Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/3138362e3230392e3232342e302f32302d3232203d3e203533313534.roa
File:                     3138362e3230392e3232342e302f32302d3232203d3e203533313534.roa (raw, json)
Hash identifier:          bumwH8uOaghgGBaMAKQN9sfmna6eNFOGkB38J4ZRPsA=
Subject key identifier:   48:2C:E2:22:66:91:A7:B4:90:9F:79:D4:F8:A4:6B:06:BD:E2:C6:3A
Certificate issuer:       /CN=8EAA572CDAB740A56977FFFC602F113E473F2E77
Certificate serial:       77859046B9F549CAF2AF48D044914D671A58E194
Authority key identifier: 8E:AA:57:2C:DA:B7:40:A5:69:77:FF:FC:60:2F:11:3E:47:3F:2E:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/3138362e3230392e3232342e302f32302d3232203d3e203533313534.roa
Signing time:             Wed 03 Apr 2024 21:03:56 +0000
ROA not before:           Wed 03 Apr 2024 20:58:56 +0000
ROA not after:            Wed 02 Apr 2025 21:03:56 +0000
asID:                     53154
IP address blocks:        186.209.224.0/20 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.crl
                          rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:85:90:46:b9:f5:49:ca:f2:af:48:d0:44:91:4d:67:1a:58:e1:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EAA572CDAB740A56977FFFC602F113E473F2E77
        Validity
            Not Before: Apr  3 20:58:56 2024 GMT
            Not After : Apr  2 21:03:56 2025 GMT
        Subject: CN=482CE2226691A7B4909F79D4F8A46B06BDE2C63A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6c:e3:c5:cb:ed:03:0d:f4:84:63:15:3c:b9:
                    0e:e8:a5:32:16:bc:a5:b1:13:51:97:bf:69:38:47:
                    8a:c8:df:2d:f1:fc:60:85:f9:d2:21:32:55:a3:c5:
                    00:50:d0:f8:dc:b3:e0:45:be:8f:fc:c2:ff:df:e2:
                    1b:a5:74:9e:17:e8:12:75:92:08:01:eb:46:b7:dd:
                    e1:fa:75:43:7f:df:08:d6:42:a8:d6:25:b9:76:a8:
                    4a:14:fa:33:2c:02:a3:19:cd:f4:ef:87:bb:27:a7:
                    bb:d8:89:1c:9e:5e:7f:2e:0d:ab:70:93:ee:0e:e8:
                    3e:37:ae:8b:d7:02:7a:24:e6:99:7b:dd:79:23:0a:
                    db:ad:c1:34:5f:9d:65:d5:c4:cf:ec:bf:c7:7c:8a:
                    ce:33:af:e0:6d:32:da:09:07:fa:e4:c0:89:4d:85:
                    e4:5d:a6:1a:cd:0a:8a:bd:dc:01:fb:43:31:f5:b0:
                    66:31:b5:37:a1:b3:33:d7:63:2e:53:5e:46:a6:0c:
                    5d:1a:13:d3:aa:55:cb:f3:71:c5:34:0d:b6:58:1e:
                    cb:be:97:f1:75:0c:39:73:4c:98:bc:6e:80:4a:19:
                    09:78:d9:8d:88:68:47:6b:f4:54:3c:6c:02:06:89:
                    d0:4d:01:4d:e5:97:36:3e:b0:f5:f5:f4:cf:2b:bd:
                    f7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:2C:E2:22:66:91:A7:B4:90:9F:79:D4:F8:A4:6B:06:BD:E2:C6:3A
            X509v3 Authority Key Identifier:
                keyid:8E:AA:57:2C:DA:B7:40:A5:69:77:FF:FC:60:2F:11:3E:47:3F:2E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/3138362e3230392e3232342e302f32302d3232203d3e203533313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b5:dc:53:0e:ba:92:63:e3:af:76:97:53:8e:21:38:c7:e8:75:
         84:72:ec:b4:04:48:91:01:4e:13:6c:49:2a:13:cf:96:ff:de:
         f8:f0:0c:09:0c:c6:39:f2:b4:94:24:62:83:9e:06:4e:98:e3:
         dd:2f:29:ac:bc:0e:8e:c7:f1:52:8b:0c:8d:a6:15:f6:62:17:
         62:1f:1f:32:93:9b:6d:82:9f:7f:de:14:1a:1b:e7:fb:a9:3c:
         ac:e1:cf:c9:1a:2f:53:7c:ff:49:89:8f:c7:a7:0e:9a:ca:e1:
         71:70:a0:62:27:cd:34:71:d0:cd:74:84:e6:6e:6f:e6:76:6f:
         e4:f4:0a:6d:a0:b0:78:db:5c:99:cc:b0:01:bf:45:ef:fc:2d:
         2b:c1:eb:f2:73:9d:9f:ff:7f:24:fc:27:c6:68:99:ab:6d:d8:
         c2:88:e8:78:e1:53:ea:47:3d:25:79:38:58:14:2d:48:d7:45:
         0c:33:31:79:04:df:7b:08:c4:b9:98:00:5c:7f:43:ae:2c:74:
         d6:3a:6f:70:48:26:25:47:46:75:04:bb:cc:98:c7:68:71:77:
         71:8a:9a:52:32:b3:57:d9:02:6d:ef:cf:36:ef:b7:82:5d:69:
         4d:41:39:3c:6b:a9:25:44:3b:5b:fc:a8:0e:08:86:cb:e9:0d:
         16:e2:c7:a2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUd4WQRrn1Scryr0jQRJFNZxpY4ZQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVBQTU3MkNEQUI3NDBBNTY5NzdGRkZDNjAyRjExM0U0
NzNGMkU3NzAeFw0yNDA0MDMyMDU4NTZaFw0yNTA0MDIyMTAzNTZaMDMxMTAvBgNV
BAMTKDQ4MkNFMjIyNjY5MUE3QjQ5MDlGNzlENEY4QTQ2QjA2QkRFMkM2M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpbOPFy+0DDfSEYxU8uQ7opTIW
vKWxE1GXv2k4R4rI3y3x/GCF+dIhMlWjxQBQ0Pjcs+BFvo/8wv/f4huldJ4X6BJ1
kggB60a33eH6dUN/3wjWQqjWJbl2qEoU+jMsAqMZzfTvh7snp7vYiRyeXn8uDatw
k+4O6D43rovXAnok5pl73XkjCtutwTRfnWXVxM/sv8d8is4zr+BtMtoJB/rkwIlN
heRdphrNCoq93AH7QzH1sGYxtTehszPXYy5TXkamDF0aE9OqVcvzccU0DbZYHsu+
l/F1DDlzTJi8boBKGQl42Y2IaEdr9FQ8bAIGidBNAU3llzY+sPX19M8rvfejAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUSCziImaRp7SQn3nU+KRrBr3ixjowHwYDVR0j
BBgwFoAUjqpXLNq3QKVpd//8YC8RPkc/LncwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnBOS1JyRjhLTEpyOVk0bVk2VzVMMTlGblVjVzJadHE0OUZ1Q1VmVXEz
SlcvMS84RUFBNTcyQ0RBQjc0MEE1Njk3N0ZGRkM2MDJGMTEzRTQ3M0YyRTc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFQUE1NzJDREFCNzQwQTU2
OTc3RkZGQzYwMkYxMTNFNDczRjJFNzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZwTktSckY4S0xKcjlZNG1ZNlc1TDE5Rm5VY1cyWnRxNDlGdUNVZlVxM0pXLzEv
MzEzODM2MmUzMjMwMzkyZTMyMzIzNDJlMzAyZjMyMzAyZDMyMzIyMDNkM2UyMDM1
MzMzMTM1MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS60eAwDQYJKoZIhvcNAQELBQADggEBALXcUw66
kmPjr3aXU44hOMfodYRy7LQESJEBThNsSSoTz5b/3vjwDAkMxjnytJQkYoOeBk6Y
490vKay8Do7H8VKLDI2mFfZiF2IfHzKTm22Cn3/eFBob5/upPKzhz8kaL1N8/0mJ
j8enDprK4XFwoGInzTRx0M10hOZub+Z2b+T0Cm2gsHjbXJnMsAG/Re/8LSvB6/Jz
nZ//fyT8J8Zomatt2MKI6HjhU+pHPSV5OFgULUjXRQwzMXkE33sIxLmYAFx/Q64s
dNY6b3BIJiVHRnUEu8yYx2hxd3GKmlIys1fZAm3vzzbvt4JdaU1BOTxrqSVEO1v8
qA4IhsvpDRbix6I=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:45 2024 by rpki-client on console-fra.rpki-client.org