Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3138362e3233332e3137362e302f32332d3233203d3e203533323039.roa
File:                     3138362e3233332e3137362e302f32332d3233203d3e203533323039.roa (raw, json)
Hash identifier:          g2DC9vm/oWajjzjXlbsfjKlv3AVb+Q2sznUF7efvqL8=
Subject key identifier:   A3:E6:A5:67:14:02:70:26:D2:EB:69:6A:63:F2:C5:A5:CC:12:36:83
Certificate issuer:       /CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
Certificate serial:       5004C32AA9FD454F1420A5CDC7FEBBF90822ED62
Authority key identifier: B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3138362e3233332e3137362e302f32332d3233203d3e203533323039.roa
Signing time:             Tue 27 Aug 2024 20:13:20 +0000
ROA not before:           Tue 27 Aug 2024 20:08:20 +0000
ROA not after:            Tue 26 Aug 2025 20:13:20 +0000
asID:                     53209
IP address blocks:        186.233.176.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/B2D2010B208ADA303E84ADA92145BD21A0BB1822.crl
                          rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/B2D2010B208ADA303E84ADA92145BD21A0BB1822.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:04:c3:2a:a9:fd:45:4f:14:20:a5:cd:c7:fe:bb:f9:08:22:ed:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2D2010B208ADA303E84ADA92145BD21A0BB1822
        Validity
            Not Before: Aug 27 20:08:20 2024 GMT
            Not After : Aug 26 20:13:20 2025 GMT
        Subject: CN=A3E6A56714027026D2EB696A63F2C5A5CC123683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:81:1f:56:3f:8a:39:43:58:ed:27:8d:58:a0:
                    4a:cb:28:cc:ce:23:0b:dc:85:bb:7d:e9:7b:2f:17:
                    8d:02:61:f1:cf:e7:58:55:10:44:dc:c9:f0:7c:57:
                    9b:52:8b:e2:08:40:85:82:55:da:96:ce:39:f1:4c:
                    09:6e:8c:00:3a:26:5c:bc:f8:0a:73:fc:3f:b9:75:
                    66:69:30:6f:36:d4:7a:12:82:25:a5:b2:38:6d:2c:
                    74:50:9c:96:f4:35:ae:7e:cd:79:0f:d9:22:76:db:
                    29:c0:ea:27:bf:a2:fb:db:ba:5f:d9:e7:d7:09:5a:
                    62:10:a2:0d:e5:d0:67:e3:04:a9:71:cc:40:ea:2c:
                    f3:fb:56:83:c9:5f:0d:38:66:8a:ad:d2:b6:2f:3e:
                    88:f9:88:ff:78:a3:0d:69:e9:d0:d8:97:14:05:5b:
                    d5:be:54:96:ca:78:b5:70:46:64:35:04:72:4b:f2:
                    f2:36:5f:c5:41:a1:f3:1a:ea:81:da:ff:68:e9:25:
                    d9:bc:b4:34:2a:32:4f:4c:8b:de:47:76:51:d1:8b:
                    22:fb:a6:94:f2:af:06:10:d7:73:a2:a1:52:5a:f9:
                    5a:f2:64:99:7e:83:59:ad:46:d1:b4:31:91:44:e8:
                    97:c9:4f:29:7e:fd:be:84:1b:1d:f8:ea:31:46:a3:
                    c6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E6:A5:67:14:02:70:26:D2:EB:69:6A:63:F2:C5:A5:CC:12:36:83
            X509v3 Authority Key Identifier:
