Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/1/3138362e3139352e3137312e302f32342d3234203d3e20323638363638.roa
File:                     3138362e3139352e3137312e302f32342d3234203d3e20323638363638.roa (raw, json)
Hash identifier:          dX9moQZgPwI5wtHIdYa/Crx9oxbfeoy/0huuEZEYraY=
Subject key identifier:   29:CA:C8:77:BD:C9:4D:B3:44:2B:AA:1A:C4:20:84:AF:E3:1C:3F:A5
Certificate issuer:       /CN=3EA8671A0DD4715FBC0474E196FA5FCAD0E3A30F
Certificate serial:       1ED844A55A071425CBC620C295E6237A8E91A8FF
Authority key identifier: 3E:A8:67:1A:0D:D4:71:5F:BC:04:74:E1:96:FA:5F:CA:D0:E3:A3:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EA8671A0DD4715FBC0474E196FA5FCAD0E3A30F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/1/3138362e3139352e3137312e302f32342d3234203d3e20323638363638.roa
Signing time:             Wed 03 Apr 2024 19:49:14 +0000
ROA not before:           Wed 03 Apr 2024 19:44:14 +0000
ROA not after:            Wed 02 Apr 2025 19:49:14 +0000
asID:                     268668
IP address blocks:        186.195.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/1/3EA8671A0DD4715FBC0474E196FA5FCAD0E3A30F.crl
                          rsync://rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/1/3EA8671A0DD4715FBC0474E196FA5FCAD0E3A30F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EA8671A0DD4715FBC0474E196FA5FCAD0E3A30F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d8:44:a5:5a:07:14:25:cb:c6:20:c2:95:e6:23:7a:8e:91:a8:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EA8671A0DD4715FBC0474E196FA5FCAD0E3A30F
        Validity
            Not Before: Apr  3 19:44:14 2024 GMT
            Not After : Apr  2 19:49:14 2025 GMT
        Subject: CN=29CAC877BDC94DB3442BAA1AC42084AFE31C3FA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3c:eb:0b:cd:6d:b3:69:05:35:89:05:ca:94:
                    89:fd:48:9e:57:c9:7e:84:de:dc:9d:ca:2d:99:f3:
                    e4:cb:6d:71:a6:00:6e:25:97:17:08:0f:fd:f7:ae:
                    da:a3:ca:06:4a:34:fc:c2:e9:31:c9:d8:1e:02:f7:
                    fb:c7:06:05:56:22:f8:0f:dd:b6:2b:8d:b9:08:ea:
                    3d:04:ac:5f:2a:63:e3:43:d5:c2:71:ca:ac:53:56:
                    04:46:1f:c4:1a:65:00:1c:5d:43:2c:5a:e3:5a:cd:
                    5a:e5:9b:82:ee:85:4e:ff:9f:69:b9:86:1a:6d:d8:
                    bb:be:da:4b:f3:a5:a1:75:a8:de:66:5e:57:e7:3a:
                    a5:b6:82:f8:e0:96:3c:29:5c:45:0b:33:0d:88:10:
                    4d:ef:ff:78:a3:9a:c1:27:9b:20:0a:9f:b3:f0:46:
                    70:54:46:1a:dd:ac:23:5d:31:c5:a1:4f:0f:71:ff:
                    b5:78:a0:d4:95:d8:db:14:ed:99:dc:4c:18:b0:a7:
                    e3:8a:9a:2d:c2:f9:25:b9:9b:b5:89:bb:32:ab:6b:
                    a8:fa:3d:f1:d5:be:48:58:69:3a:11:71:7f:35:48:
                    8a:dd:74:10:36:a5:a7:bb:41:64:87:2e:a6:e8:da:
                    13:fb:6a:37:af:3d:03:71:b8:96:10:17:b3:2e:49:
                    70:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CA:C8:77:BD:C9:4D:B3:44:2B:AA:1A:C4:20:84:AF:E3:1C:3F:A5
            X509v3 Authority Key Identifier:
                keyid:3E:A8:67:1A:0D:D4:71:5F:BC:04:74:E1:96:FA:5F:CA:D0:E3:A3:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/1/3EA8671A0DD4715FBC0474E196FA5FCAD0E3A30F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EA8671A0DD4715FBC0474E196FA5FCAD0E3A30F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/1/3138362e3139352e3137312e302f32342d3234203d3e20323638363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:e1:21:a4:b1:ae:7a:d4:8e:b0:05:bf:e7:d5:a9:08:8c:79:
         5a:92:9a:e8:1b:c6:26:c4:c5:2d:f8:79:98:bb:3f:28:01:ad:
         ce:50:92:0b:f5:7c:0b:d4:e1:36:cb:89:01:9c:14:20:04:01:
         ad:55:b0:ed:cb:88:a9:90:6a:ec:97:20:71:7c:c5:12:4d:e0:
         15:88:50:9d:32:6e:0e:5e:f2:af:bc:92:f4:c3:72:3d:92:6b:
         1f:31:06:5f:56:36:75:1c:e9:1c:94:58:5e:02:3a:67:4c:dc:
         8a:da:d9:b0:08:cb:0c:dc:6a:68:ca:e5:bb:51:8e:3a:4c:58:
         4f:1f:1c:aa:55:03:68:c4:fa:9d:72:d1:55:46:38:87:a5:a1:
         5b:c7:6e:41:ae:4c:ae:68:9a:6b:8e:ea:7b:96:7a:17:58:a7:
         4f:80:ab:45:3b:66:70:4c:11:73:14:0d:6d:76:1c:2a:d8:92:
         7e:d1:f4:62:f6:74:55:e1:b3:8e:07:c0:35:42:e5:2b:ac:d8:
         35:dc:a5:3d:ef:9f:8e:9f:9b:53:6d:2d:ef:89:d3:b3:5b:21:
         6f:4d:7a:ec:0a:dc:22:a8:c5:15:3c:fc:bb:92:e5:d3:72:b4:
         2b:31:5b:25:36:cf:03:7e:71:7b:73:c0:ac:f3:1a:a8:ee:bc:
         fb:aa:98:e4
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUHthEpVoHFCXLxiDCleYjeo6RqP8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0VBODY3MUEwREQ0NzE1RkJDMDQ3NEUxOTZGQTVGQ0FE
MEUzQTMwRjAeFw0yNDA0MDMxOTQ0MTRaFw0yNTA0MDIxOTQ5MTRaMDMxMTAvBgNV
BAMTKDI5Q0FDODc3QkRDOTREQjM0NDJCQUExQUM0MjA4NEFGRTMxQzNGQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2POsLzW2zaQU1iQXKlIn9SJ5X
yX6E3tydyi2Z8+TLbXGmAG4llxcID/33rtqjygZKNPzC6THJ2B4C9/vHBgVWIvgP
3bYrjbkI6j0ErF8qY+ND1cJxyqxTVgRGH8QaZQAcXUMsWuNazVrlm4LuhU7/n2m5
hhpt2Lu+2kvzpaF1qN5mXlfnOqW2gvjgljwpXEULMw2IEE3v/3ijmsEnmyAKn7Pw
RnBURhrdrCNdMcWhTw9x/7V4oNSV2NsU7ZncTBiwp+OKmi3C+SW5m7WJuzKra6j6
PfHVvkhYaToRcX81SIrddBA2pae7QWSHLqbo2hP7ajevPQNxuJYQF7MuSXAlAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUKcrId73JTbNEK6oaxCCEr+McP6UwHwYDVR0j
BBgwFoAUPqhnGg3UcV+8BHThlvpfytDjow8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlJSekh3eVNUamVETHFtTjd4ZmoyNjFwNWRjc21nOXNUOU4yZFJpNEg0
c3cvMS8zRUE4NjcxQTBERDQ3MTVGQkMwNDc0RTE5NkZBNUZDQUQwRTNBMzBGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFQTg2NzFBMERENDcxNUZC
QzA0NzRFMTk2RkE1RkNBRDBFM0EzMEYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZSUnpId3lTVGplRExxbU43eGZqMjYxcDVkY3NtZzlzVDlOMmRSaTRINHN3LzEv
MzEzODM2MmUzMTM5MzUyZTMxMzczMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzODM2MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALrDqzANBgkqhkiG9w0BAQsFAAOCAQEAh+Eh
pLGuetSOsAW/59WpCIx5WpKa6BvGJsTFLfh5mLs/KAGtzlCSC/V8C9ThNsuJAZwU
IAQBrVWw7cuIqZBq7JcgcXzFEk3gFYhQnTJuDl7yr7yS9MNyPZJrHzEGX1Y2dRzp
HJRYXgI6Z0zcitrZsAjLDNxqaMrlu1GOOkxYTx8cqlUDaMT6nXLRVUY4h6WhW8du
Qa5Mrmiaa47qe5Z6F1inT4CrRTtmcEwRcxQNbXYcKtiSftH0YvZ0VeGzjgfANULl
K6zYNdylPe+fjp+bU20t74nTs1shb0167ArcIqjFFTz8u5Ll03K0KzFbJTbPA35x
e3PArPMaqO68+6qY5A==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:29 2024 by rpki-client on console-ams.rpki-client.org