Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e39362e302f32342d3234203d3e20323632383238.roa
File:                     3138362e3235312e39362e302f32342d3234203d3e20323632383238.roa (raw, json)
Hash identifier:          qHfHg5BDUx2kFD0okchHSCaAxKS8kD7CpKFY5dzqqZE=
Subject key identifier:   92:C8:BA:B2:CE:71:54:15:01:9F:5C:D5:7C:CB:23:16:39:34:E6:ED
Certificate issuer:       /CN=CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8
Certificate serial:       588EF7151F3F5C425A34238B3B805476EF6A9D73
Authority key identifier: CC:1F:4A:B3:9C:78:F0:8A:78:01:EE:D7:E7:A3:1B:2D:F1:80:42:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e39362e302f32342d3234203d3e20323632383238.roa
Signing time:             Tue 03 Sep 2024 20:11:57 +0000
ROA not before:           Tue 03 Sep 2024 20:06:57 +0000
ROA not after:            Tue 02 Sep 2025 20:11:57 +0000
asID:                     262828
IP address blocks:        186.251.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.crl
                          rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:8e:f7:15:1f:3f:5c:42:5a:34:23:8b:3b:80:54:76:ef:6a:9d:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8
        Validity
            Not Before: Sep  3 20:06:57 2024 GMT
            Not After : Sep  2 20:11:57 2025 GMT
        Subject: CN=92C8BAB2CE715415019F5CD57CCB23163934E6ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4c:72:4e:c1:b2:41:00:fa:ca:91:85:63:2e:
                    3c:17:57:79:b9:01:2b:80:e6:72:02:61:9b:b4:d0:
                    15:08:c6:08:51:76:85:05:a3:c4:bf:ce:8d:13:f9:
                    f9:23:9d:71:32:33:3f:a0:d7:1f:49:85:d5:c5:f9:
                    59:23:c3:9e:29:95:c7:82:34:b6:6b:cc:a4:57:a2:
                    35:e0:2d:d0:de:58:e7:44:8e:d3:0f:d9:b4:ff:e5:
                    b5:3a:90:13:e0:4d:7b:22:bd:07:c4:f8:33:48:8f:
                    cd:45:e1:88:e1:8b:17:3c:f2:3f:37:8f:d3:36:ba:
                    bd:a5:78:79:fe:68:47:e7:da:c0:05:e5:d1:c8:8e:
                    fd:72:c8:8c:f2:3f:1d:6f:ec:b5:4e:f0:a6:ec:9d:
                    1f:7c:f1:47:3d:85:00:6f:dc:e5:df:7b:34:2a:b7:
                    b2:b7:a5:d4:2a:1f:03:6f:87:22:d1:74:a3:96:d3:
                    9c:5d:55:9b:31:fd:d6:1c:a0:ad:14:5c:bf:71:4f:
                    1d:13:9f:56:6a:3f:e2:ca:76:ec:c2:23:5e:0a:35:
                    af:a1:b5:43:32:ce:9f:73:cd:0e:8b:13:15:8b:fd:
                    66:fe:c8:fd:25:55:39:37:8d:27:5d:94:ce:74:65:
                    da:df:c3:a5:69:c5:12:09:a1:4b:ef:86:84:1f:37:
                    d1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C8:BA:B2:CE:71:54:15:01:9F:5C:D5:7C:CB:23:16:39:34:E6:ED
            X509v3 Authority Key Identifier:
                keyid:CC:1F:4A:B3:9C:78:F0:8A:78:01:EE:D7:E7:A3:1B:2D:F1:80:42:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e39362e302f32342d3234203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:22:92:13:b2:4a:47:ce:8b:f3:e0:2f:61:b6:23:0e:7b:27:
