Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3138362e3231312e3132382e302f31372d3332203d3e203134383430.roa
File:                     3138362e3231312e3132382e302f31372d3332203d3e203134383430.roa (raw, json)
Hash identifier:          il+qgVUwyIL8etwV4bR91jtFEHAWZP6Wt41hrMYV8+M=
Subject key identifier:   BC:40:42:7B:9A:49:67:D8:41:3F:90:A0:BF:09:C1:46:EE:8D:35:3F
Certificate issuer:       /CN=4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7
Certificate serial:       0D9D71CA5C47A928A4D53FAE887E2E14609131F3
Authority key identifier: 4E:87:B4:46:2F:90:42:B5:2A:A4:D6:5A:C7:D2:FD:92:C2:70:2D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3138362e3231312e3132382e302f31372d3332203d3e203134383430.roa
Signing time:             Tue 11 Jun 2024 16:56:25 +0000
ROA not before:           Tue 11 Jun 2024 16:51:25 +0000
ROA not after:            Tue 10 Jun 2025 16:56:25 +0000
asID:                     14840
IP address blocks:        186.211.128.0/17 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.crl
                          rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 19:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:9d:71:ca:5c:47:a9:28:a4:d5:3f:ae:88:7e:2e:14:60:91:31:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7
        Validity
            Not Before: Jun 11 16:51:25 2024 GMT
            Not After : Jun 10 16:56:25 2025 GMT
        Subject: CN=BC40427B9A4967D8413F90A0BF09C146EE8D353F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a7:d7:60:a2:4e:a6:1c:05:45:44:d8:d1:f6:
                    42:59:9a:e6:f1:6b:f7:d1:45:35:8f:e5:95:0a:70:
                    b6:11:b5:7f:a4:02:33:35:30:43:f3:f5:4b:26:99:
                    83:9f:1c:71:e4:1a:69:a7:b9:4d:8e:2b:91:a5:37:
                    95:1a:45:8a:e8:35:97:8c:78:2f:6a:d2:84:9a:7d:
                    5a:a0:82:9d:08:07:63:7c:92:a9:79:f8:f3:cc:55:
                    9e:d2:6b:d9:b3:c0:d0:9f:48:e4:16:2a:09:8f:48:
                    73:27:1d:47:b9:8a:93:63:9e:22:89:56:be:d4:78:
                    46:ab:e2:c5:a5:1e:dd:1c:28:6e:ab:a9:32:d8:53:
                    09:e4:b6:b9:58:3b:92:79:9d:7c:23:a6:1e:ff:f4:
                    e2:c7:fa:7f:1c:a4:d7:8e:75:3c:a6:3f:4c:d1:cb:
                    3b:7a:6d:c2:92:f6:8e:92:0a:cb:84:55:f6:a4:10:
                    52:92:9e:67:6a:10:b2:80:ff:00:26:0e:b5:6c:c3:
                    55:b0:fb:25:be:6c:a5:b4:29:dc:65:89:c5:42:c9:
                    ab:32:a1:6b:c4:eb:f4:54:1c:c8:de:1f:60:80:d1:
                    7c:8d:1e:58:91:e1:42:4e:c4:7b:4a:3c:47:fe:4d:
                    d9:96:2e:65:77:da:5f:d6:58:df:65:ba:2f:be:8f:
                    e8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:40:42:7B:9A:49:67:D8:41:3F:90:A0:BF:09:C1:46:EE:8D:35:3F
            X509v3 Authority Key Identifier:
                keyid:4E:87:B4:46:2F:90:42:B5:2A:A4:D6:5A:C7:D2:FD:92:C2:70:2D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3138362e3231312e3132382e302f31372d3332203d3e203134383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.211.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         c8:bb:59:45:bc:bb:76:b5:98:4a:c8:70:39:30:05:64:7a:3e:
         2a:a4:75:77:ad:9e:7b:6e:85:ae:ea:7f:76:bd:dc:8a:06:fa:
         07:57:df:48:27:e2:d6:43:0d:be:6c:ed:44:a4:d4:ee:53:4f:
         36:90:e1:be:fa:aa:38:ea:c9:9b:27:21:dc:36:eb:cf:a1:d7:
         95:80:7c:b1:e7:82:5d:6f:23:77:84:10:52:1d:6f:02:8f:70:
         84:06:48:dc:b5:6b:4b:d5:4a:8a:8f:93:87:81:08:65:76:0e:
         87:b9:b5:d2:50:d4:98:c3:ba:a3:e0:d5:ab:ba:c4:ba:78:14:
         fb:ee:65:c4:ac:64:11:b3:5e:47:bb:ff:16:cf:e5:d8:d2:66:
         0b:ab:11:98:b9:e4:1b:31:33:3c:06:6d:51:8c:ca:27:1d:c8:
         6f:50:09:05:a5:54:8d:1f:ef:18:3d:84:45:3f:9b:b6:c1:16:
         77:2a:ba:ef:eb:24:f7:1f:00:d4:9c:54:84:10:b1:f6:2f:21:
         53:10:e6:5a:d2:99:49:78:ea:fe:c1:71:96:f5:95:98:be:40:
         ac:aa:42:3e:99:68:11:70:6a:cf:47:a7:11:30:c8:dd:46:00:
         c9:ea:5f:c6:a6:63:6e:f2:39:c2:d6:7b:bd:b2:a4:4b:f3:67:
         d2:75:8f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----