Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/1/3138362e3139352e34382e302f32302d3332203d3e203533313032.roa
File:                     3138362e3139352e34382e302f32302d3332203d3e203533313032.roa (raw, json)
Hash identifier:          mbLbogFdr0s2+T5EYIOZ7ZGnpVAFyIlp1DJagv93vlc=
Subject key identifier:   5C:16:FB:79:23:AF:0E:19:58:4E:58:16:61:0F:68:64:D6:8A:C4:D1
Certificate issuer:       /CN=47A0BA8B6BFD6528B70033FEAB848C965238B383
Certificate serial:       060A67CA7C3C76E7E10B5CCCB13385767E3F761F
Authority key identifier: 47:A0:BA:8B:6B:FD:65:28:B7:00:33:FE:AB:84:8C:96:52:38:B3:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A0BA8B6BFD6528B70033FEAB848C965238B383.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/1/3138362e3139352e34382e302f32302d3332203d3e203533313032.roa
Signing time:             Thu 04 Apr 2024 03:56:13 +0000
ROA not before:           Thu 04 Apr 2024 03:51:13 +0000
ROA not after:            Thu 03 Apr 2025 03:56:13 +0000
asID:                     53102
IP address blocks:        186.195.48.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/1/47A0BA8B6BFD6528B70033FEAB848C965238B383.crl
                          rsync://rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/1/47A0BA8B6BFD6528B70033FEAB848C965238B383.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A0BA8B6BFD6528B70033FEAB848C965238B383.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:19:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:0a:67:ca:7c:3c:76:e7:e1:0b:5c:cc:b1:33:85:76:7e:3f:76:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A0BA8B6BFD6528B70033FEAB848C965238B383
        Validity
            Not Before: Apr  4 03:51:13 2024 GMT
            Not After : Apr  3 03:56:13 2025 GMT
        Subject: CN=5C16FB7923AF0E19584E5816610F6864D68AC4D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1e:dd:ce:11:15:0d:41:65:06:86:51:b9:36:
                    ee:31:fa:2e:cf:21:12:f9:1f:f7:1b:ec:ee:7e:bf:
                    44:ad:48:b4:a7:45:6e:90:6d:76:02:52:00:29:04:
                    51:b2:f1:fc:a6:28:4b:2c:fc:31:a8:10:e1:c7:02:
                    64:6d:65:22:78:03:de:6e:0d:69:9c:02:47:52:31:
                    c1:8d:88:5e:81:b7:c1:fb:34:9f:a9:d8:c4:80:03:
                    46:98:96:1d:e1:71:02:8d:cc:51:20:d5:d7:00:9e:
                    19:f2:eb:cc:3c:67:41:82:c2:1f:ee:c1:d6:c5:3a:
                    47:ad:e4:64:b9:37:46:af:a7:19:5c:65:73:8f:a0:
                    c4:ed:4c:63:0e:3e:18:9f:fa:db:6b:e8:dd:06:e8:
                    24:26:5c:b2:b7:cd:6c:07:4e:be:f7:0c:02:a3:6f:
                    ac:fd:6b:fe:fd:69:09:7b:a2:ff:a7:d8:41:35:b5:
                    63:ed:ce:a0:85:eb:b3:45:a7:27:37:59:da:5e:4d:
                    b0:3d:6c:a0:fb:93:b8:01:0d:0a:36:64:ec:b6:67:
                    8e:ee:e9:e7:ef:7f:74:da:de:71:55:90:a8:af:11:
                    b0:ad:9e:59:93:53:d2:6d:d1:86:5c:10:9b:45:65:
                    df:f0:09:20:2e:55:e2:c7:7e:6a:81:90:15:a3:db:
                    95:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:16:FB:79:23:AF:0E:19:58:4E:58:16:61:0F:68:64:D6:8A:C4:D1
            X509v3 Authority Key Identifier:
