:08:
                    40:a0:dd:ae:f0:bc:09:c2:40:55:13:7e:70:c6:58:
                    b9:ac:d4:d5:5f:44:f1:c8:a2:07:e9:a9:eb:85:8e:
                    1f:5a:64:be:ca:0e:60:4e:9b:5d:3d:3a:b5:97:6e:
                    21:dd:7a:4a:c7:53:59:3b:dc:b1:3d:51:97:2d:b1:
                    d7:6f:0b:c9:f2:a3:35:f5:3f:c0:1c:ef:68:a2:95:
                    2e:bd:0e:06:d5:06:36:76:db:ab:6f:d1:26:8a:c5:
                    74:a6:8b:64:e9:c2:b5:32:de:2f:9b:4a:f9:9a:35:
                    10:ec:14:6c:a2:3e:ef:7c:3b:27:f2:a2:9a:e9:22:
                    bb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F6:93:73:3A:D9:3C:6A:42:15:4B:DA:86:5A:25:68:62:21:18:65
            X509v3 Authority Key Identifier:
                keyid:0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/3138372e38352e3230302e302f32312d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7c:72:73:f6:10:b3:55:24:b4:ec:54:0d:47:20:90:62:b1:26:
         59:27:6d:94:dc:ae:8e:02:c2:70:e5:60:f7:a7:d0:99:6b:8f:
         28:7d:4b:15:48:23:09:9c:de:81:43:4e:df:55:b1:22:34:52:
         36:bc:cd:4a:14:03:63:d6:2f:aa:35:14:d5:2c:47:93:56:67:
         d4:7c:ce:44:95:85:fa:93:24:95:49:e0:67:59:92:ec:20:e6:
         5f:3c:cc:b7:7f:10:4f:76:9d:31:8f:74:b4:f7:a3:52:fd:70:
         50:97:c1:1a:9f:5c:22:e5:65:15:24:97:2d:42:aa:bb:59:ed:
         9f:3c:1a:22:a8:7c:c0:8d:52:c0:b6:31:24:04:34:9b:3c:01:
         0c:e1:9f:57:e3:0a:80:18:3c:35:9a:55:ff:29:63:63:3f:91:
         7e:1d:eb:fd:e9:6a:a0:dd:3c:2e:de:28:ec:af:91:1f:f0:95:
         bc:7c:bf:71:35:de:1f:7b:55:3f:b4:ca:91:c8:51:a9:88:ae:
         0c:f7:3e:81:7c:b9:aa:6f:04:ad:9c:32:74:16:fa:73:09:dd:
         87:b0:d8:41:d6:f5:9f:5e:38:58:15:23:6c:d2:2f:90:f3:0b:
         d2:8a:58:60:3e:77:41:27:91:64:e3:df:9e:87:d6:9b:97:78:
         82:38:10:8e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUDxoXOJcgwGEDjkaomWrKdNAbjBcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMERFQjkyRjMzMDdCMEU5NENDNzBEOUIyMUI1MEY2RkUy
MTM1Q0Q5ODAeFw0yNDA3MDgxOTM4MDhaFw0yNTA3MDcxOTQzMDhaMDMxMTAvBgNV
BAMTKDExRjY5MzczM0FEOTNDNkE0MjE1NEJEQTg2NUEyNTY4NjIyMTE4NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Dhp+UsvE9djMa9Z9uOwIcqMh
dqb8k2QlMtZUGR1hT6JTkqsdn2YOo0cMESX4/Xnn0fuexx3LbneGj1RSVShP1/uv
IMMAKEJFxsj0HG1nCUFC1iTM42cHSETckl6zoW2j0KkXYa3nXMiYkb5tyX3bHVw/
gU3ZmtFXpq3f0Hza5tcNCtUYCECg3a7wvAnCQFUTfnDGWLms1NVfRPHIogfpqeuF
jh9aZL7KDmBOm109OrWXbiHdekrHU1k73LE9UZctsddvC8nyozX1P8Ac72iilS69
DgbVBjZ226tv0SaKxXSmi2TpwrUy3i+bSvmaNRDsFGyiPu98OyfyoprpIruTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUEfaTczrZPGpCFUvahlolaGIhGGUwHwYDVR0j
BBgwFoAUDeuS8zB7DpTMcNmyG1D2/iE1zZgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWk1dVl4UzY3MTdONTdWZUZ4aFk3V0hSd1M1TmhmTDZMTDh0eTRNVFpw
NUovMi8wREVCOTJGMzMwN0IwRTk0Q0M3MEQ5QjIxQjUwRjZGRTIxMzVDRDk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBERUI5MkYzMzA3QjBFOTRD
QzcwRDlCMjFCNTBGNkZFMjEzNUNEOTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FpNXVZeFM2NzE3TjU3VmVGeGhZN1dIUndTNU5oZkw2TEw4dHk0TVRacDVKLzIv
MzEzODM3MmUzODM1MmUzMjMwMzAyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM4
MzMzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDu1XIMA0GCSqGSIb3DQEBCwUAA4IBAQB8cnP2ELNV
JLTsVA1HIJBisSZZJ22U3K6OAsJw5WD3p9CZa48ofUsVSCMJnN6BQ07fVbEiNFI2
vM1KFANj1i+qNRTVLEeTVmfUfM5ElYX6kySVSeBnWZLsIOZfPMy3fxBPdp0xj3S0
96NS/XBQl8Ean1wi5WUVJJctQqq7We2fPBoiqHzAjVLAtjEkBDSbPAEM4Z9X4wqA
GDw1mlX/KWNjP5F+Hev96Wqg3Twu3ijsr5Ef8JW8fL9xNd4fe1U/tMqRyFGpiK4M
9z6BfLmqbwStnDJ0FvpzCd2HsNhB1vWfXjhYFSNs0i+Q8wvSilhgPndBJ5Fk49+e
h9abl3iCOBCO
-----END CERTIFICATE-----
Generated at Sat Nov 16 02:55:59 2024 by rpki-client on console-ams.rpki-client.org