Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/1/3138392e3132362e33362e302f32332d3234203d3e203238323233.roa
File:                     3138392e3132362e33362e302f32332d3234203d3e203238323233.roa (raw, json)
Hash identifier:          bzmco4SU+QzGCIndnKJD81s/14OksdRcYwf6VzK0VZE=
Subject key identifier:   5A:73:B7:57:1C:76:EF:4B:75:B8:8E:C1:FD:38:B7:85:59:BB:37:16
Certificate issuer:       /CN=87AA666BAB2D75477DAB63CDC5AE76C00F89DA19
Certificate serial:       18152A9B9CEFF56D3AFCE72373DE23CC5F59E4AA
Authority key identifier: 87:AA:66:6B:AB:2D:75:47:7D:AB:63:CD:C5:AE:76:C0:0F:89:DA:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AA666BAB2D75477DAB63CDC5AE76C00F89DA19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/1/3138392e3132362e33362e302f32332d3234203d3e203238323233.roa
Signing time:             Fri 26 Jul 2024 13:08:41 +0000
ROA not before:           Fri 26 Jul 2024 13:03:41 +0000
ROA not after:            Fri 25 Jul 2025 13:08:41 +0000
asID:                     28223
IP address blocks:        189.126.36.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/1/87AA666BAB2D75477DAB63CDC5AE76C00F89DA19.crl
                          rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/1/87AA666BAB2D75477DAB63CDC5AE76C00F89DA19.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AA666BAB2D75477DAB63CDC5AE76C00F89DA19.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:15:2a:9b:9c:ef:f5:6d:3a:fc:e7:23:73:de:23:cc:5f:59:e4:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87AA666BAB2D75477DAB63CDC5AE76C00F89DA19
        Validity
            Not Before: Jul 26 13:03:41 2024 GMT
            Not After : Jul 25 13:08:41 2025 GMT
        Subject: CN=5A73B7571C76EF4B75B88EC1FD38B78559BB3716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:48:3b:72:94:1f:21:e6:8e:0b:ea:2e:8a:c7:
                    aa:e6:bc:b3:d8:50:ce:2a:35:76:46:7e:50:97:1b:
                    9c:8b:84:bf:d1:b7:89:ec:c5:02:51:0c:31:c5:2c:
                    db:19:7e:06:e3:67:8a:e4:5c:20:12:1d:22:56:97:
                    a0:c2:1d:12:5d:5f:30:a5:70:91:00:fe:af:89:de:
                    4b:36:b3:99:67:25:0b:cc:11:e3:77:fb:3c:1d:59:
                    12:bb:cb:e4:53:54:16:1b:4f:a8:ce:7b:83:db:24:
                    d9:47:0c:05:c7:88:14:fe:01:f2:a5:b6:48:d7:75:
                    60:18:f8:26:08:7a:95:6b:42:fc:9d:fc:e6:61:de:
                    05:f6:70:c9:be:5d:7b:d5:76:6a:b6:ff:9d:5a:e9:
                    33:e1:fb:c0:29:f5:30:c3:ae:c8:fb:6b:a9:8d:20:
                    b4:ad:21:dd:6c:f5:01:4d:78:b2:ad:e6:2b:90:31:
                    84:3d:3d:47:ce:2e:e9:46:2e:06:2e:3b:b3:82:e9:
                    88:82:60:04:d8:5f:fd:d9:37:1d:ca:19:a7:3a:42:
                    db:20:bf:48:b2:db:6e:76:28:80:62:ed:2f:b0:fc:
                    a6:56:f0:5d:fd:db:d8:cb:ea:a4:af:73:b5:22:7f:
                    e5:0e:9f:47:86:12:35:43:9c:26:74:38:51:76:ae:
                    d4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:73:B7:57:1C:76:EF:4B:75:B8:8E:C1:FD:38:B7:85:59:BB:37:16
            X509v3 Authority Key Identifier:
