Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/3138362e3230382e3234382e302f32322d3234203d3e20323633303836.roa
File:                     3138362e3230382e3234382e302f32322d3234203d3e20323633303836.roa (raw, json)
Hash identifier:          bLhYklkTXbCMG9WvTOKnPEs0ugoZrgk7Yu+wVK/LBtI=
Subject key identifier:   0D:3F:2C:2C:50:17:1B:FE:14:AE:D6:A2:41:46:C8:62:75:28:3F:9E
Certificate issuer:       /CN=99075A5B6164230A73705A6E393D26CF802B45B4
Certificate serial:       7FBB5A54B57592CDF5D34AFBB7FA0AD7CFD6F8F3
Authority key identifier: 99:07:5A:5B:61:64:23:0A:73:70:5A:6E:39:3D:26:CF:80:2B:45:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99075A5B6164230A73705A6E393D26CF802B45B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/3138362e3230382e3234382e302f32322d3234203d3e20323633303836.roa
Signing time:             Thu 19 Sep 2024 17:44:11 +0000
ROA not before:           Thu 19 Sep 2024 17:39:11 +0000
ROA not after:            Thu 18 Sep 2025 17:44:11 +0000
asID:                     263086
IP address blocks:        186.208.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/99075A5B6164230A73705A6E393D26CF802B45B4.crl
                          rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/99075A5B6164230A73705A6E393D26CF802B45B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99075A5B6164230A73705A6E393D26CF802B45B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:bb:5a:54:b5:75:92:cd:f5:d3:4a:fb:b7:fa:0a:d7:cf:d6:f8:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99075A5B6164230A73705A6E393D26CF802B45B4
        Validity
            Not Before: Sep 19 17:39:11 2024 GMT
            Not After : Sep 18 17:44:11 2025 GMT
        Subject: CN=0D3F2C2C50171BFE14AED6A24146C86275283F9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c8:92:df:96:c4:28:40:c3:0c:9b:9b:bc:f0:
                    08:c9:80:c3:67:83:8f:b4:a7:c3:d0:c2:c2:d8:78:
                    54:5b:bc:6f:66:18:cf:f3:b5:a3:9a:f6:a0:7a:21:
                    cf:bf:af:4d:75:48:b8:58:08:51:e4:2b:2a:15:5b:
                    57:03:78:84:98:c4:e7:b2:12:94:52:d2:ec:29:a0:
                    ac:81:e3:c0:ae:bf:9c:bf:e1:65:0e:44:4f:57:de:
                    93:f8:cc:0b:cd:ae:15:c0:36:58:96:ea:78:a8:f6:
                    23:ae:23:62:69:67:68:57:07:e0:0d:f0:31:a4:e1:
                    86:95:3a:43:0e:73:cc:f4:ea:b5:eb:47:50:0e:e4:
                    92:a8:b5:a8:aa:a5:3f:a5:e3:a7:32:5b:ad:19:69:
                    ab:78:5b:5f:b9:38:a7:28:a8:8e:46:f4:ac:e5:d5:
                    58:26:64:34:ff:95:22:05:86:44:28:31:63:6f:7e:
                    f3:65:6a:99:43:11:43:8f:b5:4e:05:d0:bc:e8:52:
                    18:c6:0c:38:3e:3c:ff:fe:7e:e9:35:dd:d4:fc:ec:
                    3d:39:05:51:6b:98:28:a8:32:d2:c3:1a:ce:d5:a5:
                    49:22:92:4a:f7:b3:03:c4:1b:95:5d:c7:d4:fe:59:
                    f0:c8:10:26:30:3e:19:65:02:c8:7d:fc:32:8d:4e:
                    15:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3F:2C:2C:50:17:1B:FE:14:AE:D6:A2:41:46:C8:62:75:28:3F:9E
            X509v3 Authority Key Identifier:
