Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3138362e3235312e3235322e302f32332d3233203d3e20323637353133.roa
File:                     3138362e3235312e3235322e302f32332d3233203d3e20323637353133.roa (raw, json)
Hash identifier:          Ju69tSkvhp4ZU0yNZrbtgkVUmsYLHhKEM1l+iLW48uc=
Subject key identifier:   AC:0D:7F:C7:8B:AC:72:15:5B:CF:C4:8D:20:79:AD:76:BC:FD:41:16
Certificate issuer:       /CN=CF15A08CBAD6745A044863EE535BB942BA6C046E
Certificate serial:       717F6CAA9E1BFBCBC95F8BC59ED68D1AA558E078
Authority key identifier: CF:15:A0:8C:BA:D6:74:5A:04:48:63:EE:53:5B:B9:42:BA:6C:04:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3138362e3235312e3235322e302f32332d3233203d3e20323637353133.roa
Signing time:             Thu 04 Apr 2024 18:08:47 +0000
ROA not before:           Thu 04 Apr 2024 18:03:47 +0000
ROA not after:            Thu 03 Apr 2025 18:08:47 +0000
asID:                     267513
IP address blocks:        186.251.252.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.crl
                          rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:7f:6c:aa:9e:1b:fb:cb:c9:5f:8b:c5:9e:d6:8d:1a:a5:58:e0:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF15A08CBAD6745A044863EE535BB942BA6C046E
        Validity
            Not Before: Apr  4 18:03:47 2024 GMT
            Not After : Apr  3 18:08:47 2025 GMT
        Subject: CN=AC0D7FC78BAC72155BCFC48D2079AD76BCFD4116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:93:ce:95:dd:17:3c:76:44:2d:d0:99:79:85:
                    fe:81:1e:c8:12:8c:5e:ee:b0:b7:5a:ad:81:71:1e:
                    4c:d2:ad:01:de:58:57:49:eb:7d:1a:70:3c:68:b7:
                    ea:7b:6d:31:32:7c:cb:4b:52:e3:8a:e0:12:98:82:
                    bd:14:05:02:10:2a:b2:fc:3b:41:9a:1c:37:a5:d2:
                    a7:35:fa:63:21:46:e8:1e:91:32:77:22:94:de:1b:
                    e1:3c:8c:59:99:85:12:b7:ff:5b:88:bc:e2:56:4c:
                    a9:10:de:b8:b3:d0:c1:ed:24:61:95:db:0d:18:06:
                    24:96:b3:cf:99:79:77:fa:d0:b4:cf:9d:9e:46:0c:
                    00:37:ec:73:8e:82:99:85:d8:42:08:15:22:37:19:
                    0b:dc:b3:d6:03:e4:9c:48:41:33:8d:c4:c9:d7:ef:
                    87:1c:53:c7:26:4c:7f:d6:43:d8:1b:a9:bd:dc:b4:
                    1a:87:11:05:b7:4f:97:8e:8a:ca:3e:9a:06:15:06:
                    3e:cf:ce:20:69:49:e7:4c:15:22:16:36:6f:73:22:
                    06:a9:81:50:20:8d:98:47:a6:53:13:d9:fd:7c:eb:
                    bf:f6:30:53:d2:3e:7a:a2:f9:60:4c:29:54:cf:72:
                    8e:b2:1c:f1:c4:a6:f9:0f:4f:bb:6b:b9:37:8d:2f:
                    b1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0D:7F:C7:8B:AC:72:15:5B:CF:C4:8D:20:79:AD:76:BC:FD:41:16
            X509v3 Authority Key Identifier:
                keyid:CF:15:A0:8C:BA:D6:74:5A:04:48:63:EE:53:5B:B9:42:BA:6C:04:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15A08CBAD6745A044863EE535BB942BA6C046E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/1/3138362e3235312e3235322e302f32332d3233203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:80:57:5c:e2:d2:27:99:d0:fa:ce:42:f3:10:a4:e0:05:73:
         1c:21:61:bb:31:b7:af:e9:6f:4c:3c:e2:19:f3:92:d8:53:3e:
         4f:5d:f4:b0:5e:d9:10:3f:a8:06:6a:b3:69:2e:55:77:e7:fc:
         7c:b7:6f:23:9e:ee:05:e1:c6:30:06:1a:4e:0a:de:70:3a:77:
         b9:53:32:0d:9c:11:3b:09:56:3f:57:ac:a2:a7:59:0d:1b:99:
         10:c1:81:ea:06:03:0b:33:e6:e7:77:f3:3b:cd:61:e8:aa:25:
         2d:1b:ac:ae:b9:c3:f6:34:70:6c:ba:ad:f7:53:ea:34:d5:8a:
         11:91:22:49:80:01:88:27:db:ad:21:9c:9f:59:d8:49:c6:3d:
         89:d7:42:c8:f2:1b:7d:4c:65:7a:5d:9a:dd:3b:6d:3e:61:15:
         f9:32:f5:13:59:59:c4:1a:64:41:9b:18:2c:8e:4b:b2:45:dd:
         d9:6e:2e:af:33:77:92:ea:86:a6:c6:6d:7c:71:7f:4c:39:23:
         47:e9:74:bb:c5:12:f8:d0:ed:0d:3e:94:d4:0a:81:88:2e:a7:
         58:7e:c8:e3:ae:a1:b4:c9:ce:e4:f6:81:da:58:f2:f1:39:f2:
         9d:94:3b:ca:4f:86:f2:43:87:d6:92:39:d2:a7:1c:df:19:d0:
         86:20:02:7a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUcX9sqp4b+8vJX4vFntaNGqVY4HgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YxNUEwOENCQUQ2NzQ1QTA0NDg2M0VFNTM1QkI5NDJC
QTZDMDQ2RTAeFw0yNDA0MDQxODAzNDdaFw0yNTA0MDMxODA4NDdaMDMxMTAvBgNV
BAMTKEFDMEQ3RkM3OEJBQzcyMTU1QkNGQzQ4RDIwNzlBRDc2QkNGRDQxMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWk86V3Rc8dkQt0Jl5hf6BHsgS
jF7usLdarYFxHkzSrQHeWFdJ630acDxot+p7bTEyfMtLUuOK4BKYgr0UBQIQKrL8
O0GaHDel0qc1+mMhRugekTJ3IpTeG+E8jFmZhRK3/1uIvOJWTKkQ3riz0MHtJGGV
2w0YBiSWs8+ZeXf60LTPnZ5GDAA37HOOgpmF2EIIFSI3GQvcs9YD5JxIQTONxMnX
74ccU8cmTH/WQ9gbqb3ctBqHEQW3T5eOiso+mgYVBj7PziBpSedMFSIWNm9zIgap
gVAgjZhHplMT2f1867/2MFPSPnqi+WBMKVTPco6yHPHEpvkPT7truTeNL7HJAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUrA1/x4uschVbz8SNIHmtdrz9QRYwHwYDVR0j
BBgwFoAUzxWgjLrWdFoESGPuU1u5QrpsBG4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnVvYzFvckdrQzZTdkF1dnhIMUpLandpM0tQd0hSS1JhTHM4c2ZCTlh6
SkcvMS9DRjE1QTA4Q0JBRDY3NDVBMDQ0ODYzRUU1MzVCQjk0MkJBNkMwNDZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGMTVBMDhDQkFENjc0NUEw
NDQ4NjNFRTUzNUJCOTQyQkE2QzA0NkUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J1b2Mxb3JHa0M2U3ZBdXZ4SDFKS2p3aTNLUHdIUktSYUxzOHNmQk5YekpHLzEv
MzEzODM2MmUzMjM1MzEyZTMyMzUzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNzM1MzEzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbr7/DANBgkqhkiG9w0BAQsFAAOCAQEAjIBX
XOLSJ5nQ+s5C8xCk4AVzHCFhuzG3r+lvTDziGfOS2FM+T130sF7ZED+oBmqzaS5V
d+f8fLdvI57uBeHGMAYaTgrecDp3uVMyDZwROwlWP1esoqdZDRuZEMGB6gYDCzPm
53fzO81h6KolLRusrrnD9jRwbLqt91PqNNWKEZEiSYABiCfbrSGcn1nYScY9iddC
yPIbfUxlel2a3TttPmEV+TL1E1lZxBpkQZsYLI5LskXd2W4urzN3kuqGpsZtfHF/
TDkjR+l0u8US+NDtDT6U1AqBiC6nWH7I466htMnO5PaB2ljy8TnynZQ7yk+G8kOH
1pI50qcc3xnQhiACeg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:34 2024 by rpki-client on console-fra.rpki-client.org