                keyid:B2:D2:01:0B:20:8A:DA:30:3E:84:AD:A9:21:45:BD:21:A0:BB:18:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/B2D2010B208ADA303E84ADA92145BD21A0BB1822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2D2010B208ADA303E84ADA92145BD21A0BB1822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3138362e3233332e3137362e302f32332d3233203d3e203533323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:6a:9b:8a:ba:28:54:d9:2f:fc:b6:be:e2:c0:4f:3d:ef:e3:
         4e:47:3f:bb:fb:af:5b:a7:f9:60:56:80:88:83:87:d8:bc:09:
         55:b4:67:ab:95:4c:0b:00:d9:1c:41:d0:3b:8b:db:a9:43:fa:
         cd:36:6b:32:18:d6:29:ef:26:e1:d3:f8:11:79:fd:7c:db:3c:
         7b:d1:3e:d6:a3:36:3e:7e:f3:6e:7c:3c:9e:2b:0a:73:3d:b0:
         48:6a:46:ec:88:85:ad:2d:d9:63:46:1e:78:63:97:04:b0:66:
         d8:bf:e6:f6:5b:07:a5:99:e5:89:48:95:f0:44:07:66:07:c5:
         90:7c:7e:99:63:0c:07:3a:9b:36:be:5d:0b:99:a0:a1:d0:59:
         d1:37:e9:21:5e:b3:c0:60:01:79:60:b9:d1:38:05:58:f1:6c:
         13:a1:10:4c:ca:7f:24:5b:2a:7f:4f:8f:2d:d5:fb:ec:87:6d:
         ca:a1:f6:9a:d2:c9:1b:33:45:28:31:6e:12:d9:15:8e:8d:53:
         12:a8:c2:92:09:0e:7a:af:65:98:f0:c1:de:8b:b8:4e:5f:6c:
         93:b0:05:25:1b:21:66:c2:bc:c8:0d:b4:9d:6a:8b:ba:82:46:
         0e:f9:7b:63:8c:04:e5:83:ca:e6:d3:e3:91:18:3e:d0:8d:57:
         1e:a3:fc:ce
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUATDKqn9RU8UIKXNx/67+Qgi7WIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjJEMjAxMEIyMDhBREEzMDNFODRBREE5MjE0NUJEMjFB
MEJCMTgyMjAeFw0yNDA4MjcyMDA4MjBaFw0yNTA4MjYyMDEzMjBaMDMxMTAvBgNV
BAMTKEEzRTZBNTY3MTQwMjcwMjZEMkVCNjk2QTYzRjJDNUE1Q0MxMjM2ODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxgR9WP4o5Q1jtJ41YoErLKMzO
Iwvchbt96XsvF40CYfHP51hVEETcyfB8V5tSi+IIQIWCVdqWzjnxTAlujAA6Jly8
+Apz/D+5dWZpMG821HoSgiWlsjhtLHRQnJb0Na5+zXkP2SJ22ynA6ie/ovvbul/Z
59cJWmIQog3l0GfjBKlxzEDqLPP7VoPJXw04Zoqt0rYvPoj5iP94ow1p6dDYlxQF
W9W+VJbKeLVwRmQ1BHJL8vI2X8VBofMa6oHa/2jpJdm8tDQqMk9Mi95HdlHRiyL7
ppTyrwYQ13OioVJa+VryZJl+g1mtRtG0MZFE6JfJTyl+/b6EGx346jFGo8aZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUo+alZxQCcCbS62lqY/LFpcwSNoMwHwYDVR0j
BBgwFoAUstIBCyCK2jA+hK2pIUW9IaC7GCIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWtialZSWFZwWHZFWDExVXRSSG9CSlFqcDV0dWtCb05zbmg4enh1ZzZn
WUIvMC9CMkQyMDEwQjIwOEFEQTMwM0U4NEFEQTkyMTQ1QkQyMUEwQkIxODIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IyRDIwMTBCMjA4QURBMzAz
RTg0QURBOTIxNDVCRDIxQTBCQjE4MjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FrYmpWUlhWcFh2RVgxMVV0UkhvQkpRanA1dHVrQm9Oc25oOHp4dWc2Z1lCLzAv
MzEzODM2MmUzMjMzMzMyZTMxMzczNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM1
MzMzMjMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG66bAwDQYJKoZIhvcNAQELBQADggEBAEZqm4q6
KFTZL/y2vuLATz3v405HP7v7r1un+WBWgIiDh9i8CVW0Z6uVTAsA2RxB0DuL26lD
+s02azIY1invJuHT+BF5/XzbPHvRPtajNj5+8258PJ4rCnM9sEhqRuyIha0t2WNG
HnhjlwSwZti/5vZbB6WZ5YlIlfBEB2YHxZB8fpljDAc6mza+XQuZoKHQWdE36SFe
s8BgAXlgudE4BVjxbBOhEEzKfyRbKn9Pjy3V++yHbcqh9prSyRszRSgxbhLZFY6N
UxKowpIJDnqvZZjwwd6LuE5fbJOwBSUbIWbCvMgNtJ1qi7qCRg75e2OMBOWDyubT
45EYPtCNVx6j/M4=
-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:37 2024 by rpki-client on console-fra.rpki-client.org