         c2:70:af:2f:30:66:86:8f:8e:b2:fa:8e:e3:f9:71:2a:e6:f2:
         b8:cd:21:ea:94:48:5d:4d:b7:e2:32:d7:e7:d5:5b:cc:fc:1e:
         32:b0:90:86:51:a4:e1:4d:49:c2:b2:2c:01:49:c4:43:0f:7a:
         70:e7:53:d9:a8:25:a4:b8:87:e0:f1:06:26:6b:65:6e:c7:01:
         88:05:d6:6c:84:2f:ca:a1:40:90:d2:11:e6:f0:f2:c9:78:e9:
         90:7a:05:0e:32:c5:25:88:ca:ac:b6:19:78:86:41:ec:b2:6c:
         8a:9e:e4:bd:af:88:bc:f4:86:43:28:ab:94:e6:4b:4d:00:2d:
         6a:50:81:c6:18:46:c2:ae:61:0d:1e:85:65:b0:01:92:4f:cd:
         3e:7a:a9:c6:13:ef:be:8b:d9:db:89:aa:e6:79:98:0c:3d:91:
         9b:66:2c:b7:1d:af:3c:69:5a:84:dd:a4:71:c4:f1:32:6e:97:
         ed:ef:77:c6:c8:85:3f:64:64:38:62:76:a2:95:16:10:3c:46:
         60:d4:69:56:d7:87:09:1b:28:b3:d6:55:df:c3:9a:d5:69:9a:
         00:1e:0b:d4:29:3d:77:09:3a:a7:fe:cd:43:25:3c:65:0a:a8:
         74:b7:da:59
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWI73FR8/XEJaNCOLO4BUdu9qnXMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0MxRjRBQjM5Qzc4RjA4QTc4MDFFRUQ3RTdBMzFCMkRG
MTgwNDJFODAeFw0yNDA5MDMyMDA2NTdaFw0yNTA5MDIyMDExNTdaMDMxMTAvBgNV
BAMTKDkyQzhCQUIyQ0U3MTU0MTUwMTlGNUNENTdDQ0IyMzE2MzkzNEU2RUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUTHJOwbJBAPrKkYVjLjwXV3m5
ASuA5nICYZu00BUIxghRdoUFo8S/zo0T+fkjnXEyMz+g1x9JhdXF+Vkjw54plceC
NLZrzKRXojXgLdDeWOdEjtMP2bT/5bU6kBPgTXsivQfE+DNIj81F4Yjhixc88j83
j9M2ur2leHn+aEfn2sAF5dHIjv1yyIzyPx1v7LVO8KbsnR988Uc9hQBv3OXfezQq
t7K3pdQqHwNvhyLRdKOW05xdVZsx/dYcoK0UXL9xTx0Tn1ZqP+LKduzCI14KNa+h
tUMyzp9zzQ6LExWL/Wb+yP0lVTk3jSddlM50Zdrfw6VpxRIJoUvvhoQfN9EFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUksi6ss5xVBUBn1zVfMsjFjk05u0wHwYDVR0j
BBgwFoAUzB9Ks5x48Ip4Ae7X56MbLfGAQugwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUZGWDVzRUp5UTdVZU5SeXRwdTdjODFLdDhYZ0RwN1NyTk1tU0xVZlEx
OGYvMC9DQzFGNEFCMzlDNzhGMDhBNzgwMUVFRDdFN0EzMUIyREYxODA0MkU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDMUY0QUIzOUM3OEYwOEE3
ODAxRUVEN0U3QTMxQjJERjE4MDQyRTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGRlg1c0VKeVE3VWVOUnl0cHU3YzgxS3Q4WGdEcDdTck5NbVNMVWZRMThmLzAv
MzEzODM2MmUzMjM1MzEyZTM5MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzODMyMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC6+2AwDQYJKoZIhvcNAQELBQADggEBACQikhOy
SkfOi/PgL2G2Iw57J8Jwry8wZoaPjrL6juP5cSrm8rjNIeqUSF1Nt+Iy1+fVW8z8
HjKwkIZRpOFNScKyLAFJxEMPenDnU9moJaS4h+DxBiZrZW7HAYgF1myEL8qhQJDS
Eebw8sl46ZB6BQ4yxSWIyqy2GXiGQeyybIqe5L2viLz0hkMoq5TmS00ALWpQgcYY
RsKuYQ0ehWWwAZJPzT56qcYT776L2duJquZ5mAw9kZtmLLcdrzxpWoTdpHHE8TJu
l+3vd8bIhT9kZDhidqKVFhA8RmDUaVbXhwkbKLPWVd/DmtVpmgAeC9QpPXcJOqf+
zUMlPGUKqHS32lk=
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:57 2024 by rpki-client on console-fra.rpki-client.org