Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/3138372e36332e3233362e302f32342d3234203d3e20323633363631.roa
File:                     3138372e36332e3233362e302f32342d3234203d3e20323633363631.roa (raw, json)
Hash identifier:          RtbtjWzgRgCfP4Zx84P0Cgr4exhjAxxwq9r7XFH/8ZY=
Subject key identifier:   ED:D6:E4:88:B6:6C:BE:5C:B7:DA:8F:4B:DD:93:7F:BA:31:22:BD:9F
Certificate issuer:       /CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
Certificate serial:       033C8ECA4E0FC99D2B305BFDF123DE691A03932E
Authority key identifier: 8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/3138372e36332e3233362e302f32342d3234203d3e20323633363631.roa
Signing time:             Thu 04 Apr 2024 01:38:32 +0000
ROA not before:           Thu 04 Apr 2024 01:33:32 +0000
ROA not after:            Thu 03 Apr 2025 01:38:32 +0000
asID:                     263661
IP address blocks:        187.63.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.crl
                          rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:3c:8e:ca:4e:0f:c9:9d:2b:30:5b:fd:f1:23:de:69:1a:03:93:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65
        Validity
            Not Before: Apr  4 01:33:32 2024 GMT
            Not After : Apr  3 01:38:32 2025 GMT
        Subject: CN=EDD6E488B66CBE5CB7DA8F4BDD937FBA3122BD9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d8:6b:80:67:5f:ea:71:dd:4c:61:9f:d3:86:
                    7a:18:21:49:aa:a7:bb:74:4c:56:d6:e6:e6:21:6e:
                    0c:4b:bf:bf:75:24:79:77:2f:bf:15:92:74:41:f2:
                    85:49:a7:81:0d:8b:7a:31:4f:2d:dd:1e:e9:81:11:
                    f6:72:01:97:75:51:dc:be:34:93:e4:b4:79:f0:97:
                    3d:1d:b9:c9:91:62:33:d7:2d:95:9f:57:a9:be:ef:
                    4a:6c:78:dc:e8:54:d4:69:38:98:78:f9:f0:f7:44:
                    ae:31:eb:6d:d8:03:84:76:d9:ef:a3:0a:10:90:dc:
                    ba:2d:a0:21:ae:a3:20:82:05:39:54:8f:5c:5b:07:
                    0a:9a:a4:51:b0:9f:61:72:18:9e:1f:31:3c:25:aa:
                    40:bb:2f:23:bb:0e:5c:11:42:13:64:76:b5:19:d3:
                    6a:ac:03:18:99:88:94:74:dc:46:60:12:a2:44:45:
                    32:7b:a3:2a:c4:c5:7e:71:48:e6:a8:18:4e:30:b4:
                    2d:32:b1:f8:34:fb:d7:37:92:e5:81:a7:2c:a7:be:
                    57:c6:be:cf:89:2a:87:19:ae:25:78:b6:0f:c8:a4:
                    6e:a1:c8:4e:43:b8:f4:ee:62:39:a5:8b:2c:4c:24:
                    41:02:a0:fc:7a:ec:5c:73:40:d8:8d:1f:b6:3c:2a:
                    fa:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D6:E4:88:B6:6C:BE:5C:B7:DA:8F:4B:DD:93:7F:BA:31:22:BD:9F
            X509v3 Authority Key Identifier:
                keyid:8E:82:2B:DA:67:B7:20:70:9C:3F:DC:0A:A1:CE:0B:9C:53:7F:2A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E822BDA67B720709C3FDC0AA1CE0B9C537F2A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/2/3138372e36332e3233362e302f32342d3234203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:b7:1a:58:85:6f:33:fb:c0:63:1a:05:82:e5:97:0e:5a:0b:
         bb:ba:d7:aa:55:50:0a:09:6a:53:d3:3c:7f:e0:2a:ae:a1:bc:
         9d:98:bb:98:ea:67:d3:21:d6:7b:9a:c0:b2:df:66:7d:9d:3c:
         58:7a:2c:50:77:ca:66:5e:c1:e6:1b:ef:e7:18:16:fb:7a:5d:
         89:c2:54:42:0e:d0:60:74:9f:f8:a4:f0:4e:01:58:eb:f5:95:
         a9:13:73:ce:a3:ab:ad:4a:f4:7d:ae:71:2d:32:1b:62:d1:ad:
         a1:1c:c1:4c:45:54:25:bb:9a:c0:cb:ae:d3:ef:a2:a0:7a:78:
         71:2e:5b:76:7c:41:2a:fd:01:e6:f3:aa:5a:63:ea:27:fd:02:
         ef:29:e9:32:8c:49:f4:26:ec:fe:69:39:31:4d:b4:56:bd:e5:
         95:5f:31:bd:8e:b6:8b:7a:1a:1d:93:0b:66:b1:d6:64:68:59:
         b0:98:00:4b:90:5b:8c:b3:88:b1:dc:ca:39:cc:b1:5d:30:1a:
         b8:82:89:a0:ab:1f:50:64:9c:45:4c:47:55:14:b8:cc:14:d4:
         b6:7a:64:45:cd:c5:bf:66:b8:98:6b:ce:e5:49:65:cb:d6:96:
         9d:3e:63:5e:ff:81:54:7b:a9:34:80:04:e8:b1:dd:9a:1c:be:
         11:1e:73:bf
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAzyOyk4PyZ0rMFv98SPeaRoDky4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU4MjJCREE2N0I3MjA3MDlDM0ZEQzBBQTFDRTBCOUM1
MzdGMkE2NTAeFw0yNDA0MDQwMTMzMzJaFw0yNTA0MDMwMTM4MzJaMDMxMTAvBgNV
BAMTKEVERDZFNDg4QjY2Q0JFNUNCN0RBOEY0QkREOTM3RkJBMzEyMkJEOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb2GuAZ1/qcd1MYZ/ThnoYIUmq
p7t0TFbW5uYhbgxLv791JHl3L78VknRB8oVJp4ENi3oxTy3dHumBEfZyAZd1Udy+
NJPktHnwlz0ducmRYjPXLZWfV6m+70pseNzoVNRpOJh4+fD3RK4x623YA4R22e+j
ChCQ3LotoCGuoyCCBTlUj1xbBwqapFGwn2FyGJ4fMTwlqkC7LyO7DlwRQhNkdrUZ
02qsAxiZiJR03EZgEqJERTJ7oyrExX5xSOaoGE4wtC0ysfg0+9c3kuWBpyynvlfG
vs+JKocZriV4tg/IpG6hyE5DuPTuYjmliyxMJEECoPx67FxzQNiNH7Y8KvrPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU7dbkiLZsvly32o9L3ZN/ujEivZ8wHwYDVR0j
BBgwFoAUjoIr2me3IHCcP9wKoc4LnFN/KmUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVptemhGZms1a0thdzFLcDdMbUpCMUczeTh6WnA4aUo2dzc2Nk15ZWFu
dWovMi84RTgyMkJEQTY3QjcyMDcwOUMzRkRDMEFBMUNFMEI5QzUzN0YyQTY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFODIyQkRBNjdCNzIwNzA5
QzNGREMwQUExQ0UwQjlDNTM3RjJBNjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VabXpoRmZrNWtLYXcxS3A3TG1KQjFHM3k4elpwOGlKNnc3NjZNeWVhbnVqLzIv
MzEzODM3MmUzNjMzMmUzMjMzMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzNjM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7P+wwDQYJKoZIhvcNAQELBQADggEBAG63GliF
bzP7wGMaBYLllw5aC7u616pVUAoJalPTPH/gKq6hvJ2Yu5jqZ9Mh1nuawLLfZn2d
PFh6LFB3ymZeweYb7+cYFvt6XYnCVEIO0GB0n/ik8E4BWOv1lakTc86jq61K9H2u
cS0yG2LRraEcwUxFVCW7msDLrtPvoqB6eHEuW3Z8QSr9Aebzqlpj6if9Au8p6TKM
SfQm7P5pOTFNtFa95ZVfMb2Otot6Gh2TC2ax1mRoWbCYAEuQW4yziLHcyjnMsV0w
GriCiaCrH1BknEVMR1UUuMwU1LZ6ZEXNxb9muJhrzuVJZcvWlp0+Y17/gVR7qTSA
BOix3ZocvhEec78=
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:49 2024 by rpki-client on console-ams.rpki-client.org