Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/1/3138392e3132362e33322e302f32322d3234203d3e203238323233.roa
File:                     3138392e3132362e33322e302f32322d3234203d3e203238323233.roa (raw, json)
Hash identifier:          wyVA01lNiNwj9H4Y8+qJnByaRqR9RC7RqR9AJFUnl6E=
Subject key identifier:   55:9B:5D:3F:5D:20:73:D8:AC:51:2C:DA:F1:CE:19:81:E2:FF:E9:E2
Certificate issuer:       /CN=87AA666BAB2D75477DAB63CDC5AE76C00F89DA19
Certificate serial:       72A6EC41DB2C24A5C58C212312D76CC380171DD1
Authority key identifier: 87:AA:66:6B:AB:2D:75:47:7D:AB:63:CD:C5:AE:76:C0:0F:89:DA:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AA666BAB2D75477DAB63CDC5AE76C00F89DA19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/1/3138392e3132362e33322e302f32322d3234203d3e203238323233.roa
Signing time:             Fri 26 Jul 2024 13:08:11 +0000
ROA not before:           Fri 26 Jul 2024 13:03:11 +0000
ROA not after:            Fri 25 Jul 2025 13:08:11 +0000
asID:                     28223
IP address blocks:        189.126.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/1/87AA666BAB2D75477DAB63CDC5AE76C00F89DA19.crl
                          rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/1/87AA666BAB2D75477DAB63CDC5AE76C00F89DA19.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AA666BAB2D75477DAB63CDC5AE76C00F89DA19.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a6:ec:41:db:2c:24:a5:c5:8c:21:23:12:d7:6c:c3:80:17:1d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87AA666BAB2D75477DAB63CDC5AE76C00F89DA19
        Validity
            Not Before: Jul 26 13:03:11 2024 GMT
            Not After : Jul 25 13:08:11 2025 GMT
        Subject: CN=559B5D3F5D2073D8AC512CDAF1CE1981E2FFE9E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c4:23:e2:3a:5b:cd:bb:ad:81:3c:56:fe:de:
                    a2:5e:67:9a:8d:59:82:85:35:49:2a:b1:cc:61:82:
                    74:d4:e7:ec:b5:0c:7a:eb:37:ae:9e:aa:ff:22:1d:
                    78:4a:3b:25:1e:ad:86:03:de:da:83:aa:ef:a6:5d:
                    6c:76:69:e9:fa:85:2b:e7:59:27:32:c1:a5:c1:34:
                    77:8c:4b:74:2d:4b:a1:06:91:fc:99:db:05:0b:fd:
                    9c:1b:be:d7:61:25:9d:79:a0:3e:1f:79:00:8a:b2:
                    4b:77:57:b7:d1:39:d7:23:1f:09:f8:9f:2b:53:f9:
                    2c:67:f0:2d:bc:eb:c4:1b:e2:f1:41:07:a5:97:6f:
                    63:65:08:57:57:19:b5:40:d2:b0:7a:fc:83:a2:9c:
                    12:a8:d3:ef:10:34:59:3e:e6:9f:e1:00:68:a2:1c:
                    c0:0b:76:b9:95:fe:88:a9:da:2f:12:9b:60:e7:b5:
                    fb:3c:a3:c6:fd:0d:4b:ff:23:2d:99:64:32:b7:f6:
                    85:74:d9:9e:14:a0:19:74:29:31:2e:02:07:f5:cd:
                    5a:73:db:ca:69:18:fc:6a:8a:3d:d5:46:05:e8:90:
                    09:07:10:e6:40:30:97:f3:2c:c8:53:dc:c6:70:24:
                    b1:58:2c:03:80:70:f4:06:05:6f:dc:7d:f4:db:a4:
                    91:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:9B:5D:3F:5D:20:73:D8:AC:51:2C:DA:F1:CE:19:81:E2:FF:E9:E2
            X509v3 Authority Key Identifier:
                keyid:87:AA:66:6B:AB:2D:75:47:7D:AB:63:CD:C5:AE:76:C0:0F:89:DA:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/1/87AA666BAB2D75477DAB63CDC5AE76C00F89DA19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AA666BAB2D75477DAB63CDC5AE76C00F89DA19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/1/3138392e3132362e33322e302f32322d3234203d3e203238323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:a6:d1:02:32:d6:d3:e2:40:4f:d2:37:38:4a:63:ab:e1:93:
         11:b5:de:75:31:0e:6f:12:1b:18:08:3e:15:bd:0e:12:09:90:
         a0:0b:6d:4d:b3:22:2c:29:86:6d:81:fa:4e:91:46:23:f3:10:
         94:33:65:4c:e3:9c:1e:15:e1:b4:9f:bd:02:df:2b:23:5b:fd:
         51:c2:c1:f1:2b:2e:dd:f0:f9:3a:4f:70:4b:c5:e2:cd:72:7d:
         5f:53:bf:06:1d:08:44:a5:09:37:63:c1:54:25:c4:45:28:c6:
         52:23:f5:a3:1e:e2:4a:93:c9:64:05:0f:ea:22:c7:ea:cf:21:
         a8:6b:0b:22:e6:2b:e3:ea:64:46:e7:a0:ee:f2:c3:9a:f0:0d:
         c5:4f:34:1e:db:86:df:2c:62:30:d6:8e:86:58:c6:6f:9c:86:
         ae:5f:6d:1b:90:99:6e:2b:80:16:ef:1f:e0:bf:5b:99:83:67:
         a6:34:d6:1d:8c:9f:a2:9b:b7:12:e2:e0:d0:a3:04:71:77:c2:
         b3:d5:c6:0c:17:6e:4e:88:c5:c6:f8:49:d6:4e:22:8e:b0:54:
         16:5c:9b:27:9b:78:35:ca:0f:39:c0:d7:04:f4:90:7e:5b:08:
         6f:83:6b:74:60:76:e2:f7:62:5b:8e:44:2d:e9:51:03:b2:36:
         e5:78:9e:13
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcqbsQdssJKXFjCEjEtdsw4AXHdEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdBQTY2NkJBQjJENzU0NzdEQUI2M0NEQzVBRTc2QzAw
Rjg5REExOTAeFw0yNDA3MjYxMzAzMTFaFw0yNTA3MjUxMzA4MTFaMDMxMTAvBgNV
BAMTKDU1OUI1RDNGNUQyMDczRDhBQzUxMkNEQUYxQ0UxOTgxRTJGRkU5RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8xCPiOlvNu62BPFb+3qJeZ5qN
WYKFNUkqscxhgnTU5+y1DHrrN66eqv8iHXhKOyUerYYD3tqDqu+mXWx2aen6hSvn
WScywaXBNHeMS3QtS6EGkfyZ2wUL/ZwbvtdhJZ15oD4feQCKskt3V7fROdcjHwn4
nytT+Sxn8C2868Qb4vFBB6WXb2NlCFdXGbVA0rB6/IOinBKo0+8QNFk+5p/hAGii
HMALdrmV/oip2i8Sm2Dntfs8o8b9DUv/Iy2ZZDK39oV02Z4UoBl0KTEuAgf1zVpz
28ppGPxqij3VRgXokAkHEOZAMJfzLMhT3MZwJLFYLAOAcPQGBW/cffTbpJGnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUVZtdP10gc9isUSza8c4ZgeL/6eIwHwYDVR0j
BBgwFoAUh6pma6stdUd9q2PNxa52wA+J2hkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkhSaXJFejVFWU42UjFMZzZtblVpSHNKVWhBUlc3bnRIaXFGSmc2UEN4
c0ovMS84N0FBNjY2QkFCMkQ3NTQ3N0RBQjYzQ0RDNUFFNzZDMDBGODlEQTE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3QUE2NjZCQUIyRDc1NDc3
REFCNjNDREM1QUU3NkMwMEY4OURBMTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZIUmlyRXo1RVlONlIxTGc2bW5VaUhzSlVoQVJXN250SGlxRkpnNlBDeHNKLzEv
MzEzODM5MmUzMTMyMzYyZTMzMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4
MzIzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCvX4gMA0GCSqGSIb3DQEBCwUAA4IBAQBtptECMtbT
4kBP0jc4SmOr4ZMRtd51MQ5vEhsYCD4VvQ4SCZCgC21NsyIsKYZtgfpOkUYj8xCU
M2VM45weFeG0n70C3ysjW/1RwsHxKy7d8Pk6T3BLxeLNcn1fU78GHQhEpQk3Y8FU
JcRFKMZSI/WjHuJKk8lkBQ/qIsfqzyGoawsi5ivj6mRG56Du8sOa8A3FTzQe24bf
LGIw1o6GWMZvnIauX20bkJluK4AW7x/gv1uZg2emNNYdjJ+im7cS4uDQowRxd8Kz
1cYMF25OiMXG+EnWTiKOsFQWXJsnm3g1yg85wNcE9JB+Wwhvg2t0YHbi92JbjkQt
6VEDsjbleJ4T
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:27 2024 by rpki-client on console-ams.rpki-client.org