Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3135382e302f32332d3233203d3e20323632373239.roa
File:                     3138362e3139332e3135382e302f32332d3233203d3e20323632373239.roa (raw, json)
Hash identifier:          Os7aiM91Xk4UfJDNh+T2cOU/thARYPcfqZ7alrjCMH0=
Subject key identifier:   C4:FE:59:F1:B1:3D:59:CF:0F:82:78:D9:9C:94:43:BF:1A:13:12:3D
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       1E23E9DB02DA408DEAC8EA134084A7E8E2069B8E
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3135382e302f32332d3233203d3e20323632373239.roa
Signing time:             Mon 15 Jul 2024 13:42:26 +0000
ROA not before:           Mon 15 Jul 2024 13:37:26 +0000
ROA not after:            Mon 14 Jul 2025 13:42:26 +0000
asID:                     262729
IP address blocks:        186.193.158.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:23:e9:db:02:da:40:8d:ea:c8:ea:13:40:84:a7:e8:e2:06:9b:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jul 15 13:37:26 2024 GMT
            Not After : Jul 14 13:42:26 2025 GMT
        Subject: CN=C4FE59F1B13D59CF0F8278D99C9443BF1A13123D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:61:69:ec:c4:29:de:e7:2e:63:09:02:01:1b:
                    ea:db:fd:45:5e:b8:fc:f3:08:4a:ad:11:43:0c:a3:
                    a3:85:be:23:44:55:f2:2f:6a:33:fa:6e:a8:b9:f2:
                    ae:88:f7:7c:27:45:e3:1c:6e:f8:9d:de:22:fa:cc:
                    b9:51:53:4c:de:7e:b3:1c:5a:96:b3:32:58:a9:9e:
                    8e:d7:69:e3:c6:dc:8e:94:85:c9:9a:1d:d4:7c:ca:
                    e0:06:dd:ea:34:c5:69:49:81:41:02:8d:13:8e:63:
                    fc:1a:9f:cf:1a:80:db:65:6e:9f:9d:75:df:67:b2:
                    3e:41:94:c6:c4:39:fb:8c:d3:82:d7:9b:de:db:c1:
                    68:af:ef:ea:91:6b:7a:fa:10:42:b0:bc:83:d8:c1:
                    cd:bf:20:f2:44:7c:21:2a:e2:dc:b0:3e:49:f0:df:
                    8e:7e:c6:9b:b5:4b:37:9d:65:0b:da:b2:e5:4c:fc:
                    ad:0a:70:78:b8:f7:b8:a0:8c:a1:d3:93:c2:cf:a0:
                    ff:1a:62:c5:cb:27:d8:ff:0c:b9:76:1c:31:e4:2d:
                    9f:ac:bf:61:19:ea:48:78:74:3f:6f:ce:d0:38:00:
                    ad:1c:ae:3b:22:b7:f0:b9:68:86:20:ce:d6:9e:b4:
                    91:fd:21:60:a8:50:4b:cb:61:47:d4:22:aa:aa:a1:
                    92:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FE:59:F1:B1:3D:59:CF:0F:82:78:D9:9C:94:43:BF:1A:13:12:3D
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3135382e302f32332d3233203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:8b:d0:25:8f:e9:a6:9b:71:11:cf:e4:5a:61:95:43:5a:e7:
         20:50:a0:00:11:62:74:2a:cf:18:89:08:e7:f8:d0:c2:85:49:
