Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138372e3132312e3233332e302f32342d3234203d3e20323634313030.roa
File:                     3138372e3132312e3233332e302f32342d3234203d3e20323634313030.roa (raw, json)
Hash identifier:          o0h2Q8XeMbrXVr9/MLyPULapFd/5nQ4UHQbvJKAPGEU=
Subject key identifier:   6F:04:08:7A:79:15:4F:88:15:A7:CD:19:ED:F9:E4:DB:27:99:B3:22
Certificate issuer:       /CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
Certificate serial:       556B5FCA8D4657E923FFA92CD1930B2ED4EF8839
Authority key identifier: 24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138372e3132312e3233332e302f32342d3234203d3e20323634313030.roa
Signing time:             Mon 18 Nov 2024 13:24:57 +0000
ROA not before:           Mon 18 Nov 2024 13:19:57 +0000
ROA not after:            Mon 17 Nov 2025 13:24:57 +0000
asID:                     264100
IP address blocks:        187.121.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.crl
                          rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 06:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:6b:5f:ca:8d:46:57:e9:23:ff:a9:2c:d1:93:0b:2e:d4:ef:88:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=240776095D0A2A2617F52A2F4657B9D69AA661DD
        Validity
            Not Before: Nov 18 13:19:57 2024 GMT
            Not After : Nov 17 13:24:57 2025 GMT
        Subject: CN=6F04087A79154F8815A7CD19EDF9E4DB2799B322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c3:ba:f5:21:03:98:1a:d1:dc:09:02:a4:b2:
                    89:a1:0d:69:33:e0:56:d2:95:bb:8e:0d:c6:81:87:
                    d8:08:55:07:81:c7:51:67:73:1d:c4:3f:d9:b9:bd:
                    27:3f:f0:5f:68:a2:ee:ce:f7:3b:c5:6f:d8:38:e8:
                    0a:f1:c3:0e:10:4d:a6:53:c6:e6:c9:c7:77:22:2c:
                    e8:11:d7:41:53:ac:3c:1a:90:16:1c:38:c5:54:47:
                    3f:72:b1:ee:5d:2a:7e:60:72:e8:8d:6f:7c:8f:1b:
                    83:1d:fd:86:38:85:6d:40:10:eb:cf:74:40:76:aa:
                    5e:74:22:26:dc:e6:8a:86:80:25:f6:2e:50:f8:d8:
                    ff:f0:5c:38:bb:8a:bc:aa:fd:a3:1c:0a:95:1d:c2:
                    b5:dd:dc:0d:94:4f:07:f9:ed:a4:30:09:8d:15:e7:
                    41:a4:89:5d:b6:2b:5f:91:81:b8:f2:f6:3a:00:34:
                    4a:5a:36:38:e4:39:fa:96:a4:dd:7d:82:95:2d:dc:
                    4f:6b:d1:f8:94:38:b6:70:18:1b:d7:45:82:54:94:
                    10:65:17:e4:1b:53:37:8b:b5:67:c0:9a:d3:eb:1c:
                    75:9d:e2:13:2d:2a:aa:2b:f7:20:5b:13:63:9d:2f:
                    8c:4b:89:06:61:12:14:99:66:14:f9:66:d4:c9:e7:
                    86:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:04:08:7A:79:15:4F:88:15:A7:CD:19:ED:F9:E4:DB:27:99:B3:22
            X509v3 Authority Key Identifier:
                keyid:24:07:76:09:5D:0A:2A:26:17:F5:2A:2F:46:57:B9:D6:9A:A6:61:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/240776095D0A2A2617F52A2F4657B9D69AA661DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/240776095D0A2A2617F52A2F4657B9D69AA661DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLaKFpUd6fnt4Pn4AedZTS86SJWqVcK1BzsThC2dYhGe/0/3138372e3132312e3233332e302f32342d3234203d3e20323634313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:41:0c:97:ea:86:3c:6e:a7:23:4a:fa:03:7b:ae:a2:86:a9:
         11:3b:10:95:2e:0d:bc:a8:97:0d:20:9f:f1:e8:30:1e:71:c7:
         72:2a:a7:f5:3e:ed:de:9c:a2:e5:00:82:21:cc:94:59:9f:94:
         c9:ea:36:77:0a:a3:c8:ad:4c:f8:be:0d:9f:b7:a8:cf:ba:96:
         a5:ab:66:e5:61:c4:85:bc:31:c3:75:dd:52:99:d9:d3:78:74:
         6e:ec:3a:15:ad:c1:a7:03:14:7d:38:1d:0e:14:39:bd:ae:be:
         2f:c7:27:ed:94:15:30:7b:16:a7:07:c1:93:a3:5f:80:51:37:
         99:5b:ea:06:e0:7e:5a:e0:4f:13:2d:7e:d3:74:c8:d5:72:57:
         aa:cc:93:ec:67:bf:fb:04:eb:1d:6d:a2:2c:70:a4:a0:81:30:
         5f:71:db:1a:0a:1f:ec:59:e7:38:8e:44:c1:bf:16:78:9d:5d:
         e4:2d:e2:3f:c2:42:dc:e2:4b:42:61:1e:33:53:26:8c:2d:19:
         16:ad:0b:6e:8c:d7:f8:71:f6:cd:c6:2d:e8:10:a4:ab:2a:7d:
         c4:5b:4c:ac:72:45:56:e6:29:04:6b:52:1a:66:98:ee:d3:4b:
         33:55:2f:fb:b3:6a:65:ab:36:10:26:02:44:37:06:e3:cb:d9:
         31:cf:81:fa
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUVWtfyo1GV+kj/6ks0ZMLLtTviDkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQwNzc2MDk1RDBBMkEyNjE3RjUyQTJGNDY1N0I5RDY5
QUE2NjFERDAeFw0yNDExMTgxMzE5NTdaFw0yNTExMTcxMzI0NTdaMDMxMTAvBgNV
BAMTKDZGMDQwODdBNzkxNTRGODgxNUE3Q0QxOUVERjlFNERCMjc5OUIzMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxw7r1IQOYGtHcCQKksomhDWkz
4FbSlbuODcaBh9gIVQeBx1Fncx3EP9m5vSc/8F9oou7O9zvFb9g46Arxww4QTaZT
xubJx3ciLOgR10FTrDwakBYcOMVURz9yse5dKn5gcuiNb3yPG4Md/YY4hW1AEOvP
dEB2ql50Iibc5oqGgCX2LlD42P/wXDi7iryq/aMcCpUdwrXd3A2UTwf57aQwCY0V
50GkiV22K1+Rgbjy9joANEpaNjjkOfqWpN19gpUt3E9r0fiUOLZwGBvXRYJUlBBl
F+QbUzeLtWfAmtPrHHWd4hMtKqor9yBbE2OdL4xLiQZhEhSZZhT5ZtTJ54Y/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUbwQIenkVT4gVp80Z7fnk2yeZsyIwHwYDVR0j
BBgwFoAUJAd2CV0KKiYX9SovRle51pqmYd0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkxhS0ZwVWQ2Zm50NFBuNEFlZFpUUzg2U0pXcVZjSzFCenNUaEMyZFlo
R2UvMC8yNDA3NzYwOTVEMEEyQTI2MTdGNTJBMkY0NjU3QjlENjlBQTY2MURELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0MDc3NjA5NUQwQTJBMjYx
N0Y1MkEyRjQ2NTdCOUQ2OUFBNjYxREQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JMYUtGcFVkNmZudDRQbjRBZWRaVFM4NlNKV3FWY0sxQnpzVGhDMmRZaEdlLzAv
MzEzODM3MmUzMTMyMzEyZTMyMzMzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDMxMzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALt56TANBgkqhkiG9w0BAQsFAAOCAQEAmEEM
l+qGPG6nI0r6A3uuooapETsQlS4NvKiXDSCf8egwHnHHciqn9T7t3pyi5QCCIcyU
WZ+Uyeo2dwqjyK1M+L4Nn7eoz7qWpatm5WHEhbwxw3XdUpnZ03h0buw6Fa3BpwMU
fTgdDhQ5va6+L8cn7ZQVMHsWpwfBk6NfgFE3mVvqBuB+WuBPEy1+03TI1XJXqsyT
7Ge/+wTrHW2iLHCkoIEwX3HbGgof7FnnOI5Ewb8WeJ1d5C3iP8JC3OJLQmEeM1Mm
jC0ZFq0LbozX+HH2zcYt6BCkqyp9xFtMrHJFVuYpBGtSGmaY7tNLM1Uv+7NqZas2
ECYCRDcG48vZMc+B+g==
-----END CERTIFICATE-----
Generated at Wed Nov 27 07:11:15 2024 by rpki-client on console-fra.rpki-client.org