                keyid:99:07:5A:5B:61:64:23:0A:73:70:5A:6E:39:3D:26:CF:80:2B:45:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/99075A5B6164230A73705A6E393D26CF802B45B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99075A5B6164230A73705A6E393D26CF802B45B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DU6J47CQcdbrrGwJ6XWM2EGRcmSU5t53Bv6EXLythynd/1/3138362e3230382e3234382e302f32322d3234203d3e20323633303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:77:bd:b9:b0:04:b4:9f:a9:41:c2:0c:3e:ed:5e:cb:25:69:
         5b:b4:ac:9c:d7:03:02:08:94:c4:a4:3d:6c:1a:f0:18:46:be:
         e7:42:0e:b3:c0:8f:cc:5b:63:07:a7:c4:0a:b6:b8:43:25:7d:
         24:a6:3a:68:28:39:89:3e:87:01:b1:84:35:5a:af:05:30:96:
         52:9b:71:37:fd:ae:2b:1f:98:36:f4:5f:d6:ae:5b:97:ba:7e:
         58:ae:c5:9f:4a:7b:d6:49:d8:2c:a8:7e:1d:fb:b8:4b:c9:54:
         59:f6:e0:7f:ca:67:d5:28:3b:61:e8:63:11:05:9c:93:cf:f4:
         d0:b3:05:7c:e4:6e:51:23:23:a5:67:1d:1e:a6:78:d9:55:61:
         6f:49:dd:34:20:a9:fe:5c:c5:ba:c2:5b:38:ed:c9:a6:be:df:
         79:b3:d1:bd:b7:9d:f6:c4:1f:df:d5:2b:33:c4:4d:92:37:e3:
         2b:6e:fe:a4:25:c3:8e:49:bc:7c:a7:db:e3:6f:2b:f7:86:75:
         fc:f7:0c:d4:33:e0:5c:78:87:4f:0b:34:f9:39:bc:70:12:fd:
         37:d9:28:2d:80:0e:af:98:e3:e3:45:c2:5b:ed:cf:f9:d1:aa:
         8b:7d:81:a4:cc:aa:a3:00:31:9e:c0:b4:20:dd:de:ca:c8:1b:
         44:e6:cb:8c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUf7taVLV1ks3100r7t/oK18/W+PMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTkwNzVBNUI2MTY0MjMwQTczNzA1QTZFMzkzRDI2Q0Y4
MDJCNDVCNDAeFw0yNDA5MTkxNzM5MTFaFw0yNTA5MTgxNzQ0MTFaMDMxMTAvBgNV
BAMTKDBEM0YyQzJDNTAxNzFCRkUxNEFFRDZBMjQxNDZDODYyNzUyODNGOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFyJLflsQoQMMMm5u88AjJgMNn
g4+0p8PQwsLYeFRbvG9mGM/ztaOa9qB6Ic+/r011SLhYCFHkKyoVW1cDeISYxOey
EpRS0uwpoKyB48Cuv5y/4WUORE9X3pP4zAvNrhXANliW6nio9iOuI2JpZ2hXB+AN
8DGk4YaVOkMOc8z06rXrR1AO5JKotaiqpT+l46cyW60Zaat4W1+5OKcoqI5G9Kzl
1VgmZDT/lSIFhkQoMWNvfvNlaplDEUOPtU4F0LzoUhjGDDg+PP/+fuk13dT87D05
BVFrmCioMtLDGs7VpUkikkr3swPEG5Vdx9T+WfDIECYwPhllAsh9/DKNThWtAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUDT8sLFAXG/4UrtaiQUbIYnUoP54wHwYDVR0j
BBgwFoAUmQdaW2FkIwpzcFpuOT0mz4ArRbQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFU2SjQ3Q1FjZGJyckd3SjZYV00yRUdSY21TVTV0NTNCdjZFWEx5dGh5
bmQvMS85OTA3NUE1QjYxNjQyMzBBNzM3MDVBNkUzOTNEMjZDRjgwMkI0NUI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5MDc1QTVCNjE2NDIzMEE3
MzcwNUE2RTM5M0QyNkNGODAyQjQ1QjQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RVNko0N0NRY2RicnJHd0o2WFdNMkVHUmNtU1U1dDUzQnY2RVhMeXRoeW5kLzEv
MzEzODM2MmUzMjMwMzgyZTMyMzQzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMzMwMzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArrQ+DANBgkqhkiG9w0BAQsFAAOCAQEAaHe9
ubAEtJ+pQcIMPu1eyyVpW7SsnNcDAgiUxKQ9bBrwGEa+50IOs8CPzFtjB6fECra4
QyV9JKY6aCg5iT6HAbGENVqvBTCWUptxN/2uKx+YNvRf1q5bl7p+WK7Fn0p71knY
LKh+Hfu4S8lUWfbgf8pn1Sg7YehjEQWck8/00LMFfORuUSMjpWcdHqZ42VVhb0nd
NCCp/lzFusJbOO3Jpr7febPRvbed9sQf39UrM8RNkjfjK27+pCXDjkm8fKfb428r
94Z1/PcM1DPgXHiHTws0+Tm8cBL9N9koLYAOr5jj40XCW+3P+dGqi32BpMyqowAx
nsC0IN3eysgbRObLjA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:11 2024 by rpki-client on console-ams.rpki-client.org