Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3138372e36302e3231362e302f32322d3234203d3e203238313538.roa
File:                     3138372e36302e3231362e302f32322d3234203d3e203238313538.roa (raw, json)
Hash identifier:          b6+94VauETsoLdOeTPqjAc87eV2JRX1PXItVp+jQU+s=
Subject key identifier:   B3:F1:D4:5B:FF:2F:22:D2:01:0C:CB:B1:C8:6A:32:84:84:29:03:D8
Certificate issuer:       /CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
Certificate serial:       076737E17FD20A88FB3E58BBCEB07E8A172E076B
Authority key identifier: B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3138372e36302e3231362e302f32322d3234203d3e203238313538.roa
Signing time:             Thu 19 Sep 2024 14:38:31 +0000
ROA not before:           Thu 19 Sep 2024 14:33:31 +0000
ROA not after:            Thu 18 Sep 2025 14:38:31 +0000
asID:                     28158
IP address blocks:        187.60.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl
                          rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:67:37:e1:7f:d2:0a:88:fb:3e:58:bb:ce:b0:7e:8a:17:2e:07:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
        Validity
            Not Before: Sep 19 14:33:31 2024 GMT
            Not After : Sep 18 14:38:31 2025 GMT
        Subject: CN=B3F1D45BFF2F22D2010CCBB1C86A3284842903D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:24:0e:6a:13:cf:c7:a1:24:30:bc:0f:21:f2:
                    eb:33:c9:4c:dc:83:8a:e7:55:7a:7b:49:f8:16:f6:
                    1b:62:28:08:1f:4f:d7:b6:59:0c:ab:db:d4:88:9b:
                    f6:df:e8:b9:53:4f:82:58:81:67:a4:cc:7e:43:bc:
                    b0:2e:19:24:1d:d9:3b:26:fc:27:e1:01:bb:31:72:
                    ba:8c:01:ed:9f:bf:fb:81:01:9f:ec:c8:ff:9b:2a:
                    79:cd:46:34:f9:21:21:72:1b:0f:59:58:32:a6:09:
                    6b:cc:fc:3c:0c:3d:7d:5f:e2:23:4d:11:48:d1:36:
                    9c:7e:03:a8:1b:58:33:4b:31:3d:c1:e9:56:b2:c7:
                    3b:8c:77:8a:ec:0c:41:17:46:ba:e9:65:b9:b2:c4:
                    70:af:74:da:c7:53:2c:a9:2c:fa:9c:f1:30:4a:26:
                    ed:d1:84:f0:0a:9e:1f:2e:71:08:72:17:e1:e1:58:
                    f5:d3:eb:f6:0a:c2:71:b8:18:a1:3b:23:0d:0a:e7:
                    89:4a:10:24:ea:98:b5:86:04:0a:29:8a:16:cf:c0:
                    52:08:b2:b6:be:1b:9d:0f:b4:62:75:43:cf:28:19:
                    b3:7e:cf:90:20:a6:ed:ae:ed:47:1e:e9:af:3a:7f:
                    d0:b5:86:0f:a8:43:55:66:07:33:b4:5c:c7:48:f0:
                    84:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F1:D4:5B:FF:2F:22:D2:01:0C:CB:B1:C8:6A:32:84:84:29:03:D8
            X509v3 Authority Key Identifier:
                keyid:B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3138372e36302e3231362e302f32322d3234203d3e203238313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.60.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:ce:46:55:e1:87:13:2f:e1:09:04:40:42:8e:5a:f1:5b:75:
         32:c0:92:c9:62:ad:ec:6a:e7:8d:5c:ac:b2:55:b4:24:c6:48:
         45:43:1f:a2:df:c1:61:40:6b:73:6b:77:ac:1f:1d:bd:f7:7f:
         c9:7c:64:b3:f2:9f:07:f5:3b:d4:13:e7:b6:aa:3d:9a:10:f1:
         fa:62:d3:72:bc:50:d2:6a:68:6d:17:b4:da:00:0e:17:49:a9:
         84:32:e4:85:f7:4f:20:c8:fe:08:c6:88:c9:01:13:0d:df:05:
         5a:d8:1e:d1:a1:2a:45:13:e9:57:c0:fb:09:35:65:16:21:90:
         10:ad:d6:f7:23:8d:b0:70:e7:be:ef:3d:91:f4:f3:fb:8b:58:
         28:1a:c5:84:da:2f:9d:d6:69:e8:0e:b1:4d:99:d2:11:18:d4:
         7b:f2:cc:c5:ce:bd:50:d7:3e:42:4f:a0:03:52:42:a0:be:80:
         49:b2:38:58:bd:1e:a1:aa:ac:df:c5:9e:c3:ea:7e:24:34:ef:
         b4:e6:0e:9a:79:6f:d8:48:02:a7:59:04:6c:ac:1e:a2:ae:c4:
         5a:67:3d:3d:18:46:c0:d5:26:3f:94:ae:47:91:47:ae:74:96:
         73:04:14:ae:05:ec:0b:24:15:c9:98:ce:8d:59:2f:67:d8:3f:
         8b:0c:38:64
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUB2c34X/SCoj7Pli7zrB+ihcuB2swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ1RDFBOEFGNzREOTRCMEUwQjEzNTY3MzZDOEJDOUFG
QjAxODVGRTAeFw0yNDA5MTkxNDMzMzFaFw0yNTA5MTgxNDM4MzFaMDMxMTAvBgNV
BAMTKEIzRjFENDVCRkYyRjIyRDIwMTBDQ0JCMUM4NkEzMjg0ODQyOTAzRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvJA5qE8/HoSQwvA8h8uszyUzc
g4rnVXp7SfgW9htiKAgfT9e2WQyr29SIm/bf6LlTT4JYgWekzH5DvLAuGSQd2Tsm
/CfhAbsxcrqMAe2fv/uBAZ/syP+bKnnNRjT5ISFyGw9ZWDKmCWvM/DwMPX1f4iNN
EUjRNpx+A6gbWDNLMT3B6VayxzuMd4rsDEEXRrrpZbmyxHCvdNrHUyypLPqc8TBK
Ju3RhPAKnh8ucQhyF+HhWPXT6/YKwnG4GKE7Iw0K54lKECTqmLWGBAopihbPwFII
sra+G50PtGJ1Q88oGbN+z5Agpu2u7Uce6a86f9C1hg+oQ1VmBzO0XMdI8ISNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUs/HUW/8vItIBDMuxyGoyhIQpA9gwHwYDVR0j
BBgwFoAUtF0aivdNlLDgsTVnNsi8mvsBhf4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzd6d3hiQzJBaHJjWHZvQ2U2TUVvTURKQ2dGZVJnZ2diTFo4NFVoUENt
dGsvMC9CNDVEMUE4QUY3NEQ5NEIwRTBCMTM1NjczNkM4QkM5QUZCMDE4NUZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0NUQxQThBRjc0RDk0QjBF
MEIxMzU2NzM2QzhCQzlBRkIwMTg1RkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M3end4YkMyQWhyY1h2b0NlNk1Fb01ESkNnRmVSZ2dnYkxaODRVaFBDbXRrLzAv
MzEzODM3MmUzNjMwMmUzMjMxMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4
MzEzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCuzzYMA0GCSqGSIb3DQEBCwUAA4IBAQCRzkZV4YcT
L+EJBEBCjlrxW3UywJLJYq3saueNXKyyVbQkxkhFQx+i38FhQGtza3esHx2993/J
fGSz8p8H9TvUE+e2qj2aEPH6YtNyvFDSamhtF7TaAA4XSamEMuSF908gyP4IxojJ
ARMN3wVa2B7RoSpFE+lXwPsJNWUWIZAQrdb3I42wcOe+7z2R9PP7i1goGsWE2i+d
1mnoDrFNmdIRGNR78szFzr1Q1z5CT6ADUkKgvoBJsjhYvR6hqqzfxZ7D6n4kNO+0
5g6aeW/YSAKnWQRsrB6irsRaZz09GEbA1SY/lK5HkUeudJZzBBSuBewLJBXJmM6N
WS9n2D+LDDhk
-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:56 2024 by rpki-client on console-fra.rpki-client.org