         ac:6d:65:82:e6:31:c6:1a:e2:c3:cf:51:09:5a:a9:f4:3a:16:
         f3:6c:73:c0:a9:06:79:8d:86:5c:9f:b7:1d:ea:1a:79:00:5b:
         64:39:c9:ef:d0:b9:41:e9:29:ec:9b:52:1a:00:92:8f:73:7b:
         c5:f6:c2:7c:df:78:3a:fe:f4:5b:8c:6d:a8:40:60:9d:f2:cc:
         77:f4:97:6b:d2:f0:81:fb:d3:6c:80:cc:eb:7f:d4:32:4a:cc:
         15:a5:38:0f:9e:99:9a:3b:e3:17:94:f5:e3:cb:7c:5f:3b:5a:
         94:1a:3d:63:42:5f:4c:c0:40:ea:40:1e:55:82:7b:5b:5f:a6:
         57:1d:45:9a:2b:d8:99:05:c6:6b:f4:bd:05:aa:a8:17:e7:98:
         82:7f:17:2b:46:c6:74:cf:4b:ff:ff:7b:3c:3c:fd:e9:44:41:
         a1:aa:29:f9:86:1b:09:ff:8c:db:2a:e4:92:0c:c1:f9:04:2a:
         c9:ff:3d:7a:f4:c6:7f:da:f5:9a:3d:43:06:97:d8:2d:d6:ab:
         d1:e0:97:81:d3:c8:d6:ac:85:5d:05:3a:44:86:4e:44:bb:9b:
         c3:44:da:fa
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUHiPp2wLaQI3qyOoTQISn6OIGm44wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlEQjFCNThEQ0Q0NkMyRTc0NkQ4RERFQUE3RjQ5ODMz
MUREQjAxNzAeFw0yNDA3MTUxMzM3MjZaFw0yNTA3MTQxMzQyMjZaMDMxMTAvBgNV
BAMTKEM0RkU1OUYxQjEzRDU5Q0YwRjgyNzhEOTlDOTQ0M0JGMUExMzEyM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8YWnsxCne5y5jCQIBG+rb/UVe
uPzzCEqtEUMMo6OFviNEVfIvajP6bqi58q6I93wnReMcbvid3iL6zLlRU0zefrMc
WpazMlipno7XaePG3I6UhcmaHdR8yuAG3eo0xWlJgUECjROOY/wan88agNtlbp+d
dd9nsj5BlMbEOfuM04LXm97bwWiv7+qRa3r6EEKwvIPYwc2/IPJEfCEq4tywPknw
345+xpu1SzedZQvasuVM/K0KcHi497igjKHTk8LPoP8aYsXLJ9j/DLl2HDHkLZ+s
v2EZ6kh4dD9vztA4AK0crjsit/C5aIYgztaetJH9IWCoUEvLYUfUIqqqoZIjAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUxP5Z8bE9Wc8PgnjZnJRDvxoTEj0wHwYDVR0j
BBgwFoAUudsbWNzUbC50bY3eqn9JgzHdsBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDVmUEVVcmNhM21RVW9hNVVMS3pGNVB6WTdZZExVSkdXbTRiRzF0ZUZn
OWsvMC9COURCMUI1OERDRDQ2QzJFNzQ2RDhEREVBQTdGNDk4MzMxRERCMDE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5REIxQjU4RENENDZDMkU3
NDZEOERERUFBN0Y0OTgzMzFEREIwMTcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q1ZlBFVXJjYTNtUVVvYTVVTEt6RjVQelk3WWRMVUpHV200YkcxdGVGZzlrLzAv
MzEzODM2MmUzMTM5MzMyZTMxMzUzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM3MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbrBnjANBgkqhkiG9w0BAQsFAAOCAQEAEIvQ
JY/ppptxEc/kWmGVQ1rnIFCgABFidCrPGIkI5/jQwoVJrG1lguYxxhriw89RCVqp
9DoW82xzwKkGeY2GXJ+3HeoaeQBbZDnJ79C5Qekp7JtSGgCSj3N7xfbCfN94Ov70
W4xtqEBgnfLMd/SXa9LwgfvTbIDM63/UMkrMFaU4D56ZmjvjF5T148t8XztalBo9
Y0JfTMBA6kAeVYJ7W1+mVx1FmivYmQXGa/S9BaqoF+eYgn8XK0bGdM9L//97PDz9
6URBoaop+YYbCf+M2yrkkgzB+QQqyf89evTGf9r1mj1DBpfYLdar0eCXgdPI1qyF
XQU6RIZORLubw0Ta+g==
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:34 2024 by rpki-client on console-fra.rpki-client.org