Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3138362e3233372e33322e302f32302d3234203d3e203238363538.roa
File:                     3138362e3233372e33322e302f32302d3234203d3e203238363538.roa (raw, json)
Hash identifier:          TJ92yvDvdzsH6b6NbF1EmGBprdatBKdRKffT+RjKG2U=
Subject key identifier:   89:4C:56:B2:D7:98:41:04:AA:7C:F0:E1:A2:C3:0A:3D:17:52:43:13
Certificate issuer:       /CN=59D97368930A28A43621D32020C3E70B26E79708
Certificate serial:       76AE99BE0AEC718A49F7B8D8BA24E49B638FDD13
Authority key identifier: 59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3138362e3233372e33322e302f32302d3234203d3e203238363538.roa
Signing time:             Thu 06 Mar 2025 10:17:14 +0000
ROA not before:           Thu 06 Mar 2025 10:12:14 +0000
ROA not after:            Thu 05 Mar 2026 10:17:14 +0000
asID:                     28658
IP address blocks:        186.237.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl
                          rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 11:45:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ae:99:be:0a:ec:71:8a:49:f7:b8:d8:ba:24:e4:9b:63:8f:dd:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59D97368930A28A43621D32020C3E70B26E79708
        Validity
            Not Before: Mar  6 10:12:14 2025 GMT
            Not After : Mar  5 10:17:14 2026 GMT
        Subject: CN=894C56B2D7984104AA7CF0E1A2C30A3D17524313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:10:23:51:6f:e3:3e:48:bd:65:18:19:cd:4c:
                    c6:f0:d7:b0:2e:bb:df:4b:fc:ec:3b:95:68:95:97:
                    30:1c:5a:16:89:df:ad:a0:ee:f9:8e:bf:79:3e:cb:
                    64:c6:ec:c8:ea:64:10:be:82:24:50:50:06:05:db:
                    4d:a9:80:e0:c2:50:dd:ff:10:38:c4:98:9e:1e:21:
                    48:b6:df:18:0a:6d:82:35:a4:3f:bf:d7:f2:50:f8:
                    3c:33:6a:53:58:3a:bf:02:42:e7:d6:da:0e:91:f7:
                    77:7e:08:72:7b:a1:d0:95:48:51:56:8d:85:3b:e9:
                    e1:43:cd:f1:de:5e:07:a7:95:f1:2a:25:ce:60:a2:
                    b8:52:1f:a6:65:d4:87:05:0d:05:3e:68:0f:8d:43:
                    eb:b2:7c:4d:a3:4b:b8:ef:15:57:c5:be:b3:65:f5:
                    f5:24:bd:40:62:2b:4c:ee:9b:8d:c3:1d:c7:a0:57:
                    b4:52:a6:13:24:6b:d2:ed:1b:b1:b7:7b:25:e1:4f:
                    0f:7c:7c:0a:fc:c8:93:75:9e:b1:25:72:0d:ee:74:
                    c7:56:d1:30:d5:f1:b2:6d:59:71:54:2c:62:64:56:
                    d4:7b:ad:1c:c1:a7:87:24:e7:9b:3d:f7:b6:98:eb:
                    dc:3f:6a:bb:8d:33:db:c7:97:0d:98:b0:03:37:b3:
                    36:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:4C:56:B2:D7:98:41:04:AA:7C:F0:E1:A2:C3:0A:3D:17:52:43:13
            X509v3 Authority Key Identifier:
