Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3133302e302f32332d3233203d3e20323632373239.roa
File:                     3138362e3139332e3133302e302f32332d3233203d3e20323632373239.roa (raw, json)
Hash identifier:          hjfR7bezjpVMnkPhReQLFUepL6j0AGNjYdFwsXXPCfo=
Subject key identifier:   DF:B7:41:16:C8:60:92:9C:CF:CC:23:CF:2A:5A:E5:A6:4A:A7:D0:D3
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       6A61EA79AEE80D810B6EAAE892213FC23A750303
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3133302e302f32332d3233203d3e20323632373239.roa
Signing time:             Mon 15 Jul 2024 13:42:26 +0000
ROA not before:           Mon 15 Jul 2024 13:37:26 +0000
ROA not after:            Mon 14 Jul 2025 13:42:26 +0000
asID:                     262729
IP address blocks:        186.193.130.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:61:ea:79:ae:e8:0d:81:0b:6e:aa:e8:92:21:3f:c2:3a:75:03:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jul 15 13:37:26 2024 GMT
            Not After : Jul 14 13:42:26 2025 GMT
        Subject: CN=DFB74116C860929CCFCC23CF2A5AE5A64AA7D0D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ce:2f:9a:5e:4c:54:6d:0a:02:df:63:b7:69:
                    39:cb:ff:c2:aa:5e:f8:20:48:aa:fe:2d:6d:d7:a8:
                    35:c2:3e:af:be:c2:c4:59:ca:a8:af:2a:34:a3:fa:
                    8d:e8:28:3e:af:86:ce:52:6a:a9:da:02:bf:30:61:
                    a4:72:9f:bf:cb:ff:13:0a:df:ad:50:00:1f:bc:db:
                    50:2a:05:eb:b6:9f:38:2f:4d:8a:e4:bd:d3:b8:20:
                    0c:3a:0b:f7:f0:48:43:0c:f6:8d:d2:08:3f:5b:47:
                    09:0d:a2:ad:29:31:1e:96:75:0f:a2:76:d7:c1:5c:
                    cb:b3:64:bc:d1:47:1c:6e:e0:ae:a1:2b:48:97:0b:
                    dd:84:e7:d5:ad:0a:c0:f8:98:e5:c9:ca:54:95:5f:
                    15:0b:6f:f2:22:8b:40:c9:47:f3:bb:a9:6e:3b:fd:
                    20:df:87:3a:da:9c:6d:c8:85:34:05:61:c3:b7:52:
                    cc:cc:ac:5e:d0:dd:57:3f:01:cb:69:fe:b9:0a:b2:
                    17:11:c1:bb:4f:ba:d7:76:b4:b1:ec:41:29:c2:31:
                    39:2b:3e:34:8b:8a:73:ce:7a:3d:7d:7a:ad:f7:fe:
                    a5:b5:dc:b1:f9:1a:b1:0b:58:4d:47:21:dd:d8:11:
                    34:3b:b0:3c:18:17:85:18:64:71:ab:b9:51:ce:1f:
                    e8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B7:41:16:C8:60:92:9C:CF:CC:23:CF:2A:5A:E5:A6:4A:A7:D0:D3
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3133302e302f32332d3233203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:18:49:07:19:1d:94:36:cf:55:da:5b:3a:e4:f2:0d:26:1d:
         17:9a:e8:01:2a:4c:c3:21:c8:6a:60:65:7a:10:b7:79:12:88:
         37:11:b4:7e:ac:65:ec:be:d0:2e:d4:71:b4:09:ee:7d:1b:1e:
         7d:3b:1d:c7:9b:2c:8a:95:1d:65:00:ea:e9:67:ec:f6:52:b6:
         2a:9e:ca:e7:7a:a7:0d:3c:5f:58:22:8f:e7:9f:da:c9:4a:d9:
         64:c0:e5:30:80:68:3c:7b:01:12:68:a6:49:18:d6:6b:50:fa:
         ef:25:ea:d7:fa:ad:59:12:60:6a:79:8e:92:28:99:fd:db:95:
         f0:ed:1e:de:b5:b2:8b:c7:1b:19:05:99:17:84:43:d4:05:fb:
         55:7b:85:48:a3:77:a5:05:b3:e8:e1:8d:ed:99:cc:08:08:f3:
         47:5f:57:3a:d6:79:84:31:b6:8f:9d:d0:49:99:63:4e:b5:7f:
         c0:06:79:57:b0:03:34:20:d2:ab:3a:96:f4:cf:e1:d4:9c:4c:
         4e:26:80:ae:c7:6d:c0:41:ee:e9:e4:a1:12:6f:48:5a:bb:8d:
         73:b7:c6:54:12:b1:02:4a:1e:10:cd:66:ef:07:16:61:9e:8c:
         46:48:32:29:e8:fc:24:ae:de:cb:ca:63:7a:5d:82:bf:18:b4:
         81:56:a4:8d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUamHqea7oDYELbqrokiE/wjp1AwMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlEQjFCNThEQ0Q0NkMyRTc0NkQ4RERFQUE3RjQ5ODMz
MUREQjAxNzAeFw0yNDA3MTUxMzM3MjZaFw0yNTA3MTQxMzQyMjZaMDMxMTAvBgNV
BAMTKERGQjc0MTE2Qzg2MDkyOUNDRkNDMjNDRjJBNUFFNUE2NEFBN0QwRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZzi+aXkxUbQoC32O3aTnL/8Kq
XvggSKr+LW3XqDXCPq++wsRZyqivKjSj+o3oKD6vhs5SaqnaAr8wYaRyn7/L/xMK
361QAB+821AqBeu2nzgvTYrkvdO4IAw6C/fwSEMM9o3SCD9bRwkNoq0pMR6WdQ+i
dtfBXMuzZLzRRxxu4K6hK0iXC92E59WtCsD4mOXJylSVXxULb/Iii0DJR/O7qW47
/SDfhzranG3IhTQFYcO3UszMrF7Q3Vc/Actp/rkKshcRwbtPutd2tLHsQSnCMTkr
PjSLinPOej19eq33/qW13LH5GrELWE1HId3YETQ7sDwYF4UYZHGruVHOH+htAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU37dBFshgkpzPzCPPKlrlpkqn0NMwHwYDVR0j
BBgwFoAUudsbWNzUbC50bY3eqn9JgzHdsBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDVmUEVVcmNhM21RVW9hNVVMS3pGNVB6WTdZZExVSkdXbTRiRzF0ZUZn
OWsvMC9COURCMUI1OERDRDQ2QzJFNzQ2RDhEREVBQTdGNDk4MzMxRERCMDE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5REIxQjU4RENENDZDMkU3
NDZEOERERUFBN0Y0OTgzMzFEREIwMTcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q1ZlBFVXJjYTNtUVVvYTVVTEt6RjVQelk3WWRMVUpHV200YkcxdGVGZzlrLzAv
MzEzODM2MmUzMTM5MzMyZTMxMzMzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM3MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbrBgjANBgkqhkiG9w0BAQsFAAOCAQEAAhhJ
BxkdlDbPVdpbOuTyDSYdF5roASpMwyHIamBlehC3eRKINxG0fqxl7L7QLtRxtAnu
fRsefTsdx5ssipUdZQDq6Wfs9lK2Kp7K53qnDTxfWCKP55/ayUrZZMDlMIBoPHsB
EmimSRjWa1D67yXq1/qtWRJganmOkiiZ/duV8O0e3rWyi8cbGQWZF4RD1AX7VXuF
SKN3pQWz6OGN7ZnMCAjzR19XOtZ5hDG2j53QSZljTrV/wAZ5V7ADNCDSqzqW9M/h
1JxMTiaArsdtwEHu6eShEm9IWruNc7fGVBKxAkoeEM1m7wcWYZ6MRkgyKej8JK7e
y8pjel2Cvxi0gVakjQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:18 2024 by rpki-client on console-ams.rpki-client.org