                keyid:47:A0:BA:8B:6B:FD:65:28:B7:00:33:FE:AB:84:8C:96:52:38:B3:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/1/47A0BA8B6BFD6528B70033FEAB848C965238B383.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47A0BA8B6BFD6528B70033FEAB848C965238B383.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6engqPYXVUdABhDwjTT6PbzYZkJU3VQM3Mm9LDJuWHT/1/3138362e3139352e34382e302f32302d3332203d3e203533313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1a:3c:88:51:96:99:c4:76:23:21:66:ab:41:39:10:c3:8d:43:
         6e:83:27:54:0b:a5:0e:5b:4c:79:07:9f:7d:27:ed:0c:49:54:
         4f:56:d2:09:9a:db:35:5d:b7:7a:12:4f:08:9c:36:4e:05:f7:
         42:9e:6a:e5:d8:8a:5e:e5:6f:30:94:bc:90:82:b9:71:36:ca:
         c1:3f:f2:e2:9a:27:8b:c6:60:e8:0d:3c:50:18:a8:b2:60:a0:
         20:bc:8e:cc:f8:f3:e0:34:6f:69:83:e5:60:4f:be:b6:53:64:
         c0:36:f9:26:49:61:0d:46:fe:9f:f0:6b:5b:6a:1d:43:96:af:
         88:3f:d7:d7:92:6f:3e:41:9f:2e:5f:7c:ef:7f:76:79:8f:0e:
         32:9a:11:35:8c:65:7a:4d:8b:66:67:ba:d7:22:73:d9:09:aa:
         de:95:1c:d8:55:6a:bb:21:d6:47:6c:c6:28:7d:7b:ca:cf:88:
         4c:d6:4c:2d:4d:a8:f5:25:80:13:cd:ba:ef:8d:b7:64:7c:6c:
         db:16:42:f9:62:6d:e2:3c:0e:08:17:0b:06:9a:b2:67:cc:16:
         67:4a:6e:a0:93:da:d5:d9:d2:6b:51:39:51:d0:0e:6e:2e:7c:
         92:cf:15:d6:66:bc:ca:c4:e3:00:d1:c5:43:15:51:46:f9:34:
         7c:b3:ef:23
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBgpnynw8dufhC1zMsTOFdn4/dh8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdBMEJBOEI2QkZENjUyOEI3MDAzM0ZFQUI4NDhDOTY1
MjM4QjM4MzAeFw0yNDA0MDQwMzUxMTNaFw0yNTA0MDMwMzU2MTNaMDMxMTAvBgNV
BAMTKDVDMTZGQjc5MjNBRjBFMTk1ODRFNTgxNjYxMEY2ODY0RDY4QUM0RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhHt3OERUNQWUGhlG5Nu4x+i7P
IRL5H/cb7O5+v0StSLSnRW6QbXYCUgApBFGy8fymKEss/DGoEOHHAmRtZSJ4A95u
DWmcAkdSMcGNiF6Bt8H7NJ+p2MSAA0aYlh3hcQKNzFEg1dcAnhny68w8Z0GCwh/u
wdbFOket5GS5N0avpxlcZXOPoMTtTGMOPhif+ttr6N0G6CQmXLK3zWwHTr73DAKj
b6z9a/79aQl7ov+n2EE1tWPtzqCF67NFpyc3WdpeTbA9bKD7k7gBDQo2ZOy2Z47u
6efvf3Ta3nFVkKivEbCtnlmTU9Jt0YZcEJtFZd/wCSAuVeLHfmqBkBWj25X3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUXBb7eSOvDhlYTlgWYQ9oZNaKxNEwHwYDVR0j
BBgwFoAUR6C6i2v9ZSi3ADP+q4SMllI4s4MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTZlbmdxUFlYVlVkQUJoRHdqVFQ2UGJ6WVprSlUzVlFNM01tOUxESnVX
SFQvMS80N0EwQkE4QjZCRkQ2NTI4QjcwMDMzRkVBQjg0OEM5NjUyMzhCMzgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3QTBCQThCNkJGRDY1MjhC
NzAwMzNGRUFCODQ4Qzk2NTIzOEIzODMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U2ZW5ncVBZWFZVZEFCaER3alRUNlBiellaa0pVM1ZRTTNNbTlMREp1V0hULzEv
MzEzODM2MmUzMTM5MzUyZTM0MzgyZTMwMmYzMjMwMmQzMzMyMjAzZDNlMjAzNTMz
MzEzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEusMwMA0GCSqGSIb3DQEBCwUAA4IBAQAaPIhRlpnE
diMhZqtBORDDjUNugydUC6UOW0x5B599J+0MSVRPVtIJmts1Xbd6Ek8InDZOBfdC
nmrl2Ipe5W8wlLyQgrlxNsrBP/LimieLxmDoDTxQGKiyYKAgvI7M+PPgNG9pg+Vg
T762U2TANvkmSWENRv6f8Gtbah1Dlq+IP9fXkm8+QZ8uX3zvf3Z5jw4ymhE1jGV6
TYtmZ7rXInPZCarelRzYVWq7IdZHbMYofXvKz4hM1kwtTaj1JYATzbrvjbdkfGzb
FkL5Ym3iPA4IFwsGmrJnzBZnSm6gk9rV2dJrUTlR0A5uLnySzxXWZrzKxOMA0cVD
FVFG+TR8s+8j
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:24 2024 by rpki-client on console-ams.rpki-client.org