                keyid:59:D9:73:68:93:0A:28:A4:36:21:D3:20:20:C3:E7:0B:26:E7:97:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/59D97368930A28A43621D32020C3E70B26E79708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D97368930A28A43621D32020C3E70B26E79708.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/1/3138362e3233372e33322e302f32302d3234203d3e203238363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a6:f9:15:e5:2d:b6:4f:47:a4:56:28:f8:56:e8:47:7b:cc:e2:
         4b:5b:c7:7c:a0:d4:65:70:d3:44:71:37:bf:c2:5e:dc:d0:ee:
         3a:4b:28:88:2c:32:55:a7:5a:fb:fe:dc:98:89:b9:54:aa:94:
         48:66:57:70:d2:ab:8c:ce:9a:31:00:5d:7d:48:74:72:a9:eb:
         8c:c9:bb:fa:55:c1:5b:f0:e9:9e:e7:c0:d4:e1:c9:95:a0:10:
         66:5b:d6:ac:f0:90:8e:ad:bc:38:51:92:0e:23:a4:ad:ac:9f:
         23:cb:a9:34:d0:35:ae:6b:9e:43:fb:ca:04:bb:23:57:2c:2e:
         9c:db:ef:73:43:25:20:01:00:61:a4:75:71:c8:89:68:36:72:
         48:b9:a5:e8:e6:a6:34:06:d7:c6:9e:d4:26:92:b7:91:b8:52:
         43:e9:24:61:ee:69:26:1d:ee:d6:58:ea:23:95:c6:04:99:91:
         59:f5:2d:83:b0:ca:71:b3:ed:ef:0d:4c:13:bc:f6:e3:e4:15:
         70:8d:fb:56:49:5e:3b:69:2c:fd:5b:2b:21:58:61:45:d6:3f:
         71:67:d4:a1:91:e8:18:24:f9:16:59:6f:d9:37:32:8f:92:db:
         5c:89:50:0d:15:9f:17:e1:f5:2e:15:aa:c4:35:67:db:91:45:
         99:4f:80:0c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdq6ZvgrscYpJ97jYuiTkm2OP3RMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlEOTczNjg5MzBBMjhBNDM2MjFEMzIwMjBDM0U3MEIy
NkU3OTcwODAeFw0yNTAzMDYxMDEyMTRaFw0yNjAzMDUxMDE3MTRaMDMxMTAvBgNV
BAMTKDg5NEM1NkIyRDc5ODQxMDRBQTdDRjBFMUEyQzMwQTNEMTc1MjQzMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzECNRb+M+SL1lGBnNTMbw17Au
u99L/Ow7lWiVlzAcWhaJ362g7vmOv3k+y2TG7MjqZBC+giRQUAYF202pgODCUN3/
EDjEmJ4eIUi23xgKbYI1pD+/1/JQ+DwzalNYOr8CQufW2g6R93d+CHJ7odCVSFFW
jYU76eFDzfHeXgenlfEqJc5gorhSH6Zl1IcFDQU+aA+NQ+uyfE2jS7jvFVfFvrNl
9fUkvUBiK0zum43DHcegV7RSphMka9LtG7G3eyXhTw98fAr8yJN1nrElcg3udMdW
0TDV8bJtWXFULGJkVtR7rRzBp4ck55s997aY69w/aruNM9vHlw2YsAM3szZRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUiUxWsteYQQSqfPDhosMKPRdSQxMwHwYDVR0j
BBgwFoAUWdlzaJMKKKQ2IdMgIMPnCybnlwgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3hyeDk5bmFoZnA1aENvRms4OEM2cDR4Rk5admlycDdyYmpwM0tBUkdq
d1MvMS81OUQ5NzM2ODkzMEEyOEE0MzYyMUQzMjAyMEMzRTcwQjI2RTc5NzA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU5RDk3MzY4OTMwQTI4QTQz
NjIxRDMyMDIwQzNFNzBCMjZFNzk3MDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N4cng5OW5haGZwNWhDb0ZrODhDNnA0eEZOWnZpcnA3cmJqcDNLQVJHandTLzEv
MzEzODM2MmUzMjMzMzcyZTMzMzIyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4
MzYzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEuu0gMA0GCSqGSIb3DQEBCwUAA4IBAQCm+RXlLbZP
R6RWKPhW6Ed7zOJLW8d8oNRlcNNEcTe/wl7c0O46SyiILDJVp1r7/tyYiblUqpRI
Zldw0quMzpoxAF19SHRyqeuMybv6VcFb8Ome58DU4cmVoBBmW9as8JCOrbw4UZIO
I6StrJ8jy6k00DWua55D+8oEuyNXLC6c2+9zQyUgAQBhpHVxyIloNnJIuaXo5qY0
BtfGntQmkreRuFJD6SRh7mkmHe7WWOojlcYEmZFZ9S2DsMpxs+3vDUwTvPbj5BVw
jftWSV47aSz9WyshWGFF1j9xZ9ShkegYJPkWWW/ZNzKPkttciVANFZ8X4fUuFarE
NWfbkUWZT4AM
-----END CERTIFICATE-----
Generated at Tue Apr 22 13:13:02 2025 by rpki-client