Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/3138372e34392e39362e302f32302d3332203d3e203238313433.roa
File:                     3138372e34392e39362e302f32302d3332203d3e203238313433.roa (raw, json)
Hash identifier:          bBwFZO/qlj6The+DKG7it2jTUTaBPCLhLXQ1xUXLitI=
Subject key identifier:   1A:B7:BD:75:F0:AE:51:B7:56:73:6B:6A:16:DF:00:F6:FD:1A:7E:33
Certificate issuer:       /CN=3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472
Certificate serial:       4C7D8C3B8A661E508E00D8AEEAB69E98C85DBF4F
Authority key identifier: 3B:6F:AA:2A:DB:30:43:3D:1C:1B:2F:5A:84:C4:E5:9D:D4:2C:E4:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/3138372e34392e39362e302f32302d3332203d3e203238313433.roa
Signing time:             Fri 19 Jul 2024 14:08:42 +0000
ROA not before:           Fri 19 Jul 2024 14:03:42 +0000
ROA not after:            Fri 18 Jul 2025 14:08:42 +0000
asID:                     28143
IP address blocks:        187.49.96.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.crl
                          rsync://rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 14:14:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:7d:8c:3b:8a:66:1e:50:8e:00:d8:ae:ea:b6:9e:98:c8:5d:bf:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472
        Validity
            Not Before: Jul 19 14:03:42 2024 GMT
            Not After : Jul 18 14:08:42 2025 GMT
        Subject: CN=1AB7BD75F0AE51B756736B6A16DF00F6FD1A7E33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e0:e2:69:67:54:f7:c8:d7:49:3a:b3:fc:de:
                    96:90:5d:77:99:a5:03:0c:fb:9a:7a:f5:e5:f0:72:
                    46:9c:f4:82:57:2e:f5:28:70:51:30:c4:0e:75:fd:
                    b0:e4:7b:3f:00:fb:15:b6:b0:29:19:b4:b3:cd:93:
                    d5:c4:79:b5:43:4c:eb:96:67:31:c7:78:5e:60:ad:
                    6d:09:d9:0a:b9:03:11:fe:ec:24:46:15:f2:b8:1c:
                    fe:ad:63:8a:b6:29:74:dc:7f:16:a3:36:21:4c:f5:
                    a4:61:57:1a:29:e6:2b:36:51:15:96:87:45:a5:aa:
                    11:65:94:a7:4e:17:43:0e:37:68:0c:30:63:bd:fa:
                    65:ae:fb:35:22:e0:95:c8:21:a2:cb:6b:8c:ef:fd:
                    b4:bd:6c:b6:94:1e:d9:d4:ab:b7:9d:8e:89:53:2e:
                    a8:06:34:c0:e8:0a:50:71:c9:6d:69:15:ee:f6:7a:
                    cb:16:49:50:67:37:26:4c:f4:50:50:ff:04:6a:df:
                    5c:88:f6:23:f4:3c:35:45:ad:de:f9:f7:2b:59:06:
                    44:58:9e:65:b0:05:bf:90:c2:94:7f:ef:44:8e:32:
                    0c:a1:1f:f9:f9:26:67:4e:e8:d2:0f:16:dc:65:53:
                    a3:63:bd:c6:b7:2a:87:b1:c9:8a:26:38:de:f5:72:
                    48:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B7:BD:75:F0:AE:51:B7:56:73:6B:6A:16:DF:00:F6:FD:1A:7E:33
            X509v3 Authority Key Identifier:
                keyid:3B:6F:AA:2A:DB:30:43:3D:1C:1B:2F:5A:84:C4:E5:9D:D4:2C:E4:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/3138372e34392e39362e302f32302d3332203d3e203238313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         41:35:b3:07:45:7f:30:e1:54:0d:ef:9d:38:49:b9:0d:c5:23:
         5c:57:cd:ad:2e:e5:c5:35:7b:26:ef:93:17:85:4c:15:64:08:
         eb:a5:30:d8:b0:61:5f:c3:a8:a5:73:3e:c6:24:3c:47:21:22:
         17:2a:41:69:ed:50:de:c2:76:31:0a:20:2b:d6:ac:ac:33:de:
         82:95:ba:a7:eb:c3:a4:b1:ed:ea:80:0d:5c:b1:08:f8:80:c4:
         e2:db:49:3c:21:c9:13:89:52:9f:a8:b0:1a:33:04:27:a1:35:
         bd:3b:31:b2:2a:f2:64:4c:cb:d2:9a:17:ff:f4:e5:a8:b3:99:
         a7:53:95:68:a2:d5:2a:39:d7:c9:ca:96:52:73:4d:a8:4c:f4:
         89:f5:d3:1f:f8:3b:c1:30:45:50:e2:34:1b:03:82:3e:f6:bb:
         49:97:7c:8d:b1:c2:85:d2:c0:2a:f0:60:de:fc:5c:bf:f9:c3:
         06:c4:d4:20:63:69:af:ab:2a:10:f0:20:60:e9:66:9f:07:20:
         f8:9c:8d:90:23:f7:f2:ae:5d:5b:f0:d4:4c:49:31:c7:13:74:
         03:27:25:84:3f:63:c4:5c:6a:3f:28:7c:66:07:6c:cc:10:ff:
         54:97:ca:86:26:59:ea:ae:60:6e:b3:48:bc:5c:92:12:a8:c3:
         1f:c8:6a:df
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUTH2MO4pmHlCOANiu6raemMhdv08wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I2RkFBMkFEQjMwNDMzRDFDMUIyRjVBODRDNEU1OURE
NDJDRTQ3MjAeFw0yNDA3MTkxNDAzNDJaFw0yNTA3MTgxNDA4NDJaMDMxMTAvBgNV
BAMTKDFBQjdCRDc1RjBBRTUxQjc1NjczNkI2QTE2REYwMEY2RkQxQTdFMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ4OJpZ1T3yNdJOrP83paQXXeZ
pQMM+5p69eXwckac9IJXLvUocFEwxA51/bDkez8A+xW2sCkZtLPNk9XEebVDTOuW
ZzHHeF5grW0J2Qq5AxH+7CRGFfK4HP6tY4q2KXTcfxajNiFM9aRhVxop5is2URWW
h0WlqhFllKdOF0MON2gMMGO9+mWu+zUi4JXIIaLLa4zv/bS9bLaUHtnUq7edjolT
LqgGNMDoClBxyW1pFe72essWSVBnNyZM9FBQ/wRq31yI9iP0PDVFrd759ytZBkRY
nmWwBb+QwpR/70SOMgyhH/n5JmdO6NIPFtxlU6Njvca3KoexyYomON71ckinAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUGre9dfCuUbdWc2tqFt8A9v0afjMwHwYDVR0j
BBgwFoAUO2+qKtswQz0cGy9ahMTlndQs5HIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQllpUkVCRGFmS0VtUDVZd1g2MVppSGE3dzhhM1JFbkh3RjJMMWhvbXJS
a2UvMC8zQjZGQUEyQURCMzA0MzNEMUMxQjJGNUE4NEM0RTU5REQ0MkNFNDcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNCNkZBQTJBREIzMDQzM0Qx
QzFCMkY1QTg0QzRFNTlERDQyQ0U0NzIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JZaVJFQkRhZktFbVA1WXdYNjFaaUhhN3c4YTNSRW5Id0YyTDFob21yUmtlLzAv
MzEzODM3MmUzNDM5MmUzOTM2MmUzMDJmMzIzMDJkMzMzMjIwM2QzZTIwMzIzODMx
MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBLsxYDANBgkqhkiG9w0BAQsFAAOCAQEAQTWzB0V/MOFU
De+dOEm5DcUjXFfNrS7lxTV7Ju+TF4VMFWQI66Uw2LBhX8OopXM+xiQ8RyEiFypB
ae1Q3sJ2MQogK9asrDPegpW6p+vDpLHt6oANXLEI+IDE4ttJPCHJE4lSn6iwGjME
J6E1vTsxsiryZEzL0poX//TlqLOZp1OVaKLVKjnXycqWUnNNqEz0ifXTH/g7wTBF
UOI0GwOCPva7SZd8jbHChdLAKvBg3vxcv/nDBsTUIGNpr6sqEPAgYOlmnwcg+JyN
kCP38q5dW/DUTEkxxxN0AyclhD9jxFxqPyh8ZgdszBD/VJfKhiZZ6q5gbrNIvFyS
EqjDH8hq3w==
-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:38 2024 by rpki-client on console-ams.rpki-client.org