Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3138362e3232372e37332e302f32342d3234203d3e20323637353133.roa
File:                     3138362e3232372e37332e302f32342d3234203d3e20323637353133.roa (raw, json)
Hash identifier:          G5uXhgs2ACdsOxJVzmbkBDPnh4KS0vnLf7ryJEpEBL8=
Subject key identifier:   D8:04:D5:70:78:17:AA:AC:05:18:A8:67:BB:44:A2:DA:21:BB:F8:D8
Certificate issuer:       /CN=CF15A08CBAD6745A044863EE535BB942BA6C046E
Certificate serial:       23954028D493814459BB13FF4C14CF3BAA9133F0
Authority key identifier: CF:15:A0:8C:BA:D6:74:5A:04:48:63:EE:53:5B:B9:42:BA:6C:04:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3138362e3232372e37332e302f32342d3234203d3e20323637353133.roa
Signing time:             Thu 04 Apr 2024 18:08:47 +0000
ROA not before:           Thu 04 Apr 2024 18:03:47 +0000
ROA not after:            Thu 03 Apr 2025 18:08:47 +0000
asID:                     267513
IP address blocks:        186.227.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.crl
                          rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:95:40:28:d4:93:81:44:59:bb:13:ff:4c:14:cf:3b:aa:91:33:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF15A08CBAD6745A044863EE535BB942BA6C046E
        Validity
            Not Before: Apr  4 18:03:47 2024 GMT
            Not After : Apr  3 18:08:47 2025 GMT
        Subject: CN=D804D5707817AAAC0518A867BB44A2DA21BBF8D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c8:dd:70:1f:fc:e2:c3:9e:b1:b3:72:f0:2f:
                    be:ff:5c:0d:48:9a:30:36:65:3f:9f:35:6c:62:41:
                    b9:e1:65:0e:75:3a:31:32:38:3a:56:57:01:9f:6a:
                    c0:3e:52:a6:fb:4a:e5:22:af:d4:41:14:09:72:e9:
                    c0:fd:a7:51:35:0b:8e:d4:78:f4:30:fd:b4:28:d1:
                    4b:79:47:c4:76:74:d8:79:d5:0a:ba:20:f7:3e:31:
                    00:96:7f:71:45:99:2a:b0:0c:44:a9:e8:1e:2e:c3:
                    00:6b:2e:63:74:4d:d1:d4:b4:4c:76:9e:99:db:a8:
                    d1:da:d6:b1:49:a1:b8:94:9e:b1:51:89:5b:c8:bb:
                    96:cf:e2:6b:97:c4:0f:41:e8:6a:1f:24:ba:59:4a:
                    36:9b:cf:d4:09:f2:a6:c7:04:ee:7a:0e:bf:eb:f5:
                    56:72:c7:14:a4:f1:2e:8e:5e:df:3b:6d:2d:0e:8b:
                    10:2d:5d:a2:33:59:7d:02:97:96:c7:61:1e:6c:75:
                    eb:be:b9:d1:0c:1e:23:5c:6d:0b:6a:4d:16:3e:57:
                    88:48:f4:56:52:a5:50:a1:27:af:c5:30:02:eb:89:
                    67:6b:ed:cd:21:ca:26:44:87:83:d4:07:76:ed:4f:
                    d6:b5:50:49:fd:6c:79:29:56:dd:90:7b:18:a3:53:
                    9a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:04:D5:70:78:17:AA:AC:05:18:A8:67:BB:44:A2:DA:21:BB:F8:D8
            X509v3 Authority Key Identifier:
                keyid:CF:15:A0:8C:BA:D6:74:5A:04:48:63:EE:53:5B:B9:42:BA:6C:04:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3138362e3232372e37332e302f32342d3234203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:02:7f:8c:79:3c:77:0d:74:ea:6f:b5:d0:45:e2:49:eb:e6:
         6c:65:1c:92:68:70:a0:63:c9:14:2b:b0:f4:9d:0d:73:8c:56:
         d1:87:42:3f:25:29:35:26:98:4d:44:c5:8b:7c:86:36:a0:dd:
         26:4e:18:df:24:50:f2:80:19:d9:0e:e5:54:9f:ac:48:51:cf:
         6e:2a:0c:51:2b:5a:f2:09:0f:2d:ad:19:ad:a7:19:39:6e:90:
         c9:ab:1e:9b:ce:1b:d1:f7:34:c9:5f:db:1c:d0:47:4d:42:e4:
         7d:06:91:30:f2:51:ad:d7:8f:b8:e2:2d:e7:46:fe:49:2a:39:
         d5:be:06:4e:30:c0:c1:1f:87:82:9b:40:18:14:59:c8:66:a8:
         0c:3d:c7:c2:8c:b5:02:5a:ba:10:e9:4b:78:f1:75:92:bb:a6:
         f8:de:d3:b0:f5:31:45:a0:b3:74:10:28:4b:13:ea:12:44:ab:
         b0:a6:9c:9c:ad:3d:45:25:dd:1a:fa:04:41:76:94:16:4f:5f:
         cb:6d:8e:41:d6:f5:a7:0b:f7:d1:6b:a4:e1:16:8c:53:f8:c2:
         6a:39:5f:25:cf:c0:c0:bb:72:34:41:54:db:a8:05:3d:e8:b8:
         34:eb:99:2d:b6:0b:37:cf:1e:30:db:2f:00:64:9b:bb:95:fb:
         db:8d:89:a3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUI5VAKNSTgURZuxP/TBTPO6qRM/AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YxNUEwOENCQUQ2NzQ1QTA0NDg2M0VFNTM1QkI5NDJC
QTZDMDQ2RTAeFw0yNDA0MDQxODAzNDdaFw0yNTA0MDMxODA4NDdaMDMxMTAvBgNV
BAMTKEQ4MDRENTcwNzgxN0FBQUMwNTE4QTg2N0JCNDRBMkRBMjFCQkY4RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8yN1wH/ziw56xs3LwL77/XA1I
mjA2ZT+fNWxiQbnhZQ51OjEyODpWVwGfasA+Uqb7SuUir9RBFAly6cD9p1E1C47U
ePQw/bQo0Ut5R8R2dNh51Qq6IPc+MQCWf3FFmSqwDESp6B4uwwBrLmN0TdHUtEx2
npnbqNHa1rFJobiUnrFRiVvIu5bP4muXxA9B6GofJLpZSjabz9QJ8qbHBO56Dr/r
9VZyxxSk8S6OXt87bS0OixAtXaIzWX0Cl5bHYR5sdeu+udEMHiNcbQtqTRY+V4hI
9FZSpVChJ6/FMALriWdr7c0hyiZEh4PUB3btT9a1UEn9bHkpVt2QexijU5qvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU2ATVcHgXqqwFGKhnu0Si2iG7+NgwHwYDVR0j
BBgwFoAUzxWgjLrWdFoESGPuU1u5QrpsBG4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnVvYzFvckdrQzZTdkF1dnhIMUpLandpM0tQd0hSS1JhTHM4c2ZCTlh6
SkcvMS9DRjE1QTA4Q0JBRDY3NDVBMDQ0ODYzRUU1MzVCQjk0MkJBNkMwNDZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGMTVBMDhDQkFENjc0NUEw
NDQ4NjNFRTUzNUJCOTQyQkE2QzA0NkUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J1b2Mxb3JHa0M2U3ZBdXZ4SDFKS2p3aTNLUHdIUktSYUxzOHNmQk5YekpHLzEv
MzEzODM2MmUzMjMyMzcyZTM3MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczNTMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC640kwDQYJKoZIhvcNAQELBQADggEBAJMCf4x5
PHcNdOpvtdBF4knr5mxlHJJocKBjyRQrsPSdDXOMVtGHQj8lKTUmmE1ExYt8hjag
3SZOGN8kUPKAGdkO5VSfrEhRz24qDFErWvIJDy2tGa2nGTlukMmrHpvOG9H3NMlf
2xzQR01C5H0GkTDyUa3Xj7jiLedG/kkqOdW+Bk4wwMEfh4KbQBgUWchmqAw9x8KM
tQJauhDpS3jxdZK7pvje07D1MUWgs3QQKEsT6hJEq7CmnJytPUUl3Rr6BEF2lBZP
X8ttjkHW9acL99FrpOEWjFP4wmo5XyXPwMC7cjRBVNuoBT3ouDTrmS22CzfPHjDb
LwBkm7uV+9uNiaM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:34 2024 by rpki-client on console-fra.rpki-client.org