Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e39382e302f32342d3234203d3e20323632383238.roa
File:                     3138362e3235312e39382e302f32342d3234203d3e20323632383238.roa (raw, json)
Hash identifier:          H0ONV4zCx/1VAax3feVOHw/AVHH5cbHeoDih+iNOgV0=
Subject key identifier:   DA:65:1D:A7:3D:C6:06:6A:6F:7D:EC:1B:63:86:46:2D:37:53:D3:F8
Certificate issuer:       /CN=CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8
Certificate serial:       26D1009A3A5490C6569313D9E33D98E2386DE2D8
Authority key identifier: CC:1F:4A:B3:9C:78:F0:8A:78:01:EE:D7:E7:A3:1B:2D:F1:80:42:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e39382e302f32342d3234203d3e20323632383238.roa
Signing time:             Tue 03 Sep 2024 20:12:27 +0000
ROA not before:           Tue 03 Sep 2024 20:07:27 +0000
ROA not after:            Tue 02 Sep 2025 20:12:27 +0000
asID:                     262828
IP address blocks:        186.251.98.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.crl
                          rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d1:00:9a:3a:54:90:c6:56:93:13:d9:e3:3d:98:e2:38:6d:e2:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8
        Validity
            Not Before: Sep  3 20:07:27 2024 GMT
            Not After : Sep  2 20:12:27 2025 GMT
        Subject: CN=DA651DA73DC6066A6F7DEC1B6386462D3753D3F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:49:74:e9:ef:fb:1e:a8:a6:ab:fe:54:f5:d0:
                    cd:da:9b:3a:46:e0:1e:6b:82:79:be:03:7a:dc:40:
                    fc:69:9e:54:74:c3:05:ec:b6:20:44:f1:25:e4:85:
                    8b:59:ff:aa:76:82:f2:04:27:79:30:a1:63:1f:33:
                    94:6e:f3:24:1c:9d:b1:17:2f:73:cb:3b:a5:2b:20:
                    3f:b6:4a:63:f5:fe:d2:0c:aa:96:58:c5:dc:8b:b9:
                    ca:80:e6:ca:6d:0e:f1:04:9f:ea:61:94:ba:57:0a:
                    82:be:61:5f:c3:15:b7:93:4f:1b:9f:37:9d:cd:28:
                    e1:f6:f9:ea:c4:84:03:8e:4b:35:04:56:d9:90:65:
                    fb:88:ba:29:38:b2:5f:98:18:65:0e:39:f1:fa:5c:
                    bd:7c:cf:11:11:79:2e:fb:1c:c3:99:9d:ec:7c:54:
                    f8:3d:1e:e9:65:39:82:67:9b:24:bb:97:d5:63:c2:
                    ab:17:cf:58:b7:d7:ee:e9:77:de:31:de:44:b8:47:
                    35:a5:be:83:84:4a:0a:61:94:b3:70:c5:4e:c9:be:
                    6a:b6:df:b9:3f:e6:79:da:b9:dc:4a:27:37:7e:45:
                    82:5c:66:18:8f:03:7c:c4:7e:35:6f:d4:10:7d:fa:
                    8c:2e:24:19:84:a5:20:dc:b0:68:51:d0:76:ee:22:
                    78:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:65:1D:A7:3D:C6:06:6A:6F:7D:EC:1B:63:86:46:2D:37:53:D3:F8
            X509v3 Authority Key Identifier:
                keyid:CC:1F:4A:B3:9C:78:F0:8A:78:01:EE:D7:E7:A3:1B:2D:F1:80:42:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC1F4AB39C78F08A7801EED7E7A31B2DF18042E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/3138362e3235312e39382e302f32342d3234203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:2b:d5:3e:f8:1e:95:07:80:00:3d:9b:87:29:c1:81:f9:d3:
         84:38:b1:e8:97:99:5d:2c:8f:f1:1a:7e:94:e8:f6:23:e1:11:
         0a:87:2c:ab:b0:16:bd:7b:93:38:e7:32:64:ec:23:25:07:7b:
         e2:53:be:40:eb:f7:52:f0:81:24:12:94:d5:1e:d6:6f:ce:03:
         f7:30:93:6c:01:79:fc:2f:47:e4:99:0b:30:a9:f7:3a:06:ae:
         1d:75:eb:15:2a:8a:36:5d:35:f6:4e:e7:64:4c:15:1d:e7:a8:
         d0:a1:dd:b2:85:90:9b:b9:11:1f:14:2d:e1:33:60:e4:aa:3f:
         3c:fc:89:81:41:f5:90:97:97:2f:80:65:09:89:dc:1e:90:5b:
         10:18:04:b9:af:48:4c:00:b5:a8:7b:9f:eb:c0:4f:10:8e:0a:
         c5:13:10:98:96:2d:7c:08:77:cd:1e:97:23:cc:f3:37:a6:e2:
         39:1a:6a:8e:fe:d2:d9:d9:27:dc:ba:b4:f2:79:f5:29:14:88:
         a5:46:f7:4a:f5:c8:b0:50:2e:ef:21:df:f7:a9:e6:65:11:fd:
         b8:ce:eb:43:de:27:a9:85:10:43:75:71:fd:57:44:b1:69:7e:
         f6:a9:c2:a0:db:4e:cd:c3:43:71:08:8c:8d:66:25:a7:fd:38:
         67:19:3a:c0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJtEAmjpUkMZWkxPZ4z2Y4jht4tgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0MxRjRBQjM5Qzc4RjA4QTc4MDFFRUQ3RTdBMzFCMkRG
MTgwNDJFODAeFw0yNDA5MDMyMDA3MjdaFw0yNTA5MDIyMDEyMjdaMDMxMTAvBgNV
BAMTKERBNjUxREE3M0RDNjA2NkE2RjdERUMxQjYzODY0NjJEMzc1M0QzRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjSXTp7/seqKar/lT10M3amzpG
4B5rgnm+A3rcQPxpnlR0wwXstiBE8SXkhYtZ/6p2gvIEJ3kwoWMfM5Ru8yQcnbEX
L3PLO6UrID+2SmP1/tIMqpZYxdyLucqA5sptDvEEn+phlLpXCoK+YV/DFbeTTxuf
N53NKOH2+erEhAOOSzUEVtmQZfuIuik4sl+YGGUOOfH6XL18zxEReS77HMOZnex8
VPg9HullOYJnmyS7l9VjwqsXz1i31+7pd94x3kS4RzWlvoOESgphlLNwxU7Jvmq2
37k/5nnaudxKJzd+RYJcZhiPA3zEfjVv1BB9+owuJBmEpSDcsGhR0HbuIngnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU2mUdpz3GBmpvfewbY4ZGLTdT0/gwHwYDVR0j
BBgwFoAUzB9Ks5x48Ip4Ae7X56MbLfGAQugwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUZGWDVzRUp5UTdVZU5SeXRwdTdjODFLdDhYZ0RwN1NyTk1tU0xVZlEx
OGYvMC9DQzFGNEFCMzlDNzhGMDhBNzgwMUVFRDdFN0EzMUIyREYxODA0MkU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDMUY0QUIzOUM3OEYwOEE3
ODAxRUVEN0U3QTMxQjJERjE4MDQyRTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGRlg1c0VKeVE3VWVOUnl0cHU3YzgxS3Q4WGdEcDdTck5NbVNMVWZRMThmLzAv
MzEzODM2MmUzMjM1MzEyZTM5MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzODMyMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC6+2IwDQYJKoZIhvcNAQELBQADggEBAGAr1T74
HpUHgAA9m4cpwYH504Q4seiXmV0sj/EafpTo9iPhEQqHLKuwFr17kzjnMmTsIyUH
e+JTvkDr91LwgSQSlNUe1m/OA/cwk2wBefwvR+SZCzCp9zoGrh116xUqijZdNfZO
52RMFR3nqNCh3bKFkJu5ER8ULeEzYOSqPzz8iYFB9ZCXly+AZQmJ3B6QWxAYBLmv
SEwAtah7n+vATxCOCsUTEJiWLXwId80elyPM8zem4jkaao7+0tnZJ9y6tPJ59SkU
iKVG90r1yLBQLu8h3/ep5mUR/bjO60PeJ6mFEEN1cf1XRLFpfvapwqDbTs3DQ3EI
jI1mJaf9OGcZOsA=
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:36 2024 by rpki-client on console-ams.rpki-client.org