                keyid:87:AA:66:6B:AB:2D:75:47:7D:AB:63:CD:C5:AE:76:C0:0F:89:DA:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/1/87AA666BAB2D75477DAB63CDC5AE76C00F89DA19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AA666BAB2D75477DAB63CDC5AE76C00F89DA19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/1/3138392e3132362e33362e302f32332d3234203d3e203238323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:97:3f:53:a3:6b:1b:d0:3a:28:d7:51:cd:e2:d8:40:cd:81:
         5d:a7:00:c3:5a:c2:05:72:bc:75:cc:50:e4:4f:71:94:fb:fe:
         0f:19:2e:e9:8a:67:a1:b6:98:b2:0e:72:71:05:c0:9d:e1:1c:
         b6:70:20:80:11:fa:f1:ce:e7:72:ab:e7:cc:e8:b3:a2:83:8d:
         9e:7f:4c:35:46:c7:4b:86:53:b1:f8:d2:fc:8b:18:11:a3:ff:
         7d:8f:54:bf:82:15:bf:61:8c:a9:5a:66:05:a9:53:60:57:13:
         3b:d9:a0:fb:50:5d:b5:f0:a2:5b:0f:b6:26:e9:0b:64:7d:3c:
         32:9f:ae:aa:ee:c0:e9:f1:2a:8b:70:58:e7:0d:89:bc:c1:aa:
         ff:84:2f:b7:2a:46:7b:ee:ba:c6:83:b7:2b:1a:70:48:50:51:
         cd:2e:3d:85:2c:d7:d5:2a:b0:d3:37:07:47:95:da:f8:e4:97:
         c7:b5:c6:16:5a:23:5b:8a:67:20:49:5e:6d:b8:78:af:a6:a0:
         77:e6:f8:9d:5f:34:0b:86:31:bc:c5:e0:75:80:a5:1c:18:47:
         3c:45:69:b0:05:2e:c4:cf:7e:60:5a:0a:20:8a:5d:f1:f1:64:
         79:64:c5:d7:5c:c1:e1:da:07:27:68:af:6e:16:3b:8f:cf:fc:
         3a:95:b1:f9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUGBUqm5zv9W06/Ocjc94jzF9Z5KowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdBQTY2NkJBQjJENzU0NzdEQUI2M0NEQzVBRTc2QzAw
Rjg5REExOTAeFw0yNDA3MjYxMzAzNDFaFw0yNTA3MjUxMzA4NDFaMDMxMTAvBgNV
BAMTKDVBNzNCNzU3MUM3NkVGNEI3NUI4OEVDMUZEMzhCNzg1NTlCQjM3MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrSDtylB8h5o4L6i6Kx6rmvLPY
UM4qNXZGflCXG5yLhL/Rt4nsxQJRDDHFLNsZfgbjZ4rkXCASHSJWl6DCHRJdXzCl
cJEA/q+J3ks2s5lnJQvMEeN3+zwdWRK7y+RTVBYbT6jOe4PbJNlHDAXHiBT+AfKl
tkjXdWAY+CYIepVrQvyd/OZh3gX2cMm+XXvVdmq2/51a6TPh+8Ap9TDDrsj7a6mN
ILStId1s9QFNeLKt5iuQMYQ9PUfOLulGLgYuO7OC6YiCYATYX/3ZNx3KGac6Qtsg
v0iy2252KIBi7S+w/KZW8F3929jL6qSvc7Uif+UOn0eGEjVDnCZ0OFF2rtRbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUWnO3Vxx270t1uI7B/Ti3hVm7NxYwHwYDVR0j
BBgwFoAUh6pma6stdUd9q2PNxa52wA+J2hkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkhSaXJFejVFWU42UjFMZzZtblVpSHNKVWhBUlc3bnRIaXFGSmc2UEN4
c0ovMS84N0FBNjY2QkFCMkQ3NTQ3N0RBQjYzQ0RDNUFFNzZDMDBGODlEQTE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3QUE2NjZCQUIyRDc1NDc3
REFCNjNDREM1QUU3NkMwMEY4OURBMTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZIUmlyRXo1RVlONlIxTGc2bW5VaUhzSlVoQVJXN250SGlxRkpnNlBDeHNKLzEv
MzEzODM5MmUzMTMyMzYyZTMzMzYyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM4
MzIzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBvX4kMA0GCSqGSIb3DQEBCwUAA4IBAQAJlz9To2sb
0Doo11HN4thAzYFdpwDDWsIFcrx1zFDkT3GU+/4PGS7pimehtpiyDnJxBcCd4Ry2
cCCAEfrxzudyq+fM6LOig42ef0w1RsdLhlOx+NL8ixgRo/99j1S/ghW/YYypWmYF
qVNgVxM72aD7UF218KJbD7Ym6QtkfTwyn66q7sDp8SqLcFjnDYm8war/hC+3KkZ7
7rrGg7crGnBIUFHNLj2FLNfVKrDTNwdHldr45JfHtcYWWiNbimcgSV5tuHivpqB3
5vidXzQLhjG8xeB1gKUcGEc8RWmwBS7Ez35gWgogil3x8WR5ZMXXXMHh2gcnaK9u
FjuPz/w6lbH5
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:32 2024 by rpki-client on console-fra.rpki-client.org