Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/3138312e3233332e3138382e302f32322d3234203d3e203230343733.roa
File:                     3138312e3233332e3138382e302f32322d3234203d3e203230343733.roa (download)
Hash identifier:          TXCWLqocI8NDKD+OR5hQpoyvleW0uYskMxPSNDuyz48=
Subject key identifier:   ED:00:03:53:B2:8C:A1:E3:6F:F2:C0:00:3C:0D:81:9F:A3:DD:31:C7
Certificate issuer:       /CN=8C50B18948FB749C5395482072FE7285BFCC98F1
Certificate serial:       7C996CF4C3DEED339580218E23CDBB9976C96EE7
Authority key identifier: 8C:50:B1:89:48:FB:74:9C:53:95:48:20:72:FE:72:85:BF:CC:98:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C50B18948FB749C5395482072FE7285BFCC98F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/3138312e3233332e3138382e302f32322d3234203d3e203230343733.roa
ROA valid until:          Mar 25 14:28:52 2023 GMT
asID:                     20473
IP address blocks:
    1: 181.233.188.0/22 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:99:6c:f4:c3:de:ed:33:95:80:21:8e:23:cd:bb:99:76:c9:6e:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C50B18948FB749C5395482072FE7285BFCC98F1
        Validity
            Not Before: Mar 26 14:23:52 2022 GMT
            Not After : Mar 25 14:28:52 2023 GMT
        Subject: CN=ED000353B28CA1E36FF2C0003C0D819FA3DD31C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:44:21:d7:36:bf:75:c4:22:57:b9:60:53:ec:
                    ad:e2:eb:d7:15:70:2b:46:97:d1:7c:58:a1:4a:fc:
                    9f:5e:db:1c:2f:19:54:5f:2f:15:13:87:1b:8e:8f:
                    df:1c:0d:12:74:29:17:62:74:12:4d:fe:0d:0b:7e:
                    3a:fc:c7:b1:1a:35:1d:90:8c:1e:67:af:f6:39:7d:
                    f9:af:49:59:1e:9c:4e:34:bf:84:69:75:19:86:4e:
                    2d:11:30:73:46:c3:0e:4c:1e:c5:72:39:a9:94:74:
                    c8:8f:ff:ae:2f:ea:e0:4e:88:6c:a5:2c:01:66:0c:
                    d5:12:39:77:e8:b0:e7:a0:7f:02:3d:22:84:19:c2:
                    2c:87:88:b8:ec:bb:52:e3:41:e4:4d:28:14:0e:7a:
                    7f:7c:05:f9:21:d4:75:5b:0a:0c:ea:3c:ab:32:a9:
                    f0:b8:bd:7c:36:48:55:e5:24:24:8c:9a:24:cc:17:
                    fd:05:70:4a:49:6a:cd:29:a8:11:e1:24:f2:80:01:
                    d7:5d:08:cb:8a:c6:7e:df:7e:ac:15:7e:af:2b:c5:
                    b8:1e:d4:6e:b6:5a:6d:29:4e:54:49:9b:2a:f9:dd:
                    bc:77:eb:3a:5e:c3:56:99:33:ef:ff:7a:68:7a:93:
                    22:e4:02:3e:40:1b:7e:36:05:94:1b:a7:6e:b6:60:
                    05:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                ED:00:03:53:B2:8C:A1:E3:6F:F2:C0:00:3C:0D:81:9F:A3:DD:31:C7
            X509v3 Authority Key Identifier: 
                keyid:8C:50:B1:89:48:FB:74:9C:53:95:48:20:72:FE:72:85:BF:CC:98:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/8C50B18948FB749C5395482072FE7285BFCC98F1.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C50B18948FB749C5395482072FE7285BFCC98F1.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/3138312e3233332e3138382e302f32322d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:ac:22:b4:88:46:28:4f:9a:e5:df:14:a3:76:3b:a2:2f:d7:
         e8:e9:00:05:2e:70:2b:f3:ab:91:26:df:1b:45:bd:1a:79:25:
         bd:13:ca:1d:ad:b8:97:fb:57:7f:82:53:4f:25:e0:6c:d1:ec:
         15:98:1f:b6:5d:ed:17:a8:5a:af:26:45:07:6f:4a:c3:08:31:
         5b:24:d4:b3:fb:11:c6:d2:fc:51:24:dd:3a:9b:0c:bd:4e:7c:
         ca:b8:9e:ed:ac:1d:1a:ac:31:ce:71:14:d9:66:86:35:2c:09:
         99:7b:13:ca:46:4b:7c:fa:6d:8c:0a:3c:65:a0:f8:93:b9:0f:
         ce:90:d3:17:7a:0a:bb:78:28:dd:21:20:c6:d5:7b:9f:b5:97:
         3a:3e:f7:64:ae:37:0f:90:ff:7c:5b:1d:7a:9d:3e:30:b8:47:
         81:15:97:e5:40:04:d9:5d:d7:b5:56:57:ea:97:91:0e:c5:89:
         af:7f:25:fe:1f:9d:ba:ed:a8:f9:5d:14:53:f9:3e:09:5b:85:
         53:04:10:28:d4:6f:b1:4c:7a:b1:5b:e7:a1:eb:f6:07:38:2d:
         fb:13:d4:dd:35:84:ad:13:d1:a0:d5:91:66:23:f8:ea:81:b2:
         8e:34:07:4d:01:65:8f:e1:12:a7:f2:3e:e9:b3:f9:21:ba:cb:
         26:9e:ae:96
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfJls9MPe7TOVgCGOI827mXbJbucwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEM1MEIxODk0OEZCNzQ5QzUzOTU0ODIwNzJGRTcyODVC
RkNDOThGMTAeFw0yMjAzMjYxNDIzNTJaFw0yMzAzMjUxNDI4NTJaMDMxMTAvBgNV
BAMTKEVEMDAwMzUzQjI4Q0ExRTM2RkYyQzAwMDNDMEQ4MTlGQTNERDMxQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBRCHXNr91xCJXuWBT7K3i69cV
cCtGl9F8WKFK/J9e2xwvGVRfLxUThxuOj98cDRJ0KRdidBJN/g0Lfjr8x7EaNR2Q
jB5nr/Y5ffmvSVkenE40v4RpdRmGTi0RMHNGww5MHsVyOamUdMiP/64v6uBOiGyl
LAFmDNUSOXfosOegfwI9IoQZwiyHiLjsu1LjQeRNKBQOen98Bfkh1HVbCgzqPKsy
qfC4vXw2SFXlJCSMmiTMF/0FcEpJas0pqBHhJPKAAdddCMuKxn7ffqwVfq8rxbge
1G62Wm0pTlRJmyr53bx36zpew1aZM+//emh6kyLkAj5AG342BZQbp262YAWpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU7QADU7KMoeNv8sAAPA2Bn6PdMccwHwYDVR0j
BBgwFoAUjFCxiUj7dJxTlUggcv5yhb/MmPEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3RhSzdBVFZkbVpXYllORTZkUFpXV3RIMXA2U003TFVZaVhLVXRkRjlE
dFYvMC84QzUwQjE4OTQ4RkI3NDlDNTM5NTQ4MjA3MkZFNzI4NUJGQ0M5OEYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhDNTBCMTg5NDhGQjc0OUM1
Mzk1NDgyMDcyRkU3Mjg1QkZDQzk4RjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N0YUs3QVRWZG1aV2JZTkU2ZFBaV1d0SDFwNlNNN0xVWWlYS1V0ZEY5RHRWLzAv
MzEzODMxMmUzMjMzMzMyZTMxMzgzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzAzNDM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK16bwwDQYJKoZIhvcNAQELBQADggEBAEmsIrSI
RihPmuXfFKN2O6Iv1+jpAAUucCvzq5Em3xtFvRp5Jb0Tyh2tuJf7V3+CU08l4GzR
7BWYH7Zd7ReoWq8mRQdvSsMIMVsk1LP7EcbS/FEk3TqbDL1OfMq4nu2sHRqsMc5x
FNlmhjUsCZl7E8pGS3z6bYwKPGWg+JO5D86Q0xd6Crt4KN0hIMbVe5+1lzo+92Su
Nw+Q/3xbHXqdPjC4R4EVl+VABNld17VWV+qXkQ7Fia9/Jf4fnbrtqPldFFP5Pglb
hVMEECjUb7FMerFb56Hr9gc4LfsT1N01hK0T0aDVkWYj+OqBso40B00BZY/hEqfy
Pumz+SG6yyaerpY=
-----END CERTIFICATE-----
Generated at Fri Dec 9 02:48:29 2022 by rpki-client.