Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/3138362e3230392e3132382e302f32302d3332203d3e203533313639.roa
File:                     3138362e3230392e3132382e302f32302d3332203d3e203533313639.roa (raw, json)
Hash identifier:          VDh0/uP5vDUYsW/VP7IRR2AXGuye0lwRD5bjo6vnB9I=
Subject key identifier:   B3:0E:C6:9C:F5:62:94:A8:EE:BC:B2:3C:0D:23:B6:F6:99:4B:BC:68
Certificate issuer:       /CN=14DABC9061A328905E8120751E9528DFE978C501
Certificate serial:       50DBA2FE44984D5C6971A686BD4BB318CDE52EF9
Authority key identifier: 14:DA:BC:90:61:A3:28:90:5E:81:20:75:1E:95:28:DF:E9:78:C5:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DABC9061A328905E8120751E9528DFE978C501.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/3138362e3230392e3132382e302f32302d3332203d3e203533313639.roa
Signing time:             Wed 03 Apr 2024 21:08:10 +0000
ROA not before:           Wed 03 Apr 2024 21:03:10 +0000
ROA not after:            Wed 02 Apr 2025 21:08:10 +0000
asID:                     53169
IP address blocks:        186.209.128.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/14DABC9061A328905E8120751E9528DFE978C501.crl
                          rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/14DABC9061A328905E8120751E9528DFE978C501.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DABC9061A328905E8120751E9528DFE978C501.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:db:a2:fe:44:98:4d:5c:69:71:a6:86:bd:4b:b3:18:cd:e5:2e:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14DABC9061A328905E8120751E9528DFE978C501
        Validity
            Not Before: Apr  3 21:03:10 2024 GMT
            Not After : Apr  2 21:08:10 2025 GMT
        Subject: CN=B30EC69CF56294A8EEBCB23C0D23B6F6994BBC68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a4:86:46:ea:74:d2:c1:b4:76:cf:c2:df:61:
                    e8:73:f2:92:4c:88:c7:56:75:14:c3:6d:02:fa:7e:
                    9d:7f:21:a7:e8:25:40:f2:b4:d9:60:59:8d:6d:38:
                    23:db:24:da:84:96:6d:b5:ce:73:be:eb:4c:35:13:
                    03:d5:b8:35:3f:4c:8a:bc:5d:b1:aa:cb:09:87:09:
                    93:ca:38:f5:34:b6:22:e4:d8:6b:97:dc:b1:d5:1c:
                    a9:ce:bd:c5:f7:9b:aa:0e:91:b3:85:fe:99:e7:20:
                    91:83:47:8e:75:c1:de:53:11:0f:24:fb:6a:8d:c2:
                    68:3c:01:05:3d:a0:ec:62:06:30:d1:cc:8f:cc:c6:
                    73:fd:95:ed:77:cf:c5:3b:7e:6d:d8:ee:63:ed:89:
                    1a:c2:0d:22:26:02:0d:ae:9a:15:c6:47:8c:7d:3f:
                    8f:c5:b8:89:7e:a3:b5:de:b8:14:68:3f:c3:b4:a3:
                    72:ba:51:9c:32:57:39:83:9b:28:0f:61:d3:9c:4f:
                    fb:06:8a:0e:52:18:48:6d:be:91:fd:0c:a4:f1:e4:
                    dc:7b:08:c0:50:19:33:ef:60:69:3d:04:bb:23:9e:
                    79:ef:87:05:eb:b4:20:ae:f5:ea:0e:a9:5d:c3:78:
                    9a:3d:dc:e5:c3:aa:9c:d3:2d:2b:8e:30:50:be:f5:
                    e6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0E:C6:9C:F5:62:94:A8:EE:BC:B2:3C:0D:23:B6:F6:99:4B:BC:68
            X509v3 Authority Key Identifier:
                keyid:14:DA:BC:90:61:A3:28:90:5E:81:20:75:1E:95:28:DF:E9:78:C5:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/14DABC9061A328905E8120751E9528DFE978C501.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14DABC9061A328905E8120751E9528DFE978C501.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/1/3138362e3230392e3132382e302f32302d3332203d3e203533313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         30:cb:ba:fc:f7:e4:79:44:cd:12:36:35:94:17:fe:97:00:bf:
         95:9f:01:d7:76:d7:3a:57:28:51:1c:a2:c0:ce:85:64:fb:f9:
         43:1e:a9:ce:79:04:e4:c3:f1:d3:5f:93:53:c9:fa:71:e1:1f:
         ea:04:0a:93:b2:30:ef:91:16:96:71:d3:3b:1e:4b:91:8f:de:
         e8:15:a8:f6:78:0e:ff:4c:e6:25:47:49:de:06:84:a6:23:18:
         32:a7:48:27:d3:81:59:16:64:22:ed:37:14:72:86:c8:61:f2:
         86:b5:7d:c8:6c:63:b4:7d:4a:ca:33:3d:6b:06:14:55:2e:c3:
         7a:c4:59:d6:7d:a4:8c:0e:43:3b:f1:a6:12:64:77:d2:5c:f1:
         ef:6f:eb:08:74:8a:9a:f7:21:0a:0f:a2:59:c9:cd:47:b0:e0:
         fc:12:d7:3e:f1:50:9d:ac:fc:d4:29:6c:48:ae:df:28:ad:c6:
         72:08:9f:41:6b:5d:2e:a4:e3:25:f2:44:61:db:6f:6f:29:10:
         b4:c3:ab:c7:8f:21:e4:03:4a:a4:06:85:41:f3:c8:99:18:f4:
         c2:97:e5:28:1f:82:57:99:1b:83:0a:c9:7d:4e:2e:15:5f:2c:
         7c:d6:89:4d:bb:1f:2a:ad:64:a4:af:19:02:63:ce:50:12:23:
         8a:ff:48:48
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUNui/kSYTVxpcaaGvUuzGM3lLvkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTREQUJDOTA2MUEzMjg5MDVFODEyMDc1MUU5NTI4REZF
OTc4QzUwMTAeFw0yNDA0MDMyMTAzMTBaFw0yNTA0MDIyMTA4MTBaMDMxMTAvBgNV
BAMTKEIzMEVDNjlDRjU2Mjk0QThFRUJDQjIzQzBEMjNCNkY2OTk0QkJDNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqpIZG6nTSwbR2z8LfYehz8pJM
iMdWdRTDbQL6fp1/IafoJUDytNlgWY1tOCPbJNqElm21znO+60w1EwPVuDU/TIq8
XbGqywmHCZPKOPU0tiLk2GuX3LHVHKnOvcX3m6oOkbOF/pnnIJGDR451wd5TEQ8k
+2qNwmg8AQU9oOxiBjDRzI/MxnP9le13z8U7fm3Y7mPtiRrCDSImAg2umhXGR4x9
P4/FuIl+o7XeuBRoP8O0o3K6UZwyVzmDmygPYdOcT/sGig5SGEhtvpH9DKTx5Nx7
CMBQGTPvYGk9BLsjnnnvhwXrtCCu9eoOqV3DeJo93OXDqpzTLSuOMFC+9eb5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUsw7GnPVilKjuvLI8DSO29plLvGgwHwYDVR0j
BBgwFoAUFNq8kGGjKJBegSB1HpUo3+l4xQEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzgxSjZhUmk4Z2FndXVjQUZYaGQzbnI2VUc5VjU0MzRqTFdRTHR4OXdQ
YzYvMS8xNERBQkM5MDYxQTMyODkwNUU4MTIwNzUxRTk1MjhERkU5NzhDNTAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0REFCQzkwNjFBMzI4OTA1
RTgxMjA3NTFFOTUyOERGRTk3OEM1MDEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c4MUo2YVJpOGdhZ3V1Y0FGWGhkM25yNlVHOVY1NDM0akxXUUx0eDl3UGM2LzEv
MzEzODM2MmUzMjMwMzkyZTMxMzIzODJlMzAyZjMyMzAyZDMzMzIyMDNkM2UyMDM1
MzMzMTM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS60YAwDQYJKoZIhvcNAQELBQADggEBADDLuvz3
5HlEzRI2NZQX/pcAv5WfAdd21zpXKFEcosDOhWT7+UMeqc55BOTD8dNfk1PJ+nHh
H+oECpOyMO+RFpZx0zseS5GP3ugVqPZ4Dv9M5iVHSd4GhKYjGDKnSCfTgVkWZCLt
NxRyhshh8oa1fchsY7R9SsozPWsGFFUuw3rEWdZ9pIwOQzvxphJkd9Jc8e9v6wh0
ipr3IQoPolnJzUew4PwS1z7xUJ2s/NQpbEiu3yitxnIIn0FrXS6k4yXyRGHbb28p
ELTDq8ePIeQDSqQGhUHzyJkY9MKX5SgfgleZG4MKyX1OLhVfLHzWiU27HyqtZKSv
GQJjzlASI4r/SEg=
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:12 2024 by rpki-client on console-fra.rpki-client.org