Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxLacMP8HhzLvRZpei26FAEXZkmJXCMC1iTEGJwMHyNX/1/3138362e3233332e32342e302f32322d3234203d3e20323730373830.roa
File:                     3138362e3233332e32342e302f32322d3234203d3e20323730373830.roa (raw, json)
Hash identifier:          6b7D+wiLT1pV6V7RaCw+e6L+cEUfzh3y6//T/A5x1G8=
Subject key identifier:   1C:C7:53:3B:63:0B:B6:F6:59:5E:89:2C:C7:58:29:6D:06:78:ED:D1
Certificate issuer:       /CN=14DCE6323F84F3FE671A04D650359F18CDAE5603
Certificate serial:       7201A27AA8024614C7FFCD07853AAF8F5337F926
Authority key identifier: 14:DC:E6:32:3F:84:F3:FE:67:1A:04:D6:50:35:9F:18:CD:AE:56:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DCE6323F84F3FE671A04D650359F18CDAE5603.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxLacMP8HhzLvRZpei26FAEXZkmJXCMC1iTEGJwMHyNX/1/3138362e3233332e32342e302f32322d3234203d3e20323730373830.roa
Signing time:             Thu 04 Apr 2024 06:20:47 +0000
ROA not before:           Thu 04 Apr 2024 06:15:47 +0000
ROA not after:            Thu 03 Apr 2025 06:20:47 +0000
asID:                     270780
IP address blocks:        186.233.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxLacMP8HhzLvRZpei26FAEXZkmJXCMC1iTEGJwMHyNX/1/14DCE6323F84F3FE671A04D650359F18CDAE5603.crl
                          rsync://rpki-repo.registro.br/repo/CxLacMP8HhzLvRZpei26FAEXZkmJXCMC1iTEGJwMHyNX/1/14DCE6323F84F3FE671A04D650359F18CDAE5603.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DCE6323F84F3FE671A04D650359F18CDAE5603.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 16:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:01:a2:7a:a8:02:46:14:c7:ff:cd:07:85:3a:af:8f:53:37:f9:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14DCE6323F84F3FE671A04D650359F18CDAE5603
        Validity
            Not Before: Apr  4 06:15:47 2024 GMT
            Not After : Apr  3 06:20:47 2025 GMT
        Subject: CN=1CC7533B630BB6F6595E892CC758296D0678EDD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ac:a8:ac:d4:a0:aa:67:d3:e2:a4:1e:10:76:
                    31:ec:f8:8e:65:83:77:b1:92:78:13:82:d3:c1:74:
                    12:7b:67:20:75:95:b4:2a:e7:7b:ab:46:b9:b1:8c:
                    56:2e:00:e2:11:65:bb:84:a1:e4:27:ec:35:36:4d:
                    4a:45:ac:52:6f:b7:1e:f6:66:70:f1:64:3a:2b:4e:
                    99:c7:5c:1e:92:d0:3e:d8:32:c7:fa:06:01:59:0e:
                    12:67:28:c3:21:51:a2:f0:d4:b8:11:f7:9d:d7:41:
                    c5:c1:8c:e8:9f:11:4a:e2:88:e2:88:23:b5:55:d9:
                    e2:8b:06:3d:7b:ce:b3:ed:b4:02:d5:ec:37:98:ec:
                    b8:ee:13:28:b6:ea:6a:fb:89:9e:19:d0:bc:2b:a9:
                    54:f1:d8:e0:20:14:62:89:0c:34:5b:de:fe:d5:f9:
                    0e:94:dc:e1:32:5f:36:63:74:3c:d8:44:90:b1:5c:
                    38:b1:bc:8e:19:61:01:aa:7a:15:37:18:a7:b6:b4:
                    fb:bb:1d:ff:f7:48:80:07:fe:b9:7a:00:fb:6c:d5:
                    64:70:5c:3b:a8:f7:34:ea:e7:45:e8:6f:03:af:e3:
                    1f:12:ae:11:60:5b:08:3d:aa:f5:e1:42:4a:be:26:
                    56:a8:0a:c6:a5:3e:99:57:63:1b:fb:11:cc:a3:1c:
                    bc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C7:53:3B:63:0B:B6:F6:59:5E:89:2C:C7:58:29:6D:06:78:ED:D1
            X509v3 Authority Key Identifier:
                keyid:14:DC:E6:32:3F:84:F3:FE:67:1A:04:D6:50:35:9F:18:CD:AE:56:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxLacMP8HhzLvRZpei26FAEXZkmJXCMC1iTEGJwMHyNX/1/14DCE6323F84F3FE671A04D650359F18CDAE5603.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DCE6323F84F3FE671A04D650359F18CDAE5603.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxLacMP8HhzLvRZpei26FAEXZkmJXCMC1iTEGJwMHyNX/1/3138362e3233332e32342e302f32322d3234203d3e20323730373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:70:ce:67:ce:e0:38:9b:52:8f:e0:b1:90:7e:27:44:db:6c:
         ff:9e:ce:b6:f0:23:24:d9:57:0c:29:65:22:17:c4:8e:c9:70:
         84:47:80:16:29:7e:49:9a:97:fd:fb:a6:93:6d:36:e3:9d:ef:
         79:0a:a0:76:2e:0c:c2:ba:e7:83:df:11:6e:6b:65:1d:76:1a:
         5c:f0:ee:49:5b:2e:f4:58:13:bd:9d:0f:d9:c2:7e:78:78:18:
         ac:ee:17:8d:bd:89:77:94:80:29:4a:c7:00:b0:9a:80:53:17:
         54:59:5d:90:50:95:2f:ec:0f:6a:f4:e6:fe:db:ee:3f:de:19:
         2b:6f:ee:9c:4a:b9:78:ba:43:88:1c:14:17:d3:b8:20:4b:30:
         0c:aa:0f:58:b4:f1:35:6a:c8:bc:5b:25:43:d2:5c:72:30:78:
         14:14:56:4a:8e:5c:72:30:c8:ff:a8:4e:93:c0:8f:e7:26:bc:
         e1:2d:7f:55:d5:c7:68:bd:73:6a:aa:26:2a:de:4d:76:39:9b:
         e6:ab:5a:a8:73:10:f7:ee:2a:8c:7b:c1:94:96:74:66:f3:39:
         bd:d4:83:df:3f:73:af:23:17:60:32:ed:b8:9e:fc:2d:61:ae:
         0e:90:4e:00:35:a0:ea:0c:64:eb:42:81:6d:69:31:9d:96:7d:
         fd:c2:ad:92
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcgGieqgCRhTH/80HhTqvj1M3+SYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTREQ0U2MzIzRjg0RjNGRTY3MUEwNEQ2NTAzNTlGMThD
REFFNTYwMzAeFw0yNDA0MDQwNjE1NDdaFw0yNTA0MDMwNjIwNDdaMDMxMTAvBgNV
BAMTKDFDQzc1MzNCNjMwQkI2RjY1OTVFODkyQ0M3NTgyOTZEMDY3OEVERDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFrKis1KCqZ9PipB4QdjHs+I5l
g3exkngTgtPBdBJ7ZyB1lbQq53urRrmxjFYuAOIRZbuEoeQn7DU2TUpFrFJvtx72
ZnDxZDorTpnHXB6S0D7YMsf6BgFZDhJnKMMhUaLw1LgR953XQcXBjOifEUriiOKI
I7VV2eKLBj17zrPttALV7DeY7LjuEyi26mr7iZ4Z0LwrqVTx2OAgFGKJDDRb3v7V
+Q6U3OEyXzZjdDzYRJCxXDixvI4ZYQGqehU3GKe2tPu7Hf/3SIAH/rl6APts1WRw
XDuo9zTq50XobwOv4x8SrhFgWwg9qvXhQkq+JlaoCsalPplXYxv7EcyjHLxXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUHMdTO2MLtvZZXoksx1gpbQZ47dEwHwYDVR0j
BBgwFoAUFNzmMj+E8/5nGgTWUDWfGM2uVgMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3hMYWNNUDhIaHpMdlJacGVpMjZGQUVYWmttSlhDTUMxaVRFR0p3TUh5
TlgvMS8xNERDRTYzMjNGODRGM0ZFNjcxQTA0RDY1MDM1OUYxOENEQUU1NjAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0RENFNjMyM0Y4NEYzRkU2
NzFBMDRENjUwMzU5RjE4Q0RBRTU2MDMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N4TGFjTVA4SGh6THZSWnBlaTI2RkFFWFprbUpYQ01DMWlURUdKd01IeU5YLzEv
MzEzODM2MmUzMjMzMzMyZTMyMzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzAzNzM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK66RgwDQYJKoZIhvcNAQELBQADggEBAE1wzmfO
4DibUo/gsZB+J0TbbP+ezrbwIyTZVwwpZSIXxI7JcIRHgBYpfkmal/37ppNtNuOd
73kKoHYuDMK654PfEW5rZR12Glzw7klbLvRYE72dD9nCfnh4GKzuF429iXeUgClK
xwCwmoBTF1RZXZBQlS/sD2r05v7b7j/eGStv7pxKuXi6Q4gcFBfTuCBLMAyqD1i0
8TVqyLxbJUPSXHIweBQUVkqOXHIwyP+oTpPAj+cmvOEtf1XVx2i9c2qqJireTXY5
m+arWqhzEPfuKox7wZSWdGbzOb3Ug98/c68jF2Ay7bie/C1hrg6QTgA1oOoMZOtC
gW1pMZ2Wff3CrZI=
-----END CERTIFICATE-----
Generated at Tue Nov 26 14:45:06 2024 by rpki-client on console-fra.rpki-client.org